r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb72f04bd7a4410640c0543bb4bd402
7c63b7e220b337b6a4f39864e11d6aa9e26c38ac
b7f7a4d355ed3b847a5e28f16030d5cbc715d47326aea20f292cd76dcaf59794
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B7F7A4D355ED3B847A5E28F16030D5CBC715D47326AEA20F292CD76DCAF59794"
Last-Modified: Mon, 21 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9862
Expires: Tue, 22 Nov 2022 22:03:40 GMT
Date: Tue, 22 Nov 2022 19:19:18 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash b59d95402dfb464c176610284ba13f65
1a6c62fb0d48654dd204b66161bb03fefe60f71a
40cfd59b890ec5a3570603d28d90bd7e5c506babd52c2ece93e09f1c7b2a6880
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4053
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 19:19:18 GMT
Last-Modified: Tue, 22 Nov 2022 18:11:45 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 054ff0d1a0a43f7cb1d78dbd34e27f99
3caf54f3de1d6a8c6f6454083f8b8e7dec77db54
fcdcef8306ae31f20c366489e1f88aa40b08f154d25d45f4055c4f8cdef47634
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FCDCEF8306AE31F20C366489E1F88AA40B08F154D25D45F4055C4F8CDEF47634"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9635
Expires: Tue, 22 Nov 2022 21:59:53 GMT
Date: Tue, 22 Nov 2022 19:19:18 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 22 Nov 2022 19:09:19 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 599
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 81t92YNaBoWOBHFryWZ6rvdoFLrIbq/ell1xRdkwOBEaTTOxfFiXJgszPJlOxrQ0e4TaG7k1A/A=
x-amz-request-id: H6ZX3SSFV6HPXACM
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 22 Nov 2022 18:42:41 GMT
age: 2197
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
displayreviewer.com/know/monthly-magazine
301 Moved Permanently 707 B URL HTTP/1.1 displayreviewer.com/know/monthly-magazine
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
Analyzer Verdict Alert fortinet Malware
GET /know/monthly-magazine HTTP/1.1
Host: displayreviewer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
keep-alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Tue, 22 Nov 2022 19:19:18 GMT
server: LiteSpeed
location: https://displayreviewer.com/know/monthly-magazine
x-turbo-charged-by: LiteSpeed
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 19:19:18 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 22 Nov 2022 19:08:53 GMT
cache-control: public,max-age=3600
age: 625
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash f661edd5a4b94bf63edf535d2795e440
4412db6d47a2daa7376f202dba834a334b5863a4
02fd606750ef91ba8a5e5b6c86b646eb9e8c5e6d0fce2966cdcf3b952a04782d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 19:19:19 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 21 Nov 2022 05:09:44 GMT
Expires: Mon, 28 Nov 2022 05:09:43 GMT
Etag: "4412db6d47a2daa7376f202dba834a334b5863a4"
Cache-Control: max-age=466824,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76e40416ca0eb512-OSL
ocsp.digicert.com/
200 OK 471 B IP
Hash 8a181d95550cfdf3b1fc4deb71631e40
37866f7293c41fbfb817e321754cae5c5bf59f93
6aa3d2763181cc48d2ad0ce7d227f3cb3324045c3f7858ccdbae675768dcec55
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5037
Cache-Control: max-age=141093
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 19:19:19 GMT
Etag: "637c912f-1d7"
Expires: Thu, 24 Nov 2022 10:30:52 GMT
Last-Modified: Tue, 22 Nov 2022 09:06:55 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: wAhfXZjtGjAsXRCWYJT3Qw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Ee71TRIzof99LBv/W8H8hXr0CkI=
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 1959c578f301b1f4eed6e91864a7889f
d516dd4d19e3fa720bada46e36c9308d2a66f47e
58826dba03e9f0ba851641e98c92935d5320c19a8f22a4369bd1069e8ffbbc0b
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "58826DBA03E9F0BA851641E98C92935D5320C19A8F22A4369BD1069E8FFBBC0B"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17864
Expires: Wed, 23 Nov 2022 00:17:04 GMT
Date: Tue, 22 Nov 2022 19:19:20 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eb526d16fc4a304286cf261dc5d8abea
0aed946d28abc21cb11657e6f864b561a0c68fba
551520b0344d58c1b4ddc9dfb452da2acf43080871a7037f4530eec48fb86362
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 19:19:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 585eab785e44953b9e6d7c389024ff3e
57582825e9a285177f38cd2fa868ad3a8eab85d1
f1c62af1e27c8510576adcb62b28be35f290d2ee71e873f7000c194980522e80
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 19:19:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-5MNGHLJ8DM
200 OK 76 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-5MNGHLJ8DM
IP
File type ASCII text, with very long lines (19102)
Hash ebb7f30066478aded86cdb36552656f0
54247a325570acd35fe0ea044b625cede1d7b620
78e6ced613aa75539057c204b895185cc68c744c1708b238a2f77f259e87b3a7
GET /gtag/js?id=G-5MNGHLJ8DM HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://displayreviewer.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 22 Nov 2022 19:19:20 GMT
expires: Tue, 22 Nov 2022 19:19:20 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 75952
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eb526d16fc4a304286cf261dc5d8abea
0aed946d28abc21cb11657e6f864b561a0c68fba
551520b0344d58c1b4ddc9dfb452da2acf43080871a7037f4530eec48fb86362
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 19:19:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 585eab785e44953b9e6d7c389024ff3e
57582825e9a285177f38cd2fa868ad3a8eab85d1
f1c62af1e27c8510576adcb62b28be35f290d2ee71e873f7000c194980522e80
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 19:19:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
displayreviewer.com/wp-content/uploads/hummingbird-assets/c5d6668c51859e82162215d2d0b937fb.css
200 OK 31 B URL HTTP/2 displayreviewer.com/wp-content/uploads/hummingbird-assets/c5d6668c51859e82162215d2d0b937fb.css
IP
File type ASCII text, with no line terminators
Hash 95c8a4456ee1a8e64a97562dc3cfe400
4195bbf6d43d258107233a56b75c91e7ea88c001
a2aa9769972b64dcb02a372078e0d0b9720eadc851197312b1f439c29819402e
GET /wp-content/uploads/hummingbird-assets/c5d6668c51859e82162215d2d0b937fb.css HTTP/1.1
Host: displayreviewer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://displayreviewer.com/know/monthly-magazine
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 19:19:20 GMT
content-type: text/css
last-modified: Fri, 11 Nov 2022 13:59:31 GMT
accept-ranges: bytes
content-length: 31
date: Tue, 22 Nov 2022 19:19:20 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
tf01.themeruby.com/review/wp-content/uploads/2020/02/r-logo-retina.png
200 OK 2.2 kB URL HTTP/2 tf01.themeruby.com/review/wp-content/uploads/2020/02/r-logo-retina.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9589672ffe302feace6fd81e166aba43
331b0220042d904ecad294e2af59702756864a6a
a06e7f883d1bddfb7c967454ff3f3c665103ad53eaeaea0237676ca8bc33cb28
GET /review/wp-content/uploads/2020/02/r-logo-retina.png HTTP/1.1
Host: tf01.themeruby.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://displayreviewer.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 19:19:20 GMT
content-type: image/webp
content-length: 2170
cache-control: public, max-age=315360000, must-revalidate, proxy-revalidate
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=5154
content-disposition: inline; filename="r-logo-retina.webp"
access-control-allow-origin: *
etag: "5e368ed6-1422"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Sun, 02 Feb 2020 08:56:54 GMT
vary: Accept
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ivftozgzntltjkYSQVBNOJUDChyih6XzqPx1igObJ7xLdHSTOUZnqglLfh1y06Mfu5dVpm%2BOvAAhHHHNuoD8j7YaJBQH27%2ByzlGoh8g7CUc3agEkh9u31gahRm%2BB6NgEwKzwrQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76e4041fbb46b4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 1959c578f301b1f4eed6e91864a7889f
d516dd4d19e3fa720bada46e36c9308d2a66f47e
58826dba03e9f0ba851641e98c92935d5320c19a8f22a4369bd1069e8ffbbc0b
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "58826DBA03E9F0BA851641E98C92935D5320C19A8F22A4369BD1069E8FFBBC0B"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17864
Expires: Wed, 23 Nov 2022 00:17:04 GMT
Date: Tue, 22 Nov 2022 19:19:20 GMT
Connection: keep-alive
displayreviewer.com/wp-content/uploads/hummingbird-assets/0d7e009bf7ca2b6cf93ce18be8a01bb3.css
200 OK 32 kB URL HTTP/2 displayreviewer.com/wp-content/uploads/hummingbird-assets/0d7e009bf7ca2b6cf93ce18be8a01bb3.css
IP
File type Unicode text, UTF-8 text, with very long lines (40462), with CRLF, LF line terminators
Hash ad4b6bbf4330bbc40390eb5c107641ae
a3d3a8d36371b1cd4b45e99a84c70ca7c15acaa8
12235b31cacebdb5cfe6c133d8277df4de3cde03883d29074fe7bf038735696d
GET /wp-content/uploads/hummingbird-assets/0d7e009bf7ca2b6cf93ce18be8a01bb3.css HTTP/1.1
Host: displayreviewer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://displayreviewer.com/know/monthly-magazine
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 19:19:20 GMT
content-type: text/css
last-modified: Fri, 11 Nov 2022 13:59:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 32180
date: Tue, 22 Nov 2022 19:19:20 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 804755c7e438531c9ba2e781947e1640
7a93c31638ee89a561bac2174482a5d12aa62d63
aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B"
Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8799
Expires: Tue, 22 Nov 2022 21:45:59 GMT
Date: Tue, 22 Nov 2022 19:19:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 804755c7e438531c9ba2e781947e1640
7a93c31638ee89a561bac2174482a5d12aa62d63
aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B"
Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8799
Expires: Tue, 22 Nov 2022 21:45:59 GMT
Date: Tue, 22 Nov 2022 19:19:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 804755c7e438531c9ba2e781947e1640
7a93c31638ee89a561bac2174482a5d12aa62d63
aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B"
Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8799
Expires: Tue, 22 Nov 2022 21:45:59 GMT
Date: Tue, 22 Nov 2022 19:19:20 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d50a0d2-05bc-4c0c-8961-2b8cc49ccc8f.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d50a0d2-05bc-4c0c-8961-2b8cc49ccc8f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0ab62c5a7c3296600de924eb0b283bc1
bc4a2dc43898e3fb78ba7301d8b09b280991d221
f2a4c0829a4fb9a585113ed358832d16470ec391035a302a8f3c4666172f02bd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d50a0d2-05bc-4c0c-8961-2b8cc49ccc8f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10556
x-amzn-requestid: d2426c6d-5e78-496c-8649-0496a872b380
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-Iq0GPVoAMF9bg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637bee45-1ee6dc09394731cc4dbfc38a;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:31:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: eHLf2DFK-3yN5dEG22XItPxRzmODRdThIYJI2oZqDJpgTGQGSQnGzQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 21:46:07 GMT
age: 77593
etag: "bc4a2dc43898e3fb78ba7301d8b09b280991d221"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Oswald%3A700%2C400%2C300%2C500%7CLato%3A100%2C300%2C400%2C700%2C900%2C100italic%2C300italic%2C400italic%2C700italic%2C900italic%7COswald%3A700%2C400%2C300%2C500%7CLato%3A100%2C300%2C400%2C700%2C900%2C100italic%2C300italic%2C400italic%2C700italic%2C900italic&display=swap
200 OK 9.5 kB URL HTTP/2 fonts.googleapis.com/css?family=Oswald%3A700%2C400%2C300%2C500%7CLato%3A100%2C300%2C400%2C700%2C900%2C100italic%2C300italic%2C400italic%2C700italic%2C900italic%7COswald%3A700%2C400%2C300%2C500%7CLato%3A100%2C300%2C400%2C700%2C900%2C100italic%2C300italic%2C400italic%2C700italic%2C900italic&display=swap
IP
Hash 2076719ed2703f81080c13227e875e7d
3afffb5ef1a81896500c3e6eab04675ca88d8bc1
27b77b84217a174b4a90a0dd9670eabcf06d8d54fe11b7b6105bfbb3220b97e7
GET /css?family=Oswald%3A700%2C400%2C300%2C500%7CLato%3A100%2C300%2C400%2C700%2C900%2C100italic%2C300italic%2C400italic%2C700italic%2C900italic%7COswald%3A700%2C400%2C300%2C500%7CLato%3A100%2C300%2C400%2C700%2C900%2C100italic%2C300italic%2C400italic%2C700italic%2C900italic&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://displayreviewer.com
Connection: keep-alive
Referer: https://displayreviewer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 22 Nov 2022 19:19:20 GMT
date: Tue, 22 Nov 2022 19:19:20 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9029340f-28c3-4004-9012-9a24977dfd45.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9029340f-28c3-4004-9012-9a24977dfd45.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4f3fad7453f45dfa617243c8beac64e1
56414a905340e1b1478a0a40a52b25365a724524
7befcfbedac5652eb04bc675b67f7b642631d4e918f7aaee17b0b594e26854d0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9029340f-28c3-4004-9012-9a24977dfd45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6031
x-amzn-requestid: f59b04c5-4955-4847-9a7f-d9d53b47ca52
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b3cV0GC-oAMF5hA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637940f1-0425b3cf6a4650b60936feba;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 20:47:45 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: StZ9dxgY8W0WwUUqsxyeISFnbm_WGGcm_AMuo9dzfhF9Yp7wM0TMMg==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 ea699166e6ec77aa410ff505b0a8ce18.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 08:17:57 GMT
age: 39683
etag: "56414a905340e1b1478a0a40a52b25365a724524"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 06c6e720bc9900b38e88cd72f739603e
22884cbc78622d6f78c1c3397c9b440946144a99
8675d08e6d8ae5bdedbc7c7ce647f8c6e72cc457917b4ed1856c50b11c2fe88b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7589
x-amzn-requestid: 533d7650-cb21-4090-a50a-e205adad316d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brr5zH4qoAMF79Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63748d0b-017f7bf4390eb124097af648;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 07:11:07 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZtjzvMh_vqVaOqm8xPfZ2EWGGl0X7Iv8GK40Z32EbKM4wk6tGPnlYA==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 22:26:05 GMT
age: 75195
etag: "22884cbc78622d6f78c1c3397c9b440946144a99"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c73cec7-245a-480e-8dfe-cc11a12b2656.jpeg
200 OK 4.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c73cec7-245a-480e-8dfe-cc11a12b2656.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dafd9e17dc0023e71ae513c6025e4b80
12e2654db1f384bb04f5c5042848b25dda86b710
e9c885a102dc811648cec4ac292db63564e81a48d7a3611cb31fba73b37286dd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c73cec7-245a-480e-8dfe-cc11a12b2656.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4639
x-amzn-requestid: 8a93fa29-158b-4402-aac4-85ad29a74ae1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-I6oELooAMFWFw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637beeaa-5a85509b26d9aeef7ae59b4c;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:33:30 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Z_LKFsiB_s81UenxBOVg9_qX_7vBHUZix7XF8YguDCytRn5opLkLRA==
via: 1.1 995664ee945c06fc706b5cb8e0e650dc.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 22:01:10 GMT
age: 76690
etag: "12e2654db1f384bb04f5c5042848b25dda86b710"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0e2c726b-e91a-4cf6-95b8-c267e110416c.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0e2c726b-e91a-4cf6-95b8-c267e110416c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a9e0f5c07511d0f6ad0f2441db92797d
2dcc6187d7173ce741975ad4ec24435c9dcb0880
3c57bf58bab9d54dd152eb0260a203b1cb201a9e2d960f25a0cea685b539ea04
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0e2c726b-e91a-4cf6-95b8-c267e110416c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5342
x-amzn-requestid: e396cea4-ddae-4b88-a73a-ceafb1e11620
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0b91EMLoAMFYYQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63780d25-7f1187713f288a0c158508ea;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 22:54:29 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: j7GPHu9Gq8cF2_j3-uXucAzJPSBWsFelX1EWZa_2sEW-Vo7b4WlaFg==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 21:55:58 GMT
age: 77002
etag: "2dcc6187d7173ce741975ad4ec24435c9dcb0880"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ad48f369723730c2935676e8d11e3239
30fb4a4ffa2f32ddf0b130682516911d3b558d4c
94209c11fc740667caf53b395abc3ce018043a7798632230e1615bdaef38ac75
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94209C11FC740667CAF53B395ABC3CE018043A7798632230E1615BDAEF38AC75"
Last-Modified: Mon, 21 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13898
Expires: Tue, 22 Nov 2022 23:10:58 GMT
Date: Tue, 22 Nov 2022 19:19:20 GMT
Connection: keep-alive
news.weatherplllatform.com/counter.js?v=00.99
200 OK 1.1 kB URL HTTP/1.1 news.weatherplllatform.com/counter.js?v=00.99
IP
File type ASCII text, with very long lines (2024), with CRLF line terminators
Hash d833c6bb66b64b86a284ac2ef47039e3
08b04c9f097e259f319739e66b91252936c5deca
75108976de313920cda98078671c77aef1380489238da13bc9f4d88068cfede8
GET /counter.js?v=00.99 HTTP/1.1
Host: news.weatherplllatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://displayreviewer.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 19:19:20 GMT
Content-Type: application/javascript
Last-Modified: Thu, 10 Nov 2022 12:03:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"636ce880-a26"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
displayreviewer.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 30 kB URL HTTP/2 displayreviewer.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
File type ASCII text, with very long lines (65447)
Hash 34f918ada1fe4f01c5a4b90065bbc37a
a731f6ce2d413805e39ae45994012b1bd5ea1e2b
eba158d5ab26a5a54a3dcfcea1072c636f44e92fc2eb30a3f27cd5be3f891dfc
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: displayreviewer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://displayreviewer.com/know/monthly-magazine
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 19:19:20 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 02:41:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 30273
date: Tue, 22 Nov 2022 19:19:20 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
displayreviewer.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.0 kB URL HTTP/2 displayreviewer.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
File type ASCII text, with very long lines (11126)
Hash 7e058b51f939eacfa31cdface14dded5
9d732e5afdeb42edef9e1b9631b7e95e054787cc
4ece5b00423755d8f4121ce382c8ea4dc44c241f28f150abe19caa85d0b0acc1
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: displayreviewer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://displayreviewer.com/know/monthly-magazine
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 19:19:20 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 02:41:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3995
date: Tue, 22 Nov 2022 19:19:20 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
displayreviewer.com/wp-includes/js/imagesloaded.min.js?ver=4.1.4
200 OK 1.7 kB URL HTTP/2 displayreviewer.com/wp-includes/js/imagesloaded.min.js?ver=4.1.4
IP
File type ASCII text, with very long lines (5477)
Hash fa921f07ecc438baf227765de450e215
1fdd49d8bb681cb118ea8d67d4fc61b0ad46cc95
b2cc68637048b04952a2f33163f64571145dbe0817a14c68fe6f1661bd81091f
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1
Host: displayreviewer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://displayreviewer.com/know/monthly-magazine
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 19:19:20 GMT
content-type: application/javascript
last-modified: Wed, 18 May 2022 02:41:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1733
date: Tue, 22 Nov 2022 19:19:20 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
displayreviewer.com/wp-content/plugins/pixwell-core/assets/jquery.isotope.min.js?ver=3.0.6
200 OK 10 kB URL HTTP/2 displayreviewer.com/wp-content/plugins/pixwell-core/assets/jquery.isotope.min.js?ver=3.0.6
IP
File type ASCII text, with very long lines (36615), with CRLF line terminators
Hash bcd016604f3bb464213dd572585d2c8e
7399f23811cf06248815242f327a2f7f257a83c1
20d9c718d162d6ad056f0a2a5166a02235a91acb96a8b20137b2b3e3c499b775
GET /wp-content/plugins/pixwell-core/assets/jquery.isotope.min.js?ver=3.0.6 HTTP/1.1
Host: displayreviewer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://displayreviewer.com/know/monthly-magazine
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 19:19:20 GMT
content-type: application/javascript
last-modified: Wed, 30 Mar 2022 13:37:35 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 10460
date: Tue, 22 Nov 2022 19:19:20 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
displayreviewer.com/wp-content/plugins/pixwell-core/assets/rbcookie.min.js?ver=1.0.3
200 OK 1.6 kB URL HTTP/2 displayreviewer.com/wp-content/plugins/pixwell-core/assets/rbcookie.min.js?ver=1.0.3
IP
File type ASCII text, with very long lines (1789)
Hash 4edfe830127c682019044725f7de777c
69737653bf7fe3c7db1304df1ec6a8a0379d75ae
87677f9e1b9b36dc3db1f4dd477ddb4234733c2c6fc2f41f1e872750d06ef682
GET /wp-content/plugins/pixwell-core/assets/rbcookie.min.js?ver=1.0.3 HTTP/1.1
Host: displayreviewer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://displayreviewer.com/know/monthly-magazine
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 19:19:20 GMT
content-type: application/javascript
last-modified: Wed, 30 Mar 2022 13:37:35 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1573
date: Tue, 22 Nov 2022 19:19:20 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
displayreviewer.com/wp-content/uploads/hummingbird-assets/8c7990b717dc0f1d8c0bae7d11ac49eb.css
200 OK 52 kB URL HTTP/2 displayreviewer.com/wp-content/uploads/hummingbird-assets/8c7990b717dc0f1d8c0bae7d11ac49eb.css
IP
File type ASCII text, with very long lines (65508), with CRLF line terminators
Hash 95b8344e41ccbb16e5e01d5bcf9da72e
6aa9c5c3046dca0cdf8b8da159eeeb69be799623
3059016927b1c3be304518113b757045e0dd80bc71d187adfa4649dc1cde12b1
GET /wp-content/uploads/hummingbird-assets/8c7990b717dc0f1d8c0bae7d11ac49eb.css HTTP/1.1
Host: displayreviewer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://displayreviewer.com/know/monthly-magazine
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 19:19:20 GMT
content-type: text/css
last-modified: Fri, 11 Nov 2022 14:03:31 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 52403
date: Tue, 22 Nov 2022 19:19:20 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
displayreviewer.com/wp-content/plugins/pixwell-core/assets/jquery.mp.min.js?ver=1.1.0
200 OK 8.0 kB URL HTTP/2 displayreviewer.com/wp-content/plugins/pixwell-core/assets/jquery.mp.min.js?ver=1.1.0
IP
File type ASCII text, with very long lines (21876), with CRLF line terminators
Hash b3b55ebbad168522b3fadf5d3a422444
53edc8d5916d6e05805400636e05c1c95b640450
3986c920e41cd25e3397d2720331a0969b3730c9e918e9e2cdc69ba0efbec5a9
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/pixwell-core/assets/jquery.mp.min.js?ver=1.1.0 HTTP/1.1
Host: displayreviewer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://displayreviewer.com/know/monthly-magazine
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 19:19:20 GMT
content-type: application/javascript
last-modified: Wed, 30 Mar 2022 13:37:35 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7975
date: Tue, 22 Nov 2022 19:19:20 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
displayreviewer.com/wp-content/plugins/pixwell-core/assets/core.js?ver=9.3
200 OK 4.4 kB URL HTTP/2 displayreviewer.com/wp-content/plugins/pixwell-core/assets/core.js?ver=9.3
IP
File type ASCII text, with very long lines (1794), with CRLF line terminators
Hash d7424bd6cf61fb46da608e446b797039
f5dc81c4fccc0499bc76639d2ff8de5a4c57b99a
88140acb145c73ddc6eb26ff5d6ade0b8de4d1d181570d24bd577afbd4be7330
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/pixwell-core/assets/core.js?ver=9.3 HTTP/1.1
Host: displayreviewer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://displayreviewer.com/know/monthly-magazine
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 19:19:20 GMT
content-type: application/javascript
last-modified: Wed, 30 Mar 2022 13:37:35 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4373
date: Tue, 22 Nov 2022 19:19:20 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
displayreviewer.com/wp-content/themes/pixwell/assets/js/jquery.waypoints.min.js?ver=3.1.1
200 OK 3.4 kB URL HTTP/2 displayreviewer.com/wp-content/themes/pixwell/assets/js/jquery.waypoints.min.js?ver=3.1.1
IP
File type Unicode text, UTF-8 text, with very long lines (10412), with CRLF line terminators
Hash 94f3abe4250820735ec90b9edcea6b70
0137f251799cbe90a1154bcc05e6ae96cd290db3
feb534a356ab08fd9e542691b0c8f659c9c4eaf662d62f9fae32ad4bafef7682
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/pixwell/assets/js/jquery.waypoints.min.js?ver=3.1.1 HTTP/1.1
Host: displayreviewer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://displayreviewer.com/know/monthly-magazine
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 19:19:20 GMT
content-type: application/javascript
last-modified: Wed, 30 Mar 2022 13:37:41 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3448
date: Tue, 22 Nov 2022 19:19:20 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
displayreviewer.com/wp-content/themes/pixwell/assets/js/owl.carousel.min.js?ver=1.8.1
200 OK 12 kB URL HTTP/2 displayreviewer.com/wp-content/themes/pixwell/assets/js/owl.carousel.min.js?ver=1.8.1
IP
File type ASCII text, with very long lines (45988)
Hash 513eee5c125e9df0e247701f5910247d
2b6d474b7486538d1258f41923fdda5d081a4afb
de4380d780c6d7ed237ce4950e4724ee551581da63775432e26bcba7348832e1
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/pixwell/assets/js/owl.carousel.min.js?ver=1.8.1 HTTP/1.1
Host: displayreviewer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://displayreviewer.com/know/monthly-magazine
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 19:19:20 GMT
content-type: application/javascript
last-modified: Wed, 30 Mar 2022 13:37:41 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 12039
date: Tue, 22 Nov 2022 19:19:20 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
displayreviewer.com/wp-content/themes/pixwell/assets/js/rbsticky.min.js?ver=1.0
200 OK 2.4 kB URL HTTP/2 displayreviewer.com/wp-content/themes/pixwell/assets/js/rbsticky.min.js?ver=1.0
IP
File type ASCII text, with very long lines (8135), with CRLF line terminators
Hash 233002d401a399f6123f9ccf453f0e31
7efe31de8ea9f3acde1a30ab9ba30f4c2988552c
23b464f4440def9258a1b209cbbe814a3e1d7e2753d405f896391ac03a82cc33
GET /wp-content/themes/pixwell/assets/js/rbsticky.min.js?ver=1.0 HTTP/1.1
Host: displayreviewer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://displayreviewer.com/know/monthly-magazine
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 19:19:20 GMT
content-type: application/javascript
last-modified: Wed, 30 Mar 2022 13:37:41 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2366
date: Tue, 22 Nov 2022 19:19:20 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
displayreviewer.com/wp-content/themes/pixwell/assets/js/jquery.tipsy.min.js?ver=1.0
200 OK 2.4 kB URL HTTP/2 displayreviewer.com/wp-content/themes/pixwell/assets/js/jquery.tipsy.min.js?ver=1.0
IP
File type ASCII text, with very long lines (4220), with CRLF line terminators
Hash 4b07d2396f77419ac83e7e651df49c52
a57a4ce04a63009e73cbaa04c7417d9330eebceb
40989b69297748e1dd1245ff1ab513341ff8dbd080b71932288f04ca1378fc1d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/pixwell/assets/js/jquery.tipsy.min.js?ver=1.0 HTTP/1.1
Host: displayreviewer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://displayreviewer.com/know/monthly-magazine
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 19:19:20 GMT
content-type: application/javascript
last-modified: Wed, 30 Mar 2022 13:37:41 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2418
date: Tue, 22 Nov 2022 19:19:20 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
displayreviewer.com/wp-content/themes/pixwell/assets/js/jquery.ui.totop.min.js?ver=v1.2
200 OK 2.3 kB URL HTTP/2 displayreviewer.com/wp-content/themes/pixwell/assets/js/jquery.ui.totop.min.js?ver=v1.2
IP
File type HTML document, ASCII text, with very long lines (3186), with CRLF line terminators
Hash 27aebc72abaa0eac4f8867d32529e669
d48791e84aee2eb4d94a9bc9241789c42a99f6dd
9651024160a276d83433273dfad91da2f959f35c6a9a5fcd0239d2248954a992
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/pixwell/assets/js/jquery.ui.totop.min.js?ver=v1.2 HTTP/1.1
Host: displayreviewer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://displayreviewer.com/know/monthly-magazine
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 19:19:20 GMT
content-type: application/javascript
last-modified: Wed, 30 Mar 2022 13:37:41 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2289
date: Tue, 22 Nov 2022 19:19:20 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
displayreviewer.com/wp-content/themes/pixwell/assets/js/global.js?ver=9.3
200 OK 12 kB URL HTTP/2 displayreviewer.com/wp-content/themes/pixwell/assets/js/global.js?ver=9.3
IP
File type ASCII text, with CRLF line terminators
Hash f791327e1b191d1a0bdd38ccdeaa921c
4f885f4f4e2b6843868084083dd7ac284e620325
b249060d65656916b470639d8874286bd33b88cb2703c95e9543c7c5020c5fdd
GET /wp-content/themes/pixwell/assets/js/global.js?ver=9.3 HTTP/1.1
Host: displayreviewer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://displayreviewer.com/know/monthly-magazine
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 19:19:20 GMT
content-type: application/javascript
last-modified: Wed, 30 Mar 2022 13:37:41 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 12492
date: Tue, 22 Nov 2022 19:19:20 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
displayreviewer.com/wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js?ver=6.2.2
200 OK 5.1 kB URL HTTP/2 displayreviewer.com/wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js?ver=6.2.2
IP
File type ASCII text, with very long lines (23042)
Hash d03415a9000b72dd1addf247fb3a9a48
becb8a7e9271370b1c34f108fb05023e924e8dd6
9ddb642d627b13a57d43f329cde09e1c72a30866e745bb73b0e46e2b4efc4b51
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js?ver=6.2.2 HTTP/1.1
Host: displayreviewer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://displayreviewer.com/know/monthly-magazine
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 19:19:20 GMT
content-type: application/javascript
last-modified: Tue, 22 Nov 2022 17:38:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5116
date: Tue, 22 Nov 2022 19:19:20 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
displayreviewer.com/wp-content/uploads/2019/02/About-MonsterFPS-team.jpg
200 OK 50 kB URL HTTP/2 displayreviewer.com/wp-content/uploads/2019/02/About-MonsterFPS-team.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 550x411, components 3\012- data
Hash 5c1b8637168b080711d96986afa78375
587729fcbee100712c437e77baa65352828ec8d2
de445a98b21f8bef8a586b3241b08d0e2866be5e1cc3aa06ef5b616c2617249b
GET /wp-content/uploads/2019/02/About-MonsterFPS-team.jpg HTTP/1.1
Host: displayreviewer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://displayreviewer.com/know/monthly-magazine
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 19:19:20 GMT
content-type: image/jpeg
last-modified: Wed, 30 Mar 2022 13:37:50 GMT
accept-ranges: bytes
content-length: 50529
date: Tue, 22 Nov 2022 19:19:20 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
displayreviewer.com/wp-content/themes/pixwell/assets/fonts/ruby-icon.woff
200 OK 72 kB URL HTTP/2 displayreviewer.com/wp-content/themes/pixwell/assets/fonts/ruby-icon.woff
IP
File type Web Open Font Format, TrueType, length 71956, version 1.0\012- data
Hash 8a30cd83342e27ce4c7281fb6065791c
96184a252162a7905d6c1f3239f40cb1448eab61
5e1c1b54360d1df72955d690ee50841244f8441aa4091a34b483d84cc0588cad
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/pixwell/assets/fonts/ruby-icon.woff HTTP/1.1
Host: displayreviewer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://displayreviewer.com/know/monthly-magazine
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 19:19:20 GMT
content-type: font/woff
last-modified: Wed, 30 Mar 2022 13:37:41 GMT
accept-ranges: bytes
content-length: 71956
date: Tue, 22 Nov 2022 19:19:20 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ed3ae8e878b9c8c9c5fc3ab22d8547d6
e4d08dc74fa84a3bcc9d442e225e8f7a6c124822
e135b6fb23500cb2edbf836719ed450cdb6b1e86b7c8491289cb4e1ccbd9ce84
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 19:19:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/oswald/v49/TK3iWkUHHAIjg752GT8G.woff2
200 OK 25 kB URL HTTP/2 fonts.gstatic.com/s/oswald/v49/TK3iWkUHHAIjg752GT8G.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 25372, version 1.0\012- data
Hash fe424f96cb627d8b835cb001af17f56e
c5b4368fed99812a99036fba86d01367b5549505
35c92598a5f32c018dc630f57b183b0284c211ce9c222e5b36840a62115262f1
GET /s/oswald/v49/TK3iWkUHHAIjg752GT8G.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://displayreviewer.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 25372
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 21 Nov 2022 21:14:39 GMT
expires: Tue, 21 Nov 2023 21:14:39 GMT
cache-control: public, max-age=31536000
age: 79482
last-modified: Mon, 18 Jul 2022 19:24:05 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://displayreviewer.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 17:10:21 GMT
expires: Wed, 22 Nov 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 7740
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ed3ae8e878b9c8c9c5fc3ab22d8547d6
e4d08dc74fa84a3bcc9d442e225e8f7a6c124822
e135b6fb23500cb2edbf836719ed450cdb6b1e86b7c8491289cb4e1ccbd9ce84
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 19:19:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
news.weatherplllatform.com/stat.js?v=0.4.444
200 OK 1.2 kB URL HTTP/1.1 news.weatherplllatform.com/stat.js?v=0.4.444
IP
File type ASCII text, with very long lines (541), with CRLF line terminators
Hash 43e87d57806e9169d8e88f668832cadb
e9abf89c3b4c1edff67ca0e737e0c8a26e3e432b
c5aa9190dcdc682962daead32fe34f639d2176ff4a6f783e6df33575664a98d1
GET /stat.js?v=0.4.444 HTTP/1.1
Host: news.weatherplllatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://displayreviewer.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 19:19:21 GMT
Content-Type: application/javascript
Last-Modified: Thu, 10 Nov 2022 12:01:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"636ce823-b95"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
displayreviewer.com/wp-content/uploads/2021/07/13-Best-Free-Softwares-that-Should-Be-on-Your-PC-in-2021-280x210.jpg
200 OK 17 kB URL HTTP/2 displayreviewer.com/wp-content/uploads/2021/07/13-Best-Free-Softwares-that-Should-Be-on-Your-PC-in-2021-280x210.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 280x210, components 3\012- data
Hash 8f209a2f57641aefc12cb265ed51babb
8e26f5d9d488880e41d06111d6f251677f950551
6c263ebf44fee404b6d382a876c178d9bd8c141baf5550aef4186e5c593681fc
GET /wp-content/uploads/2021/07/13-Best-Free-Softwares-that-Should-Be-on-Your-PC-in-2021-280x210.jpg HTTP/1.1
Host: displayreviewer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://displayreviewer.com/know/monthly-magazine
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 19:19:21 GMT
content-type: image/jpeg
last-modified: Wed, 30 Mar 2022 13:37:45 GMT
accept-ranges: bytes
content-length: 16977
date: Tue, 22 Nov 2022 19:19:21 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
displayreviewer.com/wp-content/uploads/2021/07/What-are-gsync-and-freesync-technologies-280x210.jpg
200 OK 9.1 kB URL HTTP/2 displayreviewer.com/wp-content/uploads/2021/07/What-are-gsync-and-freesync-technologies-280x210.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 280x210, components 3\012- data
Hash c2ebf7bc94d37092efd16a4f3fade7f7
8c7d69f2d2ba415b60fcd341fdc306ca67ca453e
04bd6a71dbb24ebe256bf7c923306b262ae06b20c7e4d50bb4f09bfa0db3b9a5
GET /wp-content/uploads/2021/07/What-are-gsync-and-freesync-technologies-280x210.jpg HTTP/1.1
Host: displayreviewer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://displayreviewer.com/know/monthly-magazine
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 19:19:21 GMT
content-type: image/jpeg
last-modified: Wed, 30 Mar 2022 13:37:46 GMT
accept-ranges: bytes
content-length: 9102
date: Tue, 22 Nov 2022 19:19:21 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
displayreviewer.com/wp-content/uploads/2021/07/The-different-types-of-laptops-280x210.jpg
200 OK 7.4 kB URL HTTP/2 displayreviewer.com/wp-content/uploads/2021/07/The-different-types-of-laptops-280x210.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 280x210, components 3\012- data
Hash ec4f8d1ad96b5d9c5431dda7c689ca17
b7a9e1f933609a76ca8ef9611633a45673f3692f
87f383a022b0cfec5c97c6c32e6a5910c1b122607a1b946b8c3678299b3e8182
GET /wp-content/uploads/2021/07/The-different-types-of-laptops-280x210.jpg HTTP/1.1
Host: displayreviewer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://displayreviewer.com/know/monthly-magazine
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 19:19:21 GMT
content-type: image/jpeg
last-modified: Wed, 30 Mar 2022 13:37:46 GMT
accept-ranges: bytes
content-length: 7435
date: Tue, 22 Nov 2022 19:19:21 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
displayreviewer.com/wp-content/uploads/2021/03/Best-monitor-brightness-and-contrast-settings-for-eyes-280x210.jpg
200 OK 12 kB URL HTTP/2 displayreviewer.com/wp-content/uploads/2021/03/Best-monitor-brightness-and-contrast-settings-for-eyes-280x210.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 280x210, components 3\012- data
Hash 10bce9588843bae891cf63739e7cf9ef
b7f45df97c9df6d878a66746417e7bb1b002ee1c
60e7925527b6ce025f89f25cfb117e8e8b8d1ecb50f7e6450d96735c7a50602f
GET /wp-content/uploads/2021/03/Best-monitor-brightness-and-contrast-settings-for-eyes-280x210.jpg HTTP/1.1
Host: displayreviewer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://displayreviewer.com/know/monthly-magazine
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 19:19:21 GMT
content-type: image/jpeg
last-modified: Wed, 30 Mar 2022 13:37:44 GMT
accept-ranges: bytes
content-length: 12128
date: Tue, 22 Nov 2022 19:19:21 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
displayreviewer.com/wp-content/uploads/2021/07/what-does-intel-core-i3-i5-i7-cpu-naming-means-280x210.jpg
200 OK 17 kB URL HTTP/2 displayreviewer.com/wp-content/uploads/2021/07/what-does-intel-core-i3-i5-i7-cpu-naming-means-280x210.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 280x210, components 3\012- data
Hash c9d69e25104d1a6dadf74e1123fcf5e5
64a9c1b9300aa625ee051498667d178385fbb7ac
6b6ffa3c50c3d17b7b7fa43c1fe44b3497a2623e3a5649ded2bc35975af45b3f
GET /wp-content/uploads/2021/07/what-does-intel-core-i3-i5-i7-cpu-naming-means-280x210.jpg HTTP/1.1
Host: displayreviewer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://displayreviewer.com/know/monthly-magazine
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 19:19:21 GMT
content-type: image/jpeg
last-modified: Wed, 30 Mar 2022 13:37:46 GMT
accept-ranges: bytes
content-length: 16876
date: Tue, 22 Nov 2022 19:19:21 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a149277a40c2c7eb60a822f5079481ed
07d013be2fc23cd968d4531781bccd368c8ed660
808476806c8ddfa0831001ecf9dcf5e0f6b1667d0b4569c90b9433c848c0eddc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "808476806C8DDFA0831001ECF9DCF5E0F6B1667D0B4569C90B9433C848C0EDDC"
Last-Modified: Mon, 21 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7986
Expires: Tue, 22 Nov 2022 21:32:28 GMT
Date: Tue, 22 Nov 2022 19:19:22 GMT
Connection: keep-alive
walk.cdnbestplatform.com/away/follow.php?sid=547658&pid=765&lid=457486
302 Found 0 B URL HTTP/1.1 walk.cdnbestplatform.com/away/follow.php?sid=547658&pid=765&lid=457486
IP
ASN #50321 FOP Reznichenko Sergey Mykolayovich
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /away/follow.php?sid=547658&pid=765&lid=457486 HTTP/1.1
Host: walk.cdnbestplatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://displayreviewer.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 22 Nov 2022 19:19:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://location.similarwebline.com/go/come.php?id=64575685&sid=325478&mid=843-334-73234
Access-Control-Allow-Origin: *
region1.google-analytics.com/g/collect?v=2&tid=G-5MNGHLJ8DM>m=2oeb90&_p=954030755&cid=361760151.1669144762&ul=en-us&sr=1280x1024&_s=1&sid=1669144761&sct=1&seg=0&dl=https%3A%2F%2Fdisplayreviewer.com%2Fknow%2Fmonthly-magazine&dt=Page%20Not%20Found%20-%20DisplayReviewer&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-5MNGHLJ8DM>m=2oeb90&_p=954030755&cid=361760151.1669144762&ul=en-us&sr=1280x1024&_s=1&sid=1669144761&sct=1&seg=0&dl=https%3A%2F%2Fdisplayreviewer.com%2Fknow%2Fmonthly-magazine&dt=Page%20Not%20Found%20-%20DisplayReviewer&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-5MNGHLJ8DM>m=2oeb90&_p=954030755&cid=361760151.1669144762&ul=en-us&sr=1280x1024&_s=1&sid=1669144761&sct=1&seg=0&dl=https%3A%2F%2Fdisplayreviewer.com%2Fknow%2Fmonthly-magazine&dt=Page%20Not%20Found%20-%20DisplayReviewer&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://displayreviewer.com
Connection: keep-alive
Referer: https://displayreviewer.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://displayreviewer.com
date: Tue, 22 Nov 2022 19:19:22 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5b52adc8a9cad8329626dea625add8dd
1b4bc38d13df8cfb90cbe2d08a0de39516223937
976c07bf62f6807261b8ddc4ae761b5348a6f709c286a7ff55af7059b5b367ac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "976C07BF62F6807261B8DDC4AE761B5348A6F709C286A7FF55AF7059B5B367AC"
Last-Modified: Tue, 22 Nov 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9305
Expires: Tue, 22 Nov 2022 21:54:28 GMT
Date: Tue, 22 Nov 2022 19:19:23 GMT
Connection: keep-alive
location.similarwebline.com/go/come.php?id=64575685&sid=325478&mid=843-334-73234
302 Found 0 B URL HTTP/1.1 location.similarwebline.com/go/come.php?id=64575685&sid=325478&mid=843-334-73234
IP
ASN #50321 FOP Reznichenko Sergey Mykolayovich
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/come.php?id=64575685&sid=325478&mid=843-334-73234 HTTP/1.1
Host: location.similarwebline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://displayreviewer.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 22 Nov 2022 19:19:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://location.similarwebline.com/go/come.php?id=64575685&sid=325478&mid=843-334-73234&fol=9567-23562-33-64&from=davi83
Access-Control-Allow-Origin: *
location.similarwebline.com/go/come.php?id=64575685&sid=325478&mid=843-334-73234&fol=9567-23562-33-64&from=davi83
200 OK 441 B URL HTTP/1.1 location.similarwebline.com/go/come.php?id=64575685&sid=325478&mid=843-334-73234&fol=9567-23562-33-64&from=davi83
IP
ASN #50321 FOP Reznichenko Sergey Mykolayovich
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 363c32cded5deaf0a1c26a9a0036a4d6
baae8a41bc9d70bb058b7177f0e53ae419bcd2cb
818cb62f1a3ddef93956adee2ac8e802b4717b3ecd250b47e86a81cf6b15a66d
GET /go/come.php?id=64575685&sid=325478&mid=843-334-73234&fol=9567-23562-33-64&from=davi83 HTTP/1.1
Host: location.similarwebline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://displayreviewer.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 19:19:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Encoding: gzip
thirawogla.com/bK3/V.0/Po3KpQvUbpmlVuJ/Z/Db0_0dNBTRcVyzMjj/A/wDLhTzQN1SNLzhITyrMKDgEA
302 Found 0 B URL HTTP/2 thirawogla.com/bK3/V.0/Po3KpQvUbpmlVuJ/Z/Db0_0dNBTRcVyzMjj/A/wDLhTzQN1SNLzhITyrMKDgEA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bK3/V.0/Po3KpQvUbpmlVuJ/Z/Db0_0dNBTRcVyzMjj/A/wDLhTzQN1SNLzhITyrMKDgEA HTTP/1.1
Host: thirawogla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://location.similarwebline.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 22 Nov 2022 19:19:23 GMT
content-type: text/html;charset=UTF-8
content-length: 0
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
x-frame-options: DENY
location: https://thirawogla.com/bk3lV-0.Pn3oJpyqa_WsQt9uMvW-FxiyZzjAQ_5CODDEYFw-NHjIQJ2KN_jMgNzOMPm-MR2SNTmUE_xWOXTYVZh-Yb2cFdieN_WgVhiiNjj-MlmmcnnoN_yqYrzs1tv-dvXwQxmyc_0AlBkCPDT-QF1GNHzII_yKMLDMANm-dPHQZRySP_TUAVmWeXm-9ZuaZbUcl_kePfTgIh1-MjTkUlxmO_Docp
referrer-policy: no-referrer
x-content-type-options: nosniff
X-Firefox-Spdy: h2
thirawogla.com/bk3lV-0.Pn3oJpyqa_WsQt9uMvW-FxiyZzjAQ_5CODDEYFw-NHjIQJ2KN_jMgNzOMPm-MR2SNTmUE_xWOXTYVZh-Yb2cFdieN_WgVhiiNjj-MlmmcnnoN_yqYrzs1tv-dvXwQxmyc_0AlBkCPDT-QF1GNHzII_yKMLDMANm-dPHQZRySP_TUAVmWeXm-9ZuaZbUcl_kePfTgIh1-MjTkUlxmO_Docp
302 Found 0 B URL HTTP/2 thirawogla.com/bk3lV-0.Pn3oJpyqa_WsQt9uMvW-FxiyZzjAQ_5CODDEYFw-NHjIQJ2KN_jMgNzOMPm-MR2SNTmUE_xWOXTYVZh-Yb2cFdieN_WgVhiiNjj-MlmmcnnoN_yqYrzs1tv-dvXwQxmyc_0AlBkCPDT-QF1GNHzII_yKMLDMANm-dPHQZRySP_TUAVmWeXm-9ZuaZbUcl_kePfTgIh1-MjTkUlxmO_Docp
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bk3lV-0.Pn3oJpyqa_WsQt9uMvW-FxiyZzjAQ_5CODDEYFw-NHjIQJ2KN_jMgNzOMPm-MR2SNTmUE_xWOXTYVZh-Yb2cFdieN_WgVhiiNjj-MlmmcnnoN_yqYrzs1tv-dvXwQxmyc_0AlBkCPDT-QF1GNHzII_yKMLDMANm-dPHQZRySP_TUAVmWeXm-9ZuaZbUcl_kePfTgIh1-MjTkUlxmO_Docp HTTP/1.1
Host: thirawogla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Tue, 22 Nov 2022 19:19:24 GMT
content-type: text/html;charset=UTF-8
content-length: 0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
location: https://thirawogla.com/b.3_VE0FPG3HJ-yJaKWLQM9_MOWPFQiRZ-jTQU5VOWD_YYwZNajbQ-2dNejfggz_MimjMk2lN-mnEoxpOqT_VshtYu2vF-ixNyWzVAi_NCjDMEmFc-nHNIyJYKz_1MvNdOXPQ-mRcS0TlUk_PWTXIY1ZM-TbUcxdOeD_cgmhci0jl-klMmzn1ou_bq1r9shtZ-HvMwmxdyH_ZAyBPCTDA-mFeGmH9Iu_ZKULlMkNP-TPEQwRNSz_cU
referrer-policy: no-referrer
x-content-type-options: nosniff
X-Firefox-Spdy: h2
thirawogla.com/b.3_VE0FPG3HJ-yJaKWLQM9_MOWPFQiRZ-jTQU5VOWD_YYwZNajbQ-2dNejfggz_MimjMk2lN-mnEoxpOqT_VshtYu2vF-ixNyWzVAi_NCjDMEmFc-nHNIyJYKz_1MvNdOXPQ-mRcS0TlUk_PWTXIY1ZM-TbUcxdOeD_cgmhci0jl-klMmzn1ou_bq1r9shtZ-HvMwmxdyH_ZAyBPCTDA-mFeGmH9Iu_ZKULlMkNP-TPEQwRNSz_cU
200 OK 0 B URL HTTP/2 thirawogla.com/b.3_VE0FPG3HJ-yJaKWLQM9_MOWPFQiRZ-jTQU5VOWD_YYwZNajbQ-2dNejfggz_MimjMk2lN-mnEoxpOqT_VshtYu2vF-ixNyWzVAi_NCjDMEmFc-nHNIyJYKz_1MvNdOXPQ-mRcS0TlUk_PWTXIY1ZM-TbUcxdOeD_cgmhci0jl-klMmzn1ou_bq1r9shtZ-HvMwmxdyH_ZAyBPCTDA-mFeGmH9Iu_ZKULlMkNP-TPEQwRNSz_cU
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b.3_VE0FPG3HJ-yJaKWLQM9_MOWPFQiRZ-jTQU5VOWD_YYwZNajbQ-2dNejfggz_MimjMk2lN-mnEoxpOqT_VshtYu2vF-ixNyWzVAi_NCjDMEmFc-nHNIyJYKz_1MvNdOXPQ-mRcS0TlUk_PWTXIY1ZM-TbUcxdOeD_cgmhci0jl-klMmzn1ou_bq1r9shtZ-HvMwmxdyH_ZAyBPCTDA-mFeGmH9Iu_ZKULlMkNP-TPEQwRNSz_cU HTTP/1.1
Host: thirawogla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 19:19:24 GMT
content-type: text/html;charset=UTF-8
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
referrer-policy: no-referrer
x-content-type-options: nosniff
X-Firefox-Spdy: h2
thirawogla.com/favicon.ico
204 No Content 0 B URL HTTP/2 thirawogla.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: thirawogla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Tue, 22 Nov 2022 19:19:24 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
X-Firefox-Spdy: h2
displayreviewer.com/know/monthly-magazine
200 OK 0 B URL HTTP/2 displayreviewer.com/know/monthly-magazine
IP
Analyzer Verdict Alert fortinet Malware
GET /know/monthly-magazine HTTP/1.1
Host: displayreviewer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
x-powered-by: PHP/7.2.34
content-type: text/html; charset=utf-8
content-encoding: br
vary: Accept-Encoding
date: Tue, 22 Nov 2022 19:19:19 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
66.29.141.146
88.85.94.246
193.169.195.64
23.36.76.226
93.184.220.29
104.18.32.68
89.22.228.250