| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash1456357aecbd23f21ad98da57e0127eb 7074815b39fa8da9013883971d665e4c1b0797ea f3eba265ee64870b2f822f1511b36c747d763c382557789cdad8be1d3b52d1f5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F3EBA265EE64870B2F822F1511B36C747D763C382557789CDAD8BE1D3B52D1F5"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9866
Expires: Wed, 23 Nov 2022 07:22:24 GMT
Date: Wed, 23 Nov 2022 04:37:58 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashb59d95402dfb464c176610284ba13f65 1a6c62fb0d48654dd204b66161bb03fefe60f71a 40cfd59b890ec5a3570603d28d90bd7e5c506babd52c2ece93e09f1c7b2a6880
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6132
Cache-Control: max-age=113729
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:37:58 GMT
Etag: "637ca4f3-1d7"
Expires: Thu, 24 Nov 2022 12:13:27 GMT
Last-Modified: Tue, 22 Nov 2022 10:31:15 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash054ff0d1a0a43f7cb1d78dbd34e27f99 3caf54f3de1d6a8c6f6454083f8b8e7dec77db54 fcdcef8306ae31f20c366489e1f88aa40b08f154d25d45f4055c4f8cdef47634
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FCDCEF8306AE31F20C366489E1F88AA40B08F154D25D45F4055C4F8CDEF47634"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14970
Expires: Wed, 23 Nov 2022 08:47:28 GMT
Date: Wed, 23 Nov 2022 04:37:58 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash4d7e4eed097b9c4e5d509419f1cfc85a 290bb3d428a7c6330e2e3d73a952b16f820896c8 0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 23 Nov 2022 04:09:27 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1711
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash9ebddc2b260d081ebbefee47c037cb28 492bad62a7ca6a74738921ef5ae6f0be5edebf39 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 4teeSHwzNuAOaTOUSrlf56Z6xUhu8wXpxiu0TbCwpWEAMUQv+Rg2q41PZXfaN3tDjR76TGwOBGc=
x-amz-request-id: YPTRQWANDK5WHHMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 23 Nov 2022 03:42:50 GMT
age: 3308
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 04:37:58 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| livingalloy.com/ | 192.185.165.78 | 301 Moved Permanently | 0 B |
IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET / HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 23 Nov 2022 04:37:58 GMT
Server: Apache
X-UA-Compatible: IE=edge
X-LiteSpeed-Tag: b77_HTTP.200,b77_HTTP.301
X-Redirect-By: WordPress
Set-Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F; expires=Wed, 21-Dec-2022 04:37:58 GMT; Max-Age=2419200; path=/; secure; SameSite=Strict
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: https://livingalloy.com/
Content-Length: 0
Keep-Alive: timeout=5, max=75
Content-Type: text/html; charset=UTF-8
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 34.102.187.140 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 23 Nov 2022 04:08:53 GMT
cache-control: public,max-age=3600
age: 1746
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash381503ad3a78e827fe9f169056a0ad86 378ef7763db8ae7b9e284fb1c97bd75073d33a2a 07c31c32f9e52fd2781c4dc6b82455240bb690f8c8bd5f77286739bbd08caeda
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "07C31C32F9E52FD2781C4DC6B82455240BB690F8C8BD5F77286739BBD08CAEDA"
Last-Modified: Tue, 22 Nov 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 23 Nov 2022 10:37:59 GMT
Date: Wed, 23 Nov 2022 04:37:59 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash8a181d95550cfdf3b1fc4deb71631e40 37866f7293c41fbfb817e321754cae5c5bf59f93 6aa3d2763181cc48d2ad0ce7d227f3cb3324045c3f7858ccdbae675768dcec55
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6200
Cache-Control: max-age=108736
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:37:59 GMT
Etag: "637c912f-1d7"
Expires: Thu, 24 Nov 2022 10:50:15 GMT
Last-Modified: Tue, 22 Nov 2022 09:06:55 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 34.210.158.59 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP34.210.158.59:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: VhsfFZED2k6SS5GhVMl/KQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: XCpZ58/auWch89876k8YnJC7uEE=
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash065495ec7a963a205abd9c8dbc75cb5d ea416d0df4f6706150bda5da2077174f5cdd986b 1b2a2afee887651b23a849f14ace89b330329f6bf61c331545a3f6d12037aee5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:38:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash065495ec7a963a205abd9c8dbc75cb5d ea416d0df4f6706150bda5da2077174f5cdd986b 1b2a2afee887651b23a849f14ace89b330329f6bf61c331545a3f6d12037aee5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:38:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| livingalloy.com/wp-includes/css/classic-themes.min.css?ver=1 | 192.185.165.78 | 200 OK | 189 B |
URL HTTP/2livingalloy.com/wp-includes/css/classic-themes.min.css?ver=1 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash5a18e16eb01cbaa862eb32e6b77bedb2 3abf9b913cc9f558f02cba7c9b822f8d1812cb96 d2b5af913332941d5ae7786d1fa70e0d009315c4ede6ad5b80d0f663bb54521f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 02 Nov 2022 04:16:19 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 189
content-type: text/css
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/plugins/so-widgets-bundle/widgets/cta/css/style.css?ver=1.44.0 | 192.185.165.78 | 200 OK | 284 B |
URL HTTP/2livingalloy.com/wp-content/plugins/so-widgets-bundle/widgets/cta/css/style.css?ver=1.44.0 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (682), with no line terminators Hash4c176a9463dbf18f1cd47bbf38819ab1 f956d8b4adb99877a802a310a9fa5fa3b3a54f72 687e87a53d4349d1f4a2a53083d6827b1ee69555d33db1b8467a1e7b7b3f0c4f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/so-widgets-bundle/widgets/cta/css/style.css?ver=1.44.0 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Nov 2022 05:08:18 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 284
content-type: text/css
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.7.5 | 192.185.165.78 | 200 OK | 3.0 kB |
URL HTTP/2livingalloy.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.7.5 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (10435), with no line terminators Hasha6099ee677b6d930b6b878cf0cb08422 a2eb69454196d4250d624d25aaec587e97686642 755acd6dc98e63baff6d8b105b1bcaf63b79f935381fb3f32a79dace7faae0ac
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.7.5 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Nov 2022 05:08:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2985
content-type: text/css
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/uploads/siteorigin-widgets/sow-cta-default-136b11cfe7a0.css?ver=6.1.1 | 192.185.165.78 | 200 OK | 182 B |
URL HTTP/2livingalloy.com/wp-content/uploads/siteorigin-widgets/sow-cta-default-136b11cfe7a0.css?ver=6.1.1 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashc375e0afb2d51b66a1aa26c2d9406e6a 44f68fec35e112f2e5bafbc4a420a2ae56923433 35aa00e5ca545509cd91d71d6865a228a47bd8e5eb54fae65fbd65cbc035cd6a
GET /wp-content/uploads/siteorigin-widgets/sow-cta-default-136b11cfe7a0.css?ver=6.1.1 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 23 Nov 2022 04:37:55 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 182
content-type: text/css
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/themes/generatepress/assets/css/components/widget-areas.min.css?ver=3.0.2 | 192.185.165.78 | 200 OK | 834 B |
URL HTTP/2livingalloy.com/wp-content/themes/generatepress/assets/css/components/widget-areas.min.css?ver=3.0.2 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (3358), with no line terminators Hash2cfe29f8495821a713f5779d6bd2d61d a2ce17bcc9d42d08ee9875826d484ab0f265aa6b 7845e418c2545f5c1e0707a7d24c13f26652116e8c04e6ec8f6572947d07985d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/generatepress/assets/css/components/widget-areas.min.css?ver=3.0.2 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 28 Jan 2021 16:15:23 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 834
content-type: text/css
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=7.1.0 | 192.185.165.78 | 200 OK | 3.1 kB |
URL HTTP/2livingalloy.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=7.1.0 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (17809), with no line terminators Hash97f3e7860b3e0d99f3c0327b0045363a 885af5049143e765b7fd0f3a0a860613b05d12d1 ff05d291dd422f8bee80e816eb1480c67fb3e0d6071bebd8f04c86de87a70080
GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=7.1.0 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Nov 2022 05:08:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3086
content-type: text/css
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash065495ec7a963a205abd9c8dbc75cb5d ea416d0df4f6706150bda5da2077174f5cdd986b 1b2a2afee887651b23a849f14ace89b330329f6bf61c331545a3f6d12037aee5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:38:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| livingalloy.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=7.1.0 | 192.185.165.78 | 200 OK | 13 kB |
URL HTTP/2livingalloy.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=7.1.0 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeUnicode text, UTF-8 text, with very long lines (62781), with no line terminators Hash506114e76608d2cb13e2ae2bcf067c7e 7ea05a51a05343a1b32e7c886add36971a788133 0b16be7c9d35f598d1cb5b6c9a42088aac3245180430e6583984f03b1ff16bd6
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=7.1.0 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Nov 2022 05:08:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 13258
content-type: text/css
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/plugins/so-widgets-bundle/icons/fontawesome/style.css?ver=6.1.1 | 192.185.165.78 | 200 OK | 557 B |
URL HTTP/2livingalloy.com/wp-content/plugins/so-widgets-bundle/icons/fontawesome/style.css?ver=6.1.1 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash884d39868e791688dd705673bb2bef38 743416003219236e7c5606c88a2fdb46ef7914f3 25efb5e858257cd2ff876d77820c033f5ed5051028c9d4d02d4cdfb1c3cf5036
GET /wp-content/plugins/so-widgets-bundle/icons/fontawesome/style.css?ver=6.1.1 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Nov 2022 05:08:18 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 557
content-type: text/css
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/plugins/so-widgets-bundle/widgets/button/css/style.css?ver=1.44.0 | 192.185.165.78 | 200 OK | 441 B |
URL HTTP/2livingalloy.com/wp-content/plugins/so-widgets-bundle/widgets/button/css/style.css?ver=1.44.0 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (1420), with no line terminators Hash797e8318b7608780f31eb30489620fd3 8c82276a45cc45ed542366cd6d69420a9ac2a5bb a1c00e85383ea51ceaea71d16f1a824161f14feec1eb8b1b3b0abce01c82bc72
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/so-widgets-bundle/widgets/button/css/style.css?ver=1.44.0 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Nov 2022 05:08:18 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 441
content-type: text/css
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 | 192.185.165.78 | 200 OK | 8.3 kB |
URL HTTP/2livingalloy.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeUnicode text, UTF-8 text, with very long lines (8189) Hash838560e989767f2ef5951b9eeee20352 6bf8419cb4d68d9beced9e4b79b22b347ae16a46 72e6d275c5229613a59aef94523fc6a96330553976aee003d8544d5806fa0c3d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 02 Nov 2022 04:16:19 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8344
content-type: application/javascript
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/uploads/2021/02/Mei-Level-1-217x300.jpg | 192.185.165.78 | 200 OK | 15 kB |
URL HTTP/2livingalloy.com/wp-content/uploads/2021/02/Mei-Level-1-217x300.jpg IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 217x300, components 3\012- data Hash2b407aefb7c09845ca490fc9ab74a057 3a8f0cce350040e700ed31c868eb2f87130a94fa 93f7eaf9a27ece1a5724e0b5062c407e46037d61d826f6fda7d07a9443c53d56
GET /wp-content/uploads/2021/02/Mei-Level-1-217x300.jpg HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 04 Feb 2021 21:04:37 GMT
accept-ranges: bytes
content-length: 15109
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/uploads/2021/02/Byron-Level-1-217x300.jpg | 192.185.165.78 | 200 OK | 18 kB |
URL HTTP/2livingalloy.com/wp-content/uploads/2021/02/Byron-Level-1-217x300.jpg IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 217x300, components 3\012- data Hashe79161b1c65145372ad1fff0a8a171af 30966c2e4f7e92d9a8b6f844887988c55f1870f9 d9c419117ecf65deec1e700da34d28e905a4b90a10580c94c7f9ccbceb8aa99e
GET /wp-content/uploads/2021/02/Byron-Level-1-217x300.jpg HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 03 Feb 2021 17:37:07 GMT
accept-ranges: bytes
content-length: 17647
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/uploads/2022/03/ArthurL2-217x300.jpg | 192.185.165.78 | 200 OK | 18 kB |
URL HTTP/2livingalloy.com/wp-content/uploads/2022/03/ArthurL2-217x300.jpg IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 217x300, components 3\012- data Hash4127157373eff83bd965f24bbcb06ca7 5abf3caed4c8bafc85b45ff6a41f3b5e7fcefa1c ba3ee1a96a32992c312f0865880aabf72fcc91eb3d97733892a241bc57f789e3
GET /wp-content/uploads/2022/03/ArthurL2-217x300.jpg HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 26 Mar 2022 22:26:58 GMT
accept-ranges: bytes
content-length: 18324
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/uploads/2021/02/Michael-Level-3-217x300.jpg | 192.185.165.78 | 200 OK | 23 kB |
URL HTTP/2livingalloy.com/wp-content/uploads/2021/02/Michael-Level-3-217x300.jpg IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 217x300, components 3\012- data Hash474a4a3585cecee72f004efaf0b9bed0 92ffce78e909bd108fd5aebd4761b072f0886053 4fb8341d38a853a41568e9560a146a042b2e24c86e4b50a50fec8ad43a90cf18
GET /wp-content/uploads/2021/02/Michael-Level-3-217x300.jpg HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 03 Feb 2021 17:36:31 GMT
accept-ranges: bytes
content-length: 22637
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.1.0 | 192.185.165.78 | 200 OK | 1.0 kB |
URL HTTP/2livingalloy.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.1.0 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (1668) Hash0bebfb5722cbc8ac04e62aa40698be49 3bc5e4f29cb19a2d80d46dee242dabf7e42c0fd3 70d02eabbadbe176455a2bb53d8d567feca69847c067a5274987a8bdc65e3c05
GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.1.0 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Nov 2022 05:08:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1000
content-type: application/javascript
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.1.0 | 192.185.165.78 | 200 OK | 1.2 kB |
URL HTTP/2livingalloy.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.1.0 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text, with very long lines (3029), with no line terminators Hash1d43db37790e13f685a3c696579e3b2c ecd7d8bcf06c069e2f296726649b6959608abfbe 4207a6e0849fcaec34e8b6de5931cf3158aca1121c232039654b4144aea9552e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.1.0 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Nov 2022 05:08:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1203
content-type: application/javascript
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/plugins/ml-slider/assets/metaslider/public.css?ver=3.27.14 | 192.185.165.78 | 200 OK | 2.0 kB |
URL HTTP/2livingalloy.com/wp-content/plugins/ml-slider/assets/metaslider/public.css?ver=3.27.14 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashc4d315f9717d5a6c20e8131125630acb 0b0ff163d12bedcf6a22fab0af6e267103e6cbac 6034ff9789283ad465b7d4f0ec9dcfa10e8d39fa991cf5ad0c88d8f61584faf1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/ml-slider/assets/metaslider/public.css?ver=3.27.14 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 18 Nov 2022 04:37:34 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2045
content-type: text/css
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | 192.185.165.78 | 200 OK | 4.6 kB |
URL HTTP/2livingalloy.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (11126) Hashacdb97105af28a7066790c6748ae2e1e 65794d2c5a9d04f747faf370bc8bacd330e69e5a dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 19 Nov 2020 21:01:14 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4618
content-type: application/javascript
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/themes/generatepress/assets/css/main.min.css?ver=3.0.2 | 192.185.165.78 | 200 OK | 6.0 kB |
URL HTTP/2livingalloy.com/wp-content/themes/generatepress/assets/css/main.min.css?ver=3.0.2 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (19327), with no line terminators Hash81f68827e32d482ea68a8aa7198bd290 2729f87da97d36211088a4ee777dd945a4f80149 615a0685569bc7e0c63c025e57bf14c8c5c4b95493e0ffffc8f9e4bd24be91b3
GET /wp-content/themes/generatepress/assets/css/main.min.css?ver=3.0.2 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 28 Jan 2021 16:15:23 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6046
content-type: text/css
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/plugins/so-widgets-bundle/widgets/cta/js/cta.min.js?ver=1.44.0 | 192.185.165.78 | 200 OK | 209 B |
URL HTTP/2livingalloy.com/wp-content/plugins/so-widgets-bundle/widgets/cta/js/cta.min.js?ver=1.44.0 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (307), with no line terminators Hash73d8aa39d2826f00771447b3b727d4de 910ab372a6792652d8132e5efd73c92d43967d9c d5ae2c73d819a977bad17d5ad56fb4cf165132bc1310ed23adb6d12ffa773bf0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/so-widgets-bundle/widgets/cta/js/cta.min.js?ver=1.44.0 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Nov 2022 05:08:18 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 209
content-type: application/javascript
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/uploads/siteorigin-widgets/sow-button-atom-60c388f8e5f1.css?ver=6.1.1 | 192.185.165.78 | 200 OK | 772 B |
URL HTTP/2livingalloy.com/wp-content/uploads/siteorigin-widgets/sow-button-atom-60c388f8e5f1.css?ver=6.1.1 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
Hasha296b8240d95cb00838ed132f23ec96a 6935f486415e781ef18000b2bfe5976217233ffa 92a577e52372844053da6d49dff713c4042c0b827e0c533188bc72106137e61b
GET /wp-content/uploads/siteorigin-widgets/sow-button-atom-60c388f8e5f1.css?ver=6.1.1 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 23 Nov 2022 04:37:55 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 772
content-type: text/css
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/plugins/mystickymenu/js/detectmobilebrowser.js?ver=2.6.1 | 192.185.165.78 | 200 OK | 1.4 kB |
URL HTTP/2livingalloy.com/wp-content/plugins/mystickymenu/js/detectmobilebrowser.js?ver=2.6.1 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (2065) Hashc3b50d284b99510f89656936379649c6 8ae1ea66e875299ae8158718110517212b3e2299 1571e16072b26846d00db4483c67c5402464e98ec8300b6fc2e1ac34e77a49d3
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/mystickymenu/js/detectmobilebrowser.js?ver=2.6.1 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 16 Sep 2022 16:19:20 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1381
content-type: application/javascript
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/plugins/mystickymenu/js/mystickymenu.min.js?ver=2.6.1 | 192.185.165.78 | 200 OK | 1.6 kB |
URL HTTP/2livingalloy.com/wp-content/plugins/mystickymenu/js/mystickymenu.min.js?ver=2.6.1 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (3980), with no line terminators Hash83577bca57e843bd21e0866acb7bbff3 924728492940504acfe3d3132e04c13d61f769f5 3d19fbbc352a2edc76ee38f4eedc8eecf714fa2cd0e0bcae1b78ac233389944f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/mystickymenu/js/mystickymenu.min.js?ver=2.6.1 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 16 Sep 2022 16:19:20 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1584
content-type: application/javascript
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/plugins/ml-slider/themes/simply-dark/v1.0.0/style.min.css?ver=1.0.0 | 192.185.165.78 | 200 OK | 1.4 kB |
URL HTTP/2livingalloy.com/wp-content/plugins/ml-slider/themes/simply-dark/v1.0.0/style.min.css?ver=1.0.0 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (7223), with no line terminators Hash88072ed2ac01035015a23f8ee87a92be e438f101bb2cded66ea51c0dc562b11d5f6ad687 7605f24764b8032c59d353c2f63f31c486821c58c232832a96a777161080d75e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/ml-slider/themes/simply-dark/v1.0.0/style.min.css?ver=1.0.0 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 18 Nov 2022 04:37:34 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1436
content-type: text/css
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/plugins/ml-slider/assets/sliders/flexslider/flexslider.css?ver=3.27.14 | 192.185.165.78 | 200 OK | 1.4 kB |
URL HTTP/2livingalloy.com/wp-content/plugins/ml-slider/assets/sliders/flexslider/flexslider.css?ver=3.27.14 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (3746) Hash824ae8d046b989161f86a3ab776707ab dca6d1dc5b4c4b903c3994a9d4be776d8fcac572 8d687e1588a43940f84a7925310ec9a07c240c1a7513a044e573b43b4bd2cea7
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/ml-slider/assets/sliders/flexslider/flexslider.css?ver=3.27.14 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 18 Nov 2022 04:37:34 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1364
content-type: text/css
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/themes/generatepress/assets/js/main.min.js?ver=3.0.2 | 192.185.165.78 | 200 OK | 2.4 kB |
URL HTTP/2livingalloy.com/wp-content/themes/generatepress/assets/js/main.min.js?ver=3.0.2 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (7320), with no line terminators Hash1c11e615b923b7adb41f6c6c71a505c6 db8d1f8287c233e7e0f3948a175d8c3d0ce151d6 65c0889ef56820d41e7e2421f089d881cd62216c1a7dd5f17fbc0a698741b95c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/generatepress/assets/js/main.min.js?ver=3.0.2 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 28 Jan 2021 16:15:23 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2350
content-type: application/javascript
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/plugins/ultimate-social-media-icons/js/shuffle/random-shuffle-min.js?ver=6.1.1 | 192.185.165.78 | 200 OK | 696 B |
URL HTTP/2livingalloy.com/wp-content/plugins/ultimate-social-media-icons/js/shuffle/random-shuffle-min.js?ver=6.1.1 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (1472), with no line terminators Hash149199e590e83a45c6cfb84e505ee166 d2a506c87a1ce49b6927eb70b36a2e05054734b8 91cb2836b2266eeee962eb258c85c327a5f0e3c8812fefdc74cf685b72537d57
GET /wp-content/plugins/ultimate-social-media-icons/js/shuffle/random-shuffle-min.js?ver=6.1.1 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 23 Nov 2022 04:37:53 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 696
content-type: application/javascript
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.1.0 | 192.185.165.78 | 200 OK | 792 B |
URL HTTP/2livingalloy.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.1.0 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (2139), with no line terminators Hash1ca3f41c13e0027acc45f0601f8b640f cced34af0c6a59e9cee4229faa66ab39c7031506 d3bc5eaf4c6be9473dbba690825cce9a1a6f4accb6721dae7875efef54942f41
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.1.0 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Nov 2022 05:08:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 792
content-type: application/javascript
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.1.0 | 192.185.165.78 | 200 OK | 1.1 kB |
URL HTTP/2livingalloy.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.1.0 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (2938), with no line terminators Hash769e9d3f7fc383ec1a02024e39730474 4f5a5edf28ed19b48c5e40747ec6896f0df8f09e 4636689d57889e984a7a1a1c6e2516b7a2d951407ca826aaf505c50002e2b486
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.1.0 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Nov 2022 05:08:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1093
content-type: application/javascript
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/plugins/ultimate-social-media-icons/js/shuffle/modernizr.custom.min.js?ver=6.1.1 | 192.185.165.78 | 200 OK | 1.6 kB |
URL HTTP/2livingalloy.com/wp-content/plugins/ultimate-social-media-icons/js/shuffle/modernizr.custom.min.js?ver=6.1.1 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text, with very long lines (2861), with CRLF, CR line terminators Hashdb111558e1a36ddb44ee116a32a1f046 0be7812f2f99932c1ebb96b7b4c5d6b403e20da5 dd692eb76a66ce5fa3ee4a9ea97bd46cabc6c9a8ccbe08def28f48ffa10c5fbb
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/ultimate-social-media-icons/js/shuffle/modernizr.custom.min.js?ver=6.1.1 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 23 Nov 2022 04:37:53 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1566
content-type: application/javascript
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/plugins/mailchimp-for-woocommerce/public/js/mailchimp-woocommerce-public.min.js?ver=2.7.6.01 | 192.185.165.78 | 200 OK | 2.5 kB |
URL HTTP/2livingalloy.com/wp-content/plugins/mailchimp-for-woocommerce/public/js/mailchimp-woocommerce-public.min.js?ver=2.7.6.01 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (6854), with no line terminators Hashf62dc514edd67b648e627c0c34dc6a5e 127fa228af8b68d062f4f194e65433271f79ddba 5622698ac97e755ba520fdfead5904e15333ddf8a93f247fabac0782d9b8f011
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/mailchimp-for-woocommerce/public/js/mailchimp-woocommerce-public.min.js?ver=2.7.6.01 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 28 Oct 2022 16:21:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2534
content-type: application/javascript
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/plugins/ultimate-social-media-icons/images/icons_theme/flat/flat_instagram.png | 192.185.165.78 | 200 OK | 1.1 kB |
URL HTTP/2livingalloy.com/wp-content/plugins/ultimate-social-media-icons/images/icons_theme/flat/flat_instagram.png IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typePNG image data, 52 x 52, 8-bit/color RGBA, non-interlaced\012- data Hashbbc966a7bd88fa2604468d14f5f222eb 4c8e83164de65c511ff26a57e9ccfb0344b725de 7b4a144d970109d0e3127dd6f1cc0c146343de869870768f05398c9973301789
GET /wp-content/plugins/ultimate-social-media-icons/images/icons_theme/flat/flat_instagram.png HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 23 Nov 2022 04:37:53 GMT
accept-ranges: bytes
content-length: 1093
content-type: image/png
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/plugins/ml-slider/assets/easing/jQuery.easing.min.js?ver=3.27.14 | 192.185.165.78 | 200 OK | 1.9 kB |
URL HTTP/2livingalloy.com/wp-content/plugins/ml-slider/assets/easing/jQuery.easing.min.js?ver=3.27.14 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeUnicode text, UTF-8 text, with very long lines (3601) Hash9c04406f596a45050229c70e8a874048 61212dd09680cf17ecf499074b8667325d20b324 120449c220f14d0e5dee83e68c7b59e10dbb81d5563b0c4d8f3ad81a5c17c9de
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/ml-slider/assets/easing/jQuery.easing.min.js?ver=3.27.14 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 18 Nov 2022 04:37:34 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1903
content-type: application/javascript
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/plugins/ultimate-social-media-icons/images/icons_theme/flat/flat_facebook.png | 192.185.165.78 | 200 OK | 375 B |
URL HTTP/2livingalloy.com/wp-content/plugins/ultimate-social-media-icons/images/icons_theme/flat/flat_facebook.png IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typePNG image data, 52 x 52, 8-bit/color RGBA, non-interlaced\012- data Hash1bfd6f4ef8043e4898c3092c707334b3 711ad6624b4121aba707897edc6317fc39753262 31fe30e25330874ce416a149d0419c6447d2f78c0ce9eee0bdea01f59a5ba8e7
GET /wp-content/plugins/ultimate-social-media-icons/images/icons_theme/flat/flat_facebook.png HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 23 Nov 2022 04:37:53 GMT
accept-ranges: bytes
content-length: 375
content-type: image/png
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/plugins/ultimate-social-media-icons/js/shuffle/jquery.shuffle.min.js?ver=6.1.1 | 192.185.165.78 | 200 OK | 4.9 kB |
URL HTTP/2livingalloy.com/wp-content/plugins/ultimate-social-media-icons/js/shuffle/jquery.shuffle.min.js?ver=6.1.1 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (11484), with no line terminators Hash1b60910f11a0d775fcfa572adb62ee64 f1bd74f734e6938c95d01de8e868a7c785ddbc4b 2d1669803c454716bfc0cbf4a477db499c13d6070b3b06dad649e3903b107a91
GET /wp-content/plugins/ultimate-social-media-icons/js/shuffle/jquery.shuffle.min.js?ver=6.1.1 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 23 Nov 2022 04:37:53 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4850
content-type: application/javascript
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.1.0 | 192.185.165.78 | 200 OK | 3.9 kB |
URL HTTP/2livingalloy.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.1.0 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (9111) Hasha9d79ad492f5d209828cf75ff095edb0 b969ee59c642ce462a2cea6b487f2b1d57a8a18a c362ad1758080d8a6214b29639dd88f082394a603d4afa9f12d8a037f55f94e5
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.1.0 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Nov 2022 05:08:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3949
content-type: application/javascript
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 | 192.185.165.78 | 200 OK | 5.3 kB |
URL HTTP/2livingalloy.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (15660) Hash710f8b142ea44c0682dc2c30f318f065 49144e9b3a76d3d383b1d4359cf7a25e947f4233 708bb5819879a2a2c7670abc20a58cca68a415ffd621011cbc4c3c9d82dddc50
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 25 May 2022 06:04:44 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5321
content-type: application/javascript
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/plugins/ultimate-social-media-icons/js/custom.js?ver=2.7.9 | 192.185.165.78 | 200 OK | 8.3 kB |
URL HTTP/2livingalloy.com/wp-content/plugins/ultimate-social-media-icons/js/custom.js?ver=2.7.9 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeUnicode text, UTF-8 text, with very long lines (827), with CRLF line terminators Hashe9a326654473c6d82f57552252404ac4 c86023e7e61f4c4ab6a59719bffce4d964715f96 58f04f091235fe0cbd0efd89d14ae870b723f9b36babc5f6b626a85a0a92f05f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/ultimate-social-media-icons/js/custom.js?ver=2.7.9 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 23 Nov 2022 04:37:53 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8280
content-type: application/javascript
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/plugins/ml-slider/assets/sliders/flexslider/jquery.flexslider.min.js?ver=3.27.14 | 192.185.165.78 | 200 OK | 8.9 kB |
URL HTTP/2livingalloy.com/wp-content/plugins/ml-slider/assets/sliders/flexslider/jquery.flexslider.min.js?ver=3.27.14 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (23852) Hash7013f5c7a27170d583c50f932be4c3ec 866f2fa43079b6b69a0acbc39987ec6adcb58591 3bf0bb8d1a1bf7ed4102bf89411745fe3b4df436f52962ae0d285f675398592c
GET /wp-content/plugins/ml-slider/assets/sliders/flexslider/jquery.flexslider.min.js?ver=3.27.14 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 18 Nov 2022 04:37:34 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8945
content-type: application/javascript
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/uploads/2021/02/Lucinda-Level-1-217x300.jpg | 192.185.165.78 | 200 OK | 14 kB |
URL HTTP/2livingalloy.com/wp-content/uploads/2021/02/Lucinda-Level-1-217x300.jpg IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 217x300, components 3\012- data Hash4bb8ef0c81723f96a6014bbcbc295972 4eef842aeebd3174611b0c6c7fb1d9661bb259f0 289e008c75a5dc7ad9f6268408cd9263198b33f74b6ed697b3a13c7d09ee42ed
GET /wp-content/uploads/2021/02/Lucinda-Level-1-217x300.jpg HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 04 Feb 2021 21:04:44 GMT
accept-ranges: bytes
content-length: 13747
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/uploads/2021/02/Jeremiah-Level-1-217x300.jpg | 192.185.165.78 | 200 OK | 15 kB |
URL HTTP/2livingalloy.com/wp-content/uploads/2021/02/Jeremiah-Level-1-217x300.jpg IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 217x300, components 3\012- data Hashe3c48ea50a17081c3b4d9bdb0cb91d45 efa2963b0a3dc2b640fd9f9bf64746f8ff998622 215e79b6b132e59bbd7deb82402ebb7d96c00e6a20d6c44ce5a5aa3cafb7f9db
GET /wp-content/uploads/2021/02/Jeremiah-Level-1-217x300.jpg HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 03 Feb 2021 17:36:56 GMT
accept-ranges: bytes
content-length: 14620
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/uploads/2021/02/Jane-Level-1-217x300.jpg | 192.185.165.78 | 200 OK | 15 kB |
URL HTTP/2livingalloy.com/wp-content/uploads/2021/02/Jane-Level-1-217x300.jpg IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 217x300, components 3\012- data Hash76cc6c9a5ef95bab14b9e973f5566cf2 6cb0a42bd76a4678f0d2671c8632d763dfdc6662 0ffe7b75e73495e28d1aa3029ba16723622f7b802572a7fbb81e97e667c9bca3
GET /wp-content/uploads/2021/02/Jane-Level-1-217x300.jpg HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 04 Feb 2021 21:04:50 GMT
accept-ranges: bytes
content-length: 14588
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/uploads/2021/02/Seth-Level-1-217x300.jpg | 192.185.165.78 | 200 OK | 14 kB |
URL HTTP/2livingalloy.com/wp-content/uploads/2021/02/Seth-Level-1-217x300.jpg IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 217x300, components 3\012- data Hash9b5acd6bcce4f3e874c7560ab5f7f273 e0e2a052e73722ed8232024f9dca10d0573b0134 2c7a99813cb0605d63fa5d9b126c3be2a79a5cf9d76ac62b08d8c87a6a035a14
GET /wp-content/uploads/2021/02/Seth-Level-1-217x300.jpg HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 03 Feb 2021 17:36:27 GMT
accept-ranges: bytes
content-length: 14251
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/uploads/2021/02/Fenrir-Level-1-217x300.jpg | 192.185.165.78 | 200 OK | 16 kB |
URL HTTP/2livingalloy.com/wp-content/uploads/2021/02/Fenrir-Level-1-217x300.jpg IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 217x300, components 3\012- data Hashf01cf644b542d14ca286aaf6f7ac715f 4b302ee3d69b7619a3655a6bad691ebb47f5c231 1e784bba408e0d59cdc28ac40544c80c05ade84b80a14c5096d51bb9a1bf4d81
GET /wp-content/uploads/2021/02/Fenrir-Level-1-217x300.jpg HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 03 Feb 2021 17:37:04 GMT
accept-ranges: bytes
content-length: 16296
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/uploads/2022/03/Douglas-Level-2-217x300.jpg | 192.185.165.78 | 200 OK | 16 kB |
URL HTTP/2livingalloy.com/wp-content/uploads/2022/03/Douglas-Level-2-217x300.jpg IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 217x300, components 3\012- data Hashb45a9c12982c4f54504f6bc18a46aedd a4df8ccdfb888e91916617dfb6de2bd6b3a777cb 075f4251bdc0eb9f9a0bdeaee836197073a8148febc0b9b1511ec5436dc5ea40
GET /wp-content/uploads/2022/03/Douglas-Level-2-217x300.jpg HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 26 Mar 2022 22:27:58 GMT
accept-ranges: bytes
content-length: 16305
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/uploads/2021/02/Logan-Level-3-217x300.jpg | 192.185.165.78 | 200 OK | 17 kB |
URL HTTP/2livingalloy.com/wp-content/uploads/2021/02/Logan-Level-3-217x300.jpg IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 217x300, components 3\012- data Hash5d05da27a73e9eb5d69af4b555358569 2a2fee3b644371e1d0ba9372e85601cc2fabb3ee 12f7dca9b413a1f11f39f9c8abbc974d2da1fda0b58662bd715ceed16bf0cf28
GET /wp-content/uploads/2021/02/Logan-Level-3-217x300.jpg HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 03 Feb 2021 17:36:48 GMT
accept-ranges: bytes
content-length: 16639
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/ | 192.185.165.78 | 200 OK | 47 kB |
IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash72ffaa469a843e26588d3527753c57d4 412c68232846aea17cdd30c598d5064e114a91d0 a4b6439974455e93b57762c13e69d5fabcc73d50e700b7a5327aef137f337443
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET / HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
x-litespeed-tag: b77_HTTP.200
x-ua-compatible: IE=edge
link: <https://livingalloy.com/wp-json/>; rel="https://api.w.org/", <https://livingalloy.com/wp-json/wp/v2/pages/31>; rel="alternate"; type="application/json", <https://livingalloy.com/>; rel=shortlink
set-cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F; expires=Wed, 21-Dec-2022 04:37:59 GMT; Max-Age=2419200; path=/; secure; SameSite=Strict
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 23 Nov 2022 04:37:59 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/uploads/2021/02/Jules-Level-3-217x300.jpg | 192.185.165.78 | 200 OK | 21 kB |
URL HTTP/2livingalloy.com/wp-content/uploads/2021/02/Jules-Level-3-217x300.jpg IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 217x300, components 3\012- data Hash04f89d0ccc73d1deb19313a1928b27e7 30d3030d32c1943e885358931170d6684630455a 5bf8a59c1e9e335bcd3d35ebe74a752e297cf4c2247e8f08c439de5e1968ffa4
GET /wp-content/uploads/2021/02/Jules-Level-3-217x300.jpg HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 04 Feb 2021 21:04:45 GMT
accept-ranges: bytes
content-length: 20937
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/uploads/2022/03/Fiona-Level-3-217x300.jpg | 192.185.165.78 | 200 OK | 21 kB |
URL HTTP/2livingalloy.com/wp-content/uploads/2022/03/Fiona-Level-3-217x300.jpg IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 217x300, components 3\012- data Hash9be918e1ff4922be1ee4fec829f64374 1dcfd8fca5dcdf96e16bfbb7a61e55b52723187d 9a1f78e6237231c628860111f2e35c36c02938e2e5bfc7b0fa5821deea141330
GET /wp-content/uploads/2022/03/Fiona-Level-3-217x300.jpg HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 28 Mar 2022 01:42:59 GMT
accept-ranges: bytes
content-length: 21023
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/uploads/2022/04/Octavius-Level-2-217x300.jpg | 192.185.165.78 | 200 OK | 21 kB |
URL HTTP/2livingalloy.com/wp-content/uploads/2022/04/Octavius-Level-2-217x300.jpg IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 217x300, components 3\012- data Hash59ff8f029245e0211a97684a103abbf7 076eb7fba5e3e37f5cbd38cff5706a4ebcae5922 6cea5d48840dbb3b45b42a3724b8345e1394399f64f302e7add69d9ecc550465
GET /wp-content/uploads/2022/04/Octavius-Level-2-217x300.jpg HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 06 Apr 2022 19:42:29 GMT
accept-ranges: bytes
content-length: 20998
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/uploads/2021/02/Agatha-Level-3-217x300.jpg | 192.185.165.78 | 200 OK | 24 kB |
URL HTTP/2livingalloy.com/wp-content/uploads/2021/02/Agatha-Level-3-217x300.jpg IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 217x300, components 3\012- data Hash3557e2a541bb7907d0e18a97319def37 51aa6f767f4eec787c75b2a0511801340f83e817 730841594101990bbcf5061b4ce4aa0fedf3c84164f98a8f0183f260b70525ff
GET /wp-content/uploads/2021/02/Agatha-Level-3-217x300.jpg HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 03 Feb 2021 17:37:11 GMT
accept-ranges: bytes
content-length: 24071
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/uploads/2021/01/cropped-LAG-Main-Logo-Flat.png | 192.185.165.78 | 200 OK | 454 kB |
URL HTTP/2livingalloy.com/wp-content/uploads/2021/01/cropped-LAG-Main-Logo-Flat.png IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typePNG image data, 817 x 953, 8-bit/color RGBA, non-interlaced\012- data Size454 kB (453600 bytes) Hashfe2a526245784a2129d1b48f5f2516fe 910d08bcf27e7e7f29bc02b79909ab4b586aab2e 64c6a34b2bddbbd0c199588ab231dc85c306446d01a214ace658f1d7d5052a7a
GET /wp-content/uploads/2021/01/cropped-LAG-Main-Logo-Flat.png HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 30 Jan 2021 18:53:44 GMT
accept-ranges: bytes
content-length: 453600
content-type: image/png
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=7.1.0 | 192.185.165.78 | 200 OK | 1.3 kB |
URL HTTP/2livingalloy.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=7.1.0 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (7043), with no line terminators Hash23030da399d26bb36e2effda3c58d488 2480e4b14c65a29b6013515cea8a55a6646aa85a 026d41f0bbec9c4116e05c06d43d3bbae4e9ec0975f84140565760431eaa88d7
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=7.1.0 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Nov 2022 05:08:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1294
content-type: text/css
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Amaranth:regular,italic,700,700italic|Nothing+You+Could+Do:regular | 142.250.74.10 | 200 OK | 877 B |
URL HTTP/2fonts.googleapis.com/css?family=Amaranth:regular,italic,700,700italic|Nothing+You+Could+Do:regular IP142.250.74.10:0
Hash8cead7f776aefa6b148d6e859df5f3ae 3c041fc587c7c0351b343ef8c56f0c9de81df5ff 7844f8743a9e12268fb2dcc135df07396c07634e10e70db3f4b1b3c297ba0cf4
GET /css?family=Amaranth:regular,italic,700,700italic|Nothing+You+Could+Do:regular HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 23 Nov 2022 04:38:00 GMT
date: Wed, 23 Nov 2022 04:38:00 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash4f22437494cab8f3b1de6d48c3677f43 42461557365b59e300ae356c37b95f652e10dacd 420bc8cc7c6624d9201c6e12fb6478f4a9cf77e90aad033b4d12687968003ccf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:38:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.googleapis.com/css?family=Lato%3A400%2C500%2C600%2C700%7CPoppins%3A400%2C500%2C600%2C700&ver=2.6.1 | 142.250.74.10 | 200 OK | 1.0 kB |
URL HTTP/2fonts.googleapis.com/css?family=Lato%3A400%2C500%2C600%2C700%7CPoppins%3A400%2C500%2C600%2C700&ver=2.6.1 IP142.250.74.10:0
Hash608ca639e6760b33904b7173d268b582 333bde795540d02730fe378153f2e2de08632afc 881f0745ddaf1ee2b17867c2a819fd02cc0641c895b07df09c5aee1667380d7a
GET /css?family=Lato%3A400%2C500%2C600%2C700%7CPoppins%3A400%2C500%2C600%2C700&ver=2.6.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 23 Nov 2022 04:38:00 GMT
date: Wed, 23 Nov 2022 04:38:00 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/uploads/2021/02/Background.jpg | 192.185.165.78 | 200 OK | 206 kB |
URL HTTP/2livingalloy.com/wp-content/uploads/2021/02/Background.jpg IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=3, software=GIMP 2.10.22, datetime=2021:01:31 20:54:11], progressive, precision 8, 1449x750, components 3\012- data Size206 kB (206208 bytes) Hash8ddb9c1be89077056cb5a7b12801ecd7 9e5d4718b1bf9c9cc99e708bc0c2dbbf575db63f 39c05a851c25462467c92edfbaebc6bfc124bc1610f1908cbae1d70647122ad4
GET /wp-content/uploads/2021/02/Background.jpg HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 01 Feb 2021 03:54:37 GMT
accept-ranges: bytes
content-length: 206208
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/amaranth/v18/KtkuALODe433f0j1zMnFHdA.woff2 | 216.58.207.195 | 200 OK | 26 kB |
URL HTTP/2fonts.gstatic.com/s/amaranth/v18/KtkuALODe433f0j1zMnFHdA.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 26272, version 1.0\012- data Hashacd820577f3bb34ce8625c9483bb1b91 ad95db0c1e705f0f602117a8dd669b4009b17e41 aae85c7c0ef572290bd44015db5d748cddbf34a5e53a14fb72f37e0a90243fd6
GET /s/amaranth/v18/KtkuALODe433f0j1zMnFHdA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://livingalloy.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 26272
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 18:51:58 GMT
expires: Thu, 16 Nov 2023 18:51:58 GMT
cache-control: public, max-age=31536000
age: 553563
last-modified: Tue, 19 Apr 2022 19:39:04 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 | 216.58.207.195 | 200 OK | 24 kB |
URL HTTP/2fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data Hashe1b3b5908c9cf23dfb2b9c52b9a023ab fcd4136085f2a03481d9958cc6793a5ed98e714c 918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://livingalloy.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 17:10:21 GMT
expires: Wed, 22 Nov 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 41260
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 | 216.58.207.195 | 200 OK | 7.9 kB |
URL HTTP/2fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data Hash9212f6f9860f9fc6c69b02fedf6db8c3 ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b 7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://livingalloy.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 21:48:50 GMT
expires: Thu, 16 Nov 2023 21:48:50 GMT
cache-control: public, max-age=31536000
age: 542951
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| chimpstatic.com/mcjs-connected/js/users/bbd669c9ee7d80600a7c640ce/3e272b4521795aa662874beec.js | 96.6.17.210 | 200 OK | 653 B |
URL HTTP/1.1chimpstatic.com/mcjs-connected/js/users/bbd669c9ee7d80600a7c640ce/3e272b4521795aa662874beec.js IP96.6.17.210:0
Hash5c4175ac0e0e6d95ac18d804b263153a 66985f07a251a4cb15b7570f57ae7eb30ab0e180 58bde7a88d8aa4d7f183b4749b2f747cda33ed54035190f10ba81c9312ba25d7
GET /mcjs-connected/js/users/bbd669c9ee7d80600a7c640ce/3e272b4521795aa662874beec.js HTTP/1.1
Host: chimpstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: yw9mWLDGkA0E7ROs/DtAsEDmiDVv9UGNWOwLKA1GQvXUHrlnJyXFk8RHe9oYDi+YMTKxekUpKbo=
x-amz-request-id: 5AH5CFQ765XVR97P
Last-Modified: Fri, 29 Jan 2021 03:37:25 GMT
ETag: "4b60d3ea13c42468679685c32a1680ac"
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
X-EdgeConnect-MidMile-RTT: 0, 21
X-EdgeConnect-Origin-MEX-Latency: 92, 92
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1786
Expires: Wed, 23 Nov 2022 05:07:47 GMT
Date: Wed, 23 Nov 2022 04:38:01 GMT
Content-Length: 653
Connection: keep-alive
|
|
| livingalloy.com/wp-content/plugins/so-widgets-bundle/icons/fontawesome/webfonts/fa-regular-400.woff2 | 192.185.165.78 | 200 OK | 25 kB |
URL HTTP/2livingalloy.com/wp-content/plugins/so-widgets-bundle/icons/fontawesome/webfonts/fa-regular-400.woff2 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeWeb Open Font Format (Version 2), TrueType, length 25084, version 770.256\012- data Hash403f431f138cd62264310ec3a0598e8f c7e2073204bf8040a9a61bc9367158f67c2e0f78 0b7871ee99fcbd2508d663c83e74fcb59a7c10b72a89d1dd3cbcdf31e0bb180a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/so-widgets-bundle/icons/fontawesome/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://livingalloy.com/wp-content/plugins/so-widgets-bundle/icons/fontawesome/style.css?ver=6.1.1
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 11 Nov 2022 05:08:18 GMT
accept-ranges: bytes
content-length: 25084
content-type: font/woff2
date: Wed, 23 Nov 2022 04:38:01 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash4f22437494cab8f3b1de6d48c3677f43 42461557365b59e300ae356c37b95f652e10dacd 420bc8cc7c6624d9201c6e12fb6478f4a9cf77e90aad033b4d12687968003ccf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:38:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash611d1eca860866489908506a26bd6a2a 5e8c401f098357cd12889a6e507baf7c8a87772a e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15049
Expires: Wed, 23 Nov 2022 08:48:50 GMT
Date: Wed, 23 Nov 2022 04:38:01 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash611d1eca860866489908506a26bd6a2a 5e8c401f098357cd12889a6e507baf7c8a87772a e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15049
Expires: Wed, 23 Nov 2022 08:48:50 GMT
Date: Wed, 23 Nov 2022 04:38:01 GMT
Connection: keep-alive
|
|
| livingalloy.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.7.5 | 192.185.165.78 | 200 OK | 50 kB |
URL HTTP/2livingalloy.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.7.5 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashbfa5489c6f88fc70859dcc0d2d5a01b6 27e4bfc4a3b6d65bbb1522a62b1d036574fc68be 633703e0fe109b0cd28f0f4b693767a3be658d2ed798d050884b39e5c8f50759
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.7.5 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Nov 2022 05:08:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash611d1eca860866489908506a26bd6a2a 5e8c401f098357cd12889a6e507baf7c8a87772a e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15049
Expires: Wed, 23 Nov 2022 08:48:50 GMT
Date: Wed, 23 Nov 2022 04:38:01 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19004cd2-76fa-499a-9749-67f2994dc084.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19004cd2-76fa-499a-9749-67f2994dc084.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasha539a7b4a38c495d8d7efd7b95fec6de 8f8bdba45b4fdf16783758eb6e53f957e53987bc 2d209c13af43c4237e36291cb24140e4993361311489ad27943b1209262592e1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19004cd2-76fa-499a-9749-67f2994dc084.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11839
x-amzn-requestid: b0429c36-a8c3-49e7-b25a-1ecdfc6e7648
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: btVS7Hp2oAMF32g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637535ac-097bd45a569a4cff672486de;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 19:10:36 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: omaSeWY89Yj_x-18NptKJzjBTZXpKGcUVWYdr05K0YwqGhSjQ3ohaQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 22:09:30 GMT
age: 23311
etag: "8f8bdba45b4fdf16783758eb6e53f957e53987bc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0ea68cc-d723-41ae-8bc2-16e2e422e2aa.jpeg | 34.120.237.76 | 200 OK | 5.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0ea68cc-d723-41ae-8bc2-16e2e422e2aa.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashc6380f73d47906bd63b9c48137e4df61 94e053461d2db89e9d08321f26a2555ebcd7e0b9 84144e3c3e7acc7339fd1da9b373f18582734b6f4d235b2aef8c90616ed1c8a7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0ea68cc-d723-41ae-8bc2-16e2e422e2aa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5914
x-amzn-requestid: 8dea187e-ee61-4691-aff7-59202f978565
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b2P4MF0UIAMFWBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6378c69a-011430f86689624a29d71215;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 12:05:46 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: c2w_q7fYc60JSQ4GcAlmUFyp7csfflgG8GvCXJuy_wWlvf9mIG0u9g==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 22:38:55 GMT
age: 21546
etag: "94e053461d2db89e9d08321f26a2555ebcd7e0b9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash481c033b9ffd030ff0de6e35cf788b47 85d3baad9217af2b5d75c019d2ef95dbb919a788 02443c7869914c2b29892deb0c645395bcf4e8379da3cf20974614ff9c92893b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11249
x-amzn-requestid: 65a3db77-b2e6-40b9-a776-021c2e9b56d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bubSsHbZoAMFZNg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6375a5aa-1286b97968cc2e4c7fe8ab29;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 03:08:26 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: _j5ykGwKHIQEFLyuJK_OMvs-CsCvkUQhZc_YD8gAtbyOECQ894zvjw==
via: 1.1 38eecd3ca21bf068d69a2f9cfe668d14.cloudfront.net (CloudFront), 1.1 abbf2df97f9d83839470842dc2e68cb6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 05:19:29 GMT
age: 83912
etag: "85d3baad9217af2b5d75c019d2ef95dbb919a788"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb2fba7b0-566a-4154-a555-caf6ef55283e.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb2fba7b0-566a-4154-a555-caf6ef55283e.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashf90eaacb028f41ae23d5ae0bb5bb1c60 adabb8e73c60950b2161b973db1150a2e6484d3f 8e45a3b3966392447e2b426e912e8151e087cfbf9f4ff2af47d81d20d5a19f25
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb2fba7b0-566a-4154-a555-caf6ef55283e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10678
x-amzn-requestid: 9180d893-71d8-460c-92b7-2bb406940975
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: byQ65Fr6oAMFzjw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63772eab-1741d1f27534c13e43e3cec0;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 07:05:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: K2Shuq-IX_VACYEEJzuubHKr01H_Oq_NntRt9WlJuAMsBG61kaFhjg==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 19:31:13 GMT
age: 32808
etag: "adabb8e73c60950b2161b973db1150a2e6484d3f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f13f0a4-9e67-4f61-9165-83b87312d9cb.jpeg | 34.120.237.76 | 200 OK | 8.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f13f0a4-9e67-4f61-9165-83b87312d9cb.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash309227dc1b5f9193c6be8f5a010fa348 dff12e88a784a954012f257d3689862c52251d01 2d52b83ff0a58c41bf2e38abf8fce13eb87b5ecfce144ff0edc1bfadd254b452
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f13f0a4-9e67-4f61-9165-83b87312d9cb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8081
x-amzn-requestid: cafd3337-7bb8-4e2d-91d4-a33439a32b80
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cBcAMEwgoAMFl-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d4067-6074dcae15d9194513916d48;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 21:34:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0qleUIXFjvOqr3SeTpnFnVnhacI-ps0Fc33zsWp3eynFDhYOasUpPw==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 21:56:48 GMT
age: 24073
etag: "dff12e88a784a954012f257d3689862c52251d01"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F719df867-6e3b-42ad-bb29-bacd6908c756.jpeg | 34.120.237.76 | 200 OK | 5.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F719df867-6e3b-42ad-bb29-bacd6908c756.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash858121146f13af8b53e7bfb9d143490c 2a0aa4d6e3d648b23e15db38559fa9be9ca2cdd8 5c79f7d9479cdaca6fca1abc2af768f8dbe2e7df70959a6620c676a4a4060b9e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F719df867-6e3b-42ad-bb29-bacd6908c756.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5721
x-amzn-requestid: d6a84920-e8e5-4160-aea1-ccabce26d36f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bvCq5EH4IAMFlSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6375e4ab-7835c4341c7b2fb700784aa2;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 07:37:15 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: uHxRMxqxRzA8EdKR4GXNTGnjYcS2u1qLVmU6AZPSol1EXyHWkvmTzw==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 5c7981a979abd51ba7e5ca7d464fd048.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 05:08:07 GMT
age: 84594
etag: "2a0aa4d6e3d648b23e15db38559fa9be9ca2cdd8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash0be3e3b6a55789993d7a1a175bb8e335 70e1b2ef23731397872aa67d3da9f97d40e4fad4 155e55bec061fd76dc2a73b570ebbac9ad17f22e95394c7bf96094a0729a7a54
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3191
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:38:01 GMT
Last-Modified: Wed, 23 Nov 2022 03:44:50 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
|
|
| livingalloy.com/wp-content/uploads/2021/01/LAG-Main-Logo-Flat-MonoGold-no-words-300x300.png | 192.185.165.78 | 200 OK | 112 kB |
URL HTTP/2livingalloy.com/wp-content/uploads/2021/01/LAG-Main-Logo-Flat-MonoGold-no-words-300x300.png IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data Size112 kB (111586 bytes) Hashf2b730d66302ab3e580b9a85991a16af 932bea3a9c6e6f8da7b51a1917d5372af4d23985 7f005c38d9b214564b449bcb1c00458861535f535219d01fb55dfb07d22d45a4
GET /wp-content/uploads/2021/01/LAG-Main-Logo-Flat-MonoGold-no-words-300x300.png HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 30 Jan 2021 18:52:08 GMT
accept-ranges: bytes
content-length: 111586
content-type: image/png
date: Wed, 23 Nov 2022 04:38:01 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/uploads/2021/01/LAG-Main-Logo-Flat-MonoGold-no-words-100x100.png | 192.185.165.78 | 200 OK | 38 kB |
URL HTTP/2livingalloy.com/wp-content/uploads/2021/01/LAG-Main-Logo-Flat-MonoGold-no-words-100x100.png IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data Hash30ea3be594d9bd4622c8482b3641e573 c1d81dad9aa3422d727d32d5310fcf16f3729b92 ae79d35dd964233835ebcca5345f4c65f6e40d29522e59995926e270117cee6c
GET /wp-content/uploads/2021/01/LAG-Main-Logo-Flat-MonoGold-no-words-100x100.png HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 30 Jan 2021 18:52:08 GMT
accept-ranges: bytes
content-length: 38195
content-type: image/png
date: Wed, 23 Nov 2022 04:38:01 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| connect.facebook.net/en_US/sdk.js |  157.240.200.14 | 200 OK | 1.7 kB |
URL HTTP/2connect.facebook.net/en_US/sdk.js IP157.240.200.14:0
File typeASCII text, with very long lines (1957) Hash429ffaa43b649a808770f001cdee9142 66d424955dd6154338fd71089e03f036208170b9 aea6da9bfc016f51f0d152cb58fe2932d6b2a6ec876ed8a22416cb10dab504cf
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 00e53b772f3b30966625aebe078654a9
etag: "e2944a4f322b15109dfe79ab0fa6a0df"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 23 Nov 2022 04:49:12 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: Qp/6pDtkmoCHcPABze6RQg==
x-fb-debug: WiKLYsTfhmpQ9hK3IhYI8GSLwFy3Qi9nsZOJijYGaNm5mGkDfIBc8Ad5S/wEGsu6YTvXfnZ5LgsQbC6kYliLwA==
priority: u=3,i
content-length: 1686
x-fb-trip-id: 1679558926
date: Wed, 23 Nov 2022 04:38:01 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash0be3e3b6a55789993d7a1a175bb8e335 70e1b2ef23731397872aa67d3da9f97d40e4fad4 155e55bec061fd76dc2a73b570ebbac9ad17f22e95394c7bf96094a0729a7a54
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3191
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:38:01 GMT
Last-Modified: Wed, 23 Nov 2022 03:44:50 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
|
|
| connect.facebook.net/en_US/sdk.js?hash=13e1583ef448d4d50c73d862badae02b | 157.240.200.14 | 200 OK | 88 kB |
URL HTTP/2connect.facebook.net/en_US/sdk.js?hash=13e1583ef448d4d50c73d862badae02b IP157.240.200.14:0
File typeASCII text, with very long lines (17777) Hashbbe81cb23e06a0951a57ca49d2052b01 ff07bf50be09b972048dd8c15580400e19c744e1 071216cb52813fe20253fdde666d5f552ef88cb0eb3b7221e046c80b8c89abce
GET /en_US/sdk.js?hash=13e1583ef448d4d50c73d862badae02b HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://livingalloy.com
Connection: keep-alive
Referer: https://livingalloy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: c04d9cc6df6f844f6a14bb71666e233d
etag: "9be4831e12952141689197a9c027c31c"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Thu, 23 Nov 2023 03:06:17 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: u+gcsj4GoJUaV8pJ0gUrAQ==
x-fb-debug: dvVZTaekLLcr1egr36C2dAH0MDxpR6MH29cLO/25lrxpzZMEOiOB8/WjKg2U55UtFntOnze/oKUs3SZFAwNM7Q==
content-length: 88334
x-fb-trip-id: 1679558926
date: Wed, 23 Nov 2022 04:38:01 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| livingalloy.com/?wc-ajax=get_refreshed_fragments | 192.185.165.78 | 200 OK | 161 B |
URL HTTP/2livingalloy.com/?wc-ajax=get_refreshed_fragments IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJSON data\012- , ASCII text, with no line terminators Hash650d329ca7144ad1b254f70cec48c223 05e4429056d334328c79307d47cb4f2437037c25 2343b049d208442d3efabc649b5f659a589a5bbb8d5e92f1fffb474775331fea
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
POST /?wc-ajax=get_refreshed_fragments HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 18
Origin: https://livingalloy.com
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-ua-compatible: IE=edge
access-control-allow-origin: https://livingalloy.com
access-control-allow-credentials: true
x-content-type-options: nosniff
x-robots-tag: noindex
x-litespeed-tag: b77_HTTP.200,b77_HTTP.200
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
vary: Accept-Encoding
content-encoding: gzip
content-length: 161
content-type: application/json; charset=UTF-8
date: Wed, 23 Nov 2022 04:38:01 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/uploads/2021/02/Lyra-Level-2-217x300.jpg | 192.185.165.78 | 200 OK | 0 B |
URL HTTP/2livingalloy.com/wp-content/uploads/2021/02/Lyra-Level-2-217x300.jpg IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
GET /wp-content/uploads/2021/02/Lyra-Level-2-217x300.jpg HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 03 Feb 2021 17:36:40 GMT
accept-ranges: bytes
content-length: 18513
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/uploads/2021/02/Maxwell-Level-3-217x300.jpg | 192.185.165.78 | 200 OK | 0 B |
URL HTTP/2livingalloy.com/wp-content/uploads/2021/02/Maxwell-Level-3-217x300.jpg IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
GET /wp-content/uploads/2021/02/Maxwell-Level-3-217x300.jpg HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 04 Feb 2021 21:04:38 GMT
accept-ranges: bytes
content-length: 16227
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 | 192.185.165.78 | 200 OK | 0 B |
URL HTTP/2livingalloy.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Nov 2022 05:15:18 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-content/plugins/ultimate-social-media-icons/css/sfsi-style.css?ver=2.7.9 | 192.185.165.78 | 200 OK | 0 B |
URL HTTP/2livingalloy.com/wp-content/plugins/ultimate-social-media-icons/css/sfsi-style.css?ver=2.7.9 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/ultimate-social-media-icons/css/sfsi-style.css?ver=2.7.9 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 23 Nov 2022 04:37:53 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| livingalloy.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 | 192.185.165.78 | 200 OK | 0 B |
URL HTTP/2livingalloy.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 IP192.185.165.78:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: livingalloy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://livingalloy.com/
Cookie: mailchimp_landing_site=https%3A%2F%2Flivingalloy.com%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 02 Nov 2022 04:16:19 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Wed, 23 Nov 2022 04:38:00 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
0.0.0.0