shopswiz.com/fashion/?step=noref&tg2=na&tg=track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
188.114.96.1200 OK 190 B URL HTTP/1.1 shopswiz.com/fashion/?step=noref&tg2=na&tg=track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
IP 188.114.96.1:0
File type HTML document, ASCII text, with no line terminators
Hash 1de37fb4e9e41a429fae85f4bf17aeba
1f603af73832999fc1928f65344ee8d36ce3c5c3
dc8ebf759ac6b25c1de0841d34a7e1f31822b85af14697caaf746806e816e8e6
GET /fashion/?step=noref&tg2=na&tg=track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i HTTP/1.1
Host: shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:39 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.4.26
Referrer-Policy: origin
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iVAb6txNj7upe%2BBDIGd7roAqVx2R6o68mnquz8V7vCdqBcJ%2BcPfU1%2FmPinoyfrjXZlWKiCz69GZOYNIkoy9u2KEzp0mx9OFbZMB4ZG6Yp5xxmM2uOXn3sPGZBmCWu7A%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 786a93804dc0b4ff-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash b782882bdabaf3b08e64120922b4a4b7
2035ed7fc9fb5b6ee9715601ba43de5f94d0c0e9
3fe7d1a9a55b86ec25d02634749ccfae11f3477033ba8cd7ac4131b7948ba619
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3FE7D1A9A55B86EC25D02634749CCFAE11F3477033BA8CD7AC4131B7948BA619"
Last-Modified: Sat, 07 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10550
Expires: Mon, 09 Jan 2023 07:50:29 GMT
Date: Mon, 09 Jan 2023 04:54:39 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 516b9d6951b09439a51d5284994ed92f
5c78edb38bae36caa8e2db8ed6635a32e46c91dd
eaaf4ebc59d2a06d02b552154c5adb7c713ffc4a7f5caabcff1c2b4cd6ec5c7b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EAAF4EBC59D2A06D02B552154C5ADB7C713FFC4A7F5CAABCFF1C2B4CD6EC5C7B"
Last-Modified: Fri, 06 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11197
Expires: Mon, 09 Jan 2023 08:01:16 GMT
Date: Mon, 09 Jan 2023 04:54:39 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 89a058935fd04697c87e9441fbb466a9
59b5b08119374b1da34cff7e43a7c6dc80103f6e
3a3261f495323ff0f60067b2930b8d0e5e4e5cd6ae9b14929a88047587b735da
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3A3261F495323FF0F60067B2930B8D0E5E4E5CD6AE9B14929A88047587B735DA"
Last-Modified: Sat, 07 Jan 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4764
Expires: Mon, 09 Jan 2023 06:14:03 GMT
Date: Mon, 09 Jan 2023 04:54:39 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 09 Jan 2023 04:41:37 GMT
content-type: application/json
age: 782
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: rffmK07HiZVCc6AVw9cE/ouWDE7N5bE/x8NrnqxHEoAkd9OfW5/NwnALNsTP6tzGvAZHQGqE0EA=
x-amz-request-id: T1WB25EQ49YKPJ0F
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 09 Jan 2023 04:16:03 GMT
age: 2316
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 09 Jan 2023 04:54:39 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
shopswiz.com/fashion/?step=mr1&tg2=na&tg=track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
188.114.96.1200 OK 190 B URL HTTP/1.1 shopswiz.com/fashion/?step=mr1&tg2=na&tg=track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
IP 188.114.96.1:0
File type HTML document, ASCII text, with no line terminators
Hash c4449068ea15311df6a7f4b29598bec1
ff99e1114eabf424880161e2235cc6deb3215774
072efb32b5962e6e72125ebbd329e118801b3b861aaebf3832ce271870c3d738
GET /fashion/?step=mr1&tg2=na&tg=track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i HTTP/1.1
Host: shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:39 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.4.26
Referrer-Policy: origin
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FWQVEw%2FQASNnV6TjxxS7CVpSnUvql9wSTBMWNmXsdfSBhP0ARPupI5sbu7cfwNDoGgoelChDobtezU14Pxb%2B5p5lL%2FbggIojjqi9Z821i04ytMG0QtlOOo9Xfl3vpcc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 786a93829e84b4ff-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
shopswiz.com/fashion/?step=mr2&tg2=na&tg=track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
188.114.96.1302 Found 0 B URL HTTP/1.1 shopswiz.com/fashion/?step=mr2&tg2=na&tg=track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
IP 188.114.96.1:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fashion/?step=mr2&tg2=na&tg=track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i HTTP/1.1
Host: shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Mon, 09 Jan 2023 04:54:39 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.4.26
Referrer-Policy: origin
Location: track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ve8N8Mg9%2FmW8y3QhPY4JuGr5AYJeHIeHfgkbJr1LVWFz840TvIF4HszBAAVnHQP8rYC80%2BT%2FWhDcUmfC53eW6YMOp1qTXlAHSQrmVGi0fs7h1J5ND4sT3iTlJhEljZQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 786a93836ef2b4ff-OSL
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Pragma, Content-Length, Alert, Expires, ETag, Last-Modified, Backoff, Content-Type, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 09 Jan 2023 04:33:44 GMT
age: 1256
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
188.114.96.1301 Moved Permanently 0 B URL HTTP/1.1 shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
IP 188.114.96.1:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i HTTP/1.1
Host: shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 09 Jan 2023 04:54:40 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.4.26
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Location: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aWMRSh025vAd9kolFLUE5JBXrWrg4MLL32EC%2FP%2B%2FyRJfF8O0e79am6g2Ig%2Frqi1nZAQYqR8wSgJAuaWWfAnsC4udztnNEBeRXHEwfXDadtt0Jjw353nKWVrtjHDLm90%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 786a9383ff2eb4ff-OSL
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 54ac41a005cad66e958c904071ea1d4f
66932889be57eb15ab99237a69d292b12090c68d
52545e144a7ca5c37c5369d5f5b566b4e5e820b1920ab7fe8e413e7fe022e21b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6033
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 09 Jan 2023 04:54:40 GMT
Last-Modified: Mon, 09 Jan 2023 03:14:07 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
188.114.96.1404 Not Found 14 kB URL HTTP/1.1 www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9381), with CRLF, LF line terminators
Hash e26f1afd826ad6ab57740916a1f695bf
ce83ef3f375e09e44b5a3661d0acbc5d18695f43
17c18519f56f1cacca778a433f1fc336bf7e404f2cb4e7e60775abbf3ef56efd
GET /fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 404 Not Found
Date: Mon, 09 Jan 2023 04:54:40 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.4.26
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://www.shopswiz.com/wp-json/>; rel="https://api.w.org/"
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KaN%2BXzOqOh%2Bxj6LILjDXwiHDN8o1XzZTT%2B2Hpxk0%2FpQ9tC9eD4v5Yq79MehuI3eRAGoddblywdmZBsMTRBI0hBAkgdvq9f3NFn91vGVSKWpUpz4mouyNpxdU8M1DfNzJh2xM"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 786a93865e431c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
push.services.mozilla.com/
35.166.158.207101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.166.158.207:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: SHwMsTQzvmBhK+DxJocxUw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: /Xz59x17LgUL6q1MMtIrc6f9GLg=
fonts.googleapis.com/css?family=Montserrat%3A400%2C700%7CNoto+Sans%3A400%7CRaleway%3A700%2C600&font-display=swap&ver=5.6
216.58.207.202200 OK 809 B URL HTTP/1.1 fonts.googleapis.com/css?family=Montserrat%3A400%2C700%7CNoto+Sans%3A400%7CRaleway%3A700%2C600&font-display=swap&ver=5.6
IP 216.58.207.202:0
Hash 342c78ba151f6bbbdf7b1bb8869a6b86
2f7168ad97d1ea979c9844757724e33a872a02f7
965138d10642e20db54a9a21ce1288128ac545295b7fe7df3bb076c4a9057bf9
GET /css?family=Montserrat%3A400%2C700%7CNoto+Sans%3A400%7CRaleway%3A700%2C600&font-display=swap&ver=5.6 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Mon, 09 Jan 2023 04:54:40 GMT
Date: Mon, 09 Jan 2023 04:54:40 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
www.shopswiz.com/wp-content/plugins/look-ruby-core/assets/core.css?ver=5.6
188.114.96.1200 OK 725 B URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/look-ruby-core/assets/core.css?ver=5.6
IP 188.114.96.1:0
File type ASCII text, with CRLF line terminators
Hash 8b20101e52e63eac006390f6074177db
974bfb6904c3dcd8f049ec630b79de1d0599945f
0d9c00bea2df0c6da2ae6fa51793cfdc62fabb141f9bb96fd786b336ba5c25c1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/look-ruby-core/assets/core.css?ver=5.6 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:40 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 29 Dec 2021 11:33:26 GMT
ETag: W/"b00-5d4474e5c6d80"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Bl73KC1dj7CG1nNDzq8lVXzZU0uJCU8ce1L5tPFvI4z3%2F42NEi8Vnfrsx7t2OPszU7FMVtqu4Zey8ATGUQ5CKeY%2F684Rv%2BaCrfxV1Tg8hCqMJGpXGc%2Beec1Bu5r9zKSBlVmX"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a9388fee41c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/metronet-profile-picture/dist/blocks.style.build.css?ver=2.6.0
188.114.96.1200 OK 3.2 kB URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/metronet-profile-picture/dist/blocks.style.build.css?ver=2.6.0
IP 188.114.96.1:0
File type ASCII text, with very long lines (27709)
Hash 06f9ad063104590360fac6e0460b056f
6b7fd25c68542d5245b7c58a852b696b77f14550
c4d41d68627bf1da969952e40f64d2f2a56308faaf513f8b1991b5358b2b7d46
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/metronet-profile-picture/dist/blocks.style.build.css?ver=2.6.0 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:40 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 21 Feb 2022 11:59:05 GMT
ETag: W/"6c70-5d885f585f440"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7UUtBWXI2oVDxmud5Z4njGOO5Y19WlqFiH9B5f6LN1NWtPXDYCUVzkHIendwHA9Kse%2BWm6RLQFI%2BHKh%2FS4SNFWl8qkgD%2F%2BM9QQXc8CHKAEwof9G9KkdT%2B0GJ%2BcQCcZNnO2pI"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a93890e7fb518-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6
188.114.96.1200 OK 969 B URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6
IP 188.114.96.1:0
Hash 0e10a84a97cb7e866bfadddafecb4d84
5b4b961bc3393c4f0ddc83753b219b26c83baafe
5a97859a1a8ddef3b8e5a7fb7fab930507b0a319975d6e3aadfab51bc83cdd58
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:40 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:35 GMT
ETag: W/"aab-5e2f5fa27f395"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EFKwJoXzFYkw0EdLxca9co4r7YYbF6jrfG%2F2RbG55JwRcrhhKF5AnlFWFV3P%2BA1USB3XOZe5Pdk176derXRWfAfalGvi7aB3nFtnl51TWIBn4%2B5oEehKMgcEiFrG9r7Uvl6O"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a93890ee61c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-includes/css/classic-themes.min.css?ver=1
188.114.96.1200 OK 188 B URL HTTP/1.1 www.shopswiz.com/wp-includes/css/classic-themes.min.css?ver=1
IP 188.114.96.1:0
Hash 8ac085745a5bcc97c54f8088973df029
4e065566e82d4623d0f5b4d9275d3ee29e15acd1
a0b69c3418ce7d86bcd33d370dec1ba31f2d9c143d932f52de7c4f98427a813f
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:40 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Nov 2022 09:05:34 GMT
ETag: W/"d9-5ec7924b3c0c0"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AgVKMGB368Ovjr14RAG98tDI0SQcixywe4A4VJGh%2BDZi6xG2gtt0ay%2FbEstFL%2BWcC8TXfGBx2h%2BYZ8atdTtRjKT%2BltHijLuunmW7w3Gjdm69alOFVqc5h8q5lP4V%2BUBsjld5"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a93890faa1bfe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/powerkit/assets/css/powerkit.css?ver=2.7.8
188.114.96.1200 OK 4.8 kB URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/assets/css/powerkit.css?ver=2.7.8
IP 188.114.96.1:0
File type ASCII text, with very long lines (819)
Hash 023dd0ef1361e63f58c0f64c24765d1b
ef6578d230acdd220779700cc16e7d62490227a3
4c0db52324c4b4b91c77c42dcc856348cded5017c2e2dd4c4e7b2c7e0c6a8180
GET /wp-content/plugins/powerkit/assets/css/powerkit.css?ver=2.7.8 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:40 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"6517-5e2f5f8dcef99"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RtbmtJ5QK1UaFdSmL3avupxRHJJysTIOW5rULQDKd7M4IX%2BSooYC6KvT43Te9ZtqjGBTe4yXVpErAuHHsbZpgTeITtNXXpKSBIQhYnwMhnqgCoxut%2B7tkhCjM1MfKfKXUcOX"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a93890c90b515-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
188.114.96.1200 OK 12 kB URL HTTP/1.1 www.shopswiz.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
IP 188.114.96.1:0
File type ASCII text, with very long lines (47826)
Hash 7e9e687043fdd4b588771cdee5a77722
1ab50c2316fddfc06a6ea7b6758c5aab94abe0e1
5c8b185b1081a3ecd3ecd89c65ebb80a0e5cbb55d5b1eec84b5b59e8fbc5dc3e
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:40 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 15 Nov 2022 21:05:22 GMT
ETag: W/"172a9-5ed88b6d265b8"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IxhCyd8%2F5NoU6myY8PWjuf7gu92EW8%2FoxKdvu1%2FfRRTppXtmjpUNJMSVi8C1GbnZHYRmlsDdp9Ve3CtyiqzqEXwBuZGnrXEzM%2BBWtkDtmlTGPuZzuH747LXe8R2zuOvKfn1b"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a93890966b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/powerkit/modules/coming-soon/public/css/public-powerkit-coming-soon.css?ver=2.7.8
188.114.96.1200 OK 512 B URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/modules/coming-soon/public/css/public-powerkit-coming-soon.css?ver=2.7.8
IP 188.114.96.1:0
Hash 0cbe288550aae81d4605b04606a0031f
29145cca74251cde06707fc39e11c86c5221c4af
6a59d65722c62d48c682418295ebb99dccc0a19c2e27d9e1a4e7c45b946ac2c8
GET /wp-content/plugins/powerkit/modules/coming-soon/public/css/public-powerkit-coming-soon.css?ver=2.7.8 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:40 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"57a-5e2f5f8dc6d63"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gltOel3uaYTutn3KJk4AhV2cmrb6VwohVaqICd67jctGEc4wd0C6dH00lYCDag0CNGxJpzv0J4zJShBt%2BMxBB6wOB66VXKxVwjAdvTT%2FiOvT9eKeXvZBzDv1YWaOpcO%2F6Cdh"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a93895ef81c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/powerkit/modules/basic-elements/public/css/public-powerkit-basic-elements.css?ver=2.7.8
188.114.96.1200 OK 3.0 kB URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/modules/basic-elements/public/css/public-powerkit-basic-elements.css?ver=2.7.8
IP 188.114.96.1:0
Hash 46665b577c973ce7a78873e9d8a0324c
c959f2b4d24022479e4b0b72442039a67a672694
acfb0e57ff34b4219b1cf94701bce19738f9e6378fefa903d7c01744ea716ce3
GET /wp-content/plugins/powerkit/modules/basic-elements/public/css/public-powerkit-basic-elements.css?ver=2.7.8 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:40 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"52c1-5e2f5f8dc9473"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0EIAfCr4bjo25jftAyvpCuC5GIrNlVTsmDkYclhelUexm%2Bb1YCBCUc%2ByPZhDkdkS4AHTyMVCiqpJDIMjp8R9AUIc4GU6Asaf7Is7NOsnWSPDyzf5m8UL1EoH%2B%2FCIITcVJdCR"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a93895e95b518-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/powerkit/modules/content-formatting/public/css/public-powerkit-content-formatting.css?ver=2.7.8
188.114.96.1200 OK 1.7 kB URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/modules/content-formatting/public/css/public-powerkit-content-formatting.css?ver=2.7.8
IP 188.114.96.1:0
Hash df4a296f83b48376c1fba6823149df5d
c944cdb7e5e29848dfba054fa08fa1230bb4200b
6605bcfc25b59259459c12a90f9ec39bf5bd4c51f14d0983827143952e296fbe
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/powerkit/modules/content-formatting/public/css/public-powerkit-content-formatting.css?ver=2.7.8 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:40 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"23e5-5e2f5f8dc6d63"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8Beee0p7XavlTcnB4gv%2FQgS5ms65zHvc5%2FpMuKiuXtvByVoG%2BLiGWyCOUzpmS%2Fkx0CDGNKdzV8UbjWV0jSvIFFrZrrJhHsAfVirtBZUBhCIJ8hXLV1YrH9BL%2FAC6mGZNh86f"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a93896fed1bfe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/powerkit/modules/author-box/public/css/public-powerkit-author-box.css?ver=2.7.8
188.114.96.1200 OK 628 B URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/modules/author-box/public/css/public-powerkit-author-box.css?ver=2.7.8
IP 188.114.96.1:0
Hash f367a4cd72b523702b12d85e97c58021
e21ceb662520a4e3638ee7e7584c93a3fb4b33bc
949c1e145d0c4878770d1a33abe05b5f860fd32e1ca1a73001a784426e832ae9
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/powerkit/modules/author-box/public/css/public-powerkit-author-box.css?ver=2.7.8 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:40 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"99a-5e2f5f8dcae7e"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uRVR4nmAZg3fq10vTU%2FO%2BoiC8eScQUITEki1A9voD8al5U%2Fyc0cyNNfE8yIiXC7%2FoQQvQy1sBdkwbFhkrHzzMCDmTjdAMMwEadfWoUqbOFzzlqKQ%2F1Q5%2FSOFkRuovfUuNQIa"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a93895ef71c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/powerkit/modules/facebook/public/css/public-powerkit-facebook.css?ver=2.7.8
188.114.96.1200 OK 256 B URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/modules/facebook/public/css/public-powerkit-facebook.css?ver=2.7.8
IP 188.114.96.1:0
Hash 0c531b33d482a0c99d3cc967b0ae627c
73a96d4843aae17c3033759a41a8d1e47da8b32a
a6144a533038ca45ff8e1511ec2d43629415b2e5b628a6cf44fec6399bef9f6a
GET /wp-content/plugins/powerkit/modules/facebook/public/css/public-powerkit-facebook.css?ver=2.7.8 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:40 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"1dd-5e2f5f8dca178"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bAFBBadInV6x1z%2FJvinJOOBbMLQ6j7J85p71LWZ8bPZAy9bOo00viBZKnomuw73UnrBYPIa%2F3kb%2BwIMceBz6jAgrOhuX%2Fs6GBKRd0bCk2onb81c20ZHvqR%2BzVr9SbSMgyoOp"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a93898991b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/powerkit/modules/contributors/public/css/public-powerkit-contributors.css?ver=2.7.8
188.114.96.1200 OK 792 B URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/modules/contributors/public/css/public-powerkit-contributors.css?ver=2.7.8
IP 188.114.96.1:0
Hash b7e3cc6715861fc9e1a199a71f1c2d41
562141f695d6be94a1b09c5c7e3721c9bf281e21
e25a06a715024ab16ae4b4f7654f904d102a3d8575755d775ab97054bb00c8b0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/powerkit/modules/contributors/public/css/public-powerkit-contributors.css?ver=2.7.8 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:40 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"b96-5e2f5f8dc6d63"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mmRKI1tuarn6MpOambPp9ROHWsfEr43Cx8Wx12dA00H%2FAn2N9iAmcg4U9ApSbw5C0hDhi3wUF7s7gsVmS%2FJJaO6EMiMycRAkMek6eLhS9OgtBOv0075YrfICm1QQz6uMVf75"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a93897cc8b515-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/powerkit/modules/inline-posts/public/css/public-powerkit-inline-posts.css?ver=2.7.8
188.114.96.1200 OK 869 B URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/modules/inline-posts/public/css/public-powerkit-inline-posts.css?ver=2.7.8
IP 188.114.96.1:0
Hash 9e33feafcf392948176dec119151c360
b428337299d18e85e554f0bcb55d00fdc3b5eddb
0eccf49f9fc0259324521253c84f9d96d08a44bd3c0e7981f0323f71972451e4
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/powerkit/modules/inline-posts/public/css/public-powerkit-inline-posts.css?ver=2.7.8 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:40 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"e60-5e2f5f8dc876e"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TufGlXUjLnh1n%2BAN7gIt0WhI5NpR2N4lEF1jvyLQk%2FJb9x15afmwT6BRWXezk8AwTk2ack%2BgLjp0MxhlTGRZrn2aEMwhXgkpId9kYvT9nAMyVgQRl11WiRw%2FA5cWHzbtAzhp"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a9389aeafb518-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/powerkit/modules/featured-categories/public/css/public-powerkit-featured-categories.css?ver=2.7.8
188.114.96.1200 OK 1.0 kB URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/modules/featured-categories/public/css/public-powerkit-featured-categories.css?ver=2.7.8
IP 188.114.96.1:0
Hash 90c33cf602d40c6823372f54eb75e50e
9437d7438189cd277cfde335e14a27535dd96b56
0a953cff13b1d4b4b6cc6eb532e9fb8151257fa632a505a67dabfc46bef43781
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/powerkit/modules/featured-categories/public/css/public-powerkit-featured-categories.css?ver=2.7.8 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:40 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"132c-5e2f5f8dcc889"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hVRW5wLoLmONMjm0ua8kHjtRDDtGDXIRJ8ImVRChaQr%2FqfwJgDXdPazpCB6hukZfoVubwcdi0lJnK8jIaoChqhk3PP5x%2F02y3y%2B8eEXNwtN6Icxbt3soOfxXUh0h9pOAQ0qp"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a9389af031c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/powerkit/modules/instagram/public/css/public-powerkit-instagram.css?ver=2.7.8
188.114.96.1200 OK 1.2 kB URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/modules/instagram/public/css/public-powerkit-instagram.css?ver=2.7.8
IP 188.114.96.1:0
Hash f8f7288d36bef5f9a77b7002f9f837f2
ff782174161a3d3b58b57062272d37b71cf54727
443815878ddc6130e964f349a4624f2f5567bd202dff89f48a0ca2cd38c6aedc
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/powerkit/modules/instagram/public/css/public-powerkit-instagram.css?ver=2.7.8 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:40 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"14df-5e2f5f8dcae7e"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NwptTlVbpyiOHwfInKnPNHMGDqtmIkTikShQZu%2FdX%2Faqtorz14tdyFgx6VRqc2uecO84WOipJZlQdZhycwtsb6dctz3bBDygwTjNo7Syo0EWmyW7rEdJM85lfNlJ1eUGTxD%2B"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a9389a8301bfe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/powerkit/modules/justified-gallery/public/css/public-powerkit-justified-gallery.css?ver=2.7.8
188.114.96.1200 OK 785 B URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/modules/justified-gallery/public/css/public-powerkit-justified-gallery.css?ver=2.7.8
IP 188.114.96.1:0
Hash f44dd47c9c5d5ff6eb8906892209ad9f
ef99c3cb10822bd6863597511f6d33f0fb18df6e
098762efe2cc8688a23ff5fcbeb28b1aec1415f1633c6e2a0f56935d6456f2c7
GET /wp-content/plugins/powerkit/modules/justified-gallery/public/css/public-powerkit-justified-gallery.css?ver=2.7.8 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:40 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"a14-5e2f5f8dcbb83"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vC72XewatHWfJDWTHT71iOGgV6bACaa7GOMG0A07UuOQz5zrZHXgt%2FQS5BmQQRLfjT83SdgzhqsJ1vVVCF%2B9HEeQreMSyRLdtfUJoTP7mA77i%2BGIu09o9%2BKljLRAE1TNlbLG"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a9389af041c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/powerkit/modules/share-buttons/public/css/public-powerkit-share-buttons.css?ver=2.7.8
188.114.96.1200 OK 5.3 kB URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/modules/share-buttons/public/css/public-powerkit-share-buttons.css?ver=2.7.8
IP 188.114.96.1:0
File type ASCII text, with very long lines (360)
Hash 34018292da339d37fa51f658625c79f7
9fbd315d87143236381cc77f19590398a3833bea
1f6cbf97ce1ac87192e0a7431955b5bb184528427e13303cb6411140d44b902d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/powerkit/modules/share-buttons/public/css/public-powerkit-share-buttons.css?ver=2.7.8 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"113d4-5e2f5f8dc7a68"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YP5bIF4qCbethUkq6DD5ThUbzWMo4qaPE6DYqcZW3rEj3Gp%2FQy6hv0nMEL1PRtQ%2BYFMoqgD0DIYnz4shyYfi8xCimgUvCJP5XVs2o13OlON9W9uIUGk%2FrDY8Gi%2Bc9%2BCcQIEE"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938a0f1d1c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/powerkit/modules/lightbox/public/css/public-powerkit-lightbox.css?ver=2.7.8
188.114.96.1200 OK 567 B URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/modules/lightbox/public/css/public-powerkit-lightbox.css?ver=2.7.8
IP 188.114.96.1:0
Hash 6da33e61c021ca069c00c1889a3b3451
d92e2808152f2534be798ae6d78954c5bfc375e7
217000c138d03e32b88eb5f6ebb2142de0daf34eed9f00f12c660dd41ff4b79b
GET /wp-content/plugins/powerkit/modules/lightbox/public/css/public-powerkit-lightbox.css?ver=2.7.8 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:40 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"58a-5e2f5f8dcbb83"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4ez4O4YykAVIeIdCmwfzDYj%2B6BMODUS%2FKUkeFETpJfD3gNgijcPNK1fr2VOAH%2B5KPmg%2B3GB1da4HiTWW%2BuEiptWpa8yEg5ErmDaX2cGVTgiYaAX0ot3vsLzOtyKhCWOwPhjj"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a9389ccecb515-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/powerkit/modules/lightbox/public/css/glightbox.min.css?ver=2.7.8
188.114.96.1200 OK 2.5 kB URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/modules/lightbox/public/css/glightbox.min.css?ver=2.7.8
IP 188.114.96.1:0
File type ASCII text, with very long lines (13785), with no line terminators
Hash 78bf19caabed7f1d17c3d1d12d0e6da9
27fd98439ddd3a3a42c447a832681502dc2767d3
b9db7f319e49cb52bdc059a1df88afe93cc383f5466bd618423e1e69d3b47cac
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/powerkit/modules/lightbox/public/css/glightbox.min.css?ver=2.7.8 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:40 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"35d9-5e2f5f8dcbb83"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LRVygNfmc6hPlDP8VJWllWjuvcTm9qOeLt0Pa8rIHL5QONTHof%2FgDleZUhoclxL5pLGsUD2l1VO6yzzMg%2FKifewo7oLrNauL40OPXOU9vlmKQjgvK6RyM%2Fo%2FgVAflfn8Tja5"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a9389c9a0b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/powerkit/modules/opt-in-forms/public/css/public-powerkit-opt-in-forms.css?ver=2.7.8
188.114.96.1200 OK 794 B URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/modules/opt-in-forms/public/css/public-powerkit-opt-in-forms.css?ver=2.7.8
IP 188.114.96.1:0
Hash 1e591f076eddba681213444384810056
5b22588b72136549ce9c3eeb9cbad4d49448cb9a
9bc662b618fc5c3df19ebc5baba776ca40ce7c292d7705fd8faa97e8d2a3f168
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/powerkit/modules/opt-in-forms/public/css/public-powerkit-opt-in-forms.css?ver=2.7.8 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:40 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"c8b-5e2f5f8dcbb83"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ouoNeQKccoo2CkQHqhGlhsOa%2FYLTALyceZ6czNOLf1MgpabuZHc0oGveVJD%2Beol%2B%2FEXM8ke06lR9ZAWbabvClsFJxzSk5sP%2FbHHFq0j5iA0ZVzPLDJweNqryvaz9z0WqF1LJ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a9389eec6b518-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/powerkit/modules/scroll-to-top/public/css/public-powerkit-scroll-to-top.css?ver=2.7.8
188.114.96.1200 OK 432 B URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/modules/scroll-to-top/public/css/public-powerkit-scroll-to-top.css?ver=2.7.8
IP 188.114.96.1:0
Hash 88dfbd7f4f1833904d603fa1f1295387
faf1bf59f5633a8da7d62aeeaba27411bb77ce2f
ed1108b663fe3588d549f5fbaa29d8767bf56eb7c75ed5ac09dca9810a2420e0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/powerkit/modules/scroll-to-top/public/css/public-powerkit-scroll-to-top.css?ver=2.7.8 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"44d-5e2f5f8dcc889"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yiPqHGZtgzrhOqmT%2FU1QqNPlfx0aY112k%2FoZJQgd4xr5QKy7bWRISH8YSGBE%2FM%2BdNTZsGlLyoYVP%2BGmH%2BniFZQeiHf2H05lOrRp5ewKAV6KVLAL6d4Wi0PJW2cuxM2esoh30"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938a08501bfe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/powerkit/modules/posts/public/css/public-powerkit-widget-posts.css?ver=2.7.8
188.114.96.1200 OK 721 B URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/modules/posts/public/css/public-powerkit-widget-posts.css?ver=2.7.8
IP 188.114.96.1:0
Hash 47fdabc71ba545ca9df0a4b40f25a1a5
bd5c63c0ee80615e8031a68b4986999b7ed8c54c
f8fe3e7a4f51b5f352cb2156ed4c5536fe8797efd336bee034f1a6e01ea1445b
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/powerkit/modules/posts/public/css/public-powerkit-widget-posts.css?ver=2.7.8 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"a9a-5e2f5f8dc7a68"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Yj3g0bN84B2HFhq4rwLZvOawxRI%2BbxiK4Q0RqK2DV2vv8BE25L9xOAe9fAATA7ZxT7j4H7aPXQKMNfoVRlJpgM%2Bq4ruTKI4ISutg6HWaNWK85iWkev8BX2oecANUT%2BBSEdI6"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938a0f1b1c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/powerkit/modules/slider-gallery/public/css/public-powerkit-slider-gallery.css?ver=2.7.8
188.114.96.1200 OK 325 B URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/modules/slider-gallery/public/css/public-powerkit-slider-gallery.css?ver=2.7.8
IP 188.114.96.1:0
Hash 701f8dd11a347311ec74b4ebdf6eabad
1c6d467738835edd07d09d8901c29acea328e24e
3522e1f8e117d0bd16b0b586988d75f971d0adc8aa7b9a5c9ed4d1080f5e607f
GET /wp-content/plugins/powerkit/modules/slider-gallery/public/css/public-powerkit-slider-gallery.css?ver=2.7.8 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"2cd-5e2f5f8dc9473"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bzj3R2ifH7DA6IEHo97ljGljeR8itEcMqYW%2F9agCYPUrI5%2F6xifAfGIKeHBXf9BihPwuPQJhw49Gt8E%2FrWplhfaxht3OXYeWyn42w8quivuWbEzMZKsCD8rPZuzslRXXxBba"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938b2f5f1c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/powerkit/modules/widget-about/public/css/public-powerkit-widget-about.css?ver=2.7.8
188.114.96.1200 OK 424 B URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/modules/widget-about/public/css/public-powerkit-widget-about.css?ver=2.7.8
IP 188.114.96.1:0
Hash 77d08dafce0a20f50d2c6b821be178c9
d01228711e6ab4f6101974e877cbdc572b5631c5
23419358b289605748c9e754f25e1706855b6f125b99cd8ff63d3965dc14b1bf
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/powerkit/modules/widget-about/public/css/public-powerkit-widget-about.css?ver=2.7.8 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"5d2-5e2f5f8dc9473"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OQIxMiF4d1HKJ5cUUGK0vF31T4mJgrhQPnsD9iAoVRmpPLdoDWDY%2BbNobnWlyqzPoHlK1qaONqjX0%2B%2F1WGXVVAntKHqZ318Z%2B7gDWbwZJQATF4Uj65tnHvzapm3NSkIXHwZd"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938b2f3bb518-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/powerkit/modules/social-links/public/css/public-powerkit-social-links.css?ver=2.7.8
188.114.96.1200 OK 10 kB URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/modules/social-links/public/css/public-powerkit-social-links.css?ver=2.7.8
IP 188.114.96.1:0
Hash 5afb1d439282a582c0ff4d52bc411d09
bcafa3b1aeb4a2289cfa5944ca50084e7ecdcd53
054c98b77c4539cc92bd34cfd605cf00de2e2644b403837970dd6bcf320f6352
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/powerkit/modules/social-links/public/css/public-powerkit-social-links.css?ver=2.7.8 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"243f3-5e2f5f8dcd58e"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EQddown0rVlswVW67%2F7Xn%2FnSLasF8eTWgIIQ4gdkEecYd5uCI%2FEUDznkLp7YUdWdQxBhXq8D9QASlLA5tMTU4S4Z1oVkw66WH9CHpj37sjgRmZiALsy9B5gGc6kkNlJwp8or"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938b2d49b515-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/themes/look/assets/external/external-style.css?ver=5.6
188.114.96.1200 OK 20 kB URL HTTP/1.1 www.shopswiz.com/wp-content/themes/look/assets/external/external-style.css?ver=5.6
IP 188.114.96.1:0
File type ASCII text, with very long lines (540), with CRLF line terminators
Hash dd1bbd90b2912f05853a3e1f899e3f18
151b384ace93d5fa29275b2d2f9cc42efd088cd0
228e4bab6dbeb55d18e04a713fb683d1047db58a8c3a9bd3dba39385c58f45f3
GET /wp-content/themes/look/assets/external/external-style.css?ver=5.6 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 29 Dec 2021 11:28:45 GMT
ETag: W/"1df7b-5d4473d9cb540"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LLhvn8WwFZeaO80xguIiMMmBZfp5PjEFLhhZKYd%2FD7oloSRgtorsbY%2FbOMrYtZfhTovIguywpEq2lKyZbJacTHJO4IJMagPYjhZbq9tJOkv%2BrDRB1lKyAu8ZYK0D7GSiyhDr"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938b28a81bfe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/powerkit/modules/twitter/public/css/public-powerkit-twitter.css?ver=2.7.8
188.114.96.1200 OK 905 B URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/modules/twitter/public/css/public-powerkit-twitter.css?ver=2.7.8
IP 188.114.96.1:0
Hash 38f433a007a4c459ac5eebd1a347cde7
4e00f848df77e9ee4915baa3847b6ab17dcfb56d
23034f26d3a3171f86e31dac9beee4d8225200d2f30a73ca1a1da332efc88c2c
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/powerkit/modules/twitter/public/css/public-powerkit-twitter.css?ver=2.7.8 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"d70-5e2f5f8dca178"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DP5v1EmdfDO7RF%2FPpiKcMEnOdchpJrsBsx%2Fpl0eHhUXZX8RV7AUy%2BHelVG9HopYVdu3GN6ACMZa8tSkhch6Q05xnRlnTB%2FHTnHwe6rpu5xDZFPrrL51q1wSsz3nzkKT%2B6kT8"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938b2a17b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/themes/look/assets/css/theme-style.css?ver=5.6
188.114.96.1200 OK 22 kB URL HTTP/1.1 www.shopswiz.com/wp-content/themes/look/assets/css/theme-style.css?ver=5.6
IP 188.114.96.1:0
File type ASCII text, with CRLF line terminators
Hash 00077d038cff9e74ceb634dbe39e7b87
39755a447a63c8a20d0cc1525e2ea119249acbbf
76f8c824e67825705ef5375da79dc0465e40c9056022205d22c0bd0401dbaded
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/look/assets/css/theme-style.css?ver=5.6 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 29 Dec 2021 11:28:45 GMT
ETag: W/"26f5f-5d4473d9cb540"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DE7eqXKY%2F8oeSyR1JRS07atKMKBAq1IuJUyjpobYDks8UFbjTufjrm13VrfQfjh7E%2Bo0AfTSDZ08JvuoQRk5ZbXtG2%2Bz23dMm9DpBknfzjgmsf4HQIc8f%2BNhnlt%2BSynnaEOk"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938b2f601c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/themes/look/assets/css/theme-responsive.css?ver=5.6
188.114.96.1200 OK 6.2 kB URL HTTP/1.1 www.shopswiz.com/wp-content/themes/look/assets/css/theme-responsive.css?ver=5.6
IP 188.114.96.1:0
File type ASCII text, with CRLF line terminators
Hash 1e6af18aaef29b099a232296181047c0
464b2f55f28b2f9b2362c83b6a235c42209d51cf
3f32641473feec68daae7d3cba4ab3016edc34ba5bd8e00242e47c853eb081dc
GET /wp-content/themes/look/assets/css/theme-responsive.css?ver=5.6 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 29 Dec 2021 11:28:45 GMT
ETag: W/"c917-5d4473d9cb540"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5jpjYw9lmu%2FDAj0XgTRywAyx3r%2BHKNKj0FFKtK9V%2FWowYaU9w51NfnOcKe%2B6p5KNhD1p%2BgznFK0Pl9y11%2FF0Crlgt9V1a3X6cZtOTGgpLg66Kxw91Kn0YQwt6UNS4O2Za1sa"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938b7f6d1c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
188.114.96.1200 OK 5.0 kB URL HTTP/1.1 www.shopswiz.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
IP 188.114.96.1:0
File type ASCII text, with very long lines (15660)
Hash bbb097231c0fb01c0d2f6b36ed6671f8
c816b9446535131259db1107069b5096354f993b
aca781b166c02a50a9de1f82c51f0ebbd808b59e58e6dfe5f29ae84c881926c5
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 24 May 2022 21:05:27 GMT
ETag: W/"48b9-5dfc850e6acf9"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7wJXtNCcv3eup1rcyeCf8hHT1vLzAnGargQv3LtdAeJ8P31tpvVftX7jC8zAykliRxEqhY7wvyGnRhsEBXYMhdlnqyMK72RIS%2BWvuCUjBr5UR8ToENlMjzaRm0elB2NozObq"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938b7f57b518-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/themes/look/style.css?ver=5.6
188.114.96.1200 OK 305 B URL HTTP/1.1 www.shopswiz.com/wp-content/themes/look/style.css?ver=5.6
IP 188.114.96.1:0
Hash c8ac3624b94dadfee807416f005f9f02
9593e6f2f9d5d13380bce1b98f54147617b3dfc9
20cfe8c7206d2ecb9d0bbf169d63b213b780fb61510260bf90668444b72ca532
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/look/style.css?ver=5.6 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 29 Dec 2021 11:28:45 GMT
ETag: W/"1fb-5d4473d9cb540"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XzCojXZxzYuZxPua4ASSar6zui5RMQZZV3nE5Kv1Z9mul6AECYYvS%2F1ouZhzEj2E3nc%2BJB3FZlOI18EHv%2FqGT32QGaiAW6Es%2FPc0J7tnsx1Juy2PZhcfeb6%2BzPNK18J7fMj8"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938b7d65b515-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/cookie-notice/css/front.min.css?ver=6.1.1
188.114.96.1200 OK 1.1 kB URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/cookie-notice/css/front.min.css?ver=6.1.1
IP 188.114.96.1:0
File type ASCII text, with very long lines (5326), with no line terminators
Hash 1ed6791a29862ff62dfcd252f13d7739
6cbc58eed46c6d584c2cde6f977cb22bdd426f8f
2cc7244b20a49354a1b19338c6538b35b1f8854c35668a2b44e896da996d8e84
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/cookie-notice/css/front.min.css?ver=6.1.1 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:31 GMT
ETag: W/"14ce-5e2f5f9f2b2b4"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Djs5DBCft6nn2zNVS2NAi%2BYh1jx5OFkY6hEdjPHtdpu6vtxxfMzWFwaRqoMPurmZztm25ZFYTCobe92ssIY6PRjojf%2Bi9GHgMulHvRiRfaChJmP0ZvW4zeJEWXyS%2Bw5z%2FgD4"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938b88c41bfe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
188.114.96.1200 OK 655 B URL HTTP/1.1 www.shopswiz.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP 188.114.96.1:0
File type HTML document, ASCII text, with very long lines (1238)
Hash bc3ba461c8a309acf61b6d9c41cb6236
88482306ecc9258d5e9cbb9ba5314dab223a5db4
31331f1b1519882d2f2fb60367708fd56a7a1ec0bddd0554c635547179c7dc8f
Analyzer Verdict Alert fortinet Phishing
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 05 Jan 2023 11:26:13 GMT
ETag: W/"63b6b3d5-4d7"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o21ARskqrGoS%2F0YoEBfOc89nzwvMxDj%2BaEuS79QvS2W7PFNkYTZGgUrNvS9VONqY5Sx9RUqA39czAe3zyynCA3QyTULFc1z1OyLNb%2BocCOqb6NHQxG4NCMODKSrOXYW9pUnf"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938bc8d81bfe-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Expires: Wed, 11 Jan 2023 04:54:41 GMT
Cache-Control: max-age=172800, public
Content-Encoding: gzip
www.shopswiz.com/wp-content/plugins/popup-anything-on-click/assets/css/popupaoc-public.css?ver=2.1.7
188.114.96.1200 OK 6.1 kB URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/popup-anything-on-click/assets/css/popupaoc-public.css?ver=2.1.7
IP 188.114.96.1:0
File type ASCII text, with very long lines (41691), with CRLF line terminators
Hash d40a449c26d9c7ccf4425150f812b460
8b541ab410f4093031d04f02a5485fb5f84c1575
4cb047c4e710a215b62d25b520f002e97b28d77a9234318961e14955839c4cc6
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/popup-anything-on-click/assets/css/popupaoc-public.css?ver=2.1.7 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:18 GMT
ETag: W/"d2ff-5e2f5f9233a79"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pjdTLWbvA5syr8NmIrXwviEws60ayKYaI6nszroL0M6M74g8DeJl%2FCwK18UUnZ0GqvKMQsa4nSHk9SlFTU8Ty4CZOiObxcc0oNsLyZtHochUZRNoJik%2FlotVu8XAa49MrFud"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938b8f701c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/popup-anything-on-click/assets/css/font-awesome.min.css?ver=2.1.7
188.114.96.1200 OK 6.9 kB URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/popup-anything-on-click/assets/css/font-awesome.min.css?ver=2.1.7
IP 188.114.96.1:0
File type ASCII text, with very long lines (30837), with CRLF line terminators
Hash 38ed2acdb2576794006f09ffc2abdad3
e971d1f3fb49def38d563ebc23925833f026b948
ec4e7cf0fb21b576cd4be960a77dc3b17ea1ee21ee864ca72d6c0242e17c5ba6
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/popup-anything-on-click/assets/css/font-awesome.min.css?ver=2.1.7 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:18 GMT
ETag: W/"791a-5e2f5f9233a79"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QWY2IXcCfIghUJWypD%2BWWpMSXr1j%2BT1hN4heSC%2FlR548rXJ%2B3bHB3YzU1oPuWs28s6ApyC3K6kfuXCZgSawobGBjzx3LJvl%2BXME1ZzSjnCyPcBfbC0UpyvPO3SA08Yb6Fvrh"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938b8a31b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/look-ruby-core/assets/core.js?ver=5.6
188.114.96.1200 OK 185 B URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/look-ruby-core/assets/core.js?ver=5.6
IP 188.114.96.1:0
File type ASCII text, with CRLF line terminators
Hash c57183725085767fb1a436afdd29f0c9
e5058b4ef8ed2be57ba4227430adb5e799f7d0ba
e554d2aa471beadbce339efef98a4cb9591169d9930e5ba429900b00df2983f8
GET /wp-content/plugins/look-ruby-core/assets/core.js?ver=5.6 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 29 Dec 2021 11:33:26 GMT
ETag: W/"116-5d4474e5c6d80"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6c666Sx8EGsTIV5xeVC5r4yP95RkNj8vy03L6sZaYR79%2BxkfFcYdwRW%2F%2BD9EvqjXAuAr2e9swTBm4r4lzmrFfIxDMVsVtS2rSLFhKZ8KHgDwgR112kAzFm6mpVaJNMZzmzM5"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938bc8d91bfe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
188.114.96.1200 OK 4.2 kB URL HTTP/1.1 www.shopswiz.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP 188.114.96.1:0
File type ASCII text, with very long lines (11126)
Hash 0d5bb2a36d1fc2e095235bc201eb5579
98f0154e2ed5322a9f65077f954868d6c800b337
fe6382620c35c12aa4f3f96fe395e5813defe330c1d95fd3de1e94f8f5d1f0a5
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 27 Dec 2021 15:12:14 GMT
ETag: W/"2bd8-5d422212b0f80"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7%2FPGI6ed7lBu6gx3kqeZLdpsIavJPy9uM8As2f7nrAW%2BG8zyF5GKnu1Z3MXjNrP13oMN%2FIRqMTsvl6MYkgH8%2FTM9uHSWnUW1manwPTPIMCZYpg3qPSGu9GSwryJuU5JmKE50"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938bcf7db518-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
188.114.96.1200 OK 31 kB URL HTTP/1.1 www.shopswiz.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP 188.114.96.1:0
File type ASCII text, with very long lines (65447)
Hash 25a014e67e9b2eafb7ecc86f1e30d77d
f4227f827cba0c787a4e08ccc6427d27c95873e2
63a06e24fbd59edc5ca7cff61c8cbb3f67c2a684c2a407ba891af34f737f15b9
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Nov 2022 09:05:34 GMT
ETag: W/"15e54-5ec7924b38cab"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FYPk%2FlqUZs4zCwP8v2F7QqWYBSVKD%2F7JqmP86L64ysNGlB45CrRNaR23ooVgj0RRHpFLdDx5fwRlvWelpxGJvZtMK9LvviA2%2BkxBUKYBDH5ilwtDRKrbjsL3gwL6c2oYvcqg"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938bbf741c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/cookie-notice/js/front.min.js?ver=2.3.1
188.114.96.1200 OK 1.9 kB URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/cookie-notice/js/front.min.js?ver=2.3.1
IP 188.114.96.1:0
File type ASCII text, with very long lines (8428), with no line terminators
Hash 7a10e66142372a7c2d1e6931c67722cc
ebf2964c69ee13e86b23ee99940f8cbef55f5096
2ba5a9e628f7aab8c38b826ee2846ce86ac060eb75b804e494aacdb30b661267
GET /wp-content/plugins/cookie-notice/js/front.min.js?ver=2.3.1 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:31 GMT
ETag: W/"20ec-5e2f5f9f2b2b4"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4LhoPvx7v3LtwLavaOPlLkwqP0EJ0fYJ5t%2BOy2gm4DKPSCdsquzwTRKkq9RAvc1pNA%2BnY3lVeDfvBIJhSPrTV2EIo%2BnDCqozUVxXXldoKVBbi2PRh8r331M6BVnpOCjrNGnd"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938bcd78b515-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/metronet-profile-picture/js/mpp-frontend.js?ver=2.6.0
188.114.96.1200 OK 199 B URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/metronet-profile-picture/js/mpp-frontend.js?ver=2.6.0
IP 188.114.96.1:0
Hash 1e1fa5a8f89c36b4b7b1ddea85863caf
4469feed52475e6941b9fccfd639870a554fc060
b670878d10cdc64b3bb9dc93a15e4ec74afbbc8bd72622f2034328629f4f4c36
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/metronet-profile-picture/js/mpp-frontend.js?ver=2.6.0 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 21 Feb 2022 11:59:05 GMT
ETag: W/"14b-5d885f585f440"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uQi7t3LbbD1BY9jvDPl76JuUSCR2EEuMN%2BPjd5mfDGwEwN8e%2Bhl9d83IkJUPt%2FmLmcZqYPCuacskpnLamOOh72%2BedVmu2jIrfGcsXMo4N4MmES70Fk0H3i%2BkYq2DVCjbn7gg"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938bef821c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/adrotate/library/jquery.adrotate.clicktracker.js
188.114.96.1200 OK 270 B URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/adrotate/library/jquery.adrotate.clicktracker.js
IP 188.114.96.1:0
Hash 0a338b07052fe7b43f0e5c3bff049080
ba938f17a1dae4035c900ca6e0d725efca2959c1
2d13cfa81ac20642d7e292ea75e833a1e8ea085b133f350af2ccfa010168c23d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/adrotate/library/jquery.adrotate.clicktracker.js HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 30 May 2022 09:00:13 GMT
ETag: W/"16d-5e036e25320a0"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U3yLOSClU8U2kY4CE%2BMPpE3sAJsd5ySM5DgMO%2BpfAFhlQmobQlAedtkuQkN3FRhyzXOLR1p5Uo8TbO8jy0MGH7fDrDBoaZi4uodLEz6SMa94CWkIpAjiRGpo4YzRk%2BbW6RxZ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938bfa5db4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
188.114.96.1200 OK 6.5 kB URL HTTP/1.1 www.shopswiz.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP 188.114.96.1:0
File type Unicode text, UTF-8 text, with very long lines (17819), with no line terminators
Hash 91f8030d1b051a5df8a937d988b8a4c5
4f575833d376de84ba5066e96064ea251f9ede90
bcf567eae295f5bb83287da56bb542163ef4a7e1c0d03608887508f9f0ad9294
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 02 Nov 2022 09:05:34 GMT
ETag: W/"459f-5ec7924b372a0"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lgmMCMPaw1rke1FbbRlTgvt%2B%2FOW%2B2ZFXC%2B2Q7xgkoOtxp6O2gJ%2FML%2BnXMPLkTKgC7tNtJqSH3bQGMvPn7alCv5Tr0bA5NQyEMrdE2gcbjlov5nADEaq%2F4ST0%2BMJCsJmAAn5S"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938c1f9cb518-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
188.114.96.1200 OK 2.4 kB URL HTTP/1.1 www.shopswiz.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP 188.114.96.1:0
File type ASCII text, with very long lines (6475), with no line terminators
Hash 6b0c5288bb5f4619cd7d10c077b2858b
f5fa1550d81a04d13d0d7273c32005722b910022
69c224d56ae4f660970896b60da2cabeb296fd95673a8ea23519db8f4f285b24
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 24 May 2022 21:05:27 GMT
ETag: W/"194b-5dfc850e72f2f"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TNXjH2gcBDCZ8t4FyIn3IBxYfSoz%2FSGLB5OdMZFWaWupLlTfvLAWyi1nK9Zw0YaM3c6xuYnpvun%2FmU2ZUrvCJuRs6wLc067h4cMz4jAx3Hab6rEaUTjrlySq9XY39v87lw%2Bm"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938c18eb1bfe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6
188.114.96.1200 OK 6.5 kB URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6
IP 188.114.96.1:0
File type ASCII text, with very long lines (21821), with no line terminators
Hash 6defd494026893f7b91d4284ff0da388
d6450d7f6b28866a5d8ccc5a2a346c6a57648920
33f2d16935aed87771c56e8bf66aba6f4248ae650eae4aa27f6f9ae5263563d6
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:35 GMT
ETag: W/"553d-5e2f5fa27f395"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6l1BeRgaz1a7ur100lS%2FTAcENKkTTSg1j1k%2FYVUtOsYK3R35oOCAT7AptEcPISIZ923vTpRJSaSMgYtpS%2BUAswGuR1%2BE26%2B4y%2BSOHmL37%2B4rN8Tvb1CddZCN8TTXYaFoUkLa"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938c2f8c1c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/powerkit/modules/basic-elements/public/js/public-powerkit-basic-elements.js?ver=4.0.0
188.114.96.1200 OK 439 B URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/modules/basic-elements/public/js/public-powerkit-basic-elements.js?ver=4.0.0
IP 188.114.96.1:0
Hash 9aab7eab8fa890b3dbcc483ae19ed800
f97d362fa66850212dc23e8d563f426c3a60883e
056b861e338fd0241508c430132af0f4d211a6404156cba435a96cb451e24179
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/powerkit/modules/basic-elements/public/js/public-powerkit-basic-elements.js?ver=4.0.0 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"4cf-5e2f5f8dc9473"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ivUgbWXu%2FDb3S2egeMIozMY5XEhxGtpf6wpHhyk4oI2%2FafyiyOt%2BPJrddmUaOEXNjGMaQaGIrgPmyOTeYa5Ep0WrtYe1ZMW%2BnS%2BSMqDp%2FCm18vXjaw67w4QFZ348Fue4fGzN"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938c5f941c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/powerkit/modules/justified-gallery/public/js/public-powerkit-justified-gallery.js?ver=2.7.8
188.114.96.1200 OK 663 B URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/modules/justified-gallery/public/js/public-powerkit-justified-gallery.js?ver=2.7.8
IP 188.114.96.1:0
Hash 95de3ba41a00d48dd9b99dca80e63daf
db4bc209f903a3942551f5b2ea3001c9989e2d53
19be948621b40c034ddc8360865a67e642eb75aff30c3c4d0b665fc479d24c60
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/powerkit/modules/justified-gallery/public/js/public-powerkit-justified-gallery.js?ver=2.7.8 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"698-5e2f5f8dcbb83"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q8Rj61zOu9LcrZOWZ8gKtenljtmltbXsf3qx9cmw7C%2FIFxnIaSkQ%2FBhWhaiFUQhbnB8zbHtKqPePypGH9LwYhtwJ3Qa%2FBIARE0tiTymliKwHFtcOHTkYxRbzjWlRxAESOQwB"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938c6fbdb518-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/powerkit/modules/justified-gallery/public/js/jquery.justifiedGallery.min.js?ver=2.7.8
188.114.96.1200 OK 5.0 kB URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/modules/justified-gallery/public/js/jquery.justifiedGallery.min.js?ver=2.7.8
IP 188.114.96.1:0
File type ASCII text, with very long lines (18351)
Hash bade2d11e4f9ed1c232749e5e62b788f
4e002a5f249233d20f938a20009b9075b827f51f
d04f0cb96de8eae996ec7f562e49b9927024004ce19dbf4782b1fbde6ee44a5e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/powerkit/modules/justified-gallery/public/js/jquery.justifiedGallery.min.js?ver=2.7.8 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"484e-5e2f5f8dcbb83"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yGhmpfty1Ixwi4LF86cAW0pumOjfjlCPXMl8Q42vBe0oV3l4C38ba3PQ5gIPCOJj4Vwn29Mis0xanq1bPcjpz%2F4ISAcLir212VmDm92OKtUQvDaXqUnUX4npNuP4sl0PKOdD"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938c6a83b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-includes/js/imagesloaded.min.js?ver=4.1.4
188.114.96.1200 OK 1.8 kB URL HTTP/1.1 www.shopswiz.com/wp-includes/js/imagesloaded.min.js?ver=4.1.4
IP 188.114.96.1:0
File type ASCII text, with very long lines (5477)
Hash 5bc847fcae1a1a6c4b7f79c00d2b7e29
b2237db0dd679c2c8e397e833f04df00d43165e7
bfa7a74e5830c0c26da7ccc50b8e44b401ce1ee8604fceb62e6c1310c47ddb2a
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 27 Dec 2021 15:11:18 GMT
ETag: W/"15fd-5d4221dd49180"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yCWiFKYhIXqlSKtdCAllng%2BLhS2g08GuVzqPd%2FLes0CuEgbjuytGnrf0BRcgwlhY475MTSsq%2BFJkfQI2fG0tdZVI74SEMsGllGqoVyJKBVlpqF8obZHAIrvWxKAN5%2BSW3R8h"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938c690e1bfe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/powerkit/modules/lightbox/public/js/glightbox.min.js?ver=2.7.8
188.114.96.1200 OK 15 kB URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/modules/lightbox/public/js/glightbox.min.js?ver=2.7.8
IP 188.114.96.1:0
File type ASCII text, with very long lines (56222), with no line terminators
Hash 50e7c92617d86b9031f7a80f9231f50b
e75b22722835e9ffcd625a8e8d9da2500b020dc1
d0d3c4b45f0ca4b7aea50dd87fa382f64f275777227f7015eb939058c9e93c8a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/powerkit/modules/lightbox/public/js/glightbox.min.js?ver=2.7.8 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"db9e-5e2f5f8dcbb83"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ENF1mcAFFPhv4AVr%2BRlpQgDB6D4sd9ITQXZvFyBFVgEkvm3TEmosTOiWW9u46GdVyz8YKX8WLxIie4WuIS57bjTas9B%2B%2FNvwDpj5K7kH6j%2BPbAzbwhNbvj56Ai5i7BEN1SUC"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938c7f991c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/powerkit/modules/lightbox/public/js/public-powerkit-lightbox.js?ver=2.7.8
188.114.96.1200 OK 1.4 kB URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/modules/lightbox/public/js/public-powerkit-lightbox.js?ver=2.7.8
IP 188.114.96.1:0
Hash c681d1262982a2dc2c9bdc5e4349ac0f
b9a477bab55a64a3cdf7843aa479de774588b9dc
6ee7a68e2766e0eddda0f79e18e18f066c2ed586cfb1e05944db6882bbe44525
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/powerkit/modules/lightbox/public/js/public-powerkit-lightbox.js?ver=2.7.8 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"1143-5e2f5f8dcbb83"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=grhjkr8DVC1AaCdvkCNB7Kozypl3P4JD7u5B8E2MEtoWpcho6Hoh8rJcDJ08L38U4TKBUkZlTwc9SOdCLMe9z4Bn3DOpey2YdM3oDvd5HMiFas6zdjXsw4j%2B7j9FZLpYMO4m"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938c9f9f1c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/powerkit/modules/scroll-to-top/public/js/public-powerkit-scroll-to-top.js?ver=2.7.8
188.114.96.1200 OK 285 B URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/modules/scroll-to-top/public/js/public-powerkit-scroll-to-top.js?ver=2.7.8
IP 188.114.96.1:0
Hash e4ec54af131b3acfb24d0063376522ac
1af504d58871ddac264cfbe1f499aac5e4da2e39
9c395e1f4060d0421190c496a7b64576831ee51284d6b4a712238399db924b89
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/powerkit/modules/scroll-to-top/public/js/public-powerkit-scroll-to-top.js?ver=2.7.8 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"1fb-5e2f5f8dcc889"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L9MiMTTPNB1oAbMYDk84JHrofLZNhzs%2F02I4A94GGEdswIxCbx7lQJlj%2B9czyUyVQRao1MNPXZ5rwpCcskcoHvz13KGovy5PXKNXgFuAhyAWmJuDzw8Fsw1S6cC8dHlrgyiJ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938cbaa9b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/powerkit/modules/opt-in-forms/public/js/public-powerkit-opt-in-forms.js?ver=2.7.8
188.114.96.1200 OK 563 B URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/modules/opt-in-forms/public/js/public-powerkit-opt-in-forms.js?ver=2.7.8
IP 188.114.96.1:0
Hash 217fe822e7271cd60bf86b151bffbff3
7b3b2f4e0b5cfd383197888b3528ef28cf95b8c3
7ff2ff9dd79a471445b9e2d203e675521c15e5b1209bf13006d0cdfce180f053
GET /wp-content/plugins/powerkit/modules/opt-in-forms/public/js/public-powerkit-opt-in-forms.js?ver=2.7.8 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"551-5e2f5f8dcbb83"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G6Jpnq5h0UvcMHgW5gQhaL7qse9xTJypQHYQYR4UhXTq6KC9wY%2F6cxZbRvuWq5sbOyJC11L6stpAH5E6JGnjk9KNN8cSCtAiWNaJ5JE4OFn%2BoI5%2B2eVVaPlNk60rumLTL6nL"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938cbfdfb518-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/powerkit/modules/share-buttons/public/js/public-powerkit-share-buttons.js?ver=2.7.8
188.114.96.1200 OK 909 B URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/modules/share-buttons/public/js/public-powerkit-share-buttons.js?ver=2.7.8
IP 188.114.96.1:0
Hash ee8e2ed023c8fb29943cfd04af689ce2
e35104e4dba9289d26963bc8c9261c4871654f1c
ebdd94d9242e628e0187ec826a954384351ee9f5cd47a108cb6e2ace11fb6ef4
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/powerkit/modules/share-buttons/public/js/public-powerkit-share-buttons.js?ver=2.7.8 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"c0f-5e2f5f8dc7a68"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XXP8LNOY8aFDKg2Kj189AtzTcYPztVab1vtB8SYnlYz2eNOKPhKG0lSOUxRdku5K4dU%2FNJQqYCsykDPa3Qr3WOnGcKQdMJ0oKZaRAerZjAM4AskHlcvLx3Xt%2F8W7sSgZ3tkm"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938cc92b1bfe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/s/gts1p5/skIZ4BuOZdE
142.250.74.131200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/skIZ4BuOZdE
IP 142.250.74.131:0
Hash 7e1d3785fb268b2802b86bf80ff462da
1a637c313301c98bc5bafe8367d61f240544ba53
c5bf5cca0940fb144d4011eb89a2855b7eb4c0373430667c1dc5cabf6fe3e604
POST /s/gts1p5/skIZ4BuOZdE HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 09 Jan 2023 04:54:41 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.shopswiz.com/wp-content/plugins/powerkit/modules/slider-gallery/public/js/flickity.pkgd.min.js?ver=2.7.8
188.114.96.1200 OK 13 kB URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/modules/slider-gallery/public/js/flickity.pkgd.min.js?ver=2.7.8
IP 188.114.96.1:0
File type ASCII text, with very long lines (54075)
Hash a24330853d23fd6f36604c640bdb71ce
e66469d8a6a37414f43d84fae2f5e3e4918a9607
7a66f8832dc932c5d4eb884e02a0adb5db14de7db7a80dac1fdc51edc280aacb
GET /wp-content/plugins/powerkit/modules/slider-gallery/public/js/flickity.pkgd.min.js?ver=2.7.8 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"d33c-5e2f5f8dc9473"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xrBlobLAC107uxusUViQktQLj3lmjArnFtg%2FxeTp1%2BUJJn5JwAnK1ASHxXX2G8ayVXiRNV8J5U9ljxXpf2famXflCGPCJyNYAgWoU9QB9aUNjNxcHR03pS8rTCIBgvUCXFHi"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938cdfaf1c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/powerkit/modules/slider-gallery/public/js/public-powerkit-slider-gallery.js?ver=2.7.8
188.114.96.1200 OK 829 B URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/powerkit/modules/slider-gallery/public/js/public-powerkit-slider-gallery.js?ver=2.7.8
IP 188.114.96.1:0
Hash 6d50155ebc128a79850b687f369d12f7
8fefed83a217ac844d406ce6b12b5ce16b080b44
c3d0df83200ce63be00d16b57937c05a6a4a18e97f75089d74442504932f0761
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/powerkit/modules/slider-gallery/public/js/public-powerkit-slider-gallery.js?ver=2.7.8 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:13 GMT
ETag: W/"90d-5e2f5f8dc9473"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8TnJS%2FoYG7nwpVJzFCDi5kKE8fTHi0B8Lo2Y4%2FHKfW32wnwrOiudSqXK4uxgl0dNU5Su2Y653QyL1ADD4Sc3bZtxAn08bWwEatpjcHkGp7%2FSOgetSZ93HGo0mVGGVwtuqKf8"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938cefb21c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash cd1d39135eb079c9842a1696f1c3bacf
ee41d3b22fed5948c20a6d1639b6955a4252fc11
c1f219c13b6c6e622515b78d1549a1dacdc6fab1a2109d540e30d07a52990db5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 09 Jan 2023 04:54:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp2.globalsign.com/gsalphasha2g2
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP 104.18.20.226:0
Hash dce422297faf7c617e9f0a8190c6eee1
563564c76e7a7340ee857ea8374eb155ef2a7a60
7c802300850f513c1f3cd556112474d0f18be1280b7b88a5999b8e2b0fa23227
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Fri, 13 Jan 2023 02:11:38 GMT
ETag: "563564c76e7a7340ee857ea8374eb155ef2a7a60"
Last-Modified: Mon, 09 Jan 2023 02:11:39 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2323
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938d2d14b51b-OSL
www.shopswiz.com/wp-content/themes/look/assets/js/theme-script.js?ver=5.6
188.114.96.1200 OK 8.2 kB URL HTTP/1.1 www.shopswiz.com/wp-content/themes/look/assets/js/theme-script.js?ver=5.6
IP 188.114.96.1:0
File type ASCII text, with CRLF line terminators
Hash f8eff9b1d80d835f514b3d4b4f24c2ff
4357aa0c3b4bdf0ae7963f647d95cfee0725ab00
065618365f7133592b5ea3ba3bf23a84527811c72f8dbca4388cf91308b02917
GET /wp-content/themes/look/assets/js/theme-script.js?ver=5.6 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 29 Dec 2021 11:28:45 GMT
ETag: W/"e39e-5d4473d9cb540"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Pmoe5EvnEiGqCQw8XqXBPUu0Z7MqwVSc%2FnDCCIDGUSkgVHNYH%2B0CxBdyHd%2FAPIBMtf1YHfAFrhK7PthDWoad0k0x7fJ0vzUpEOjX6A4uS54UNoqFT6MdY94Gth2LFRLeA6Qi"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938d0ffab518-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/plugins/popup-anything-on-click/assets/js/popupaoc-public.js?ver=2.1.7
188.114.96.1200 OK 2.4 kB URL HTTP/1.1 www.shopswiz.com/wp-content/plugins/popup-anything-on-click/assets/js/popupaoc-public.js?ver=2.1.7
IP 188.114.96.1:0
File type ASCII text, with CRLF line terminators
Hash b598569e43927f9225e8177e17c0f793
c7bb6008d2c7dbf1f4a0bf20511ff8cb231efab0
bd518bb5919c14d14293ad8660f024284536a4cad6f22c88afc4f1061c8edf51
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/popup-anything-on-click/assets/js/popupaoc-public.js?ver=2.1.7 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 04 Jul 2022 07:49:18 GMT
ETag: W/"213c-5e2f5f9233a79"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GRcR4r8O6SSicgONvtSxfIxjrgGN0m8G9qaqb4HziDjcrrhimrKiGZY3NfhMvVBG3dFJApcIg0SCS31P%2FmAY6HWQXgqjmaPVtML6ggqCeQF9bOPsxFRCgE5NpUJK6VuE%2BUfh"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938c2d91b515-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.shopswiz.com/wp-content/themes/look/assets/external/external-script.js?ver=5.6
188.114.96.1200 OK 44 kB URL HTTP/1.1 www.shopswiz.com/wp-content/themes/look/assets/external/external-script.js?ver=5.6
IP 188.114.96.1:0
File type Unicode text, UTF-8 text, with very long lines (16928), with CRLF line terminators
Hash 3171e691307b15bd1bcaedda72d98ebd
4860edc75e668d12e93466af1da54ca503530711
c29c55c0d4c483e93265ebfa743efa94c7f4c1f9c9cf542129dae89771092c47
GET /wp-content/themes/look/assets/external/external-script.js?ver=5.6 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 29 Dec 2021 11:28:45 GMT
ETag: W/"25571-5d4473d9cb540"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ADWwEipxsnLpdpnot7LI%2Fv9997ruGQ%2FQwrzXnPYVMNuqr5mB4Q9AXh4sNWc%2BWkgtjTxSQtns79IpCDNJe0Mj4aV9NH9Yl3QdrIlVf0i46lmeL2b33wMHC3N0HiJKtYkoDvkX"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938d0ad7b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/s/gts1p5/skIZ4BuOZdE
142.250.74.131200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/skIZ4BuOZdE
IP 142.250.74.131:0
Hash 7e1d3785fb268b2802b86bf80ff462da
1a637c313301c98bc5bafe8367d61f240544ba53
c5bf5cca0940fb144d4011eb89a2855b7eb4c0373430667c1dc5cabf6fe3e604
POST /s/gts1p5/skIZ4BuOZdE HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 09 Jan 2023 04:54:41 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash cd1d39135eb079c9842a1696f1c3bacf
ee41d3b22fed5948c20a6d1639b6955a4252fc11
c1f219c13b6c6e622515b78d1549a1dacdc6fab1a2109d540e30d07a52990db5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 09 Jan 2023 04:54:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 6845714035871de50607bf6185f94f64
c8b0da305ef4c6a587307d87224ce7ae19ac31dc
75d805e1f96447b58ac3f8226c16c4b13d4e664e1e508be26e9968510145017a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 09 Jan 2023 04:54:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.shopswiz.com/wp-content/themes/look/assets/external/fonts/fontawesome-webfont.woff2?v=4.6.3
188.114.96.1200 OK 72 kB URL HTTP/1.1 www.shopswiz.com/wp-content/themes/look/assets/external/fonts/fontawesome-webfont.woff2?v=4.6.3
IP 188.114.96.1:0
File type Web Open Font Format (Version 2), TrueType, length 71896, version 4.393\012- data
Hash e6cf7c6ec7c2d6f670ae9d762604cb0b
97e438cc545714309882fbceadbf344fcaddcec5
7dacf83f51179de8d7980a513e67ab3a08f2c6272bb5946df8fd77c0d1763b73
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/look/assets/external/fonts/fontawesome-webfont.woff2?v=4.6.3 HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.shopswiz.com/wp-content/themes/look/assets/external/external-style.css?ver=5.6
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:41 GMT
Content-Length: 71896
Connection: keep-alive
Last-Modified: Wed, 29 Dec 2021 11:28:45 GMT
ETag: "118d8-5d4473d9cb540"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lg2I6WbyT8mgwJo6rRntKOFH%2F3IlC6H1BnlTn6MMiorZcseeV6DbgLcrP3XUTc%2B7EXKYu4H0SJoQIA0havRBHw%2FwtAZzw1BXmnetecaFc8wtM2%2FCSnAoMIxPWY9m2U%2FK1FFt"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 786a938e3b72b4fa-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 6845714035871de50607bf6185f94f64
c8b0da305ef4c6a587307d87224ce7ae19ac31dc
75d805e1f96447b58ac3f8226c16c4b13d4e664e1e508be26e9968510145017a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 09 Jan 2023 04:54:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 6845714035871de50607bf6185f94f64
c8b0da305ef4c6a587307d87224ce7ae19ac31dc
75d805e1f96447b58ac3f8226c16c4b13d4e664e1e508be26e9968510145017a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 09 Jan 2023 04:54:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
216.58.207.227200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Hash ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.shopswiz.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Jan 2023 07:08:09 GMT
expires: Sat, 06 Jan 2024 07:08:09 GMT
cache-control: public, max-age=31536000
age: 251192
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
216.58.207.227200 OK 46 kB URL HTTP/2 fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 46524, version 1.0\012- data
Hash c1fd378f54921c75e4ae1821e7b8fff6
2ce96e97783b2f154d07f4464ca6f8eb2469f2c1
405ceee1c2f5c31f1cb94ebc63d49a43fddd1471c2c7401a01c7c11bb1d93826
GET /s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.shopswiz.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46524
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 02 Jan 2023 21:08:54 GMT
expires: Tue, 02 Jan 2024 21:08:54 GMT
cache-control: public, max-age=31536000
age: 546347
last-modified: Mon, 18 Jul 2022 19:58:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/notosans/v27/o-0OIpQlx3QUlC5A4PNr4ARCQ_k.woff2
216.58.207.227200 OK 12 kB URL HTTP/2 fonts.gstatic.com/s/notosans/v27/o-0OIpQlx3QUlC5A4PNr4ARCQ_k.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 11652, version 1.0\012- data
Hash d1b0aea75c4773f68be694232b84ec08
e7ff8ee25eb37275a0c1d9add046297674ce9f84
420f8e3b772990108a7a5e260b53420123a1bd22a82848984595452c9355ab1f
GET /s/notosans/v27/o-0OIpQlx3QUlC5A4PNr4ARCQ_k.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.shopswiz.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11652
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 03 Jan 2023 15:43:13 GMT
expires: Wed, 03 Jan 2024 15:43:13 GMT
cache-control: public, max-age=31536000
age: 479488
last-modified: Mon, 09 May 2022 18:27:33 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 6845714035871de50607bf6185f94f64
c8b0da305ef4c6a587307d87224ce7ae19ac31dc
75d805e1f96447b58ac3f8226c16c4b13d4e664e1e508be26e9968510145017a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 09 Jan 2023 04:54:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 6845714035871de50607bf6185f94f64
c8b0da305ef4c6a587307d87224ce7ae19ac31dc
75d805e1f96447b58ac3f8226c16c4b13d4e664e1e508be26e9968510145017a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 09 Jan 2023 04:54:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/notosans/v27/o-0IIpQlx3QUlC5A4PNr5TRA.woff2
216.58.207.227200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/notosans/v27/o-0IIpQlx3QUlC5A4PNr5TRA.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 12860, version 1.0\012- data
Hash ab21c24efd75543e16e34807ebc6cdec
eb2562f9729079333fbcbbe94868695669dd3301
88f00438d26021a325247c4427898f7c778a22976df9f1a9d9876429778bf265
GET /s/notosans/v27/o-0IIpQlx3QUlC5A4PNr5TRA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.shopswiz.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 03 Jan 2023 15:42:34 GMT
expires: Wed, 03 Jan 2024 15:42:34 GMT
cache-control: public, max-age=31536000
age: 479527
last-modified: Mon, 09 May 2022 18:27:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 6845714035871de50607bf6185f94f64
c8b0da305ef4c6a587307d87224ce7ae19ac31dc
75d805e1f96447b58ac3f8226c16c4b13d4e664e1e508be26e9968510145017a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 09 Jan 2023 04:54:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/en_US/sdk.js
31.13.72.12301 Moved Permanently 0 B URL HTTP/1.1 connect.facebook.net/en_US/sdk.js
IP 31.13.72.12:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/
HTTP/1.1 301 Moved Permanently
Location: https://connect.facebook.net/en_US/sdk.js
Content-Type: text/plain
Server: proxygen-bolt
Date: Mon, 09 Jan 2023 04:54:41 GMT
Connection: keep-alive
Content-Length: 0
cdn.gravitec.net/sdk/web/configs?appKey=f7966a3d1557a10cf50fb503c1d86512
45.133.44.3200 OK 3.7 kB URL HTTP/2 cdn.gravitec.net/sdk/web/configs?appKey=f7966a3d1557a10cf50fb503c1d86512
IP 45.133.44.3:0
ASN #39572 DataWeb Global Group B.V.
Hash 201fe652cc45543fda103d2dc2449fbb
fc0df895da04889d2fa56466303e968b56622179
7571be6e32b4c6960bdaff115083a4af32323ac8392ff49d27a33af3c339be39
GET /sdk/web/configs?appKey=f7966a3d1557a10cf50fb503c1d86512 HTTP/1.1
Host: cdn.gravitec.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.shopswiz.com/
Origin: http://www.shopswiz.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 09 Jan 2023 04:54:41 GMT
content-type: application/json
server: nginx
x-correlation-id: 0aec03e3e96729fbe0087bc11b2f2fb2
access-control-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
x-proxy-cache: MISS
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 826d11723a9433383ea51213b7028fb6
54d410f01a0fdeeb01801e76f2a0e52593451b0f
e3e3e309324799d76d4edb746eba71628bca18c080f1d628e1ba1eac871cbecd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5566
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 09 Jan 2023 04:54:41 GMT
Etag: "63bb04d7-1d7"
Last-Modified: Mon, 09 Jan 2023 03:21:55 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/sdk.js
31.13.72.12200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js
IP 31.13.72.12:0
File type ASCII text, with very long lines (1957)
Hash 06507988ab8750fc66205a37406daf07
9e531dd3aa7571e24c93f6af11ef7c4bf541b210
637951513e8c99fadf9642f1c05e47ba3297593e773fca2cd26ac40df32f5adf
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.shopswiz.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 6206deeb371213e9ab38b34415b880fd
etag: "d2d7a6372bc0cf7f103f99908ae6bb3f"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Mon, 09 Jan 2023 04:54:50 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: BlB5iKuHUPxmIFo3QG2vBw==
x-fb-debug: 43bBUQBwIkHFvCN7ewyQUu6nqODQT8nO6YyQiKj4ezrnn3Hy0fN42TDKNRCvoqORSWb7oELYKHDtuWQJBQ8qHQ==
priority: u=3,i
content-length: 1686
x-fb-trip-id: 1904183273
date: Mon, 09 Jan 2023 04:54:41 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 826d11723a9433383ea51213b7028fb6
54d410f01a0fdeeb01801e76f2a0e52593451b0f
e3e3e309324799d76d4edb746eba71628bca18c080f1d628e1ba1eac871cbecd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5566
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 09 Jan 2023 04:54:41 GMT
Etag: "63bb04d7-1d7"
Last-Modified: Mon, 09 Jan 2023 03:21:55 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 457ca75ed75785c514fb36a16792410f
fcc640c00713c93633d0b2887104c8fbc6c754f9
ff6a40bdaa6bc25eefb2d7ed130ea34460494d92c19c07dff4cc371c45d1ac44
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF6A40BDAA6BC25EEFB2D7ED130EA34460494D92C19C07DFF4CC371C45D1AC44"
Last-Modified: Fri, 06 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3829
Expires: Mon, 09 Jan 2023 05:58:30 GMT
Date: Mon, 09 Jan 2023 04:54:41 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 457ca75ed75785c514fb36a16792410f
fcc640c00713c93633d0b2887104c8fbc6c754f9
ff6a40bdaa6bc25eefb2d7ed130ea34460494d92c19c07dff4cc371c45d1ac44
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF6A40BDAA6BC25EEFB2D7ED130EA34460494D92C19C07DFF4CC371C45D1AC44"
Last-Modified: Fri, 06 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3828
Expires: Mon, 09 Jan 2023 05:58:30 GMT
Date: Mon, 09 Jan 2023 04:54:42 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 457ca75ed75785c514fb36a16792410f
fcc640c00713c93633d0b2887104c8fbc6c754f9
ff6a40bdaa6bc25eefb2d7ed130ea34460494d92c19c07dff4cc371c45d1ac44
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF6A40BDAA6BC25EEFB2D7ED130EA34460494D92C19C07DFF4CC371C45D1AC44"
Last-Modified: Fri, 06 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3828
Expires: Mon, 09 Jan 2023 05:58:30 GMT
Date: Mon, 09 Jan 2023 04:54:42 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 457ca75ed75785c514fb36a16792410f
fcc640c00713c93633d0b2887104c8fbc6c754f9
ff6a40bdaa6bc25eefb2d7ed130ea34460494d92c19c07dff4cc371c45d1ac44
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF6A40BDAA6BC25EEFB2D7ED130EA34460494D92C19C07DFF4CC371C45D1AC44"
Last-Modified: Fri, 06 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3828
Expires: Mon, 09 Jan 2023 05:58:30 GMT
Date: Mon, 09 Jan 2023 04:54:42 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 457ca75ed75785c514fb36a16792410f
fcc640c00713c93633d0b2887104c8fbc6c754f9
ff6a40bdaa6bc25eefb2d7ed130ea34460494d92c19c07dff4cc371c45d1ac44
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF6A40BDAA6BC25EEFB2D7ED130EA34460494D92C19C07DFF4CC371C45D1AC44"
Last-Modified: Fri, 06 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3828
Expires: Mon, 09 Jan 2023 05:58:30 GMT
Date: Mon, 09 Jan 2023 04:54:42 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda43bc0d-0825-4748-8f7d-b54ad2bca423.jpeg
34.120.237.76200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda43bc0d-0825-4748-8f7d-b54ad2bca423.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a3984d65cb560a59f1de5cf9262a72e6
13b0d566380fcd714eb763b8ab1684ccfde427ad
196e4971eb72d9927bc079c21096753ed389b1b3716fb928f6d05edbaea567ba
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda43bc0d-0825-4748-8f7d-b54ad2bca423.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9717
x-amzn-requestid: 7b3644e9-418f-47be-bb44-0b5ac8bbf05a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eQd9MG5zoAMFS2A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b676ba-79ea0f641de7664042c65402;Sampled=0
x-amzn-remapped-date: Thu, 05 Jan 2023 07:05:30 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ds_k2AOGKcMMNWiYhBthXE5d37CmD3edyKuPfeKxtOoWfNsRHhN-mA==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Sun, 08 Jan 2023 07:35:55 GMT
age: 76727
etag: "13b0d566380fcd714eb763b8ab1684ccfde427ad"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a0aac24-0b28-48c6-89a3-cf4a373ab0fa.jpeg
34.120.237.76200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a0aac24-0b28-48c6-89a3-cf4a373ab0fa.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4938f6e4d145d1bb761e7908e97d5424
712c532e08559853db273decf0f3195587b17d11
d80291d9e2471e57181f76a764761f49e643e9b7e8bda3a4e30a87128bb48831
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a0aac24-0b28-48c6-89a3-cf4a373ab0fa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6078
x-amzn-requestid: 1c7e11a3-9639-43d0-b177-ae5eab1f2d2c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eJ3_2EPaIAMFxxA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b3d398-34f3d8f31c9d79e22eaa6c50;Sampled=0
x-amzn-remapped-date: Tue, 03 Jan 2023 07:04:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: TDA117TU9CyZ9gtHTqMZm9__3RXc-4LgBh9bT_EmZPhxQLA8dI7fyg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 08 Jan 2023 15:23:57 GMT
age: 48645
etag: "712c532e08559853db273decf0f3195587b17d11"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab696bdd-92ae-4c01-855b-6bbe0e8165ad.jpeg
34.120.237.76200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab696bdd-92ae-4c01-855b-6bbe0e8165ad.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e0189748e9478c37ab22a71c0826ca99
08186f7c9717eb7165ee8b9b803760da967b82e7
40a9b3a38f6799c2005bc7cc2716104b175a2178efc8029188b9aff19e598483
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab696bdd-92ae-4c01-855b-6bbe0e8165ad.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8866
x-amzn-requestid: b4a6c607-98b7-4689-96c3-646756db23df
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eZblsHkmIAMFzKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ba0c8a-02beb65706f8d3d44a812788;Sampled=0
x-amzn-remapped-date: Sun, 08 Jan 2023 00:21:30 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MzzI0YmTAJhriuvne16lq57vyPB1DKLu_KhfpDQ3cUmmtRwO_AQsJQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 08 Jan 2023 09:02:38 GMT
age: 71524
etag: "08186f7c9717eb7165ee8b9b803760da967b82e7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7aedb000-bce4-4515-80dc-28bbfbf2801b.jpeg
34.120.237.76200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7aedb000-bce4-4515-80dc-28bbfbf2801b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ee0100ded5c40b35292c57e0cde4d423
eafacf389372d4cc059d0fb7fb3e1fccf506d69b
7a2dab5cd0a5a6e96f22771ac84b86df910036186ddb7521dcc41dc82125b272
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7aedb000-bce4-4515-80dc-28bbfbf2801b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4842
x-amzn-requestid: ff29171f-d040-479e-a4c7-d19b8bee76fd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eWhZ8EexoAMFdHw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b8e2a5-04e89f5b50e2dfba7c13b3b6;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 03:10:29 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: VrcHN8FYhIPxGifDE34G4Q2kj6dx5dZBap4lkVHDcogkKVF85bsv3Q==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 09 Jan 2023 03:18:27 GMT
age: 5775
etag: "eafacf389372d4cc059d0fb7fb3e1fccf506d69b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg
34.120.237.76200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a23d61d610c7b55d943fcb2636a01b65
82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065
28bf3039cc8c1213e64893c71bc150eda573223feb2cc15ad0814a44960d434a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9539
x-amzn-requestid: 9f388939-cfb7-432e-a921-e9188736bb45
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eTw5QGZ6oAMFxQg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b7c83b-4f9d5bfc30e5ee126333d54e;Sampled=0
x-amzn-remapped-date: Fri, 06 Jan 2023 07:05:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: b85TTh5GZmQqmHRmmdz9bAw6COe0CeTyHotfElj0qpL9H051dywT3Q==
via: 1.1 1f6e68152880a39d72e6bf2996cd6a60.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sun, 08 Jan 2023 09:29:35 GMT
age: 69907
etag: "82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba1a2529-b52c-4956-93ad-e18515541dfa.jpeg
34.120.237.76200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba1a2529-b52c-4956-93ad-e18515541dfa.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a287e312b7ea41cf63badb369b85158b
65763688f4b00b498d0e70151a09d4ebb14e2b33
a9dc69148414c0794cfb5b576b5cf74221c465e8dccbe9da71b40521e8cff129
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba1a2529-b52c-4956-93ad-e18515541dfa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7226
x-amzn-requestid: 5b7b8eb4-7a80-4a00-b693-d624ed174108
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eZ0WsHvZIAMF34Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ba342a-19e87b9b175b436e72df3fd9;Sampled=0
x-amzn-remapped-date: Sun, 08 Jan 2023 03:10:34 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hdc491ffyGWQBonhGSYOi9j3z2KpdmhJiDPWgPVhDQUO-PS5mecUuQ==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 09 Jan 2023 03:33:46 GMT
age: 4856
etag: "65763688f4b00b498d0e70151a09d4ebb14e2b33"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
connect.facebook.net/en_US/sdk.js?hash=e94b9fe743ab5e5b458c93d0e6cc8174
31.13.72.12200 OK 87 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js?hash=e94b9fe743ab5e5b458c93d0e6cc8174
IP 31.13.72.12:0
File type ASCII text, with very long lines (13192)
Hash b0500e5093e3b34a3fe903eb926aa844
f6fae02401f3797c52d410bbc958ab1641dcea14
96e048bf3e9189a40d10cb34bd5cfec50ec83982e3ce129d45d2fe20eeea5415
GET /en_US/sdk.js?hash=e94b9fe743ab5e5b458c93d0e6cc8174 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.shopswiz.com
Connection: keep-alive
Referer: http://www.shopswiz.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 68c084391afce0f44c682304b95f02df
etag: "577e581c7892c6f37cdba5779107d813"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Tue, 09 Jan 2024 03:35:20 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: sFAOUJPjs0o/6QPrkmqoRA==
x-fb-debug: vMXKC5Ec4b55pfq16c9sDmRX/N4kDLundlqtYeO4e3cX3Sm80kTHOOGeGfgy4fz91e2vwEA9zln9QcJz3nkAGQ==
content-length: 86941
x-fb-trip-id: 1904183273
date: Mon, 09 Jan 2023 04:54:42 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.gravitec.media/track.min.js
45.133.44.3301 Moved Permanently 169 B URL HTTP/1.1 cdn.gravitec.media/track.min.js
IP 45.133.44.3:0
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 9527755784f5014d2c94dcabdf6ae892
941126eba6b0b049b4a09fb846ebd943e894e068
5b111ef9f2dbaf8e8870567dc8e2302efe2b0feb9d4ba62ce74c1039ab663523
GET /track.min.js HTTP/1.1
Host: cdn.gravitec.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.shopswiz.com/
HTTP/1.1 301 Moved Permanently
Server: nginx/1.20.2
Date: Mon, 09 Jan 2023 04:54:42 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://cdn.gravitec.media/track.min.js
Expires: Sun, 09 Apr 2023 04:54:42 GMT
Cache-Control: max-age=7776000
Vary: Accept-Encoding
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash b50d6d06a7f36f44a50302fff4a4fef1
8a3851c4f0950834596828ad82e90280882931b4
08c89da03415987a5ef393bf2d66213289972f3c23ec60e5be6ec8400b0a7df8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "08C89DA03415987A5EF393BF2D66213289972F3C23EC60E5BE6EC8400B0A7DF8"
Last-Modified: Fri, 06 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3665
Expires: Mon, 09 Jan 2023 05:55:47 GMT
Date: Mon, 09 Jan 2023 04:54:42 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 60a18115265e363e5f1d86055747084b
a105bef83dc37ab2fdb52c2cacab7a30d21f1a92
4cc00f81f7e1d4f9538c86915149a38dbaedd21582ed873ed137a1e8727fda96
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1409
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 09 Jan 2023 04:54:42 GMT
Last-Modified: Mon, 09 Jan 2023 04:31:13 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 60a18115265e363e5f1d86055747084b
a105bef83dc37ab2fdb52c2cacab7a30d21f1a92
4cc00f81f7e1d4f9538c86915149a38dbaedd21582ed873ed137a1e8727fda96
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1409
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 09 Jan 2023 04:54:42 GMT
Last-Modified: Mon, 09 Jan 2023 04:31:13 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 279
cdn.gravitec.media/track.min.js
45.133.44.3200 OK 2.0 kB URL HTTP/2 cdn.gravitec.media/track.min.js
IP 45.133.44.3:0
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (4565), with no line terminators
Hash aea232ac8421708467d856bd5d9d7cea
2ce7b079fdffb63724f6a282fd99d3542765229d
18a5fd629fceb73aaac7fe1546e477ae00994c6dd4fa181e05a55459541789fa
GET /track.min.js HTTP/1.1
Host: cdn.gravitec.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.shopswiz.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 09 Jan 2023 04:54:42 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Wed, 27 Nov 2019 14:51:46 GMT
etag: W/"5dde8d82-11d5"
cache-control: max-age=7776000
access-control-allow-origin: *
content-encoding: gzip
expires: Sun, 09 Apr 2023 04:54:42 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash a41541525bdf7f107061560f8325bba0
b1f8ca7a5518bfa0e27a59411a11287dbcea30e3
2edbbdc01e4edaee09e015d1d9e1cbfa5ad35d34f53a37bfa692dcd795883241
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2EDBBDC01E4EDAEE09E015D1D9E1CBFA5AD35D34F53A37BFA692DCD795883241"
Last-Modified: Fri, 06 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3095
Expires: Mon, 09 Jan 2023 05:46:18 GMT
Date: Mon, 09 Jan 2023 04:54:43 GMT
Connection: keep-alive
chats.landbot.io/v3/H-1177526-XO3BJRN1PWTI0WXZ/index.json?ts=1673240070158
34.120.69.71200 OK 5.4 kB URL HTTP/2 chats.landbot.io/v3/H-1177526-XO3BJRN1PWTI0WXZ/index.json?ts=1673240070158
IP 34.120.69.71:0
File type JSON data\012- , ASCII text, with very long lines (5406), with no line terminators
Hash 464fb3f78a444b5c595fda7dc45fef6a
14e6b2452cc8c2a6fc497ab27fdb0a6fefb82441
106d9c1db26aeeed23962e6b431202c210637864c0e9944cb284440673dc4dc8
GET /v3/H-1177526-XO3BJRN1PWTI0WXZ/index.json?ts=1673240070158 HTTP/1.1
Host: chats.landbot.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.shopswiz.com/
Origin: http://www.shopswiz.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdupfEXxBE_G2LpQDe1EgFtIVUolJIgURCdBxt9VyeiU4rZq6yzbkJEZ1_ZWkboqYAXp3BBagzI4BanUuIqLNmqbgQ
date: Mon, 09 Jan 2023 04:54:43 GMT
cache-control: no-store
expires: Tue, 09 Jan 2024 04:54:43 GMT
last-modified: Thu, 03 Nov 2022 12:05:52 GMT
etag: "464fb3f78a444b5c595fda7dc45fef6a"
x-goog-generation: 1667477152022683
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 5406
content-type: application/json
x-goog-hash: crc32c=X3eutA==, md5=Rk+z94pES1xZX9p9xF/vag==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 5406
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
strict-transport-security: max-age=31536000; includeSubDomains
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash a41541525bdf7f107061560f8325bba0
b1f8ca7a5518bfa0e27a59411a11287dbcea30e3
2edbbdc01e4edaee09e015d1d9e1cbfa5ad35d34f53a37bfa692dcd795883241
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2EDBBDC01E4EDAEE09E015D1D9E1CBFA5AD35D34F53A37BFA692DCD795883241"
Last-Modified: Fri, 06 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3095
Expires: Mon, 09 Jan 2023 05:46:18 GMT
Date: Mon, 09 Jan 2023 04:54:43 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 9cfadf9ad258ef328e91d879db83c408
c54ed0501c4631e360891bc33787fa0b8e6ee428
0e863e7d5a2fb7b5a8fb59345a014c2fe09f9927aebb5d04c49ac4bceb7078ca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 09 Jan 2023 04:54:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
storage.googleapis.com/media.landbot.io/272842/channels/MJN6YM26T1KSQULZ7BVQ28JK0QC2VVO4.webp
172.217.21.176200 OK 3.7 kB URL HTTP/2 storage.googleapis.com/media.landbot.io/272842/channels/MJN6YM26T1KSQULZ7BVQ28JK0QC2VVO4.webp
IP 172.217.21.176:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 06a56527be3720f3d1c5967258312601
a435ba88bcb11af2c333cea72d4bda7de81af9be
b9bd4cf52af917bdcd3a7a18fcf019898f5a44a76de9aadcd8d2231c70fcb71b
GET /media.landbot.io/272842/channels/MJN6YM26T1KSQULZ7BVQ28JK0QC2VVO4.webp HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shopswiz.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvbctuxdSir-VyLST20CoR7s7F_XFgIO-t-sBI42-eD1gQ5tWkRZfeORR6V8gVPB69K8DrQyVgGdwDDmHBU8TKuiA
expires: Mon, 09 Jan 2023 05:54:43 GMT
date: Mon, 09 Jan 2023 04:54:43 GMT
cache-control: public, max-age=3600
last-modified: Wed, 16 Mar 2022 23:47:47 GMT
etag: "06a56527be3720f3d1c5967258312601"
x-goog-generation: 1647474467727984
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 3746
content-type: application/octet-stream
x-goog-hash: crc32c=+EyEoA==, md5=BqVlJ743IPPRxZZyWDEmAQ==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 3746
access-control-allow-origin: *
access-control-expose-headers: Content-Type
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 9cfadf9ad258ef328e91d879db83c408
c54ed0501c4631e360891bc33787fa0b8e6ee428
0e863e7d5a2fb7b5a8fb59345a014c2fe09f9927aebb5d04c49ac4bceb7078ca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 09 Jan 2023 04:54:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Montserrat%3A100%2C200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%2C100italic%2C200italic%2C300italic%2C400italic%2C500italic%2C600italic%2C700italic%2C800italic%2C900italic%7CNoto+Sans%3A400%2C700%2C400italic%2C700italic%7CRaleway%3A100%2C200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%2C100italic%2C200italic%2C300italic%2C400italic%2C500italic%2C600italic%2C700italic%2C800italic%2C900italic&subset=latin&display=swap&ver=1648473713
216.58.207.202200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Montserrat%3A100%2C200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%2C100italic%2C200italic%2C300italic%2C400italic%2C500italic%2C600italic%2C700italic%2C800italic%2C900italic%7CNoto+Sans%3A400%2C700%2C400italic%2C700italic%7CRaleway%3A100%2C200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%2C100italic%2C200italic%2C300italic%2C400italic%2C500italic%2C600italic%2C700italic%2C800italic%2C900italic&subset=latin&display=swap&ver=1648473713
IP 216.58.207.202:0
GET /css?family=Montserrat%3A100%2C200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%2C100italic%2C200italic%2C300italic%2C400italic%2C500italic%2C600italic%2C700italic%2C800italic%2C900italic%7CNoto+Sans%3A400%2C700%2C400italic%2C700italic%7CRaleway%3A100%2C200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%2C100italic%2C200italic%2C300italic%2C400italic%2C500italic%2C600italic%2C700italic%2C800italic%2C900italic&subset=latin&display=swap&ver=1648473713 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shopswiz.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 09 Jan 2023 04:54:41 GMT
date: Mon, 09 Jan 2023 04:54:41 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.gravitec.net/storage/f7966a3d1557a10cf50fb503c1d86512/client.js?service=wp&wpath=http%3A%2F%2Fwww.shopswiz.com%2Fwp-content%2Fplugins%2Fgravitec-net-web-push-notifications%2F%2Fsdk_files%2Fsw.php&ver=2.8.6
45.133.44.3200 OK 0 B URL HTTP/2 cdn.gravitec.net/storage/f7966a3d1557a10cf50fb503c1d86512/client.js?service=wp&wpath=http%3A%2F%2Fwww.shopswiz.com%2Fwp-content%2Fplugins%2Fgravitec-net-web-push-notifications%2F%2Fsdk_files%2Fsw.php&ver=2.8.6
IP 45.133.44.3:0
ASN #39572 DataWeb Global Group B.V.
GET /storage/f7966a3d1557a10cf50fb503c1d86512/client.js?service=wp&wpath=http%3A%2F%2Fwww.shopswiz.com%2Fwp-content%2Fplugins%2Fgravitec-net-web-push-notifications%2F%2Fsdk_files%2Fsw.php&ver=2.8.6 HTTP/1.1
Host: cdn.gravitec.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shopswiz.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 09 Jan 2023 04:54:41 GMT
content-type: application/javascript; charset=utf-8
server: nginx
last-modified: Mon, 31 Oct 2022 19:57:52 GMT
etag: W/"636028c0-100fb"
expires: Mon, 31 Oct 2022 20:21:12 GMT
cache-control: max-age=10
access-control-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
x-proxy-cache: REVALIDATED
X-Firefox-Spdy: h2
www.shopswiz.com/page/2/
188.114.96.1200 OK 0 B IP 188.114.96.1:0
Analyzer Verdict Alert fortinet Phishing
GET /page/2/ HTTP/1.1
Host: www.shopswiz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Moz: prefetch
Connection: keep-alive
Referer: http://www.shopswiz.com/fashion/track.webgains.com/click.html?wgcampaignid=1596735&wgprogramid=13297&clickref=w5af7mgi64qsv4plij99220i
Cookie: GN_USER_ID_KEY=c7616cb6-38be-4cc7-9667-5838737acc84; GN_SESSION_ID_KEY=811fb333-3b02-4f40-8d76-97001854868a
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 04:54:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.4.26
Link: <https://www.shopswiz.com/wp-json/>; rel="https://api.w.org/", <https://www.shopswiz.com/wp-json/wp/v2/pages/2666>; rel="alternate"; type="application/json", <https://www.shopswiz.com/>; rel=shortlink
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l4vUO8cu4ZUjsUE65KdZownYT7ubWXdAWxvxgiBKNtnAW7rEWnWmHcPsHZz3BwNIF5NtUOHFDZE%2FqihoEtd2kyXaJMZqPHA0K1oZMyneBizZtrv25R2XW8Ph2gE9u35Z1%2Baq"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 786a9392edb8b4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
s.w.org/images/core/emoji/14.0.0/svg/2b50.svg
192.0.77.48200 OK 0 B URL HTTP/2 s.w.org/images/core/emoji/14.0.0/svg/2b50.svg
IP 192.0.77.48:0
GET /images/core/emoji/14.0.0/svg/2b50.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shopswiz.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 09 Jan 2023 04:54:41 GMT
content-type: image/svg+xml
last-modified: Tue, 12 Apr 2022 03:50:59 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn 2
x-content-type-options: nosniff
X-Firefox-Spdy: h2
cdn.landbot.io/landbot-3/landbot-3.0.0.js
104.22.23.110200 OK 0 B URL HTTP/2 cdn.landbot.io/landbot-3/landbot-3.0.0.js
IP 104.22.23.110:0
GET /landbot-3/landbot-3.0.0.js HTTP/1.1
Host: cdn.landbot.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.shopswiz.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 09 Jan 2023 04:54:42 GMT
content-type: application/javascript
x-guploader-uploadid: ADPycdssaZfTXgoM-yNWP95zYtpnEkCz9BVQ3PxjnqVf8-8yldDAQwaWV31TUAPNxayBwovLq0l2E_GH-YW2iEkFKPzzZA
expires: Mon, 09 Jan 2023 04:28:22 GMT
cache-control: public, max-age=3600
last-modified: Wed, 30 Nov 2022 08:13:07 GMT
etag: W/"d65b5473b45920467cf77ec025db3bfd"
x-goog-generation: 1669795987069207
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 497080
x-goog-hash: crc32c=giqmAw==, md5=1ltUc7RZIEZ8937AJds7/Q==
x-goog-storage-class: MULTI_REGIONAL
vary: Accept-Encoding
access-control-allow-origin: *
access-control-expose-headers: Content-Type
strict-transport-security: max-age=31536000; includeSubDomains
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 2669
server: cloudflare
cf-ray: 786a939398b71c0e-OSL
content-encoding: br
X-Firefox-Spdy: h2