firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 08 Sep 2022 21:05:27 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Ug_AKUefKXVY9QfnK-GnPWS4Ra-vLIOlaYlhqfleI14jB9e0_wlE8w==
Age: 671
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b9adda4796e3cda8d92753c46964621c
5f1eba1f6085b23dea088a91fe6f8947172f9f62
a0577a8fcfa81b3f86d99566eb4429655b93a238ffd1a3752bc9aae3d969deea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A0577A8FCFA81B3F86D99566EB4429655B93A238FFD1A3752BC9AAE3D969DEEA"
Last-Modified: Tue, 06 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8327
Expires: Thu, 08 Sep 2022 23:35:25 GMT
Date: Thu, 08 Sep 2022 21:16:38 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Thu, 08 Sep 2022 03:46:35 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BrIQcCZchG6E_nhsWxcDelRxg8jHZSdGboU7aanBE3JXDOn8-JgHMg==
age: 63004
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 21:16:38 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.atlasdetailing.ca/
301 Moved Permanently 0 B IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: www.atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 08 Sep 2022 21:16:38 GMT
Server: nginx/1.21.6
Content-Type: text/html; charset=UTF-8
Content-Length: 0
X-Redirect-By: WordPress
Location: https://atlasdetailing.ca/
X-Server-Cache: true
X-Proxy-Cache: EXPIRED
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Thu, 08 Sep 2022 20:38:18 GMT
Cache-Control: max-age=3600
Expires: Thu, 08 Sep 2022 21:33:01 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: CLDWbsY41gFD1mBDinuTn5x-seX1raqQfQDgrylWNcECpvL01dTu-A==
Age: 2300
ocsp.digicert.com/
200 OK 471 B IP
Hash 042105f89c8d64b470d84e052cd412d1
a26c7e2559b3760ea2765b16a3f8d1be27f5dcf4
fadb8cdd22f4d7773d5c20d576f6400ab25e20e1efe3e3fe50d2ae39ca6f2725
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6091
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 21:16:39 GMT
Last-Modified: Thu, 08 Sep 2022 19:35:08 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 05e234add803cd70c0d9b45c45547ecf
dc6ab6db1257a9a5b9beb471209b40960a3388b1
c0716dddf19f20502b164e1d48d483269306bbfc54957be4bcf204d6cf61934d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C0716DDDF19F20502B164E1D48D483269306BBFC54957BE4BCF204D6CF61934D"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 09 Sep 2022 03:16:39 GMT
Date: Thu, 08 Sep 2022 21:16:39 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 7FU3gMPUHL66oZ1AxkmX+w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 4Mv83A4H78jnKdbvpI4e7oN/O3A=
atlasdetailing.ca/
200 OK 9.5 kB IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Hash 22f008f60d996b0a7b09bb6b4966e266
ad8f6684b41b21c57c2f5cd0dc008f7740dfdeb1
4952b4395c42adb958f3298d4d2bfe36875ba9f1407d97998920d62ab5599fdf
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Thu, 08 Sep 2022 21:16:39 GMT
server: Apache
content-type: text/html; charset=UTF-8
content-length: 9450
link: <https://atlasdetailing.ca/wp-json/>; rel="https://api.w.org/", <https://atlasdetailing.ca/wp-json/wp/v2/pages/448>; rel="alternate"; type="application/json", <https://atlasdetailing.ca/>; rel=shortlink
vary: Accept-Encoding
content-encoding: gzip
x-server-cache: true
x-proxy-cache: EXPIRED
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash db433121f8c8215d44bcd26aff290172
f96b386796e3589437cd57fac6782842c17ce746
455323a3f807014a498118929131b6aad4ec5283f95be23108b2afd329576098
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 21:16:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
maps.googleapis.com/maps/api/js?key=AIzaSyBYmN-DZ-v070a5BzK-nzPbo8pC1l2dgQc&libraries=places&language=en®ion=US&ver=6.0.2
200 OK 56 kB URL HTTP/2 maps.googleapis.com/maps/api/js?key=AIzaSyBYmN-DZ-v070a5BzK-nzPbo8pC1l2dgQc&libraries=places&language=en®ion=US&ver=6.0.2
IP
File type ASCII text, with very long lines (2426)
Hash 8f6cee9864237565103dcbf7ccb21166
3ac6f4deb0d0f4bc480a8ad68d4f5c6b58cc8aae
bb099a754d3ffd3dcf8e35033996a04727d8d62c4a8914a9c6416ae9e09b524d
GET /maps/api/js?key=AIzaSyBYmN-DZ-v070a5BzK-nzPbo8pC1l2dgQc&libraries=places&language=en®ion=US&ver=6.0.2 HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
date: Thu, 08 Sep 2022 21:16:39 GMT
expires: Thu, 08 Sep 2022 21:46:39 GMT
cache-control: public, max-age=1800
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 56180
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=22
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash db433121f8c8215d44bcd26aff290172
f96b386796e3589437cd57fac6782842c17ce746
455323a3f807014a498118929131b6aad4ec5283f95be23108b2afd329576098
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 21:16:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
atlasdetailing.ca/wp-content/plugins/user-registration/assets/css/my-account-layout.css?ver=1.8.3
200 OK 718 B URL HTTP/2 atlasdetailing.ca/wp-content/plugins/user-registration/assets/css/my-account-layout.css?ver=1.8.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (3366), with no line terminators
Hash d93dde34ca0e3243e3e9b04536025655
3baafa79dc932329f25cd637f61105c3fdf825aa
001bbb9a2587d106630ce066190046310e804a3b8fdf01a4841aaba5d256b03d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/user-registration/assets/css/my-account-layout.css?ver=1.8.3 HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 May 2020 18:31:20 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 718
content-type: text/css
date: Thu, 08 Sep 2022 21:16:39 GMT
server: Apache
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-content/plugins/user-registration/assets/css/user-registration.css?ver=1.8.3
200 OK 5.7 kB URL HTTP/2 atlasdetailing.ca/wp-content/plugins/user-registration/assets/css/user-registration.css?ver=1.8.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (28937), with no line terminators
Hash 262864b4c03d406fd3c7560f1dbcbf7b
17613d4485acfdfe1d23a53518207f7cad8771f6
dc1ae53a790ec2bb197f99b0bd0f5eb6371d9ac13d20715006af774f2b63fe66
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/user-registration/assets/css/user-registration.css?ver=1.8.3 HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 May 2020 18:31:20 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5747
content-type: text/css
date: Thu, 08 Sep 2022 21:16:39 GMT
server: Apache
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-content/themes/monolit/css/custom.css
200 OK 593 B URL HTTP/2 atlasdetailing.ca/wp-content/themes/monolit/css/custom.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 66723299204bc82449a26c9b88fb123d
4338ac389771e7755f8e00fe1f97e6a2eeafab00
d8732c15c398325eb1bdb43a67a21f9e79ae4c1c167cdfe3b6ce1fdf0a0e8b33
GET /wp-content/themes/monolit/css/custom.css HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Aug 2022 23:08:46 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 593
content-type: text/css
date: Thu, 08 Sep 2022 21:16:39 GMT
server: Apache
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-content/plugins/user-registration/assets/css/sweetalert2/sweetalert2.min.css?ver=8.17.1
200 OK 5.8 kB URL HTTP/2 atlasdetailing.ca/wp-content/plugins/user-registration/assets/css/sweetalert2/sweetalert2.min.css?ver=8.17.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (24620), with no line terminators
Hash de971d5e49b46a00b307bdc26804e2f5
2a32889f4f33da880beb49e9b93bcee1734602e4
08e0b368162fc50a3c0b836a566b0140714dc11521de58e079287cd5a9ccf6b0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/user-registration/assets/css/sweetalert2/sweetalert2.min.css?ver=8.17.1 HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 May 2020 18:31:20 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5789
content-type: text/css
date: Thu, 08 Sep 2022 21:16:39 GMT
server: Apache
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
200 OK 17 kB URL HTTP/2 atlasdetailing.ca/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (43771)
Hash 2a67a4888baa44de739f3fe56203ce07
da175eae57f26b655747d79f055477e3fee1abb9
3a4d7627476a0099ca4bcc101685f27de04cb49dd66ef842d72c6cda270599dd
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.2 HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Aug 2022 23:08:46 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 16594
content-type: text/css
date: Thu, 08 Sep 2022 21:16:39 GMT
server: Apache
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.1.9
409 Conflict 83 B URL HTTP/2 atlasdetailing.ca/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.1.9
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.1.9 HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Thu, 08 Sep 2022 21:16:39 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-content/plugins/gallery-photo-gallery/public/css/gallery-photo-gallery-public.css?ver=4.1.1
200 OK 2.6 kB URL HTTP/2 atlasdetailing.ca/wp-content/plugins/gallery-photo-gallery/public/css/gallery-photo-gallery-public.css?ver=4.1.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 87c15c54ab711776e0f2aeeb2cbe1c2f
fb961c8ee1050f6e2b08d4d4437bc45007cb955c
0096a3065f5188d070249f6685067a505a31bb910189c7944942fe4c1dde0e46
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/gallery-photo-gallery/public/css/gallery-photo-gallery-public.css?ver=4.1.1 HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 May 2020 18:31:13 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2606
content-type: text/css
date: Thu, 08 Sep 2022 21:16:39 GMT
server: Apache
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.9
409 Conflict 83 B URL HTTP/2 atlasdetailing.ca/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.9
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.9 HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Thu, 08 Sep 2022 21:16:40 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
200 OK 5.3 kB URL HTTP/2 atlasdetailing.ca/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (15660)
Hash 710f8b142ea44c0682dc2c30f318f065
49144e9b3a76d3d383b1d4359cf7a25e947f4233
708bb5819879a2a2c7670abc20a58cca68a415ffd621011cbc4c3c9d82dddc50
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Aug 2022 23:08:46 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5321
content-type: application/javascript
date: Thu, 08 Sep 2022 21:16:40 GMT
server: Apache
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-content/themes/monolit/js/scripts.js
200 OK 13 kB URL HTTP/2 atlasdetailing.ca/wp-content/themes/monolit/js/scripts.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash a3a3083131534651e98660d30082c5fd
8ae8e73966723b1c18665da8179e5e9adb1fe27e
d75ac184e443013291e94c37567dda5b6fb3269588a01fef017dcefdbd15884e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/monolit/js/scripts.js HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Nov 2018 04:14:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 12974
content-type: application/javascript
date: Thu, 08 Sep 2022 21:16:40 GMT
server: Apache
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-content/uploads/2018/11/aria_01_bLACK2.png
200 OK 46 kB URL HTTP/2 atlasdetailing.ca/wp-content/uploads/2018/11/aria_01_bLACK2.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 280 x 130, 8-bit/color RGBA, non-interlaced\012- data
Hash 25b075701058e488fa912ead076c3e94
b7a3204fcad7c2bfbdf6db2eed0c79553f44d625
fe9edbc9748ed93de37d09cf3786fea3b0489daf981c6b0a6bf269ff24b1bd9c
GET /wp-content/uploads/2018/11/aria_01_bLACK2.png HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Nov 2018 04:14:40 GMT
accept-ranges: bytes
content-length: 45962
content-type: image/png
date: Thu, 08 Sep 2022 21:16:40 GMT
server: Apache
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-content/uploads/2018/11/aria_01_bLACK3.png
200 OK 46 kB URL HTTP/2 atlasdetailing.ca/wp-content/uploads/2018/11/aria_01_bLACK3.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 280 x 130, 8-bit/color RGBA, non-interlaced\012- data
Hash 25b075701058e488fa912ead076c3e94
b7a3204fcad7c2bfbdf6db2eed0c79553f44d625
fe9edbc9748ed93de37d09cf3786fea3b0489daf981c6b0a6bf269ff24b1bd9c
GET /wp-content/uploads/2018/11/aria_01_bLACK3.png HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Nov 2018 04:14:40 GMT
accept-ranges: bytes
content-length: 45962
content-type: image/png
date: Thu, 08 Sep 2022 21:16:40 GMT
server: Apache
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.6 kB URL HTTP/2 atlasdetailing.ca/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (11126)
Hash acdb97105af28a7066790c6748ae2e1e
65794d2c5a9d04f747faf370bc8bacd330e69e5a
dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Aug 2022 23:08:46 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4618
content-type: application/javascript
date: Thu, 08 Sep 2022 21:16:40 GMT
server: Apache
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=5.2
200 OK 7.2 kB URL HTTP/2 atlasdetailing.ca/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=5.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (19781), with no line terminators
Hash 36758da1a7001bd1400df6429c661f6b
c8f35acf7a8636d8032c9df39bd6881f08531742
a2f126c6a53331c35d778ea71c8b04f695874c850893d1230d41aef6d810b46c
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=5.2 HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Aug 2022 23:08:46 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7202
content-type: application/javascript
date: Thu, 08 Sep 2022 21:16:40 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9054
Expires: Thu, 08 Sep 2022 23:47:34 GMT
Date: Thu, 08 Sep 2022 21:16:40 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9054
Expires: Thu, 08 Sep 2022 23:47:34 GMT
Date: Thu, 08 Sep 2022 21:16:40 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9054
Expires: Thu, 08 Sep 2022 23:47:34 GMT
Date: Thu, 08 Sep 2022 21:16:40 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9054
Expires: Thu, 08 Sep 2022 23:47:34 GMT
Date: Thu, 08 Sep 2022 21:16:40 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffca3b7c7-528e-421a-8910-451f0b9b667f.webp
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffca3b7c7-528e-421a-8910-451f0b9b667f.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 09267c271a56ba4c2d4197543f264fac
67ae4acd88571da51b81fa7ed963b7f2a71845b4
906163f9e1bb8908ae7fcfbf4debc2a42fd14a3f90c8814536025a57ee851dbe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffca3b7c7-528e-421a-8910-451f0b9b667f.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8162
x-amzn-requestid: decb1d93-bcc9-4a71-a054-c537ad7d1add
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YJvndF1fIAMFv7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631a2c95-27cef2465fd0e6c849da81af;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 17:55:33 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: C_J0m9xfkCb5qsoO934KB2Ldk1-yMaMXkgiv9gWus7JqjN3M_HCpdg==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 de8fc80b494d3d381f7e006918dcc588.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 17:56:29 GMT
age: 12011
etag: "67ae4acd88571da51b81fa7ed963b7f2a71845b4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5314d83a-c7f9-468e-8b42-535c4fae5d85.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5314d83a-c7f9-468e-8b42-535c4fae5d85.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a07d553b6441514870ed7e9e989a29a7
98c145b9326d1e6036fa9089d87a25232dd45b0b
373a586b596016baeb8de98022207c25af24c099c06077edbdfd837cffc31a0e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5314d83a-c7f9-468e-8b42-535c4fae5d85.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7492
x-amzn-requestid: 2c5e9ff3-c7a4-4a8f-96bf-74f0ca5d9137
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9dOHguIAMFjGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f87-70dbe6532b1a241e6dbe729e;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:39:19 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: 6mfdlMHJozdykr4faiijvUuJPXVrJGU_n0MxJgCrZ-uWWdejGYfiAQ==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 020978022b22df6352245f09cfbc410c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 22:33:06 GMT
age: 81814
etag: "98c145b9326d1e6036fa9089d87a25232dd45b0b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-content/themes/monolit/js/plugins.js
200 OK 109 kB URL HTTP/2 atlasdetailing.ca/wp-content/themes/monolit/js/plugins.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
Size 109 kB (108949 bytes)
Hash 145b1e2b83426dea19c10355d62bf724
fb9ba1f634e32b4021e8cdfc7fdf2133c0da20dd
7b27f7b8d4e27c4a972eda65d091bc5d130f18ee43fcfd69e6007760e6346fe0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/monolit/js/plugins.js HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Nov 2018 04:14:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Thu, 08 Sep 2022 21:16:40 GMT
server: Apache
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 45 kB URL HTTP/2 atlasdetailing.ca/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 7bb55ae5bc4719117208d291d9e7f798
cdfebda32c096df3367d24c3b4483865183e0d69
09e9f6d847b9b487e72f4b02e7691e00a21d6f05288bae965635d5ca44db8dcc
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 10 Mar 2021 15:07:24 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Thu, 08 Sep 2022 21:16:40 GMT
server: Apache
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ba17b3c-58f5-4458-8dc2-8e4a7cf8d782.jpeg
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ba17b3c-58f5-4458-8dc2-8e4a7cf8d782.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1cd778a615e9a4ca3a25119790398434
d6daca74fc85d39274b3c7536f34528bef93ae97
e6b5a7a525e314e09c30985b22da7c34806df09cbe98ad52b00dcbf93a0dc054
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ba17b3c-58f5-4458-8dc2-8e4a7cf8d782.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7251
x-amzn-requestid: 26b2021a-4440-47ce-8dba-d971cae60cc1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9bmHcmoAMF3Fw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f7d-5471edce7de2374c3b8af888;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:39:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: d3MrDEyDFDylQKyfxONQ12_7IBvRAg8o0rSZ64WNRGNvDHqQyDmqJA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 e77661e211afe9242e85e573f12d5534.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 22:16:27 GMT
age: 82813
etag: "d6daca74fc85d39274b3c7536f34528bef93ae97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F822fb287-f1f6-45a1-be54-4fa7385bb163.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F822fb287-f1f6-45a1-be54-4fa7385bb163.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6f73ee4e91b38eaa36cadd4c437785f8
6ceea057f5ae50b9cef505da0a358e3d3b7d6a38
778d28e14b28c154843403470136d0efdcdd5e93e4b5aab784c12d4344e7af6f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F822fb287-f1f6-45a1-be54-4fa7385bb163.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11365
x-amzn-requestid: d50039cd-381c-4221-997e-9231d40ecfbb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9V0EHEoAMFeag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f58-11cab61904bd14462cd13d0d;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:38:32 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: z7RyNwWgq5r9B2WMa5ibpo3d8DXFSFCCrEHpMvc0Q5SqE2x1ovaV-g==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 020978022b22df6352245f09cfbc410c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 22:41:33 GMT
age: 81307
etag: "6ceea057f5ae50b9cef505da0a358e3d3b7d6a38"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-content/plugins/user-registration/assets/css/user-registration-smallscreen.css?ver=1.8.3
200 OK 300 B URL HTTP/2 atlasdetailing.ca/wp-content/plugins/user-registration/assets/css/user-registration-smallscreen.css?ver=1.8.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (732), with no line terminators
Hash 48753fbafd4a5e10c634f335ca7785f8
e6630a452c9217ddd328bc2ac5bc1935b0954f41
f80109dca7c9f484c6f34e4ca7fb946ec3e7e8be60b21049bfacf9a2e70e8d42
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/user-registration/assets/css/user-registration-smallscreen.css?ver=1.8.3 HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 May 2020 18:31:20 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 300
content-type: text/css
date: Thu, 08 Sep 2022 21:16:40 GMT
server: Apache
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.9
409 Conflict 83 B URL HTTP/2 atlasdetailing.ca/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.9
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.9 HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Thu, 08 Sep 2022 21:16:40 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-content/themes/monolit/images/bg-dec.png
200 OK 940 B URL HTTP/2 atlasdetailing.ca/wp-content/themes/monolit/images/bg-dec.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 10 x 5, 8-bit/color RGBA, non-interlaced\012- data
Hash 77f1994a2a22ce484f609e2ead1a994b
ed5b0b0eb5f60ff4d68d982353f268a8e60d9dfa
6f474b41e9303aaa867207120ec2cca1093116de1d6343878e2c3d0bb6934604
GET /wp-content/themes/monolit/images/bg-dec.png HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/wp-content/themes/monolit/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Nov 2018 04:14:38 GMT
accept-ranges: bytes
content-length: 940
content-type: image/png
date: Thu, 08 Sep 2022 21:16:40 GMT
server: Apache
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-content/themes/monolit/fonts/fontawesome-webfont.woff2?v=4.5.0
200 OK 67 kB URL HTTP/2 atlasdetailing.ca/wp-content/themes/monolit/fonts/fontawesome-webfont.woff2?v=4.5.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 66624, version 4.262\012- data
Hash db812d8a70a4e88e888744c1c9a27e89
638c652d623280a58144f93e7b552c66d1667a11
ff82aeed6b9bb6701696c84d1b223d2e682eb78c89117a438ce6cfea8c498995
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/monolit/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://atlasdetailing.ca/wp-content/themes/monolit/css/plugins.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Nov 2018 04:14:39 GMT
accept-ranges: bytes
content-length: 66624
content-type: font/woff2
date: Thu, 08 Sep 2022 21:16:40 GMT
server: Apache
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-content/uploads/2017/12/AISC_logo.gif
200 OK 151 kB URL HTTP/2 atlasdetailing.ca/wp-content/uploads/2017/12/AISC_logo.gif
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type GIF image data, version 89a, 511 x 511\012- data
Size 151 kB (150994 bytes)
Hash dd8ce5140ea1dd5241d35516ec8f3bba
1c807668d2a9f62832f1c0d74c5183f93a5be64a
51c6a68f92c93e5eac99a49fc02258927b6da372bea43573cfdfa11426dc2d3d
GET /wp-content/uploads/2017/12/AISC_logo.gif HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Nov 2018 04:14:51 GMT
accept-ranges: bytes
content-length: 150994
content-type: image/gif
date: Thu, 08 Sep 2022 21:16:40 GMT
server: Apache
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-content/uploads/2017/12/nisd1-e1514686355456.png
200 OK 34 kB URL HTTP/2 atlasdetailing.ca/wp-content/uploads/2017/12/nisd1-e1514686355456.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 511 x 511, 8-bit gray+alpha, non-interlaced\012- data
Hash 5905997c7f02524cba37c03b28b46282
f623c0ee0d8ed10df2c0d26fda98b4385695c559
396e7029c7be17888fcfdebc58fab4a4fc4f631e7dcb62d31204b282f78af717
GET /wp-content/uploads/2017/12/nisd1-e1514686355456.png HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Nov 2018 04:14:51 GMT
accept-ranges: bytes
content-length: 33753
content-type: image/png
date: Thu, 08 Sep 2022 21:16:40 GMT
server: Apache
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-content/uploads/2016/03/Tekla-Structures2.png
200 OK 513 kB URL HTTP/2 atlasdetailing.ca/wp-content/uploads/2016/03/Tekla-Structures2.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 2000 x 1200, 8-bit/color RGBA, non-interlaced\012- data
Size 513 kB (512869 bytes)
Hash 7ef2e8bbf3e0162eb2c23bd134e7d226
d0c6e3fe3c65b87fb7f3a25b7fc53ca181a67262
caadef04db8f9edb2a367e73bdd5aa6055731b87eaf8077509bbbcf316bdcfbb
GET /wp-content/uploads/2016/03/Tekla-Structures2.png HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 06 Nov 2018 04:14:53 GMT
accept-ranges: bytes
content-length: 512869
content-type: image/png
date: Thu, 08 Sep 2022 21:16:40 GMT
server: Apache
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-content/uploads/2020/06/Logo_14_01.jpg
200 OK 106 kB URL HTTP/2 atlasdetailing.ca/wp-content/uploads/2020/06/Logo_14_01.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=8, orientation=upper-left, xresolution=110, yresolution=118, resolutionunit=2, software=ACDSee Pro 9, datetime=2018:11:27 18:55:53], baseline, precision 8, 960x540, components 3\012- data
Size 106 kB (105456 bytes)
Hash 2872163d9549802eae01f12f1435df8c
325bc0d9380e4c44fbd9c52d5d28628bce403e8a
51188dd48745928c87a0471f91144411398199f68da83d2b66b2b3144ebebaaf
GET /wp-content/uploads/2020/06/Logo_14_01.jpg HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jun 2020 19:38:54 GMT
accept-ranges: bytes
content-length: 105456
content-type: image/jpeg
date: Thu, 08 Sep 2022 21:16:41 GMT
server: Apache
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-content/uploads/2017/09/pexels-photo-462326-e1505091751488.jpeg
200 OK 839 kB URL HTTP/2 atlasdetailing.ca/wp-content/uploads/2017/09/pexels-photo-462326-e1505091751488.jpeg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 82", baseline, precision 8, 4488x1545, components 3\012- data
Size 839 kB (838935 bytes)
Hash 1d05034d775861d519579b63d4de0858
29a1c295d29481c517cb9522b47e5cce3066ed81
1590a7083f8f01cf2027be43937e082be290b94b8862f83fec9dc06bdd0ececb
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2017/09/pexels-photo-462326-e1505091751488.jpeg HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 21:16:41 GMT
server: Apache
content-type: image/jpeg
content-length: 838935
last-modified: Tue, 06 Nov 2018 04:14:51 GMT
x-server-cache: true
x-proxy-cache: EXPIRED
accept-ranges: bytes
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-content/uploads/2018/11/cropped-aria_01_bLACK-32x32.png
200 OK 2.5 kB URL HTTP/2 atlasdetailing.ca/wp-content/uploads/2018/11/cropped-aria_01_bLACK-32x32.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 0aa6c831a5e66636935115c71e2f6e5e
0f8895297c489f274d6003b07db511dc5e7dc48b
a0450e361c1ecdcd1625caf38f708dcef264f5c8dd37a6672bd816d8493aeb41
GET /wp-content/uploads/2018/11/cropped-aria_01_bLACK-32x32.png HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jun 2020 20:03:37 GMT
accept-ranges: bytes
content-length: 2491
content-type: image/png
date: Thu, 08 Sep 2022 21:16:41 GMT
server: Apache
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-content/uploads/2018/11/cropped-aria_01_bLACK-192x192.png
200 OK 44 kB URL HTTP/2 atlasdetailing.ca/wp-content/uploads/2018/11/cropped-aria_01_bLACK-192x192.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash be5ab9ec55883718ccd179e0a7af8f42
ca6c1e17b55559516372115b68a2cd69d5947f4b
f6b54e9a2de7ac01cd6aae883cb7bcf0d4d981781afc8a62258693b214782a79
GET /wp-content/uploads/2018/11/cropped-aria_01_bLACK-192x192.png HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jun 2020 20:03:37 GMT
accept-ranges: bytes
content-length: 43501
content-type: image/png
date: Thu, 08 Sep 2022 21:16:41 GMT
server: Apache
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-content/uploads/2020/02/HINTON.png
200 OK 68 kB URL HTTP/2 atlasdetailing.ca/wp-content/uploads/2020/02/HINTON.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 957 x 643, 8-bit/color RGBA, non-interlaced\012- data
Hash 14c4e3c776ac4434588d4bb95b23bb39
9c876feb1559611be4934100b8aec7274e619b1e
a99a1e5c7f2cf80a239a21af920e9233375f8039359f8bc9d54faf31dc18b39b
GET /wp-content/uploads/2020/02/HINTON.png HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 06 Feb 2020 21:06:35 GMT
accept-ranges: bytes
content-length: 68347
content-type: image/png
date: Thu, 08 Sep 2022 21:16:41 GMT
server: Apache
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-content/uploads/2020/01/Alexandra.png
200 OK 210 kB URL HTTP/2 atlasdetailing.ca/wp-content/uploads/2020/01/Alexandra.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 1935 x 1353, 8-bit/color RGBA, non-interlaced\012- data
Size 210 kB (209858 bytes)
Hash 9f3857c1ab4a0689c753f9d672bc193f
cc082d9ee878b322e7a8f1931b5a112797618cd0
6797c3d15d73546190de0ef6c1b64605aefa49c2b9822c865a84ee6c2d91af67
GET /wp-content/uploads/2020/01/Alexandra.png HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 29 Jan 2020 19:28:28 GMT
accept-ranges: bytes
content-length: 209858
content-type: image/png
date: Thu, 08 Sep 2022 21:16:41 GMT
server: Apache
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-content/uploads/2020/01/SCOTT.png
200 OK 195 kB URL HTTP/2 atlasdetailing.ca/wp-content/uploads/2020/01/SCOTT.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 1991 x 1367, 8-bit/color RGBA, non-interlaced\012- data
Size 195 kB (194565 bytes)
Hash 798a18f0724fa170a6fa2b0101e3212b
01cacdcb69aa362e9f5e791e64a5ce7f2a738ffc
884ad8bb956ae6d0a9d6cca4b36ed77a6fca5f7ec81144cfcf019b3753b52e2a
GET /wp-content/uploads/2020/01/SCOTT.png HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 20 Jan 2020 22:28:09 GMT
accept-ranges: bytes
content-length: 194565
content-type: image/png
date: Thu, 08 Sep 2022 21:16:41 GMT
server: Apache
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-content/uploads/2020/02/Marriott.png
200 OK 221 kB URL HTTP/2 atlasdetailing.ca/wp-content/uploads/2020/02/Marriott.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 2533 x 1643, 8-bit/color RGBA, non-interlaced\012- data
Size 221 kB (220749 bytes)
Hash 7e8bb68a5c1b4942a3765874e5f16377
ec6c8b2081ed58cfc484a936b9aad9c11e3b1fc5
db9f8fe7276265d159299d1c414bff0ebfdc3e12ebcd51da9d4ee680b410911d
GET /wp-content/uploads/2020/02/Marriott.png HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 05 Feb 2020 22:19:01 GMT
accept-ranges: bytes
content-length: 220749
content-type: image/png
date: Thu, 08 Sep 2022 21:16:41 GMT
server: Apache
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-content/uploads/2019/12/PG.png
200 OK 296 kB URL HTTP/2 atlasdetailing.ca/wp-content/uploads/2019/12/PG.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 2145 x 1319, 8-bit/color RGBA, non-interlaced\012- data
Size 296 kB (295527 bytes)
Hash b1e4887c5dc02a8f1e0641efb6c0b32a
4b3f4a50463a90d372690eae4f347c1a62a7819c
3cfad4c5601f2c95f318e17483e93d7afc2d9c61f412751114bab820b89aa6d8
GET /wp-content/uploads/2019/12/PG.png HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 30 Dec 2019 21:10:39 GMT
accept-ranges: bytes
content-length: 295527
content-type: image/png
date: Thu, 08 Sep 2022 21:16:41 GMT
server: Apache
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faea8d298-d4be-46a2-9c14-670bdae204cd.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faea8d298-d4be-46a2-9c14-670bdae204cd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 675756a44be6f9bbe341fa4c866c941b
6502050805e53baeb44d82e55d4b15b82e34d2eb
cd1d16b5feefddfd89ac4bfcff21e80c49f07b0428aa57e8de365974f813e755
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faea8d298-d4be-46a2-9c14-670bdae204cd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8820
x-amzn-requestid: e2c909d0-f781-48e6-805e-a43940e67c4c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG_LpG1OIAMF_8Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6319124a-37f3458a2905bd947cf01f93;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:51:06 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: xZfSJCNKiAOumLXDwm496KBZqoY1FtqF6T6GkMAdHCJ3Ikq0brbdjw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 27fe6f224e0cfa3f3a446471ee256e56.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 21:51:13 GMT
age: 84334
etag: "6502050805e53baeb44d82e55d4b15b82e34d2eb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=5.2
200 OK 0 B URL HTTP/2 atlasdetailing.ca/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=5.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=5.2 HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Aug 2022 23:08:46 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Thu, 08 Sep 2022 21:16:40 GMT
server: Apache
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-content/themes/monolit/css/plugins.css
200 OK 0 B URL HTTP/2 atlasdetailing.ca/wp-content/themes/monolit/css/plugins.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
GET /wp-content/themes/monolit/css/plugins.css HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Aug 2022 23:08:46 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Thu, 08 Sep 2022 21:16:39 GMT
server: Apache
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-includes/css/dashicons.min.css?ver=6.0.2
200 OK 0 B URL HTTP/2 atlasdetailing.ca/wp-includes/css/dashicons.min.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/css/dashicons.min.css?ver=6.0.2 HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Aug 2022 23:08:46 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Thu, 08 Sep 2022 21:16:39 GMT
server: Apache
X-Firefox-Spdy: h2
atlasdetailing.ca/wp-content/themes/monolit/style.css
200 OK 0 B URL HTTP/2 atlasdetailing.ca/wp-content/themes/monolit/style.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
GET /wp-content/themes/monolit/style.css HTTP/1.1
Host: atlasdetailing.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atlasdetailing.ca/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Aug 2022 23:08:46 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Thu, 08 Sep 2022 21:16:39 GMT
server: Apache
X-Firefox-Spdy: h2
50.87.144.35
23.36.76.226
93.184.220.29
0.0.0.0