foldingillusions.com/
200 OK 23 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (17025)
Hash bb371b7610da5be8eead7a53885a5690
90439f3e09c544b36a37530064722836179115e8
7d05926fe88b6396b750dd056c7f5bd4d4fb76c2fbdd8ef89c4372f7f183db3e
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 07 Oct 2022 01:44:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache
Content-Encoding: gzip
WPO-Cache-Status: cached
Last-Modified: Thu, 06 Oct 2022 18:13:22 GMT
X-Powered-By: PHP/7.3.33, PleskLin
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 282f6e1328452c1cb41f6a6272fff757
20b9ff1b5f4f81b645769bd4b4cf7bf7dfc16262
6a8070ebe51259cb11db68cca2c81f3c7408fad481d8c14cc1c38912442c63f4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A8070EBE51259CB11DB68CCA2C81F3C7408FAD481D8C14CC1C38912442C63F4"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19169
Expires: Fri, 07 Oct 2022 07:03:33 GMT
Date: Fri, 07 Oct 2022 01:44:04 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=259200
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 15:47:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: F2Dsrh7M1-w8PdvYfN1LvZqvy9RI9IfUd6Wv2nwrzJZr9uTGRvma4A==
Age: 122206
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4ab7d8709d334de0e46dcb86aabfbff1
f221138a8ad9d0bfa3c054370dcdb363a67dc310
b91d37f606eaf448b9c7dfc05566a11de004ce44503409e1a776288ee2622805
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B91D37F606EAF448B9C7DFC05566A11DE004CE44503409E1A776288EE2622805"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15046
Expires: Fri, 07 Oct 2022 05:54:50 GMT
Date: Fri, 07 Oct 2022 01:44:04 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: GX5dnItkQwjMvC4KELwVbXGigJqEd395HHKzEYRWNgud6Fu1iLMoE9KDebmghXK3VTAoLa28JME=
x-amz-request-id: M9XXPWJM0DF9JY64
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 07 Oct 2022 00:58:58 GMT
age: 2706
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:04 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5eee2baed68ec922370bd283860860fd
7d1e7dfdb9577dcd11587bb162e17c56eaf8e4c4
7931afabb9286276c385564aa73ed67927d31e12ab35eb92da84048a7896f27d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 01:44:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5eee2baed68ec922370bd283860860fd
7d1e7dfdb9577dcd11587bb162e17c56eaf8e4c4
7931afabb9286276c385564aa73ed67927d31e12ab35eb92da84048a7896f27d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 01:44:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-184503207-1
200 OK 42 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-184503207-1
IP
File type ASCII text, with very long lines (2039)
Hash dcaad2c866186ca45a44a0f9c3587041
8ba790fad20e4f1227cb362f02d35c7c3bb828ba
99caf0d8acc09b7a1783386ddcc544699f65b8f489f0c9ea3b25bacf24184340
GET /gtag/js?id=UA-184503207-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 07 Oct 2022 01:44:04 GMT
expires: Fri, 07 Oct 2022 01:44:04 GMT
cache-control: private, max-age=900
last-modified: Fri, 07 Oct 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42348
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-MP69GDNWHF
200 OK 75 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-MP69GDNWHF
IP
File type ASCII text, with very long lines (18991)
Hash e75146333e6d446bef506aa4e56b782e
0aab2e2cf4b8a1e766681fdb95b99549e099c5fc
a99201c00126bbc99a36ab20ea39aa2174e42cb9a063630ce0b5e83288a3db29
GET /gtag/js?id=G-MP69GDNWHF HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 07 Oct 2022 01:44:04 GMT
expires: Fri, 07 Oct 2022 01:44:04 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74924
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 66088834f6f475968fbe3e41a7c42643
184de32cd99b4a74a74b02c1b762c9fe4f87fd85
d1412e72f45302c134b7c2d499627f04aeb39665da7efb8217bbef1bd877adba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D1412E72F45302C134B7C2D499627F04AEB39665DA7EFB8217BBEF1BD877ADBA"
Last-Modified: Wed, 05 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 07 Oct 2022 07:44:04 GMT
Date: Fri, 07 Oct 2022 01:44:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 66088834f6f475968fbe3e41a7c42643
184de32cd99b4a74a74b02c1b762c9fe4f87fd85
d1412e72f45302c134b7c2d499627f04aeb39665da7efb8217bbef1bd877adba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D1412E72F45302C134B7C2D499627F04AEB39665DA7EFB8217BBEF1BD877ADBA"
Last-Modified: Wed, 05 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21552
Expires: Fri, 07 Oct 2022 07:43:16 GMT
Date: Fri, 07 Oct 2022 01:44:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 78e98fff742fc71e278ce51099b20b0d
7c41cbbc2d858c44d24edbb2071de8137f1b5a6e
0518dd324841b76c63f6c050342091c25048831847339b7f51284450d0af8e1d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0518DD324841B76C63F6C050342091C25048831847339B7F51284450D0AF8E1D"
Last-Modified: Fri, 07 Oct 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21575
Expires: Fri, 07 Oct 2022 07:43:39 GMT
Date: Fri, 07 Oct 2022 01:44:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 78e98fff742fc71e278ce51099b20b0d
7c41cbbc2d858c44d24edbb2071de8137f1b5a6e
0518dd324841b76c63f6c050342091c25048831847339b7f51284450d0af8e1d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0518DD324841B76C63F6C050342091C25048831847339B7F51284450D0AF8E1D"
Last-Modified: Fri, 07 Oct 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 07 Oct 2022 07:44:04 GMT
Date: Fri, 07 Oct 2022 01:44:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 66088834f6f475968fbe3e41a7c42643
184de32cd99b4a74a74b02c1b762c9fe4f87fd85
d1412e72f45302c134b7c2d499627f04aeb39665da7efb8217bbef1bd877adba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D1412E72F45302C134B7C2D499627F04AEB39665DA7EFB8217BBEF1BD877ADBA"
Last-Modified: Wed, 05 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21572
Expires: Fri, 07 Oct 2022 07:43:36 GMT
Date: Fri, 07 Oct 2022 01:44:04 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5eee2baed68ec922370bd283860860fd
7d1e7dfdb9577dcd11587bb162e17c56eaf8e4c4
7931afabb9286276c385564aa73ed67927d31e12ab35eb92da84048a7896f27d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 01:44:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Expires, Backoff, ETag, Last-Modified, Pragma, Cache-Control, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Date: Fri, 07 Oct 2022 01:29:42 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Fri, 07 Oct 2022 02:12:57 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: oHd35M8W7cLqKOwGRU-hZsXlnHhLM_HSd-fns1quKO_QlpO3DtRRFA==
Age: 863
ocsp.digicert.com/
200 OK 471 B IP
Hash 8be5570b9a5ca76c580da007a824b029
38840f2ac6476bdd5608121c5653e338c7ad9715
0b94e05080ef85432b1815eb3c6c7594c9613cfde1b51eeabee46d0d9fde64b2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5914
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 01:44:05 GMT
Last-Modified: Fri, 07 Oct 2022 00:05:31 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
foldingillusions.com/wp-content/uploads/2021/01/logox1-1.png
200 OK 16 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/01/logox1-1.png
IP
File type PNG image data, 150 x 162, 8-bit/color RGBA, non-interlaced\012- data
Hash 3b9698964078bbc1012eb587c0d48583
79b7c92e5527627e823131d632b4c1d6a4512ce2
8dd0c0ef3fb286d10a403bf31d552a9b1c01c3a65178b5e57ec547d477e7e9ec
GET /wp-content/uploads/2021/01/logox1-1.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:04 GMT
content-type: image/png
content-length: 16490
last-modified: Thu, 25 Feb 2021 06:51:07 GMT
etag: "603748db-406a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/05/Fotofolio_oriental_portada-2-1.jpg
200 OK 206 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/05/Fotofolio_oriental_portada-2-1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=15, height=3024, bps=0, PhotometricIntepretation=RGB, manufacturer=Apple, model=iPhone 8 Plus, orientation=upper-left, width=4032], baseline, precision 8, 823x751, components 3\012- data
Size 206 kB (205897 bytes)
Hash c1e1ad92e89a6586c8a9403a01ccde39
942f859de60580ab73911771baf55787cfccacd8
ad5fd4531b10a6da8233705bcc96329e490978728a198c51121df3f77862f573
GET /wp-content/uploads/2021/05/Fotofolio_oriental_portada-2-1.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:04 GMT
content-type: image/jpeg
content-length: 205897
last-modified: Sun, 02 May 2021 15:05:00 GMT
etag: "608ebf9c-32449"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/05/Fotofolio_peto-1.jpg
200 OK 174 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/05/Fotofolio_peto-1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=18, height=3024, bps=0, PhotometricIntepretation=RGB, manufacturer=Apple, model=iPhone 8 Plus, orientation=upper-left, width=3553], baseline, precision 8, 823x751, components 3\012- data
Size 174 kB (174477 bytes)
Hash 855d29ef241a0c92eb963f695f33dfcd
e16a8ee02e179953533cd30558167151b1b656a9
326ece4ffb597da49922d3093ca68eaf5e1b59ae30892501a7ad2aa72fb08afa
GET /wp-content/uploads/2021/05/Fotofolio_peto-1.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:04 GMT
content-type: image/jpeg
content-length: 174477
last-modified: Sun, 02 May 2021 15:05:44 GMT
etag: "608ebfc8-2a98d"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/05/Libro_de_firmas_vestido_portada-1.jpg
200 OK 214 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/05/Libro_de_firmas_vestido_portada-1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=18, height=3024, bps=0, PhotometricIntepretation=RGB, manufacturer=Apple, model=iPhone 8 Plus, orientation=upper-left, width=4032], baseline, precision 8, 823x751, components 3\012- data
Size 214 kB (214083 bytes)
Hash 7c935aa7b23d8ee9ae5033eda4cd31f2
148bf7c36154a1e4355f7c8365b8347ec003250a
ae1a779aa2bec65c7d33585e3026739f2aa13cb82415618e6d1c61b13d28a232
GET /wp-content/uploads/2021/05/Libro_de_firmas_vestido_portada-1.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:04 GMT
content-type: image/jpeg
content-length: 214083
last-modified: Sun, 02 May 2021 15:05:22 GMT
etag: "608ebfb2-34443"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/05/Album_mar_portada-1.jpg
200 OK 211 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/05/Album_mar_portada-1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=18, height=3024, bps=0, PhotometricIntepretation=RGB, manufacturer=Apple, model=iPhone 8 Plus, orientation=upper-left, width=4032], baseline, precision 8, 823x751, components 3\012- data
Size 211 kB (210594 bytes)
Hash 0e3e68aa6645540cdd71d42295c54d81
2942181644dc2f78f8b619fd4f71cddfca9c473c
505af017da1fbea687979018f41cc35f4fd531561436b7decf3c1d12afd21e08
GET /wp-content/uploads/2021/05/Album_mar_portada-1.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:04 GMT
content-type: image/jpeg
content-length: 210594
last-modified: Sun, 02 May 2021 15:19:51 GMT
etag: "608ec317-336a2"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: sUwjqJs0QwqEsGrQB2TbYg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: kKd+ANw7rRhRQSFeQ/KB/wEuiRY=
foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-3c5a4414.min.css
200 OK 60 kB URL HTTP/2 foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-3c5a4414.min.css
IP
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Hash fd36f91b1e08f71e6e013e6e79f663bb
c806f8a265748420334f0487079359e2a793a761
91459a9bdf713995f4c630a4be4913e4894d825c533454d7c34d6c6baa6491dc
GET /wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-3c5a4414.min.css HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:04 GMT
content-type: text/css
last-modified: Wed, 08 Dec 2021 11:29:10 GMT
etag: W/"61b09706-457ba"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/12/ALBUM-OFERTA-1536x1152.png
200 OK 2.2 MB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/ALBUM-OFERTA-1536x1152.png
IP
File type PNG image data, 1536 x 1152, 8-bit/color RGB, non-interlaced\012- data
Size 2.2 MB (2158224 bytes)
Hash efc89b46fdd6bd3124de46860aa2ffed
4b8142f8ac3a1a768fa38f1ba281d748aa7c342d
ba9f21afaedf1bf31c9a8964ae7740597d7d8a08a4e1d1b8d4225bdbecb7fd28
GET /wp-content/uploads/2021/12/ALBUM-OFERTA-1536x1152.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:04 GMT
content-type: image/png
content-length: 2158224
last-modified: Wed, 08 Dec 2021 11:00:47 GMT
etag: "61b0905f-20ee90"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-3-1536x1152.png
200 OK 2.4 MB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-3-1536x1152.png
IP
File type PNG image data, 1536 x 1152, 8-bit/color RGB, non-interlaced\012- data
Size 2.4 MB (2366980 bytes)
Hash 82314374fd33635cc69d31bb1322a6da
bd7ebe95552fa433dd7fd2953c91fe2b4a117eca
e02fd65faee6e5872789dabd4669a309d430bf79662ea4489be75168c968e8a6
GET /wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-3-1536x1152.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:04 GMT
content-type: image/png
content-length: 2366980
last-modified: Wed, 08 Dec 2021 11:00:28 GMT
etag: "61b0904c-241e04"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-2-1536x1152.png
200 OK 2.4 MB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-2-1536x1152.png
IP
File type PNG image data, 1536 x 1152, 8-bit/color RGB, non-interlaced\012- data
Size 2.4 MB (2449140 bytes)
Hash a98d3e64476fffb4ca562a6bcdc47b20
9ce4b9e57bac080b906b4501c1dd90bcfe15bcfa
e86a90f78954de8492c7053a76e3629a9880a3079d9e92c84aa7df54eca4e0a7
GET /wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-2-1536x1152.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:04 GMT
content-type: image/png
content-length: 2449140
last-modified: Wed, 08 Dec 2021 11:00:11 GMT
etag: "61b0903b-255ef4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K0nXBi8JoI3ZKyHqQg.woff
200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K0nXBi8JoI3ZKyHqQg.woff
IP
File type Web Open Font Format, TrueType, length 22980, version 1.1\012- data
Hash f2a7709803facad3132b46b739548369
7ae29ea1cc9e76acc69877d118fa5d4d61465b59
ca71ae7855c81379852da88328a11f97646e1aa1d38683c633c1d9dd28468355
GET /s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K0nXBi8JoI3ZKyHqQg.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22980
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Oct 2022 17:27:28 GMT
expires: Wed, 04 Oct 2023 17:27:28 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 10 Nov 2021 18:06:11 GMT
content-type: font/woff
age: 202597
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash aea480478c3be7392d09e8a92826542f
b660fb42c8122efb07b3d1de1a8907ad1f6e1a60
ee691969e4d61ba3145fe90b28c5051367c223f31c0e0ee001d8481035090760
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 01:44:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-00440e2f.min.js
200 OK 87 kB URL HTTP/2 foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-00440e2f.min.js
IP
File type ASCII text, with very long lines (36518)
Hash 1ec3db4f99819c1864e6e0372a4282b9
6f1fe5d2d260a4c93a81beed3a4a4c995c8d6456
13840dca2af7ca191fcf3cbd85a10508c463042f27716e3d47351eb777cf7a73
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-00440e2f.min.js HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:04 GMT
content-type: application/javascript
last-modified: Wed, 08 Dec 2021 11:32:50 GMT
etag: W/"61b097e2-11403"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-26c75ab0.min.css
200 OK 244 kB URL HTTP/2 foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-26c75ab0.min.css
IP
File type ASCII text, with very long lines (35574)
Size 244 kB (243510 bytes)
Hash d578ee2fcf939f888bd739a92a944962
fe90d782c0e8e25051990a786aed205a6fbb6765
03e3f134d66da241d2157a18cfdf3e4cd3e174ddccc0d0c7ea22d5864ab701cd
GET /wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-26c75ab0.min.css HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:04 GMT
content-type: text/css
last-modified: Wed, 08 Dec 2021 11:32:49 GMT
etag: W/"61b097e1-182a97"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K3vXBi8JoI3ZKyHqQg.woff
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K3vXBi8JoI3ZKyHqQg.woff
IP
File type Web Open Font Format, TrueType, length 23976, version 1.1\012- data
Hash 24fb4331b0e2ba0c12dabc947b1290df
faa2409a20a93a92fbaec6c70ad9680cd6c0d793
f533ccd7a731a34ea932467f4d7b1a42966981db0ada056392626037a4f03738
GET /s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K3vXBi8JoI3ZKyHqQg.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Oct 2022 17:27:28 GMT
expires: Wed, 04 Oct 2023 17:27:28 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 10 Nov 2021 18:06:03 GMT
content-type: font/woff
age: 202597
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-56432496.min.js
200 OK 185 kB URL HTTP/2 foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-56432496.min.js
IP
File type ASCII text, with very long lines (65447)
Size 185 kB (185273 bytes)
Hash d94a3375607f24e5d0adbd0c9be042ee
c919a6c0c3804d02f15e2e3421a98b0929407727
3bc57a98c79128ba3bf513c76134d629b590c71338c50669dc0b50d646a96680
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-56432496.min.js HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:04 GMT
content-type: application/javascript
last-modified: Wed, 08 Dec 2021 11:29:14 GMT
etag: W/"61b0970a-5b529"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-1536x1152.png
200 OK 2.3 MB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-1536x1152.png
IP
File type PNG image data, 1536 x 1152, 8-bit/color RGB, non-interlaced\012- data
Size 2.3 MB (2336875 bytes)
Hash be21752a28f8072770deee3b6e59c3e7
bad177169b0b1202a56f9730fa45d7a46a0d91af
0745896bc307e1f527a6f0d683113286979ae4a02cd347853d911d36bf5ce5b6
GET /wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-1536x1152.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:04 GMT
content-type: image/png
content-length: 2336875
last-modified: Wed, 08 Dec 2021 10:59:34 GMT
etag: "61b09016-23a86b"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-1-1536x1152.png
200 OK 2.9 MB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-1-1536x1152.png
IP
File type PNG image data, 1536 x 1152, 8-bit/color RGB, non-interlaced\012- data
Size 2.9 MB (2939045 bytes)
Hash 60f102bd7499a98d5fe54367bef9ca6c
56c3eda1573f135fe485d6e1b82061b89481007d
055c1799d889311d9e9eef0c6ea7509fe79b8f6d0484193c1e344297709159cd
GET /wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-1-1536x1152.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:04 GMT
content-type: image/png
content-length: 2939045
last-modified: Wed, 08 Dec 2021 10:59:54 GMT
etag: "61b0902a-2cd8a5"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/12/ALBUM-OFERTA-1-1536x1152.png
200 OK 2.4 MB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/ALBUM-OFERTA-1-1536x1152.png
IP
File type PNG image data, 1536 x 1152, 8-bit/color RGB, non-interlaced\012- data
Size 2.4 MB (2388731 bytes)
Hash 9b9ec7168693965fb0ce01063bc8e6dc
d7b75128bd937bff5fb933ab5a2caaf94bdd94f8
ed55e6153eb7b0d30fdf15a55c1af91013e7203ea6dc29415e0a90f357786dbe
GET /wp-content/uploads/2021/12/ALBUM-OFERTA-1-1536x1152.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:04 GMT
content-type: image/png
content-length: 2388731
last-modified: Wed, 08 Dec 2021 11:01:16 GMT
etag: "61b0907c-2472fb"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash aea480478c3be7392d09e8a92826542f
b660fb42c8122efb07b3d1de1a8907ad1f6e1a60
ee691969e4d61ba3145fe90b28c5051367c223f31c0e0ee001d8481035090760
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 01:44:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32KxfXBi8JoI3ZKyHqQg.woff
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32KxfXBi8JoI3ZKyHqQg.woff
IP
File type Web Open Font Format, TrueType, length 23864, version 1.1\012- data
Hash d21e30f88d5335f5408ecbccabc7bba1
fbaad0a8796710505f2b622aa8cf0e8c90df8df1
bd236492f4bb8585df02bec0ffe0e7a88f8800de0aba3245eff81e3149a912a7
GET /s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32KxfXBi8JoI3ZKyHqQg.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23864
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 14:06:20 GMT
expires: Thu, 05 Oct 2023 14:06:20 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 10 Nov 2021 18:06:01 GMT
content-type: font/woff
age: 128265
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
200 OK 78 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261\012- data
Hash e8a427e15cc502bef99cfd722b37ea98
a9922842a120a7f1eaced667480c5e185a106d69
d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:05 GMT
content-type: font/woff2
content-length: 78196
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-13174"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/icomoon.woff
200 OK 21 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/icomoon.woff
IP
File type Web Open Font Format, TrueType, length 20908, version 1.0\012- data
Hash 00491de6282bc94e9cc6a2ccbb4b3ae6
a3f9f4a0e469c3557e64029415698942903f10a4
22c851d5f36813ff8cbb4ab0d16273aa1eb536f84f2c56b53df8d2c7a54479a4
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/icomoon.woff HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:05 GMT
content-type: application/font-woff
content-length: 20908
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-51ac"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2
200 OK 13 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13276, version 331.-31261\012- data
Hash f0f8230116992e521526097a28f54066
0447c6b10bbf73f97b23dcfd6e6a48510822cb6e
8afc6e5e842baab16010c2ce6fcf48ec4ded8e1579a37c1f1bc027e120d04951
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:05 GMT
content-type: font/woff2
content-length: 13276
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-33dc"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2
200 OK 77 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 76764, version 331.-31261\012- data
Hash f7307680c7fe85959f3ecf122493ea7d
fce0da592a3e536d6d5df5b50cb513398d8c5161
43c072c16c9ee6d67acdfa6c6d6685ff1e74eb4237b7cc3c1348ab1c108b26af
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:05 GMT
content-type: font/woff2
content-length: 76764
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-12bdc"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v29/KFOmCnqEu92Fr1Me5g.woff
200 OK 65 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v29/KFOmCnqEu92Fr1Me5g.woff
IP
File type Web Open Font Format, TrueType, length 65244, version 1.1\012- data
Hash 73f26bf98a715ecab4d2287ff3a02ad0
c6c8a2b7e67c182d77916cd2118b1b0d8a6ca549
55110586d3719c3e8bdaa21f06e4cc1c0a7451abbae662344cbd4411536b585f
GET /s/roboto/v29/KFOmCnqEu92Fr1Me5g.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 65244
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 22:00:27 GMT
expires: Thu, 05 Oct 2023 22:00:27 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 22 Sep 2021 16:13:22 GMT
content-type: font/woff
age: 99818
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-8de213aa.min.css
200 OK 78 kB URL HTTP/2 foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-8de213aa.min.css
IP
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash aa90567c6b5c27cca97f06f8115f470a
c6884b9886bdfbfb98a3a09202ade57427ca6311
70bc0ba95232ceacc09556c2517cdc03ad20b50f50ae22152c9730ac92ef12a2
GET /wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-8de213aa.min.css HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:04 GMT
content-type: text/css
last-modified: Wed, 08 Dec 2021 11:32:50 GMT
etag: W/"61b097e2-182ae"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v18/JTURjIg1_i6t8kCHKm45_bZF7g0.woff
200 OK 68 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v18/JTURjIg1_i6t8kCHKm45_bZF7g0.woff
IP
File type Web Open Font Format, TrueType, length 67920, version 1.1\012- data
Hash f5b5ac943a80d7e7aff13b8a651c15df
a9eabaf668d043bdd45c7b01119eff648b46e480
268377e98dea0d350cd21714107d0e0473baade9163f94322e2f97088682af5e
GET /s/montserrat/v18/JTURjIg1_i6t8kCHKm45_bZF7g0.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 67920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 16:42:12 GMT
expires: Thu, 05 Oct 2023 16:42:12 GMT
cache-control: public, max-age=31536000
age: 118913
last-modified: Tue, 10 Aug 2021 00:20:42 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v18/JTURjIg1_i6t8kCHKm45_cJD7g0.woff
200 OK 68 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v18/JTURjIg1_i6t8kCHKm45_cJD7g0.woff
IP
File type Web Open Font Format, TrueType, length 67596, version 1.1\012- data
Hash 7e09e547298d02b35fe04c76528b0a05
ab23ecb2265181abb5247feb0097bb16ee1f0f16
031a79b04005ef5553ea2cf39fae33fb4afffb3f7ebeed24c6f17495ac00e87f
GET /s/montserrat/v18/JTURjIg1_i6t8kCHKm45_cJD7g0.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 67596
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Oct 2022 14:36:49 GMT
expires: Sun, 01 Oct 2023 14:36:49 GMT
cache-control: public, max-age=31536000
age: 472036
last-modified: Tue, 10 Aug 2021 00:20:13 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/worksans/v13/QGY9z_wNahGAdqQ43Rh_ebrnlwyYfEPxPoGU3ms5pIfeCSXCQOBc.woff
200 OK 22 kB URL HTTP/2 fonts.gstatic.com/s/worksans/v13/QGY9z_wNahGAdqQ43Rh_ebrnlwyYfEPxPoGU3ms5pIfeCSXCQOBc.woff
IP
File type Web Open Font Format, TrueType, length 22308, version 1.1\012- data
Hash 5af9b5690ffb4be30a0c50a8fa2224e9
867410f8b98d0c381d1ca65f50bf36193c911e59
e78898bac6527c2e318556f5cdcec7816785e389fe892bcf29dbf8d051771fee
GET /s/worksans/v13/QGY9z_wNahGAdqQ43Rh_ebrnlwyYfEPxPoGU3ms5pIfeCSXCQOBc.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: font/woff
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22308
date: Fri, 07 Oct 2022 01:44:05 GMT
expires: Sat, 07 Oct 2023 01:44:05 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 10 Nov 2021 18:06:30 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff
200 OK 102 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff
IP
File type Web Open Font Format, TrueType, length 101652, version 331.-31261\012- data
Size 102 kB (101652 bytes)
Hash 9fe5a17c8ab036d20e6c5ba3fd2ac511
52751432ded489dfdf27fb1cf64c570c4c27a1d7
74edc18b67c487e32f181719fdb347e2e77020744651f446e9acd7bd6821e2e7
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:06 GMT
content-type: application/font-woff
content-length: 101652
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-18d14"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/icomoon.ttf
200 OK 21 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/icomoon.ttf
IP
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon \012- data
Hash b628f37cfeac97148aafb864ca676f6a
71ae0dfae50d4087daa4755a396b914a62213bae
e70b68f603538e3d4d8eb4af3dc2ff84b99af56fb0af22fd5b94167639f30473
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/icomoon.ttf HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:06 GMT
content-type: application/font-sfnt
content-length: 20832
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-5160"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff
200 OK 16 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff
IP
File type Web Open Font Format, TrueType, length 16276, version 331.-31261\012- data
Hash 7124eb50fc8227c78269f2d995637ff5
d33d8b5b15b7bba2cc17190dc685fe0a76d2989e
14c9db4ff87fde08f67b0a69dd594bab6d87174812a0dbd34c59833bfed8cc0e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:06 GMT
content-type: application/font-woff
content-length: 16276
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-3f94"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff
200 OK 90 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff
IP
File type Web Open Font Format, TrueType, length 90060, version 331.-31261\012- data
Hash 099a9556e1a63ece24f8a99859c94c7d
5f8cab91347c553c1eb87f9b527f6bee8a28e40d
aff76e5c986f295d4bc6f8142a78e2a31888b101c2d025db89f79c75f64fd90b
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:06 GMT
content-type: application/font-woff
content-length: 90060
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-15fcc"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 4834df4934ef2f3291e58aa552132ebd
0af3b73d552b335d4153d1471c5bbe96eba2f8e0
dcad871dd6e60dc918dbb045208048ac191ec63882b0cf4b62cdb55252f15834
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5283
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 01:44:06 GMT
Last-Modified: Fri, 07 Oct 2022 00:16:03 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/292213001_1097576284164582_2957117892767000851_nfull.jpg
200 OK 38 kB URL HTTP/1.1 foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/292213001_1097576284164582_2957117892767000851_nfull.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x640, components 3\012- data
Hash 683444ee9c1dd8c78a0c71f6fca97084
82f341e6012d65bacf598297dad5bd898fa16ac4
c97d8c5d12b0163bef469d6c5d7f88520e7bb3ffe4aa5fae5cb85d76911b3899
GET /wp-content/uploads/sb-instagram-feed-images/292213001_1097576284164582_2957117892767000851_nfull.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foldingillusions.com/
Cookie: _ga_MP69GDNWHF=GS1.1.1665107045.1.0.1665107045.0.0.0; _ga=GA1.1.621599080.1665107046
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 07 Oct 2022 01:44:06 GMT
Content-Type: image/jpeg
Content-Length: 38444
Last-Modified: Fri, 08 Jul 2022 03:45:30 GMT
Connection: keep-alive
ETag: "62c7a85a-962c"
X-Powered-By: PleskLin
Accept-Ranges: bytes
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.ttf
200 OK 34 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.ttf
IP
File type TrueType Font data, 13 tables, 1st "FFTM", 28 names, Macintosh\012- data
Hash 1f77739ca9ff2188b539c36f30ffa2be
7d849a3981a716e2ba4a84634bc57d0b8054a6a3
c651b8a67d3193206f622c3c3b0fbca4a2f2727108c4212b52c1e2a2e84c9b31
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.ttf HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:06 GMT
content-type: application/font-sfnt
content-length: 33736
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-83c8"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/296085853_116647370991868_2543514110945362193_nfull.jpg
200 OK 73 kB URL HTTP/1.1 foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/296085853_116647370991868_2543514110945362193_nfull.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x640, components 3\012- data
Hash 64a4a2f8b2ec1d4eae6abf3cf11f5400
f029bdbfbd1a08d0209acb0e20b2ce0a50eb1ce9
34ce1407f743ca3d0f8e03199df9d1cee4aef99f6afc474f50f83144320f0e25
GET /wp-content/uploads/sb-instagram-feed-images/296085853_116647370991868_2543514110945362193_nfull.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foldingillusions.com/
Cookie: _ga_MP69GDNWHF=GS1.1.1665107045.1.0.1665107045.0.0.0; _ga=GA1.1.621599080.1665107046
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 07 Oct 2022 01:44:06 GMT
Content-Type: image/jpeg
Content-Length: 72751
Last-Modified: Thu, 28 Jul 2022 06:28:36 GMT
Connection: keep-alive
ETag: "62e22c94-11c2f"
X-Powered-By: PleskLin
Accept-Ranges: bytes
foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/293285987_1206674656753257_4539961679221732417_nfull.jpg
200 OK 70 kB URL HTTP/1.1 foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/293285987_1206674656753257_4539961679221732417_nfull.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x640, components 3\012- data
Hash 3dd79cde6957c975203716c4a4853a44
4ce9968055b576c20c8f83e01fd7ff2ac28e3fe3
05a05ce297468bcaa4c023a656e94f0b8505df5ce30ecc785f4add181d96433c
GET /wp-content/uploads/sb-instagram-feed-images/293285987_1206674656753257_4539961679221732417_nfull.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foldingillusions.com/
Cookie: _ga_MP69GDNWHF=GS1.1.1665107045.1.0.1665107045.0.0.0; _ga=GA1.1.621599080.1665107046
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 07 Oct 2022 01:44:06 GMT
Content-Type: image/jpeg
Content-Length: 70227
Last-Modified: Thu, 14 Jul 2022 03:57:50 GMT
Connection: keep-alive
ETag: "62cf943e-11253"
X-Powered-By: PleskLin
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 471 B IP
Hash 4834df4934ef2f3291e58aa552132ebd
0af3b73d552b335d4153d1471c5bbe96eba2f8e0
dcad871dd6e60dc918dbb045208048ac191ec63882b0cf4b62cdb55252f15834
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5283
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 01:44:06 GMT
Last-Modified: Fri, 07 Oct 2022 00:16:03 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff2
200 OK 14 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13584, version 331.-31458\012- data
Hash c940f62026ba5a202238ec177cce01a5
62edc86975d56aa66873803baf0582c2ab36cef5
41dc4f99f4101a4ae7956b5c23c2d40e04ffb928c7ebd989658d950b4e2f7c5d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:06 GMT
content-type: font/woff2
content-length: 13584
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-3510"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff2
200 OK 78 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 78532, version 331.-31458\012- data
Hash 79dced08c62eddd969d92c9f58987a33
262c9c0e4848466e73ad4757ddaab6e168eaef81
0a80acfa0f85d8ea233785ca14b0dd030dbe7ed229b00bc754b55dae39c7a106
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:06 GMT
content-type: font/woff2
content-length: 78532
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-132c4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/291010195_600878894948651_1591147239081334469_nfull.jpg
200 OK 49 kB URL HTTP/1.1 foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/291010195_600878894948651_1591147239081334469_nfull.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x1137, components 3\012- data
Hash 12208e9c0e063a446c89a8c6ec4a6ede
70013a5a6b3fefff85c3ac909eeba546be285d3e
ca55991c1d322fb385e43275554c89185843d39e53ac58f4059731c85c157c89
GET /wp-content/uploads/sb-instagram-feed-images/291010195_600878894948651_1591147239081334469_nfull.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foldingillusions.com/
Cookie: _ga_MP69GDNWHF=GS1.1.1665107045.1.0.1665107045.0.0.0; _ga=GA1.1.621599080.1665107046
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 07 Oct 2022 01:44:06 GMT
Content-Type: image/jpeg
Content-Length: 48662
Last-Modified: Thu, 07 Jul 2022 09:45:36 GMT
Connection: keep-alive
ETag: "62c6ab40-be16"
X-Powered-By: PleskLin
Accept-Ranges: bytes
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2
200 OK 80 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 80272, version 331.-31458\012- data
Hash 3bb4d4ff63186a8caf433d3d3a022d49
023d6411b150baea1ec6784dcb2888577d95f13e
75f5349190725c85b426fdb66c683beb21b7804792d0770a9e84b28e7ace5d28
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:06 GMT
content-type: font/woff2
content-length: 80272
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-13990"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/290391631_889475078676359_6192995572116033451_nfull.jpg
200 OK 60 kB URL HTTP/1.1 foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/290391631_889475078676359_6192995572116033451_nfull.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x640, components 3\012- data
Hash 3c7141ce5be06d644a2125eeda5eb868
58b90adfac542b8b93a053f25d93fe8dfd67a7f9
bdfee7740ccb239d93d38ed1a387acd4efc777862b64873eba8670d0c9f95211
GET /wp-content/uploads/sb-instagram-feed-images/290391631_889475078676359_6192995572116033451_nfull.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foldingillusions.com/
Cookie: _ga_MP69GDNWHF=GS1.1.1665107045.1.0.1665107045.0.0.0; _ga=GA1.1.621599080.1665107046
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 07 Oct 2022 01:44:06 GMT
Content-Type: image/jpeg
Content-Length: 60217
Last-Modified: Tue, 28 Jun 2022 02:45:18 GMT
Connection: keep-alive
ETag: "62ba6b3e-eb39"
X-Powered-By: PleskLin
Accept-Ranges: bytes
scontent-ecv1-1.cdninstagram.com/v/t51.29350-15/311155244_5407526199296570_5578862215930529425_n.webp?stp=dst-jpg&_nc_cat=106&ccb=1-7&_nc_sid=8ae9d6&_nc_ohc=eY9wvWz7hJQAX8nsKUJ&_nc_ht=scontent-ecv1-1.cdninstagram.com&edm=ANo9K5cEAAAA&oh=00_AT_hGZ0HuptT9_6sXoxrI0_PPpLupMWbAu9xqfCZGnwkuQ&oe=634459F4
200 OK 50 kB URL HTTP/2 scontent-ecv1-1.cdninstagram.com/v/t51.29350-15/311155244_5407526199296570_5578862215930529425_n.webp?stp=dst-jpg&_nc_cat=106&ccb=1-7&_nc_sid=8ae9d6&_nc_ohc=eY9wvWz7hJQAX8nsKUJ&_nc_ht=scontent-ecv1-1.cdninstagram.com&edm=ANo9K5cEAAAA&oh=00_AT_hGZ0HuptT9_6sXoxrI0_PPpLupMWbAu9xqfCZGnwkuQ&oe=634459F4
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 981x981, components 3\012- data
Hash 64213ac0cbb5acedf784f35ac95f8d2c
fab93fe2c4844b7fbf1f711812f04015e7635bed
835c9b0cc4d2d566ca98a895b96e665b4002cdef051f1bdbfc3d96db6e2eebca
GET /v/t51.29350-15/311155244_5407526199296570_5578862215930529425_n.webp?stp=dst-jpg&_nc_cat=106&ccb=1-7&_nc_sid=8ae9d6&_nc_ohc=eY9wvWz7hJQAX8nsKUJ&_nc_ht=scontent-ecv1-1.cdninstagram.com&edm=ANo9K5cEAAAA&oh=00_AT_hGZ0HuptT9_6sXoxrI0_PPpLupMWbAu9xqfCZGnwkuQ&oe=634459F4 HTTP/1.1
Host: scontent-ecv1-1.cdninstagram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Wed, 05 Oct 2022 19:45:56 GMT
x-haystack-needlechecksum: 1698052928
x-needle-checksum: 1090276010
content-type: image/jpeg
content-digest: adler32=1175891992
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
content-length: 50013
x-fb-trip-id: 1679558926
date: Fri, 07 Oct 2022 01:44:06 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/10/pexels-cottonbro-6074059-min-scaled.jpg
200 OK 669 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/10/pexels-cottonbro-6074059-min-scaled.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2560x1706, components 3\012- data
Size 669 kB (669045 bytes)
Hash fab1e80275a740da6448d418fdae8cab
ac2d99fb819c76dd102b8d4c8e0b7ecef0d21541
81ae6c7f2b780383177691f80bc5b7bc6837846034085e96e28f269201f7e307
GET /wp-content/uploads/2021/10/pexels-cottonbro-6074059-min-scaled.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:06 GMT
content-type: image/jpeg
content-length: 669045
last-modified: Wed, 06 Oct 2021 11:06:33 GMT
etag: "615d8339-a3575"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/10/pexels-tatiana-3312232-min-scaled.jpg
200 OK 556 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/10/pexels-tatiana-3312232-min-scaled.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2560x1707, components 3\012- data
Size 556 kB (556351 bytes)
Hash 96d97000b6c7d66989ec1fcb3a114eee
d6b32f46aa15a720b10e2c32e37d455caa256e0c
fb1b392a80603d6be6a498277dc2710ef46eb9c23eafa5c525773746f5b863c1
GET /wp-content/uploads/2021/10/pexels-tatiana-3312232-min-scaled.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:06 GMT
content-type: image/jpeg
content-length: 556351
last-modified: Wed, 06 Oct 2021 11:02:12 GMT
etag: "615d8234-87d3f"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff
200 OK 92 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff
IP
File type Web Open Font Format, TrueType, length 92216, version 331.-31458\012- data
Hash a6d5b6e21f0c0ce5d05dd9d2aa644c9f
a2e0949835d3ae7f3c990f8eb6a8f3629a1ddacc
64351d3323461bde0c1eb9b70137cd643892fb72aea6cc5ecd4d4f102eb5f79d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:06 GMT
content-type: application/font-woff
content-length: 92216
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-16838"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff
200 OK 17 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff
IP
File type Web Open Font Format, TrueType, length 16776, version 331.-31458\012- data
Hash b7995ffca32ee27012b039e79a9dad06
0a5d9e8e13305c8d75b81ab5c3438d9a7e9a6279
8b01a186e17207b605f5f037815f82b62a37fcb4804b2d46eae10e316b78a9c5
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:06 GMT
content-type: application/font-woff
content-length: 16776
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-4188"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff
200 OK 104 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff
IP
File type Web Open Font Format, TrueType, length 104284, version 331.-31458\012- data
Size 104 kB (104284 bytes)
Hash c48d0f239282bb3a0856a4817fa2a5c2
bd4c2e3e55397c69b35b9f1947aa72beedd45651
26701523bfc95c31e4c3a5dbd73943ca1dd4c99a1f2dbc5b48a589943d1afb99
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:06 GMT
content-type: application/font-woff
content-length: 104284
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-1975c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.ttf
200 OK 204 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.ttf
IP
File type TrueType Font data, 13 tables, 1st "FFTM", 28 names, Macintosh\012- data
Size 204 kB (204528 bytes)
Hash f49b824a2e4784d078b768506e7bf8e7
c93491c279667947a89dc2ec2be5e785d76051dc
107b29791cfd2c528158ff645116823a660290e2b56cf0429a0761bd1d43f9b1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.ttf HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:06 GMT
content-type: application/font-sfnt
content-length: 204528
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-31ef0"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.ttf
200 OK 137 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.ttf
IP
File type TrueType Font data, 13 tables, 1st "FFTM", 28 names, Macintosh\012- data
Size 137 kB (136576 bytes)
Hash dbec1b4af0117cdc7c7a76090903fe77
95567ff8d60e2dffe34d11179086353416441235
3cd97d0d065ef9165afb2966faa989cb143cc14397ea07db7ccbdffe461377f9
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.ttf HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:06 GMT
content-type: application/font-sfnt
content-length: 136576
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-21580"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.ttf
200 OK 34 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.ttf
IP
File type TrueType Font data, 13 tables, 1st "FFTM", 28 names, Macintosh\012- data
Hash 547429d0f054fe33407e57011ca9ab26
8dcc0c72c424c439b0393ca60bcf08d25db9ae99
e54356ac02b129240597fdbb5452a9bed10b923f2f658cd2f44c4e56270cdb05
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.ttf HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:06 GMT
content-type: application/font-sfnt
content-length: 34052
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-8504"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 31e440ccd993c4ee793f50511c2ac7c4
4380327d50b7001d158aee05a57c6078e57c94e4
65d8a97f6df1e110333a01d1f6dcb4982db7bb4b1c5f3f1498fafa716e250c0f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "65D8A97F6DF1E110333A01D1F6DCB4982DB7BB4B1C5F3F1498FAFA716E250C0F"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8510
Expires: Fri, 07 Oct 2022 04:05:56 GMT
Date: Fri, 07 Oct 2022 01:44:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 31e440ccd993c4ee793f50511c2ac7c4
4380327d50b7001d158aee05a57c6078e57c94e4
65d8a97f6df1e110333a01d1f6dcb4982db7bb4b1c5f3f1498fafa716e250c0f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "65D8A97F6DF1E110333A01D1F6DCB4982DB7BB4B1C5F3F1498FAFA716E250C0F"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8510
Expires: Fri, 07 Oct 2022 04:05:56 GMT
Date: Fri, 07 Oct 2022 01:44:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 31e440ccd993c4ee793f50511c2ac7c4
4380327d50b7001d158aee05a57c6078e57c94e4
65d8a97f6df1e110333a01d1f6dcb4982db7bb4b1c5f3f1498fafa716e250c0f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "65D8A97F6DF1E110333A01D1F6DCB4982DB7BB4B1C5F3F1498FAFA716E250C0F"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8510
Expires: Fri, 07 Oct 2022 04:05:56 GMT
Date: Fri, 07 Oct 2022 01:44:06 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffccc2005-2e35-42eb-8f79-f2155e9eb404.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffccc2005-2e35-42eb-8f79-f2155e9eb404.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0611d96a8a76ee2b104a70372860f979
579dea2edcf3f3fa3e18530d1f254132589a2f6b
70996e9eb0aac2a5befff12fd63c57c5120f59e061af60b60c975694307a6be3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffccc2005-2e35-42eb-8f79-f2155e9eb404.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8050
x-amzn-requestid: 7332406c-4a06-4c0d-a4c3-d59e089b511d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZJw3jHaooAMF6bQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6333c830-4513d4852dc064a812c23cea;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 04:06:08 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ytF_TxhiRg0wYUJod7-t0FEv_p7EkIXJNe2rygTGxW6TnebbTy8DCw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 22:18:59 GMT
age: 12307
etag: "579dea2edcf3f3fa3e18530d1f254132589a2f6b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38d969a0-82cd-4d27-8f25-f1b95cacc89f.webp
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38d969a0-82cd-4d27-8f25-f1b95cacc89f.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ed3fa86bbe319c9a2f81ff625e677cb0
e3d5210207f6ff922bc28e328285059c19a523a4
5919694bd942a4f25d5b7ffc3f8aee1af6cdb8461d4ba3dba9a2e72cf19164c8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38d969a0-82cd-4d27-8f25-f1b95cacc89f.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7261
x-amzn-requestid: e1bdf299-b29e-4f58-9c8a-33f5dacdb081
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZmirBELYoAMFfgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f4b13-1969b32c6f4f7e5749e7caa0;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:39:31 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: FO5iGJFmDfdklhzIVOxp4x3AV7ltFqBDDlYBz39Zzx99t7oykNR2WQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 a4479a6315f90864adc6175b280f8f44.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 21:43:40 GMT
age: 14426
etag: "e3d5210207f6ff922bc28e328285059c19a523a4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ca4df15-4ecd-467c-a658-2352fca9a8ff.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ca4df15-4ecd-467c-a658-2352fca9a8ff.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 16339989f5c6c229a3dcc0ed1e52032f
a1ea26d6e4eb4a72cc8c87100b40035dab69d285
16703f888ee6f974bb89e1c4c16a75186b31b64130abcd1a3bcd3741159d912c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ca4df15-4ecd-467c-a658-2352fca9a8ff.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13437
x-amzn-requestid: ec801fbc-c339-46ce-ac5f-18d064e5ef21
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zmhi_HdeoAMFyOQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f4946-02b52b770e6e76cf52b26e47;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:31:50 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: Iesqk_XbGiZE-n3mTa1_1WtlXiyEqz-4qfyt3_609O1eujdLcFu3zA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 ece5d4a731ece5ff46c564ab2b946ede.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 21:47:25 GMT
age: 14201
etag: "a1ea26d6e4eb4a72cc8c87100b40035dab69d285"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F837dece8-fc6a-4543-a1b5-e8504c153d81.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F837dece8-fc6a-4543-a1b5-e8504c153d81.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a4d23ef36836d4691f44e51885513cc3
10fc52375fd8946bfd468eb96e4aaf592c239663
fb3d2d52e1dbbe4225c3df920b36eeb73dc52a1010db52018bc1eb5c5bfbd028
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F837dece8-fc6a-4543-a1b5-e8504c153d81.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6063
x-amzn-requestid: e4067d2e-5fe8-4c80-ab2c-15e98605d458
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZQw32GbTIAMFx0Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633694fe-5d650b9433007db41ea51a35;Sampled=0
x-amzn-remapped-date: Fri, 30 Sep 2022 07:04:30 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 2wjeYIJI3CvuYekDHLaGl_50UC4Vy85egggJIQK6Gd7sVAgVY-82uA==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 22:53:07 GMT
age: 10259
etag: "10fc52375fd8946bfd468eb96e4aaf592c239663"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7ecd6748-5460-43cc-84b5-f33deb7cf126.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7ecd6748-5460-43cc-84b5-f33deb7cf126.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6fb155a5d0fa0cebfa4cd03606f1f48c
c44cac382e2f2eb2b6ce35da6dfb37747d436d60
ca79a1bcc80f4e6fece82a0efb71a6c9af2b0b3d67b8f8c010a7f02ded6d2cfa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7ecd6748-5460-43cc-84b5-f33deb7cf126.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6900
x-amzn-requestid: 6d8885f4-d244-4ec7-9c2b-68d86983a30d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZQmngFsHoAMFxqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63368496-0926524f3c50d16160c2665e;Sampled=0
x-amzn-remapped-date: Fri, 30 Sep 2022 05:54:30 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: vW_p02JxJdXHI1YjEOXEo8mnWZPCKvANQZJo6aconRHBrCoqFp65Aw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 04:14:56 GMT
age: 77350
etag: "c44cac382e2f2eb2b6ce35da6dfb37747d436d60"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0b7bc4b-b79a-4bab-9bec-87695d757b08.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0b7bc4b-b79a-4bab-9bec-87695d757b08.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 53b7ffdc3799e0ac7a225145242579ef
c47f0525fe5354ee13fe63c0ec31f0f826a58005
4bb518afc9b3e7bfb976d343e46b306155834adbe71fa35b0d6f509959f78aca
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0b7bc4b-b79a-4bab-9bec-87695d757b08.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10987
x-amzn-requestid: c2ab1012-1afd-4d74-8114-97977b43da24
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZgCHwGdGoAMFvyg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633cb097-3237927a0c1e081d22c902f7;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 22:15:51 GMT
x-amz-cf-pop: SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: JYDg0-KelCPr__4bKtpARLrwiE1CHGICcFI6I9_TFCMcmESbykNhXQ==
via: 1.1 3dde68f1f52282c9e1ee336d97233b0a.cloudfront.net (CloudFront), 1.1 27f6faf9790b5a2877fb528fa31f7922.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 22:08:50 GMT
age: 12916
etag: "c47f0525fe5354ee13fe63c0ec31f0f826a58005"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-MP69GDNWHF>m=2oea50&_p=474994538&gdid=dZTNiMT&cid=621599080.1665107046&ul=en-us&sr=1280x1024&_s=1&sid=1665107045&sct=1&seg=0&dl=http%3A%2F%2Ffoldingillusions.com%2F&dt=Folding%20Illusions%20I%20%C3%81lbumes%20de%20fotos%20hechos%20a%20mano&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-MP69GDNWHF>m=2oea50&_p=474994538&gdid=dZTNiMT&cid=621599080.1665107046&ul=en-us&sr=1280x1024&_s=1&sid=1665107045&sct=1&seg=0&dl=http%3A%2F%2Ffoldingillusions.com%2F&dt=Folding%20Illusions%20I%20%C3%81lbumes%20de%20fotos%20hechos%20a%20mano&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-MP69GDNWHF>m=2oea50&_p=474994538&gdid=dZTNiMT&cid=621599080.1665107046&ul=en-us&sr=1280x1024&_s=1&sid=1665107045&sct=1&seg=0&dl=http%3A%2F%2Ffoldingillusions.com%2F&dt=Folding%20Illusions%20I%20%C3%81lbumes%20de%20fotos%20hechos%20a%20mano&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: http://foldingillusions.com
date: Fri, 07 Oct 2022 01:44:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 07 Oct 2022 00:41:09 GMT
expires: Fri, 07 Oct 2022 02:41:09 GMT
cache-control: public, max-age=7200
age: 3777
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/11/cropped-Logo_Folding_Illusions-32x32.png
200 OK 1.2 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/11/cropped-Logo_Folding_Illusions-32x32.png
IP
File type PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced\012- data
Hash d8f72e1d65df907322448fb4e6fdf530
a618d7d998fef24802759ba07ae988956bc3c6b9
d27a3b1c908861c13b7d14808f98017e7faec16cd4a487d6d65875cf7fb2b024
GET /wp-content/uploads/2021/11/cropped-Logo_Folding_Illusions-32x32.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:06 GMT
content-type: image/png
content-length: 1178
last-modified: Tue, 23 Nov 2021 12:53:12 GMT
etag: "619ce438-49a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/11/cropped-Logo_Folding_Illusions-192x192.png
200 OK 8.2 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/11/cropped-Logo_Folding_Illusions-192x192.png
IP
File type PNG image data, 192 x 192, 8-bit colormap, non-interlaced\012- data
Hash 40df24a24d61b60d31cb777c1b63af2e
9afbe17d8b41f6f141a194a4466e4d1a7a270ee9
02d5e0ed2f4a1c1dcc24bee7d424531261d5529b6135904f10e3d5b8a2c04e55
GET /wp-content/uploads/2021/11/cropped-Logo_Folding_Illusions-192x192.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:06 GMT
content-type: image/png
content-length: 8164
last-modified: Tue, 23 Nov 2021 12:53:12 GMT
etag: "619ce438-1fe4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-5f3dc96a.min.js
200 OK 174 kB URL HTTP/2 foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-5f3dc96a.min.js
IP
File type ASCII text, with very long lines (39976)
Size 174 kB (173867 bytes)
Hash e3fa8314f883626f00101810a82753ff
621960fde0d2f1321b21a4554c7ae7d3dff4411c
a0973c2a1aa8d17b2adf8cc752248424caa945ee171a26659a31c1464413d350
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-5f3dc96a.min.js HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:04 GMT
content-type: application/javascript
last-modified: Tue, 25 Jan 2022 23:22:07 GMT
etag: W/"61f0861f-af323"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/01/logox2-1.png
200 OK 34 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/01/logox2-1.png
IP
File type PNG image data, 300 x 323, 8-bit/color RGBA, non-interlaced\012- data
Hash 7e0500f407eec1099385570e0da721bb
7643b29df83055477145d20b5b21e6ef0d1551f1
0afb569855fbd0d87f890112ec4031808f3bca0f6b79dcde200fffe46ce6553f
GET /wp-content/uploads/2021/01/logox2-1.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:09 GMT
content-type: image/png
content-length: 33797
last-modified: Thu, 25 Feb 2021 06:51:07 GMT
etag: "603748db-8405"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.ttf
200 OK 0 B URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.ttf
IP
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.ttf HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:06 GMT
content-type: application/font-sfnt
content-length: 134040
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-20b98"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/12/andris-romanovskis-267865-unsplash.jpg
200 OK 0 B URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/andris-romanovskis-267865-unsplash.jpg
IP
GET /wp-content/uploads/2021/12/andris-romanovskis-267865-unsplash.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-26c75ab0.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:05 GMT
content-type: image/jpeg
content-length: 339469
last-modified: Wed, 08 Dec 2021 10:43:51 GMT
etag: "61b08c67-52e0d"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/
200 OK 0 B IP
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://foldingillusions.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:09 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache
content-encoding: gzip
wpo-cache-status: cached
last-modified: Thu, 06 Oct 2022 18:13:22 GMT
x-powered-by: PHP/7.3.33, PleskLin
X-Firefox-Spdy: h2
foldingillusions.com/wp-admin/admin-ajax.php
200 OK 0 B URL HTTP/2 foldingillusions.com/wp-admin/admin-ajax.php
IP
Analyzer Verdict Alert fortinet Phishing
POST /wp-admin/admin-ajax.php HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 172
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:10 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: http://foldingillusions.com
access-control-allow-credentials: true
x-robots-tag: noindex
x-content-type-options: nosniff
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-powered-by: PHP/7.3.33, PleskLin
content-encoding: br
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.ttf
200 OK 0 B URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.ttf
IP
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.ttf HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 01:44:06 GMT
content-type: application/font-sfnt
content-length: 202744
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-317f8"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
82.223.33.49
142.250.74.174
23.36.77.32
93.184.220.29