Overview

URLatlascrown.net/
IP 50.87.148.136 (United States)
ASN#46606 UNIFIEDLAYER-AS-1
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-11-19 15:24:40 UTC
StatusLoading report..
IDS alerts0
Blocklist alert44
urlquery alerts No alerts detected
Tags None

Domain Summary (13)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
use.typekit.net (7) 494 2012-07-05 01:42:39 UTC 2020-04-03 01:06:02 UTC 23.36.76.122
r3.o.lencr.org (7) 344 No data No data 23.36.77.32
ocsp.digicert.com (2) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-11-19 05:25:15 UTC 34.117.237.239
atlascrown.net (1) 0 2021-10-01 17:29:38 UTC 2022-11-19 11:06:41 UTC 50.87.148.136 Unknown ranking
img-getpocket.cdn.mozilla.net (7) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76
cdnjs.cloudflare.com (1) 235 2015-04-17 20:46:33 UTC 2022-11-19 08:40:56 UTC 104.17.24.14
code.jquery.com (1) 634 2012-05-21 17:28:02 UTC 2020-04-21 12:46:20 UTC 69.16.175.10
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-11-19 05:35:38 UTC 34.102.187.140
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 54.187.102.159
p.typekit.net (1) 620 2012-05-23 14:28:57 UTC 2020-04-17 00:28:35 UTC 23.36.76.122
www.atlascrown.net (87) 0 2021-10-01 17:29:38 UTC 2022-03-10 17:48:49 UTC 50.87.148.136 Unknown ranking

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-19 2 atlascrown.net/ Phishing
2022-11-19 2 www.atlascrown.net/wp-content/plugins/woocommerce/packages/woocommerce-bloc (...) Phishing
2022-11-19 2 www.atlascrown.net/wp-includes/css/classic-themes.min.css?ver=1 Phishing
2022-11-19 2 www.atlascrown.net/wp-admin/css/color-picker.min.css?ver=6.1.1 Phishing
2022-11-19 2 www.atlascrown.net/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 Phishing
2022-11-19 2 www.atlascrown.net/wp-content/plugins/contact-form-7/includes/css/styles.cs (...) Phishing
2022-11-19 2 www.atlascrown.net/wp-content/plugins/wp-user-avatar/assets/flatpickr/flatp (...) Phishing
2022-11-19 2 www.atlascrown.net/wp-content/themes/holleta/css/select2.css?ver=6.1.1 Phishing
2022-11-19 2 www.atlascrown.net/wp-content/plugins/motopress-hotel-booking/vendors/kbwoo (...) Phishing
2022-11-19 2 www.atlascrown.net/wp-content/plugins/mailchimp-for-wp/assets/css/form-them (...) Phishing
2022-11-19 2 www.atlascrown.net/wp-content/plugins/contact-form-7/includes/js/index.js?v (...) Phishing
2022-11-19 2 www.atlascrown.net/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ve (...) Phishing
2022-11-19 2 www.atlascrown.net/wp-content/themes/holleta/css/iconfont.css?ver=6.1.1 Phishing
2022-11-19 2 www.atlascrown.net/wp-content/plugins/woocommerce/assets/js/frontend/add-to (...) Phishing
2022-11-19 2 www.atlascrown.net/wp-content/themes/holleta/style.css?ver=6.1.1 Phishing
2022-11-19 2 www.atlascrown.net/wp-content/plugins/motopress-hotel-booking/assets/css/mp (...) Phishing
2022-11-19 2 www.atlascrown.net/wp-content/plugins/motopress-hotel-booking/vendors/canjs (...) Phishing
2022-11-19 2 www.atlascrown.net/wp-content/plugins/woocommerce/assets/js/frontend/woocom (...) Phishing
2022-11-19 2 www.atlascrown.net/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 Phishing
2022-11-19 2 www.atlascrown.net/wp-content/plugins/pt-holleta-addons/assets/js/js_compos (...) Phishing
2022-11-19 2 www.atlascrown.net/wp-content/plugins/pt-holleta-addons/assets/js/load-post (...) Phishing
2022-11-19 2 www.atlascrown.net/wp-content/themes/holleta/js/magic-cursor.js?ver=1.0.0 Phishing
2022-11-19 2 www.atlascrown.net/ Phishing
2022-11-19 2 www.atlascrown.net/wp-content/plugins/js_composer/assets/js/vendors/woocomm (...) Phishing
2022-11-19 2 www.atlascrown.net/wp-content/plugins/woocommerce/assets/js/frontend/cart-f (...) Phishing
2022-11-19 2 www.atlascrown.net/wp-content/plugins/woocommerce/assets/js/jquery-blockui/ (...) Phishing
2022-11-19 2 www.atlascrown.net/wp-content/plugins/motopress-hotel-booking/vendors/kbwoo (...) Phishing
2022-11-19 2 www.atlascrown.net/wp-content/plugins/wp-user-avatar/assets/js/frontend.min (...) Phishing
2022-11-19 2 www.atlascrown.net/wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?v (...) Phishing
2022-11-19 2 www.atlascrown.net/wp-content/plugins/pt-holleta-addons/assets/js/photoswip (...) Phishing
2022-11-19 2 www.atlascrown.net/wp-content/themes/holleta/js/scripts.js Phishing
2022-11-19 2 www.atlascrown.net/wp-content/plugins/pt-holleta-addons/assets/js/parallax. (...) Phishing
2022-11-19 2 www.atlascrown.net/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 Phishing
2022-11-19 2 www.atlascrown.net/wp-content/plugins/pt-holleta-addons/assets/js/pt-script (...) Phishing
2022-11-19 2 www.atlascrown.net/wp-content/plugins/motopress-hotel-booking/vendors/kbwoo (...) Phishing
2022-11-19 2 www.atlascrown.net/wp-content/plugins/woocommerce/packages/woocommerce-bloc (...) Phishing
2022-11-19 2 www.atlascrown.net/wp-content/plugins/contact-form-7/includes/js/index.js?v (...) Phishing
2022-11-19 2 www.atlascrown.net/wp-content/plugins/motopress-hotel-booking/assets/js/pub (...) Phishing
2022-11-19 2 www.atlascrown.net/wp-content/themes/holleta/fonts/base-icon.ttf?dwj2e9 Phishing
2022-11-19 2 www.atlascrown.net/wp-content/plugins/wp-user-avatar/assets/select2/select2 (...) Phishing
2022-11-19 2 www.atlascrown.net/wp-content/plugins/pt-holleta-addons/assets/js/swiper.mi (...) Phishing
2022-11-19 2 www.atlascrown.net/?wc-ajax=get_refreshed_fragments Phishing
2022-11-19 2 www.atlascrown.net/wp-content/themes/holleta/css/main.css?ver=6.1.1 Phishing
2022-11-19 2 www.atlascrown.net/wp-content/themes/holleta/css/woocommerce.css?ver=6.1.1 Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 2 reports on IP: 50.87.148.136
Date UQ / IDS / BL URL IP
2022-11-19 15:24:40 +0000 0 - 0 - 44 atlascrown.net/ 50.87.148.136
2022-11-19 15:24:33 +0000 0 - 0 - 42 atlascrown.net/ 50.87.148.136


Last 5 reports on ASN: UNIFIEDLAYER-AS-1
Date UQ / IDS / BL URL IP
2023-01-28 10:56:17 +0000 0 - 0 - 1 assura.jadecreative.co.nz/wire/nsc/r3m/kcd/cn (...) 192.185.162.33
2023-01-28 10:54:59 +0000 0 - 0 - 2 datarenty.com/dpllgkm.exe 192.185.28.7
2023-01-28 10:54:36 +0000 0 - 0 - 5 donlucca.com.br/urf/ph/tb/qken7atk.zip 162.214.105.241
2023-01-28 10:54:14 +0000 0 - 0 - 2 regenerations.eu/wp-content/plugins/lcgftrl/i (...) 192.254.185.165
2023-01-28 10:53:03 +0000 0 - 0 - 1 assura.jadecreative.co.nz/wire/4sl/nmy/hk6/ps (...) 192.185.162.33


Last 2 reports on domain: atlascrown.net
Date UQ / IDS / BL URL IP
2022-11-19 15:24:40 +0000 0 - 0 - 44 atlascrown.net/ 50.87.148.136
2022-11-19 15:24:33 +0000 0 - 0 - 42 atlascrown.net/ 50.87.148.136


No other reports with similar screenshot

JavaScript

Executed Scripts (46)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (119)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "86F5E5AE2DA408A899D16C83B7CA441033AC0C30062CD29F2DB1B1B5BE666746"
Last-Modified: Sat, 19 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8151
Expires: Sat, 19 Nov 2022 17:31:32 GMT
Date: Sat, 19 Nov 2022 15:15:41 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5299
Cache-Control: 'max-age=158059'
Date: Sat, 19 Nov 2022 15:15:41 GMT
Last-Modified: Sat, 19 Nov 2022 13:47:22 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "2A46916079563D95FA6A695104EBF41829EE95A156D6E4D45B9AEF7231A8A80E"
Last-Modified: Fri, 18 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15391
Expires: Sat, 19 Nov 2022 19:32:12 GMT
Date: Sat, 19 Nov 2022 15:15:41 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 19 Nov 2022 14:45:09 GMT
cache-control: public,max-age=3600
age: 1832
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    d130218d0e2841f39c99610fe1a2ab90
Sha1:   29fbe1e177ee55c7a61ae0a206afff271cf5f945
Sha256: 6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: ba+d+qAn2eCkwL1/nHcwkihV9HcHjyt8iAUNLS84PeAdpnUV+e7JEeaWlE42Kcpg5ihsEGj0stU=
x-amz-request-id: KT72AX83CG0RGES0
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 19 Nov 2022 14:16:03 GMT
age: 3578
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    67d5a988edcda47bc3b3b3f65d32b4b6
Sha1:   d4f0e0da8b3690cc7da925026d3414b68c7d954f
Sha256: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sat, 19 Nov 2022 15:15:41 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 19 Nov 2022 14:44:49 GMT
cache-control: public,max-age=3600
age: 1852
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2506
Cache-Control: max-age=153176
Date: Sat, 19 Nov 2022 15:15:42 GMT
Etag: "63789cac-1d7"
Expires: Mon, 21 Nov 2022 09:48:38 GMT
Last-Modified: Sat, 19 Nov 2022 09:06:52 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         50.87.148.136
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Date: Sat, 19 Nov 2022 15:15:41 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
X-Redirect-By: WordPress
Set-Cookie: ppwp_wp_session=38c6b027f9b10a05046a7f2f07a49d0a%7C%7C1668872741%7C%7C1668872381; expires=Sat, 19-Nov-2022 15:45:41 GMT; Max-Age=1800; path=/ mphb_session=0fbd4c95e710f6d8d10a41c711e47988%7C%7C1668872741%7C%7C1668872381; expires=Sat, 19-Nov-2022 15:45:41 GMT; Max-Age=1800; path=/ PHPSESSID=c045723ccdd2ac9d06c37b548b4eb685; path=/
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: https://www.atlascrown.net/
Content-Length: 0
Keep-Alive: timeout=5, max=75


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 5Vx+7IHYczt9Q6F+Ba3Rhg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         54.187.102.159
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ByOxsexGfmtBnEkxfobllX/Ntzo=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "737EA3F317FFBF1036AEED3AD1C0A0D11FE87D478F8D923B5D119C84AA916339"
Last-Modified: Thu, 17 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21577
Expires: Sat, 19 Nov 2022 21:15:19 GMT
Date: Sat, 19 Nov 2022 15:15:42 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "75DF3810E787BE95774282D4851CE350BBA5C326843F1BD02348746355866E95"
Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7261
Expires: Sat, 19 Nov 2022 17:16:44 GMT
Date: Sat, 19 Nov 2022 15:15:43 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "75DF3810E787BE95774282D4851CE350BBA5C326843F1BD02348746355866E95"
Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7261
Expires: Sat, 19 Nov 2022 17:16:44 GMT
Date: Sat, 19 Nov 2022 15:15:43 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "75DF3810E787BE95774282D4851CE350BBA5C326843F1BD02348746355866E95"
Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7261
Expires: Sat, 19 Nov 2022 17:16:44 GMT
Date: Sat, 19 Nov 2022 15:15:43 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "75DF3810E787BE95774282D4851CE350BBA5C326843F1BD02348746355866E95"
Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7261
Expires: Sat, 19 Nov 2022 17:16:44 GMT
Date: Sat, 19 Nov 2022 15:15:43 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0d2467c-b158-442b-92be-e4cb236d17fa.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 3035
x-amzn-requestid: 3e3f3a7f-9a1d-4b37-b932-22c6e3e638f1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0QRcFOuoAMF_fQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377fa6f-09dc20ea5620dd167e3f7265;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:39 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: xvVfLfP2DUilu7GSJMGArO90Kdoq5cPBVtmtyVjZmX5ZKnvOjpR_UQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:36:25 GMT
age: 63558
etag: "72369ebeccf447fa91ef77711d6297063c99777e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3035
Md5:    d6b026c34985bbf2ebf89a62d0724c66
Sha1:   72369ebeccf447fa91ef77711d6297063c99777e
Sha256: e5598ada634274ab9995dedda8c1fd18344abcfdd49b3a1aaede0a86fafc0f40
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F680965e1-a075-4bd9-8788-73e1a3c92de2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 3842
x-amzn-requestid: 8effd7ec-299f-471f-8746-3cb81d94998b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: boYBREE6oAMFmfQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63733a07-46160f6159dfb4a729e5d688;Sampled=0
x-amzn-remapped-date: Tue, 15 Nov 2022 07:04:39 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 37fj6lqvqFTCEPkclxpI6OuYvlIB57GI2bS4wySNP3X4eQ3Lwy3WQA==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 19 Nov 2022 10:26:23 GMT
age: 17360
etag: "317ec439968641329b83210f7fcab59023310077"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3842
Md5:    2e9f6e24e829065d4f201b4c9d9c8fd1
Sha1:   317ec439968641329b83210f7fcab59023310077
Sha256: d1d304d12f3e1c2ad9cf9279bbb7cab4a954942ab86f41d5333e030cdc7a55c8
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e567bc1-d4b1-4dd2-b17e-3595ad1753e5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10281
x-amzn-requestid: 11dffc4e-71d7-4195-8890-62c8a2092728
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-77EWaIAMF3WA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376ab7f-3c0dc7e43023af827ac26958;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:45:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 48wUhxwMgsEj2J01EWOTCfWLNZPwFrjjXd6V_uSp8yae4YtGTTVlxA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 22:26:49 GMT
age: 60534
etag: "90a146aef85765630a5e09e46a0a8682e204bec1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10281
Md5:    35da1192dcadc6e329a9e60c16904301
Sha1:   90a146aef85765630a5e09e46a0a8682e204bec1
Sha256: 816d1387a3a91a82f0bdaa2b703b45aa30be206d30d4dd1e8ac5deca13de57ad
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11249
x-amzn-requestid: 65a3db77-b2e6-40b9-a776-021c2e9b56d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bubSsHbZoAMFZNg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6375a5aa-1286b97968cc2e4c7fe8ab29;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 03:08:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: PYoD_MxycYfiNvyRlBnLWCcyqQK9sZi8y2ir1U9eCavNoAB-3oFcxg==
via: 1.1 38eecd3ca21bf068d69a2f9cfe668d14.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 19 Nov 2022 03:43:53 GMT
age: 41510
etag: "85d3baad9217af2b5d75c019d2ef95dbb919a788"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11249
Md5:    481c033b9ffd030ff0de6e35cf788b47
Sha1:   85d3baad9217af2b5d75c019d2ef95dbb919a788
Sha256: 02443c7869914c2b29892deb0c645395bcf4e8379da3cf20974614ff9c92893b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F640a732f-1fd9-47b0-8311-39061579f99b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7754
x-amzn-requestid: 2c21447c-03bb-4e50-9eeb-a8ae86c0d204
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0QRmFuiIAMFjWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377fa70-7a7e65fc5d443a1d70feb62b;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:40 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: MFN-Yhp70fPLS4R_tVxEvzt-YQ7COwXaXrmifEfXfpiC0epJHSJq7w==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:36:25 GMT
age: 63558
etag: "d18b869e1940841e9b03f66f5608e381f1727b37"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7754
Md5:    8cf981b1ea47b981c73aa1f291be4d8a
Sha1:   d18b869e1940841e9b03f66f5608e381f1727b37
Sha256: 3352a04b9596b594aeb5de3dc70047196a830e3ca79babf7c1b72ff1103b2d26
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47c537d4-e03f-4ec6-8922-6dce72c72ab9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4851
x-amzn-requestid: 8c868655-d0eb-428d-9fc0-a7449f770bd4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brtDFF9HoAMFV9w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63748ee0-4f7daf8f7451dc5e0840f620;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 07:18:56 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: xirMw5z5GPbmx9Sii_I4iNeh1GS5k9lGmaaJvUGAPWoVyP0Tldhf1w==
via: 1.1 e9ba0a9a729ff2960a04323bf1833df8.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Sat, 19 Nov 2022 07:17:42 GMT
age: 28681
etag: "d7a5473d367e7965a4af55acbf4675ed7088fab2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4851
Md5:    459df915ce91b32b2dcc4850516d68a0
Sha1:   d7a5473d367e7965a4af55acbf4675ed7088fab2
Sha256: a03e26ebee79ad9b9dda1bf680e0d2467ae6d5e582589ada9fe6ddfa437c483c
                                        
                                            GET /ajax/libs/jquery-migrate/1.4.1/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.17.24.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Sat, 19 Nov 2022 15:15:44 GMT
content-length: 3550
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec2-2748"
last-modified: Mon, 04 May 2020 16:11:46 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1868530
expires: Thu, 09 Nov 2023 15:15:44 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bpnpAA%2ByvWCM9qjIPUZkpajDPsuRH6VxCJAea4%2F5ZqrBxgCTPsropuXJdh%2FP2tqOge%2BOm%2F%2BhNpojyAK0zITojIx8eupQNW6FI6Saq5fwc4n0K9IxaHzp96nfM8L%2Bxxqg2C70xULG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76c9e72a8e9f0b4d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (9959)
Size:   3550
Md5:    908acf0ea0e8da0309bb2965bfbcab4f
Sha1:   f379a68308437c642db8dd82ecc0e4dc319d760b
Sha256: 33b0296cb0341be709cb2609ea40e77a4942d7db113d8e9a7184f684f927deee
                                        
                                            GET /qca6mqh.css?ver=1 HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: text/css;charset=utf-8
                                        
server: nginx
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: private, max-age=600, stale-while-revalidate=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 1443
date: Sat, 19 Nov 2022 15:15:44 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (516)
Size:   1443
Md5:    60b8f5cce35052880d65e9bd7ff80f6c
Sha1:   07fb0a46f02fae4bb5b1c2a24f8792b146263604
Sha256: aa61b6260873fcccce76a7466a644e72936b0be80ac32a881c0c02ed2c8f76c9
                                        
                                            GET /p.css?s=1&k=qca6mqh&ht=tk&f=15498.15501.15505.15506.15508.15509.15510.15701.15703.15705.15707.15708.15709.22708.22709.22710.22711.26839.26840.26841.26842&a=83560045&app=typekit&e=css HTTP/1.1 
Host: p.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: text/css
                                        
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=604800
cross-origin-resource-policy: cross-origin
etag: "613bee4d-5"
last-modified: Fri, 10 Sep 2021 23:46:21 GMT
server: nginx
content-length: 5
unused62: 8096267
date: Sat, 19 Nov 2022 15:15:44 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   5
Md5:    83d24d4b43cc7eef2b61e66c95f3d158
Sha1:   f0cafc285ee23bb6c28c5166f305493c4331c84d
Sha256: 1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb
                                        
                                            GET /jquery-1.12.4.min.js?ver=1.12.4 HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         69.16.175.10
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Sat, 19 Nov 2022 15:15:44 GMT
content-encoding: gzip
content-length: 33738
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-17b8b"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1668870944.dop018.sk1.t,1668870944.cds256.sk1.hn,1668870944.cds251.sk1.c
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32077)
Size:   33738
Md5:    fc7624613c4e25843694cdb7fa956f05
Sha1:   7765bb4016ae929e22be579ccde505b94c2a63c1
Sha256: 49c97d70ef48bfdc1d7b96271b5613bb099b2c040ebdf5624962aea92ff428ae
                                        
                                            GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=7.6.2 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Wed, 06 Jul 2022 10:09:37 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1637
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4933), with no line terminators
Size:   1637
Md5:    971cfc62ecc92ebe1174a2c80671a10f
Sha1:   86989b6ba38041063eab75516aa10bfc3fc9a55f
Sha256: e51fd87d27a0dedfe4afb52aab0d8708d369be1e16ff09b90245c145bd8847ba

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Wed, 02 Nov 2022 02:16:43 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 189
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   189
Md5:    5a18e16eb01cbaa862eb32e6b77bedb2
Sha1:   3abf9b913cc9f558f02cba7c9b822f8d1812cb96
Sha256: d2b5af913332941d5ae7786d1fa70e0d009315c4ede6ad5b80d0f663bb54521f

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-admin/css/color-picker.min.css?ver=6.1.1 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Wed, 24 Mar 2021 21:41:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 977
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3091)
Size:   977
Md5:    6a9302b570b961ad7e7b6dd824e9890a
Sha1:   e82e6c5895ccc165740383f7bc62ee36dcd2a847
Sha256: 1a0e6c95e9d888580ea536b221ee5d204bf841c32b7083858713c8ea2cef34cd

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 25 May 2022 02:15:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5321
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (15660)
Size:   5321
Md5:    710f8b142ea44c0682dc2c30f318f065
Sha1:   49144e9b3a76d3d383b1d4359cf7a25e947f4233
Sha256: 708bb5819879a2a2c7670abc20a58cca68a415ffd621011cbc4c3c9d82dddc50

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 409 Conflict
content-type: text/html; charset=iso-8859-1
                                        
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
content-length: 83
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   83
Md5:    26267cd8990f15d3bbea71684a6d5995
Sha1:   ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
Sha256: 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/pt-holleta-addons/assets/css/swiper.css?ver=4.5.0 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 25 Apr 2022 14:17:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1385
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   1385
Md5:    8eea3a55a1f1d03241e01d9320390253
Sha1:   db1729584bd5320f576e77ec76cb38ff2827d266
Sha256: 92038fc69f9702264c7078ab70742b07e95710a782d07d39786a634726804940
                                        
                                            GET /wp-content/plugins/wp-user-avatar/assets/flatpickr/flatpickr.min.css?ver=3.2.15 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Wed, 06 Jul 2022 10:09:25 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3993
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (15499), with no line terminators
Size:   3993
Md5:    749c44c88a2538fb5b248e31058b61d3
Sha1:   ba08948b74ead6e0a6f8c963e26973287d4778e8
Sha256: b3cc2018779505501063e9d3a1b2ae45d5eabeabdd9165e59379e987797485c8

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/holleta/css/woocommerce-layout.css?ver=6.1.1 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 06 Apr 2021 13:11:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3731
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   3731
Md5:    dd94dc2774b60ec457c0b1a663e3ba38
Sha1:   f2e39414068c590959cb3e173104ed0fe16891b5
Sha256: a4581f706644b9b1ef03b080d363ee55fa322e0e8edb8e21ec015f18466a7971
                                        
                                            GET /wp-content/themes/holleta/css/select2.css?ver=6.1.1 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 06 Apr 2021 13:11:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1351
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   1351
Md5:    8cf329ac27ac7c10933ce3956855ff60
Sha1:   4acf8eb90863dc6fa32f07aa5bac3c220afe83fb
Sha256: 75f6bf47df03a5df5e969988eceaa63dc53e4cd59d3a7ed83307f8ff2f39ca72

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/uploads/2022/04/atlas-crown-logo.png HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

search
                                         50.87.148.136
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 19 Nov 2022 15:15:44 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 28 Apr 2022 14:37:34 GMT
Accept-Ranges: bytes
Content-Length: 10656
Keep-Alive: timeout=5, max=75


--- Additional Info ---
Magic:  PNG image data, 172 x 75, 8-bit/color RGBA, non-interlaced\012- data
Size:   10656
Md5:    7c285dcf6a8a01361b9fec41b7e245bd
Sha1:   5d2095cb3acf8059c64c9c2e9b46488efb3034f8
Sha256: 531c9d4bae70ab1e201d7b74362dd41183b667876c5f69bb98bd5e30a627625a
                                        
                                            GET /wp-content/themes/holleta/css/fontawesome.min.css?ver=6.1.1 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 06 Apr 2021 13:11:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 12029
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (55094)
Size:   12029
Md5:    fa780bbf378ef9d358887df16e8a4168
Sha1:   1e09c9e9839dfc626214846ee3cbca380f53c6bd
Sha256: 79fa1d5cb9703c7a5150aa98681712cc61a2d36f5ab7466cdf1fa23adaa80c5b
                                        
                                            GET /wp-content/plugins/motopress-hotel-booking/vendors/kbwood/datepick/jquery.datepick.css?ver=4.2.4 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Wed, 06 Jul 2022 10:23:20 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1085
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   1085
Md5:    63abf26d6cb0673337a67b5c93325008
Sha1:   be42124d9de02b0bdb6aa5288b3511e07fd766c6
Sha256: 6edca8f21cb27efbe73c98ffbf0f722010fee245f993a1fc189e380a88c57353

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/mailchimp-for-wp/assets/css/form-themes.css?ver=4.8.7 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 25 Apr 2022 14:19:23 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1457
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6836), with no line terminators
Size:   1457
Md5:    e74d5959e65d81af0b5df6b44fce28a6
Sha1:   beb1fcb46ad2733e55da802431fce89f9a8486b4
Sha256: 223feaf37899c0072f76b6cc33ee446ff2dede021b0433d2ba71fedf28c8a66b

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/wp-user-avatar/assets/css/frontend.min.css?ver=3.2.15 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Wed, 06 Jul 2022 10:09:25 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 15513
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   15513
Md5:    87880bb22a573d5119418068c0cc77ef
Sha1:   d1b572c579a20c0863d984c5506e7a684aed571e
Sha256: c48dc88689c20653113972f12a66d90bef8b5fa7f8386c6210bea39ae7583909
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 409 Conflict
content-type: text/html; charset=iso-8859-1
                                        
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
content-length: 83
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   83
Md5:    26267cd8990f15d3bbea71684a6d5995
Sha1:   ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
Sha256: 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 25 May 2022 02:15:57 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2675
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6475), with no line terminators
Size:   2675
Md5:    45bd1d6f7fc3a4069fc6fd400b90c961
Sha1:   903c7e28c7141e9fc1bdb4dfc62d043a97a01e2d
Sha256: c638a0057b4be0a61cfb65b1860a855a327397e9871f5dde28fa2f138fb394dc

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/pt-holleta-addons/assets/css/pt-inline.css?ver=6.1.1 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 25 Apr 2022 14:17:38 GMT
accept-ranges: bytes
content-length: 0
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2

                                        
                                            GET /wp-content/themes/holleta/css/iconfont.css?ver=6.1.1 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 06 Apr 2021 13:11:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5674
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   5674
Md5:    42c5e05aa17d076e0a209016bea701c2
Sha1:   16464487a6a2012617b02beea42c3600c57f949a
Sha256: c5d8cb4815ebb40f8e0f2188b429193188122bca19d892aa7a3f6751a701bfa7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/wp-user-avatar/assets/select2/select2.min.css?ver=6.1.1 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Wed, 06 Jul 2022 10:09:25 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3356
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (14965), with no line terminators
Size:   3356
Md5:    8be7a878c560f1b146db163966f64d74
Sha1:   0dfdd50b2c3355c62cd7426649e819ba4a652495
Sha256: 7c7f8eb143a56619e051b210fa355e14ff4ff9f8fad982b0c4110c166a2aadca
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.6.1 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 06 Jul 2022 10:09:37 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1200
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (3037), with no line terminators
Size:   1200
Md5:    57b5945094a547e06221f8f949e6d335
Sha1:   76fc7361f00684ea29ffbf4b7d46e5429b8c245a
Sha256: f9d0da987075df31cc4cf8aed46bc193467ce7165568d83c8016e6fe904e72c3

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/holleta/style.css?ver=6.1.1 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 06 Apr 2021 13:11:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 375
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   375
Md5:    215b93952bb05bfde44afb117602eaaf
Sha1:   9286d0be46dbea0fe8ca3d5377310d1552d22d17
Sha256: 7977f24666d340e256d60d1a686f2d27a058a9ad6840ab763adf5f535e07486a

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/motopress-hotel-booking/assets/css/mphb.min.css?ver=4.2.4 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Wed, 06 Jul 2022 10:23:20 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2479
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (10684), with no line terminators
Size:   2479
Md5:    a870f8165cc17ed0111887eac7e83bf5
Sha1:   545fbd8ccf7fca5fc968c4b24a92a97670b92504
Sha256: 095baa6f8d6ccf287e18a0f719cd73595a456864e0e93adaa9c251dc459b82e2

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/motopress-hotel-booking/vendors/canjs/can.custom.min.js?ver=4.2.4 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 06 Jul 2022 10:23:20 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 10087
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3717)
Size:   10087
Md5:    c25f1928246943d811bb0155b2380a26
Sha1:   d94229accb1d4a751906fe7dacb3c51f30da1222
Sha256: b34c3b4b90d6d4fa48a6b7a272ced466d12cfdb045786f683dcd3d390d2e23fd

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/pt-holleta-addons/assets/css/photoswipe.css HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 25 Apr 2022 14:17:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5311
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   5311
Md5:    d23efb12f4fe1652198afe2d6d86b13e
Sha1:   1c1a5b4d042be0dde0e5e8ef05b5bd8fa539dfb0
Sha256: cc107ddb97986077168604266da722ef88fdd3d23ef0e017f645abf2bb66b7a3
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.6.1 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 06 Jul 2022 10:09:37 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 792
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2139), with no line terminators
Size:   792
Md5:    1ca3f41c13e0027acc45f0601f8b640f
Sha1:   cced34af0c6a59e9cee4229faa66ab39c7031506
Sha256: d3bc5eaf4c6be9473dbba690825cce9a1a6f4accb6721dae7875efef54942f41

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Wed, 16 Nov 2022 02:20:17 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (47826)
Size:   22454
Md5:    e6ff64db4b936357b1799b3e02ed4c7e
Sha1:   dc224cce9424e05ef7691d2c019220f2f9cc21d0
Sha256: 95d0731bb9a6377c3de4e66f4bbf37dececc0822ecfe8ae5b658169a7437ae6d

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/pt-holleta-addons/assets/js/js_composer_front.min.js?ver=1.0.0 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 25 Apr 2022 14:17:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8319
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (825), with CRLF line terminators
Size:   8319
Md5:    c7768324abcc1ea66d5a5211057dbe10
Sha1:   f4ffab7c9783a77e3147180722759af065ff0948
Sha256: 55198f589ed5a4e23d39ff1a48dd92a6e1df4eb6a159397cda0f721eed9f09ed

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/pt-holleta-addons/assets/js/load-posts.js?ver=1.0.0 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 25 Apr 2022 14:17:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 900
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   900
Md5:    0e70aa080adb2e06cd3ad3c49fc6032e
Sha1:   d6fc2fd70b6867c015f31943ee0d08cd679806fa
Sha256: a209b5ae0b97224cc352c497b2d402add83f7949881be73d69c43309b20244a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/holleta/js/magic-cursor.js?ver=1.0.0 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 06 Apr 2021 13:11:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 639
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   639
Md5:    93c13a832acf98f908a13814dd211dfb
Sha1:   e240bfe27f046dbc2ddf1ef5a8553c191b3fcdba
Sha256: 573c80a6e81daf8485494f812c75acd7024836ed1abe21f947cb1fed4de64572

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET / HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
link: <https://www.atlascrown.net/wp-json/>; rel="https://api.w.org/", <https://www.atlascrown.net/wp-json/wp/v2/pages/2783>; rel="alternate"; type="application/json", <https://www.atlascrown.net/>; rel=shortlink
set-cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; expires=Sat, 19-Nov-2022 15:45:43 GMT; Max-Age=1800; path=/ mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; expires=Sat, 19-Nov-2022 15:45:43 GMT; Max-Age=1800; path=/ PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a; path=/
vary: Accept-Encoding
content-encoding: gzip
date: Sat, 19 Nov 2022 15:15:42 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (23287)
Size:   65270
Md5:    d020774bb514736a6b045705b47e644c
Sha1:   614883fefb06f464fd2fd1a099c0200b2217d4cf
Sha256: 5e0308ab8f5569c2d2ede85fa770bb5e1ef78125b8fd94ec35622752186e2529

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/pt-holleta-addons/assets/js/zilla-likes.js?ver=6.1.1 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 25 Apr 2022 14:17:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 392
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   392
Md5:    a6d0d468d38471cbeeaca9e91ae85481
Sha1:   a500cbe007017fa932d3eaa7890bd15965d67cf8
Sha256: 8ddd7974b1341ad0eb1f01c388119242c722d0e99c3c6d7f20e928cb1bdcbe9a
                                        
                                            GET /wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.9.0 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 25 Apr 2022 14:18:15 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 372
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   372
Md5:    0507d06596355ea2efd09bb9c5b0e46c
Sha1:   9ae0e8f7847222b09264ada703c182fd89011126
Sha256: fefb5c10a704ffcb6c905a785ec2af387ff7169dbe548fa4784cc5782797d4c2

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.6.1 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 06 Jul 2022 10:09:37 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1093
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2938), with no line terminators
Size:   1093
Md5:    769e9d3f7fc383ec1a02024e39730474
Sha1:   4f5a5edf28ed19b48c5e40747ec6896f0df8f09e
Sha256: 4636689d57889e984a7a1a1c6e2516b7a2d951407ca826aaf505c50002e2b486

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.6.1 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 06 Jul 2022 10:09:37 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3957
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (9139)
Size:   3957
Md5:    5f3c95f97f566ce33b859d6b874d116d
Sha1:   e47be9178d33d8d8eefda83c853b560aaed71413
Sha256: a0cea478b83a24f0c90bfaf776ed62fe8747395838a92d8c9f06ceb79b3e5918

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/motopress-hotel-booking/vendors/kbwood/datepick/jquery.datepick-en-GB.js?ver=4.2.4 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 06 Jul 2022 10:23:20 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 693
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text
Size:   693
Md5:    804fe8841339b0461f9225880284e3c4
Sha1:   a21ab044d732f6057b6264485f8be3adf083e571
Sha256: c2ac5f2f7902e55fc8f6340117aa164a938e75fca9f7ee3ea0091ed83266f1c7
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.6.1 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 06 Jul 2022 10:09:37 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1000
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1668)
Size:   1000
Md5:    0bebfb5722cbc8ac04e62aa40698be49
Sha1:   3bc5e4f29cb19a2d80d46dee242dabf7e42c0fd3
Sha256: 70d02eabbadbe176455a2bb53d8d567feca69847c067a5274987a8bdc65e3c05
                                        
                                            GET /wp-content/plugins/motopress-hotel-booking/vendors/kbwood/datepick/jquery.plugin.min.js?ver=4.2.4 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 06 Jul 2022 10:23:20 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1414
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (2986)
Size:   1414
Md5:    5554cb5473ed8112237a9d68d295f8f5
Sha1:   424876a9d5bda339b489f1db460ad6e3d9e21caa
Sha256: bd20df48800794e66275d9e6129d80669bdd7b99655a8ec155cf359f76487cb4

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Sat, 13 Jun 2020 23:53:26 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2103
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (5477)
Size:   2103
Md5:    f0bd7ad12acdee26cbb2701c1ba3610b
Sha1:   53c5d15129860868b60b74cb010b2c6050a64f69
Sha256: e6d0cb19e56d22e8e511c23ca2bd233bedb40e3c7cf4ff38fe6f059bc7e0c64f
                                        
                                            GET /wp-content/plugins/wp-user-avatar/assets/js/frontend.min.js?ver=3.2.15 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 06 Jul 2022 10:09:25 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3331
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (9346), with no line terminators
Size:   3331
Md5:    eb89a4b650d11f21e8dfb8723f0beb2a
Sha1:   ed1ca064486e70e34967e35432442ea2759d3bb0
Sha256: 2293eaa848408400905e5673a1a9764e17188ca86bedff223c1664c051df5b38

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.8.7 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 25 Apr 2022 14:19:23 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2759
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6210), with no line terminators
Size:   2759
Md5:    c74a284893e700efac7feda7f8ca29d9
Sha1:   e5f08422e3a5b9ed64676469e2d73ed9600ab3ee
Sha256: 01fb2bcfb32c7eabebccf5d1196cae451bae4f8ab247010f3cd6d86ef8521345

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/pt-holleta-addons/assets/js/photoswipe-ui-default.min.js?ver=4.1.1 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 25 Apr 2022 14:17:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4867
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (554)
Size:   4867
Md5:    9917006657347eb255684d613b1b983f
Sha1:   c0faad779e59e8e749a3ccb2b3a08af1a92eee23
Sha256: 51c6f9b10eb256005142db5ac94ba324d464f3607fd506ac23405291b96c599d

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/holleta/js/scripts.js HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 06 Apr 2021 13:11:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6130
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   6130
Md5:    f98feb51169c6d098395e26f004f8433
Sha1:   3234f56a082474b85ddc4e27cc5c5836ce547b66
Sha256: 2e8195fb4b15a835bae217e9c8deb6fe4ba1655741ef6385b32a18c978052d15

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/pt-holleta-addons/assets/js/parallax.min.js HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 25 Apr 2022 14:17:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6075
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (15016), with CRLF line terminators
Size:   6075
Md5:    ac3b9c921f5853fc5b6c50b5d0d00d12
Sha1:   3aad2194db33b72abfca21907472674eb38277bf
Sha256: 2435f2b9f3ca88595a1968596353e355366e40309e034cbb943d087a75bed86f

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 02 Nov 2022 02:16:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7621
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (17819), with no line terminators
Size:   7621
Md5:    66c68f2158dcf7d97a02f3719a17aab0
Sha1:   fdb04fb4c632b9fb4275006a4e402cd0d4fa393a
Sha256: e4b360f0e6ae1afc06f05f958e8696e5ae45257912bc2ab0b9334bd1382a51aa

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/pt-holleta-addons/assets/js/pt-scripts.js?ver=1.0.0 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 25 Apr 2022 14:17:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 11092
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1465), with CRLF line terminators
Size:   11092
Md5:    a23691e98c6a41757568e7c25b254160
Sha1:   3bc13ca0b4064b6a2391a01f9b0ed98862fcbda0
Sha256: 22f0b4a6dc97c78da97d32988c823e6c18215c9518b84f13d5693f0298ca7fbf

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/pt-holleta-addons/assets/js/photoswipe.min.js?ver=4.1.1 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 25 Apr 2022 14:17:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 14660
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (31625)
Size:   14660
Md5:    ff7454b5fba5cf4d4ef9472f2392eec9
Sha1:   c70ee564902de08f011f18b576fd450ee28b2fd4
Sha256: bb376575f21ddfa03eebd98db2b3d41b5b068cc48cd00039c01977bbc7a7ca84
                                        
                                            GET /wp-content/plugins/motopress-hotel-booking/vendors/kbwood/datepick/jquery.datepick.min.js?ver=4.2.4 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 06 Jul 2022 10:23:20 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 14546
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (37442)
Size:   14546
Md5:    7914aaa23bdaf3ae7301076ddfa04165
Sha1:   ffdf2b7c354b3974e7216f717902c4c1c1aa77ab
Sha256: 29e7980c6d15ad02091e04eba3cb1fc66ba74cb3e7b707cf7bacccb5a3de0c8f

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /af/180254/00000000000000000001522c/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3 HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.atlascrown.net
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: application/font-woff2
                                        
server: nginx
content-length: 46404
etag: "d8f0e75543cc417069e2148d573e1b3687264d73"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Sat, 19 Nov 2022 15:15:45 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 46404, version 1.0\012- data
Size:   46404
Md5:    99c0faff718ccc006ec5d8d1e362b3f4
Sha1:   cbc536df2796deb56f11cd0ad39c11d26fd11b92
Sha256: 38c9c1413e17c7a5ee87095bdb4cad0da069451ee937cb801c8f37f2c734644f
                                        
                                            GET /af/28ba4b/000000000000000000015226/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n6&v=3 HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.atlascrown.net
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: application/font-woff2
                                        
server: nginx
content-length: 46340
etag: "348b996e7db4e9e75fb5ea99ce70eb0a48fff62c"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Sat, 19 Nov 2022 15:15:45 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 46340, version 1.0\012- data
Size:   46340
Md5:    398e5676d9ad93fd4c55b69ed83095e4
Sha1:   ba91b2500318d166b2232f9c34100365c22fd42c
Sha256: 13ec7d881f137d95802acedb66d820b9429d7c85756f1cf6fc98843a52a7dcc0
                                        
                                            GET /af/5be6ad/00000000000000003b9ad05d/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n5&v=3 HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.atlascrown.net
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: application/font-woff2
                                        
server: nginx
content-length: 31308
etag: "d8da753c9daf254346924988f37536aad8bdb2a8"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Sat, 19 Nov 2022 15:15:45 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 31308, version 1.0\012- data
Size:   31308
Md5:    a4bc3f0a3c4a836a37204ad5e68c0748
Sha1:   8776d8aff0f39bc32f6aace1b5f9482fc0c8ae5e
Sha256: c56d07239552977cd9daaca2ca7a90ac2fcf2c1441df45df3f0ec29933167ecf
                                        
                                            GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=7.6.2 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Wed, 06 Jul 2022 10:09:37 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   90486
Md5:    0e43dd9eb0411759488aea5b83ff0de6
Sha1:   8e62731355cbc439c91711674e90e44608c46a8d
Sha256: a052752773f936f2c5a587c8ea5facf119feaa25bd2a40994f18680713a47612

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /af/fb2975/00000000000000003b9ad05c/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3 HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.atlascrown.net
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: application/font-woff2
                                        
server: nginx
content-length: 31320
etag: "fb1514073285723b9d8217310737a8d45885747e"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Sat, 19 Nov 2022 15:15:45 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 31320, version 1.0\012- data
Size:   31320
Md5:    624ee3d0f8fe2d406eb1977bd032c447
Sha1:   61dfaa83fec7e1bce770e0bd27845f41075ca244
Sha256: 82187622d95a6dc1a9418230e60fdd7a3b948841d319f1566c2a0a4349f84c48
                                        
                                            GET /af/a18530/00000000000000000001522e/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n5&v=3 HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.atlascrown.net
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: application/font-woff2
                                        
server: nginx
content-length: 45148
etag: "06f4bea9fe01f1b6088c17bf6b75c9a7d32e7259"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Sat, 19 Nov 2022 15:15:45 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 45148, version 1.0\012- data
Size:   45148
Md5:    e2ac5282456f8d1f1a2acf8356c9099e
Sha1:   10358b8fefdb0a3d71354f82d0594a581d4902b2
Sha256: d18f7face3f4bdbc708900aee3288b53e5ac617e4736804428d0a9f647e745c9
                                        
                                            GET /af/acc12d/00000000000000003b9ad05b/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3 HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.atlascrown.net
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: application/font-woff2
                                        
server: nginx
content-length: 30944
etag: "88c2d678a434632263f607a8b797884429b7d1f1"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Sat, 19 Nov 2022 15:15:45 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 30944, version 1.0\012- data
Size:   30944
Md5:    6d9f01db4ff89bb20bfc373da1b489d1
Sha1:   171e23add3794a1120fbbcd3478e0b4561e94542
Sha256: a7832d6a31ba9dbcbbe4d9ea044415ab34766489def58d532f473c1780878a76
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 409 Conflict
content-type: text/html; charset=iso-8859-1
                                        
date: Sat, 19 Nov 2022 15:15:45 GMT
server: Apache
content-length: 83
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   83
Md5:    26267cd8990f15d3bbea71684a6d5995
Sha1:   ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
Sha256: 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/uploads/2022/09/slide-5.jpg HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Sat, 24 Sep 2022 08:42:55 GMT
accept-ranges: bytes
content-length: 264431
date: Sat, 19 Nov 2022 15:15:45 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1903x869, components 3\012- data
Size:   264431
Md5:    2043dc530d75f2747c14bc44d2edaccb
Sha1:   ef4de47a50b1eb75f014ccae002f08fa5f53ed75
Sha256: 603ddb7e0844fb30249f4d8f37aef4689249f8cb6133fa0c96a55256f8d4328c
                                        
                                            GET /wp-content/uploads/2022/05/DSCF4917-1024x577.jpg HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 05 May 2022 15:40:56 GMT
accept-ranges: bytes
content-length: 101931
date: Sat, 19 Nov 2022 15:15:45 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, copyright= ], baseline, precision 8, 1024x577, components 3\012- data
Size:   101931
Md5:    955befdac8b007f1eba2b169f09b6c1c
Sha1:   be3937bcff497e1f3bd1f466430dcbe9f424cefd
Sha256: 3ed5e758d171b77d92b85c0b58500d1cb5a27176a9a450ae5a33219aafdc0bea
                                        
                                            GET /wp-content/uploads/2022/04/food-ac-1024x683.jpg HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Fri, 29 Apr 2022 11:33:01 GMT
accept-ranges: bytes
content-length: 131253
date: Sat, 19 Nov 2022 15:15:45 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x683, components 3\012- data
Size:   131253
Md5:    ebaf4e55a1e87518f66022bdf6e8cb2b
Sha1:   c7412a12e568db2332fcb1b24247200a1cabd007
Sha256: 9432f9bededb65d6ea909112d855b5490f90c9f4edaf8a3f73fb02c575414222
                                        
                                            GET /wp-content/uploads/2022/04/slider-6.jpg HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Fri, 29 Apr 2022 10:37:41 GMT
accept-ranges: bytes
content-length: 745710
date: Sat, 19 Nov 2022 15:15:45 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1903x869, components 3\012- data
Size:   745710
Md5:    9a67159b3097579aa4e5832487b76954
Sha1:   10aba5037563da4a8fc2984142bfa4e24fc6872c
Sha256: c2fe7d43423582a5de0a5e16adc0bc2ca07f180fc27bde479c47f966035f196c
                                        
                                            GET /wp-content/plugins/motopress-hotel-booking/assets/js/public/mphb.min.js?ver=4.2.4 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 06 Jul 2022 10:23:20 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   172712
Md5:    d96d2b1ffd07277a72c994e613cf4ddd
Sha1:   bacd6204a651dd9d9da482e8a19383382a829863
Sha256: b1a87144b29dbbea2e98bcb1802a2b9fd87697466fefaae347d1b62351ea1ce9

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/uploads/2022/04/slider.jpg HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 28 Apr 2022 11:23:44 GMT
accept-ranges: bytes
content-length: 752399
date: Sat, 19 Nov 2022 15:15:45 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1903x869, components 3\012- data
Size:   752399
Md5:    684ed6c896fef915e866ca62eaf3bbd5
Sha1:   c93faa274ccf8a4e64cb659c28f2d1e3a66a08c7
Sha256: 45fac00781f4ef3f00a8753e0cf485300fa4d642d8fa4c173f1c44ee46905416
                                        
                                            GET /wp-content/uploads/2019/12/s5-1024x683.jpg HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Fri, 29 Apr 2022 15:01:46 GMT
accept-ranges: bytes
content-length: 163528
date: Sat, 19 Nov 2022 15:15:45 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x683, components 3\012- data
Size:   163528
Md5:    cadb1d7cf84fd42462f3c63f967ada65
Sha1:   700af11e6f620d7d0e181c2818943ad0de6f560b
Sha256: 7a68014607782b5076566ae81bb86c6dd6ce73d7981cd71ed2bb76ae4de892f4
                                        
                                            GET /wp-content/themes/holleta/fonts/base-icon.ttf?dwj2e9 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/wp-content/themes/holleta/css/iconfont.css?ver=6.1.1
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: font/ttf
                                        
last-modified: Tue, 06 Apr 2021 13:11:10 GMT
accept-ranges: bytes
content-length: 12056
date: Sat, 19 Nov 2022 15:15:45 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, base-icon \012- data
Size:   12056
Md5:    4eb47ec28ef1c8803d23dfad6b106fdf
Sha1:   50b530dd0550ac53f0d656efddf91c0adc005deb
Sha256: 97d8b52443e6bde721903cf116b3e8ff348456a055d3c3e000949f0d8acba099

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/uploads/2022/09/slide-5-1024x468.jpg HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Sat, 24 Sep 2022 08:42:55 GMT
accept-ranges: bytes
content-length: 93671
date: Sat, 19 Nov 2022 15:15:45 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x468, components 3\012- data
Size:   93671
Md5:    352f0a1858b7c282728ca3caa1eef6b5
Sha1:   d27599ea55f501dd158b0a1fcff9fe1eedbbaf84
Sha256: c52129bdf05efbdf0f17f291b7150a3fb4151d728d66f3c759734be7e1df45d8
                                        
                                            GET /wp-content/uploads/2022/09/slide-4.jpg HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Sat, 24 Sep 2022 08:42:49 GMT
accept-ranges: bytes
content-length: 355079
date: Sat, 19 Nov 2022 15:15:45 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1903x869, components 3\012- data
Size:   355079
Md5:    4887c91dcf301f3cca09875b8f260e3c
Sha1:   d85112342d7e47d60a4c883385a9a5ad63569764
Sha256: 25d26a702e30f4bf59c1006c49e12436a9930a0663aaa03bf969fba0dc622dd6
                                        
                                            GET /wp-content/uploads/2022/04/slider-5.jpg HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Fri, 29 Apr 2022 10:29:47 GMT
accept-ranges: bytes
content-length: 535090
date: Sat, 19 Nov 2022 15:15:45 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1903x869, components 3\012- data
Size:   535090
Md5:    fa941ae7d4ae0291057a476e7790b935
Sha1:   79a7478085664ea4697e011dc2e7648e7aac5de9
Sha256: 7c1983859e166c7f60633d3d280b94c9f8291f034c184d798bc6cc81a4228a4d
                                        
                                            GET /wp-content/uploads/2019/12/s1.jpg HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Fri, 29 Apr 2022 15:01:29 GMT
accept-ranges: bytes
content-length: 333616
date: Sat, 19 Nov 2022 15:15:45 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x800, components 3\012- data
Size:   333616
Md5:    bef20f172e084219d2697de4532f2831
Sha1:   45f58139ec896bf1f5a7bf7b2ac1141017d4f168
Sha256: 808c63ad83b2e5704e3bbfdc759dfc2632c0a46f6cd2cc9abfd1470555f5f6d6
                                        
                                            GET /wp-content/uploads/2019/11/pool-1024x683.jpg HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Fri, 29 Apr 2022 11:25:58 GMT
accept-ranges: bytes
content-length: 215060
date: Sat, 19 Nov 2022 15:15:45 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x683, components 3\012- data
Size:   215060
Md5:    eb9cff41e9f11430dc81d5ad198756d8
Sha1:   d05a8a18c7467f4c1936733ceefc565d8de99c29
Sha256: 9b7693c8b49d0b748f0433f80172392b6cd272750415ad5554f531ae310a38fb
                                        
                                            GET /wp-content/uploads/2022/04/h-f2-1024x577.jpg HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Sat, 24 Sep 2022 09:07:47 GMT
accept-ranges: bytes
content-length: 97659
date: Sat, 19 Nov 2022 15:15:45 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x577, components 3\012- data
Size:   97659
Md5:    17ab593e75167a7ff0dcb26e9e632af7
Sha1:   c6f076807fb96b3548b8dbf5a7ac2f804ef04c8f
Sha256: ea180f71b55f8fd650021a0be636203abc4a89599ba224531599af3f31cdadb0
                                        
                                            GET /wp-content/uploads/2019/04/MTB-1024x683.jpg HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Fri, 29 Apr 2022 11:28:28 GMT
accept-ranges: bytes
content-length: 169615
date: Sat, 19 Nov 2022 15:15:45 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x683, components 3\012- data
Size:   169615
Md5:    a0e1c185a28350e3dc088c62d7c38997
Sha1:   303ef6938d203d7854d9a6a370cdf9b0d120734c
Sha256: 62cd7ba8db2aca31a4de7c42ebbaaf2bd5206f58e9d5d95df504f4cb73f0661b
                                        
                                            GET /wp-content/uploads/2022/04/h-f1-1024x577.jpg HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Sat, 24 Sep 2022 09:07:44 GMT
accept-ranges: bytes
content-length: 91564
date: Sat, 19 Nov 2022 15:15:45 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x577, components 3\012- data
Size:   91564
Md5:    d2aa8171a5807f1c4be4f0aff8c1dd67
Sha1:   eccda4e33f619bb2823bf74651b3f541e1254bfb
Sha256: 4803637dbe6a24eeecb19b41db3e5c4331bf023dde837f6f69fe6beea5e1c301
                                        
                                            GET /wp-content/plugins/pt-holleta-addons/assets/imgs/testimonials-rating.png HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/wp-content/plugins/pt-holleta-addons/assets/css/pt-addons.css?ver=6.1.1
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Mon, 25 Apr 2022 14:17:38 GMT
accept-ranges: bytes
content-length: 2167
date: Sat, 19 Nov 2022 15:15:45 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 474 x 77, 8-bit/color RGBA, non-interlaced\012- data
Size:   2167
Md5:    0dcc3bf436ae1519e272b66dd9b40a82
Sha1:   d7c89d98dcd73e1479a4371cfcb6bec3b6ee99d8
Sha256: 341a6f5808919bb70cfbea234c558197dce3d71450c099408158ced0c69f0b59
                                        
                                            GET /wp-content/plugins/pt-holleta-addons/assets/imgs/pattern.php?fill=363636&type=type3 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: image/svg+xml
                                        
vary: Accept-Encoding
content-encoding: gzip
content-length: 1841
date: Sat, 19 Nov 2022 15:15:45 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3997), with no line terminators
Size:   1841
Md5:    3ee42c9a5168f18d6e549bee408ce49a
Sha1:   b9cb2d9ae7fe6ae459fddf6a5cd4a4698f641751
Sha256: c1e12abb178b987e03cc4ac6462d9ed6c8ef7643520e1bdd395f576f852fcc5a
                                        
                                            GET /wp-content/uploads/2022/05/sd.png HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Thu, 05 May 2022 15:55:29 GMT
accept-ranges: bytes
content-length: 6398
date: Sat, 19 Nov 2022 15:15:45 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data
Size:   6398
Md5:    bfbc91684f17d215a637d175aaf5f1bc
Sha1:   234fc5c3a66d780c8ae25cb835f216c924b88efa
Sha256: 86b9fc7fbbbb448c7a38b804a8be347e1d6ccb3d76caa088abd7a8db6c761a82
                                        
                                            GET /wp-content/uploads/2022/05/yassine.png HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Thu, 05 May 2022 15:53:58 GMT
accept-ranges: bytes
content-length: 7799
date: Sat, 19 Nov 2022 15:15:45 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data
Size:   7799
Md5:    e72ff71acc63c9c59e99b59943e99fc0
Sha1:   c8be339598531e862995fc00c79c9a7f6aac6007
Sha256: 443536f09a697f19a44556a1130f649b9f1b0cbeab59308650656972bb82a8de
                                        
                                            GET /wp-content/uploads/2022/05/unnamed.png HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Thu, 05 May 2022 15:54:43 GMT
accept-ranges: bytes
content-length: 1317
date: Sat, 19 Nov 2022 15:15:45 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data
Size:   1317
Md5:    02b1662c7db9097e4fe78d3174b7dbb1
Sha1:   24bc36ba56348b64abb13762ae081ed27dde8a3d
Sha256: 8d9fa907d4b866a39c09daf1a8ee008bc725cc0f3fd9d577a6adbb2a3a207f14
                                        
                                            GET /wp-content/plugins/wp-user-avatar/assets/select2/select2.min.js?ver=6.1.1 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 06 Jul 2022 10:09:25 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   130420
Md5:    5182eae3c3e8576616c832aacb5d33bc
Sha1:   1e8ae2b02634816778311ee72ba1f43ff2b26355
Sha256: 1a0b930de41b1a7bf499527e19d7c213c4af6a62add93be9ed2915a9f7668522

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/uploads/2022/04/h-f4-1024x577.jpg HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Sat, 24 Sep 2022 09:07:54 GMT
accept-ranges: bytes
content-length: 103203
date: Sat, 19 Nov 2022 15:15:45 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x577, components 3\012- data
Size:   103203
Md5:    831979e6ae49a7e150629b575caf85a4
Sha1:   6b52b60071898daec275f02c199817cb343869c4
Sha256: a2a685c5a67801828368122b1354fb7a10b2fccd7fc6a9d6f32fdbf6f3712b77
                                        
                                            GET /wp-content/uploads/2022/04/h-f6-1024x577.jpg HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Sat, 24 Sep 2022 09:08:01 GMT
accept-ranges: bytes
content-length: 100577
date: Sat, 19 Nov 2022 15:15:45 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x577, components 3\012- data
Size:   100577
Md5:    44fea2cc5237963247ff51d4d8c8962d
Sha1:   877b17ca640e361339c1342a2b75ab665e7a04b1
Sha256: 1449e1a26f596521f76d4c1170efc1ccd5995929b037be673a077be49f959d41
                                        
                                            GET /wp-content/plugins/pt-holleta-addons/assets/js/swiper.min.js?ver=5.3.6 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 25 Apr 2022 14:17:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   312454
Md5:    663adae2935db2a4ddc62247cdc286f1
Sha1:   8beea244a176d91a35b88227b38504bfb2eab61c
Sha256: d1384b2d27623ac6fc9f565b10abbee12882e01dd70ce705b6fa3c24aefac653

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/uploads/2022/05/photo_2022-04-25_09-16-31-1024x577.jpg HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Thu, 05 May 2022 15:39:44 GMT
accept-ranges: bytes
content-length: 186538
date: Sat, 19 Nov 2022 15:15:45 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x577, components 3\012- data
Size:   186538
Md5:    71e98be8b1d2e077c54d76ea13324415
Sha1:   2d8236b4a1c4f24b9abe18ae2bebde95e9ae990f
Sha256: e472b31ca069fc1c8cb1b76bb9917b91ceb095697ead7783395d6414ed07add5
                                        
                                            GET /wp-content/uploads/2022/04/food.jpg HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Fri, 29 Apr 2022 10:49:03 GMT
accept-ranges: bytes
content-length: 500961
date: Sat, 19 Nov 2022 15:15:45 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x800, components 3\012- data
Size:   500961
Md5:    4e3fa39542fbfc03afddf4f233e24d9f
Sha1:   e58eb46741a72eeb4ebf080db068ce6ceca56251
Sha256: e64f81b4ddb3974ee0bd2220c6f5bb505150f2b2937a924616ba16883bcf462c
                                        
                                            GET /wp-content/uploads/2022/04/slide2.jpg HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Fri, 29 Apr 2022 10:39:10 GMT
accept-ranges: bytes
content-length: 672649
date: Sat, 19 Nov 2022 15:15:45 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x915, components 3\012- data
Size:   672649
Md5:    923cda0743bb7190656b9790639e7610
Sha1:   c6b00c0b083f7fd4d245ce7df219c1c129ef0be4
Sha256: 4d861a450cd9379504fecb41d55150d76f6c987e839f3749144037db056e1b9e
                                        
                                            GET /wp-content/uploads/2022/04/food2.jpg HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Fri, 29 Apr 2022 10:49:07 GMT
accept-ranges: bytes
content-length: 597868
date: Sat, 19 Nov 2022 15:15:45 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x1600, components 3\012- data
Size:   597868
Md5:    48306486b27290c3d08111877aeb0bc1
Sha1:   46ce7a3a43f42f0aef6ad2b43243b93c5112b7b2
Sha256: f02c15f392718ad51b76021c27f25278f9281db6908a58b4260eec242cea1258
                                        
                                            GET /wp-content/uploads/2022/04/ac2.jpg HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Fri, 29 Apr 2022 10:43:17 GMT
accept-ranges: bytes
content-length: 1301479
date: Sat, 19 Nov 2022 15:15:45 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x1334, components 3\012- data
Size:   1301479
Md5:    ad159c073ac30376723fd6659e215ae7
Sha1:   58f496a848262138b9fccbd0d08d212f58d9491a
Sha256: 160c63dd17c3939af1227ac4ca807909e44977592f0064a5894fac9e225d91f6
                                        
                                            GET /wp-content/plugins/wp-user-avatar/assets/flatpickr/flatpickr.min.js?ver=6.1.1 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 06 Jul 2022 10:09:25 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1428701
Md5:    615ee3b9f178d2e45eb36be265157ca0
Sha1:   555274bc9f54c5e1cf44f85bb2732a5e5211e078
Sha256: dcc783b4c75c2fb821db66857cec8e5464bb8a1421af4a05ae427c7b3bbbd491
                                        
                                            POST /?wc-ajax=get_refreshed_fragments HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 18
Origin: https://www.atlascrown.net
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
                                        
access-control-allow-origin: https://www.atlascrown.net
access-control-allow-credentials: true
x-content-type-options: nosniff
x-robots-tag: noindex
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; expires=Sat, 19-Nov-2022 15:45:43 GMT; Max-Age=1797; path=/ mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; expires=Sat, 19-Nov-2022 15:45:43 GMT; Max-Age=1797; path=/
vary: Accept-Encoding
content-encoding: gzip
content-length: 234
date: Sat, 19 Nov 2022 15:15:46 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (430), with no line terminators
Size:   234
Md5:    ed70f7d0d30de2cb32523311f0d39252
Sha1:   49ee9529e1c00eb36d76a9cacc7f191f82137ba1
Sha256: ea01d73f16040a24604d50d1e5f036e0f8e6f3da34f2f6d756cfbb23d4265a41

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/uploads/2022/04/cropped-fav-192x192.png HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Fri, 29 Apr 2022 12:10:22 GMT
accept-ranges: bytes
content-length: 18271
date: Sat, 19 Nov 2022 15:15:46 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Size:   18271
Md5:    2618accb28b1a47cbcb921f62f850e82
Sha1:   7fc451e630a90a6b930136a0ab35c031fef908d5
Sha256: caa8ad71b208a6ffc31a580692ad214cc01dfcd5b2d7df47415d068fec427fc3
                                        
                                            GET /wp-content/uploads/2022/04/cropped-fav-32x32.png HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Fri, 29 Apr 2022 12:10:22 GMT
accept-ranges: bytes
content-length: 1644
date: Sat, 19 Nov 2022 15:15:46 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size:   1644
Md5:    7b169069c9da5b56c03b8c820d1d78b4
Sha1:   e46aa7a4685cb494f462ebc4c729e0dcd93aafbd
Sha256: 8648792183e30b72cd1bb2f1bb66a2df8a6b0dbe17dc4ac1845475aeb80081d2
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57d03484-7ccd-4a2d-81a2-0205f032f99d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6365
x-amzn-requestid: 60bd00c0-6808-4bc5-a0cb-e4390d353d65
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: befxSFJOIAMF6Lw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636f466e-514b3be121f077d559acdb86;Sampled=0
x-amzn-remapped-date: Sat, 12 Nov 2022 07:08:30 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: E-bkNv53D_wWbPQkwNATrkuxsci_F32QIg7NCRL8yL8BoF_3lV-q3A==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Sat, 19 Nov 2022 11:33:44 GMT
age: 13326
etag: "6dac89954db5946b9ac1fdca3196d8b6bb3f54c3"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6365
Md5:    f5af431deee2fb28fcc08b25f5162944
Sha1:   6dac89954db5946b9ac1fdca3196d8b6bb3f54c3
Sha256: b22d9111361ebce06d55d14d05f4a5206ca7097b059bbe6bc02b10391b61f458
                                        
                                            GET /wp-content/themes/holleta/css/main.css?ver=6.1.1 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Sat, 24 Sep 2022 09:30:23 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/pt-holleta-addons/assets/css/pt-addons.css?ver=6.1.1 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 30 Sep 2022 14:49:35 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/themes/holleta/css/woocommerce.css?ver=6.1.1 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 06 Apr 2021 13:11:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.9.0 HTTP/1.1 
Host: www.atlascrown.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.atlascrown.net/
Cookie: ppwp_wp_session=980caac231589b9130e64da9c4cda1a6%7C%7C1668872743%7C%7C1668872383; mphb_session=d6be9c7f0ed65743cbc572d686dca931%7C%7C1668872743%7C%7C1668872383; PHPSESSID=a192fb9d9a5f6b2de48c6a2e2432555a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         50.87.148.136
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 25 Apr 2022 14:18:15 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Sat, 19 Nov 2022 15:15:44 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---