Overview

URLnextgearmedia.nl/
IP 85.17.8.228 (Netherlands)
ASN#60781 LeaseWeb Netherlands B.V.
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-09-20 20:06:02 UTC
StatusLoading report..
IDS alerts0
Blocklist alert50
urlquery alerts No alerts detected
Tags None

Domain Summary (19)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
www.google.com (1) 7 2016-08-04 12:36:31 UTC 2022-09-20 17:05:04 UTC 142.250.74.164
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-09-20 17:35:13 UTC 143.204.55.36
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-20 04:47:04 UTC 34.117.237.239
nextgearmedia.nl (77) 0 2022-09-06 21:38:28 UTC 2022-09-20 09:49:52 UTC 85.17.8.228 Unknown ranking
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-09-20 17:37:01 UTC 34.120.237.76
www.googletagmanager.com (1) 75 2012-12-25 14:52:06 UTC 2022-09-20 04:46:55 UTC 142.250.74.72
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-20 05:19:24 UTC 143.204.55.35
use.typekit.net (3) 494 2012-07-05 01:42:39 UTC 2022-09-20 04:49:01 UTC 23.36.76.122
fonts.gstatic.com (2) 0 2014-08-29 13:43:22 UTC 2022-09-20 04:47:45 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
stackpath.bootstrapcdn.com (3) 2467 2018-04-05 04:41:29 UTC 2022-09-20 10:15:13 UTC 104.18.10.207
fonts.googleapis.com (2) 8877 2014-07-21 13:19:55 UTC 2022-09-20 15:51:03 UTC 142.250.74.10
push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-20 05:36:22 UTC 52.42.74.230
ajax.googleapis.com (1) 12905 2019-10-15 17:52:08 UTC 2022-09-20 19:04:20 UTC 142.250.74.74
www.gstatic.com (3) 0 2016-07-26 09:37:06 UTC 2022-09-20 13:42:45 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
r3.o.lencr.org (6) 344 2020-12-02 08:52:13 UTC 2022-09-20 04:47:05 UTC 23.36.76.226
ocsp.digicert.com (5) 86 2012-05-21 07:02:23 UTC 2022-09-20 13:04:07 UTC 93.184.220.29
ocsp.pki.goog (11) 175 2017-06-14 07:23:31 UTC 2022-09-20 04:47:45 UTC 142.250.74.3
p.typekit.net (1) 620 2012-05-23 14:28:57 UTC 2022-09-20 10:35:47 UTC 23.36.76.122
region1.google-analytics.com (1) 0 2022-03-17 11:26:33 UTC 2022-09-20 05:46:51 UTC 216.239.34.36 Domain (google-analytics.com) ranked at: 8401

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-20 2 nextgearmedia.nl/ Malware
2022-09-20 2 nextgearmedia.nl/ Malware
2022-09-20 2 nextgearmedia.nl/wp-content/plugins/woocommerce/packages/woocommerce-blocks (...) Malware
2022-09-20 2 nextgearmedia.nl/wp-content/plugins/woocommerce-ajax-filters/assets/fronten (...) Malware
2022-09-20 2 nextgearmedia.nl/wp-content/plugins/ajax-search-for-woocommerce/build/block (...) Malware
2022-09-20 2 nextgearmedia.nl/wp-content/plugins/woocommerce/assets/css/woocommerce-layo (...) Malware
2022-09-20 2 nextgearmedia.nl/wp-content/plugins/ajax-search-for-woocommerce/build/block (...) Malware
2022-09-20 2 nextgearmedia.nl/wp-content/plugins/woo-fly-cart/assets/css/fonts.css?ver=6.0.2 Malware
2022-09-20 2 nextgearmedia.nl/wp-content/plugins/woo-phone-input-plugin/css/styles.css?v (...) Malware
2022-09-20 2 nextgearmedia.nl/wp-content/plugins/woo-fly-cart/assets/hint/hint.min.css?v (...) Malware
2022-09-20 2 nextgearmedia.nl/wp-content/plugins/woo-fly-cart/assets/perfect-scrollbar/c (...) Malware
2022-09-20 2 nextgearmedia.nl/wp-content/plugins/ajax-search-for-woocommerce/assets/css/ (...) Malware
2022-09-20 2 nextgearmedia.nl/wp-content/plugins/woo-fly-cart/assets/perfect-scrollbar/c (...) Malware
2022-09-20 2 nextgearmedia.nl/wp-content/plugins/woo-fly-cart/assets/css/frontend.css?ve (...) Malware
2022-09-20 2 nextgearmedia.nl/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jq (...) Malware
2022-09-20 2 nextgearmedia.nl/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 Malware
2022-09-20 2 nextgearmedia.nl/wp-content/plugins/woocommerce/assets/js/frontend/add-to-c (...) Malware
2022-09-20 2 nextgearmedia.nl/wp-content/plugins/woo-phone-input-plugin/js/main.js?ver=2.0.3 Malware
2022-09-20 2 nextgearmedia.nl/wp-includes/js/jquery/jquery.min.js?ver=3.6.0 Malware
2022-09-20 2 nextgearmedia.nl/wp-content/plugins/woo-phone-input-plugin/js/phone-validat (...) Malware
2022-09-20 2 nextgearmedia.nl/wp-content/uploads/sterren.svg Malware
2022-09-20 2 nextgearmedia.nl/wp-content/uploads/gratis-sample.svg Malware
2022-09-20 2 nextgearmedia.nl/wp-content/uploads/cart-icon.svg Malware
2022-09-20 2 nextgearmedia.nl/wp-content/uploads/search-icon-mobile.svg Malware
2022-09-20 2 nextgearmedia.nl/wp-content/uploads/gratis-verzending.svg Malware
2022-09-20 2 nextgearmedia.nl/wp-content/uploads/Next-Gear-Media-logo-witte-woordmerk-en (...) Malware
2022-09-20 2 nextgearmedia.nl/wp-content/uploads/fb_icon.svg Malware
2022-09-20 2 nextgearmedia.nl/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cook (...) Malware
2022-09-20 2 nextgearmedia.nl/wp-content/uploads/ig_icon.svg Malware
2022-09-20 2 nextgearmedia.nl/wp-content/uploads/js_composer/js_composer_front_custom.cs (...) Malware
2022-09-20 2 nextgearmedia.nl/wp-content/plugins/woocommerce/assets/js/frontend/cart-fra (...) Malware
2022-09-20 2 nextgearmedia.nl/wp-content/plugins/woocommerce/assets/js/frontend/woocomme (...) Malware
2022-09-20 2 nextgearmedia.nl/wp-content/plugins/woo-fly-cart/assets/js/frontend.js?ver=3.0.6 Malware
2022-09-20 2 nextgearmedia.nl/wp-content/plugins/js_composer/assets/css/js_composer_tta. (...) Malware
2022-09-20 2 nextgearmedia.nl/wp-content/plugins/woo-fly-cart/assets/perfect-scrollbar/j (...) Malware
2022-09-20 2 nextgearmedia.nl/wp-content/themes/sellaton/js/skip-link-focus-fix.js?ver=2 (...) Malware
2022-09-20 2 nextgearmedia.nl/wp-content/themes/sellaton/js/navigation.js?ver=20151215 Malware
2022-09-20 2 nextgearmedia.nl/wp-content/themes/sellaton/js/main.js?ver=6.0.2 Malware
2022-09-20 2 nextgearmedia.nl/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver= (...) Malware
2022-09-20 2 nextgearmedia.nl/wp-content/plugins/js_composer/assets/js/dist/js_composer_ (...) Malware
2022-09-20 2 nextgearmedia.nl/wp-content/plugins/js_composer/assets/lib/vc_accordion/vc- (...) Malware
2022-09-20 2 nextgearmedia.nl/wp-content/plugins/ajax-search-for-woocommerce/assets/js/s (...) Malware
2022-09-20 2 nextgearmedia.nl/wp-content/plugins/js_composer/assets/lib/vc-tta-autoplay/ (...) Malware
2022-09-20 2 nextgearmedia.nl/wp-content/plugins/js_composer/assets/lib/vc_tabs/vc-tabs. (...) Malware
2022-09-20 2 nextgearmedia.nl/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 Malware
2022-09-20 2 nextgearmedia.nl/wp-content/uploads/Next-Gear-Media-favicon.svg Malware
2022-09-20 2 nextgearmedia.nl/wp-content/uploads/IMG_2256.jpg?id=22061860 Malware
2022-09-20 2 nextgearmedia.nl/wp-content/plugins/woo-fly-cart/assets/fonts/woofc.ttf Malware
2022-09-20 2 nextgearmedia.nl/wp-content/plugins/woo-phone-input-plugin/js/intlTelInput- (...) Malware
2022-09-20 2 nextgearmedia.nl/wp-content/uploads/IMG_3208.jpg?id=22061902 Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 1 reports on IP: 85.17.8.228
Date UQ / IDS / BL URL IP
2022-09-20 20:06:02 +0000 0 - 0 - 50 nextgearmedia.nl/ 85.17.8.228


Last 5 reports on ASN: LeaseWeb Netherlands B.V.
Date UQ / IDS / BL URL IP
2023-03-28 14:29:05 +0000 0 - 0 - 1 www.filefactory.com/file/6mk1s6ojbxde/RimWorl (...) 95.211.200.52
2023-03-28 14:24:18 +0000 0 - 1 - 0 12kbps.xyz/repo/vir/others/windowspolicepro.exe 82.192.82.225
2023-03-28 14:24:14 +0000 0 - 1 - 0 12kbps.xyz/repo/vir/others/memz.exe 82.192.82.225
2023-03-28 14:20:37 +0000 0 - 0 - 1 filefactory.com/file/4r4g5u2to1by/Castle.in.t (...) 95.211.200.52
2023-03-28 14:20:11 +0000 0 - 0 - 1 www.filefactory.com/file/4r4g5u2to1by/Castle. (...) 95.211.200.52


Last 1 reports on domain: nextgearmedia.nl
Date UQ / IDS / BL URL IP
2022-09-20 20:06:02 +0000 0 - 0 - 50 nextgearmedia.nl/ 85.17.8.228


No other reports with similar screenshot

JavaScript

Executed Scripts (57)

Executed Evals (5)
#1 JavaScript::Eval (size: 15546) - SHA256: a4d092a9f4e4b98d5e78378f3b49bdeb5d044ece616623a34e78bc4849289d1f
/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */
(function() {
    var Q = this || self,
        Z = function(J, T) {
            if (T = (J = null, Q.trustedTypes), !T || !T.createPolicy) return J;
            try {
                J = T.createPolicy("bg", {
                    createHTML: W,
                    createScript: W,
                    createScriptURL: W
                })
            } catch (y) {
                Q.console && Q.console.error(y.message)
            }
            return J
        },
        W = function(J) {
            return J
        };
    (0, eval)(function(J, T) {
        return (T = Z()) && 1 === J.eval(T.createScript("1")) ? function(y) {
            return T.createScript(y)
        } : function(y) {
            return "" + y
        }
    }(Q)(Array(7824 * Math.random() | 0).join("\n") + '(function(){var hj=function(T,J,Q,W,v){for(W=(J.DX=(J.zH=((J.WC=y0,J).XJ=(J.gv=J[E],Jj),Q0({get:function(){return this.concat()}},J.D)),d[J.D](J.zH,{value:{value:{}}})),v=[],0);128>W;W++)v[W]=String.fromCharCode(W);f(true,J,(n([(n((x(152,(x(494,J,(x(119,J,((x(365,J,(x(181,J,(x(290,J,(x(428,J,(x((x(478,J,(x(103,J,(x(105,(x(216,(x((x(122,J,(x(118,J,(x(371,(x(112,(x(224,(x(35,J,(x(242,J,(x(156,J,(x((x(346,J,(x(184,(x(4,(x(94,(x(84,(x(210,J,(x(357,(x(64,(x(367,J,(x(266,J,(x(412,J,(x(130,J,(J.cC=(x(264,(x(178,(J.SS=(x(344,(x(194,J,(x((x(13,J,((x(218,J,((J.P=0,(J.S=void 0,J).V=false,J).lz=((W=(J.C=(J.B=0,void 0),((J.pB=0,J.I=void 0,J).l=(J.N=1,J.H=[],0),J.L=[],J).u=void 0,J.LB=false,J.F=false,(J.Y=(J.J=void 0,[]),J.G=(J.v=void 0,0),J).j=null,J.KB=[],J.s9=function(y){this.K=y},J.A=void 0,(J.X=[],J).K=J,(J.R=0,J.o=0,window.performance)||{}),(J.h=25,J).s=[],J).Z=8001,W).timeOrigin||(W.timing||{}).navigationStart||0,0)),x)(284,J,0),function(y,Z){y=(Z=S(y),b(y.K,Z)),y[0].removeEventListener(y[1],y[2],M)})),352),J,function(y,Z,z,U,F,h,k){for(z=(F=(U=(Z=G((k=S(y),y)),""),b(y,369)),F.length),h=0;Z--;)h=((h|0)+(G(y)|0))%z,U+=v[F[h]];x(k,y,U)}),function(y){Zn(3,y)})),J),function(y,Z,z,U){Z=b(y,(U=(Z=(z=S(y),S(y)),S(y)),Z)),z=b(y,z),x(U,y,z[Z])}),0),J),function(y,Z,z){x((Z=L((Z=(z=(Z=S(y),S(y)),b)(y,Z),Z)),z),y,Z)}),J),function(y,Z){(Z=b(y,S(y)),zS)(Z,y.K)}),0),0)),630)),I(4))),function(y,Z,z,U){(z=(Z=b(y,(U=(Z=S(y),z=S(y),S(y)),Z)),b)(y,z),x)(U,y,Z in z|0)})),J),function(y,Z,z,U,F,h){t(y,true,Z,false)||(z=s4(y.K),Z=z.U,F=Z.length,U=z.T,h=z.kF,z=z.wv,Z=0==F?new h[U]:1==F?new h[U](Z[0]):2==F?new h[U](Z[0],Z[1]):3==F?new h[U](Z[0],Z[1],Z[2]):4==F?new h[U](Z[0],Z[1],Z[2],Z[3]):2(),x(z,y,Z))}),J),function(){}),function(y,Z,z,U){!t(y,true,Z,false)&&(Z=s4(y),U=Z.T,z=Z.kF,y.K==y||U==y.s9&&z==y)&&(x(Z.wv,y,U.apply(z,Z.U)),y.P=y.g())})),J),[0,0,0]),J),0),J),function(y,Z,z){x((Z=(z=S(y),S(y)),Z),y,""+b(y,z))}),J),function(y,Z,z,U,F){(U=(z=(F=b(y,(Z=b(y,(U=(Z=(z=S(y),S)(y),S)(y),F=S(y),Z)),F)),b)(y.K,z),b)(y,U),0)!==z&&(U=U4(1,U,y,F,z,Z),z.addEventListener(Z,U,M),x(130,y,[z,Z,U]))}),function(y,Z,z,U){x((Z=b(y,(U=b(y,(z=(U=S((Z=S(y),y)),S(y)),U)),Z))==U,z),y,+Z)})),485),J,function(y,Z,z,U,F,h){if(!t(y,true,Z,true)){if("object"==L((y=b((Z=(Z=S((h=(z=S((F=S(y),y)),S(y)),y)),b(y,Z)),h=b(y,h),z=b(y,z),y),F),y))){for(U in F=[],y)F.push(U);y=F}for(F=(U=y.length,h=0<h?h:1,0);F<U;F+=h)z(y.slice(F,(F|0)+(h|0)),Z)}}),function(y,Z,z,U){(Z=b(y,(z=(Z=S(y),S(y)),U=b(y,z),Z)),x)(z,y,U+Z)})),function(y){vN(4,y)})),[])),J),p),J),function(y,Z,z,U,F){z=b((Z=(U=(U=(Z=(z=(F=S(y),S(y)),S(y)),S(y)),b(y,U)),b(y,Z)),y),z),x(F,y,U4(U,z,y,Z))}),J),function(y,Z,z,U){x((Z=(U=(z=S(y),V(y)),S(y)),Z),y,b(y,z)>>>U)}),J)),function(y,Z,z){t(y,true,Z,false)||(Z=S(y),z=S(y),x(z,y,function(U){return eval(U)}(WN(b(y.K,Z)))))})),283),J,function(y,Z,z){(Z=b(y,(z=0!=(Z=(z=S(y),S(y)),b(y,z)),Z)),z)&&x(218,y,Z)}),J),function(y,Z,z,U){x((U=S((Z=S((z=S(y),y)),y)),U),y,b(y,z)||b(y,Z))}),J),function(y){E4(1,y)}),function(y,Z,z,U){(z=(U=(Z=S(y),S(y)),S(y)),y.K==y)&&(U=b(y,U),z=b(y,z),b(y,Z)[U]=z,187==Z&&(y.A=void 0,2==U&&(y.I=P(y,false,32),y.A=void 0)))})),2048)),114),J,function(y,Z,z,U,F){for(Z=(F=(z=G((U=S(y),y)),0),[]);F<z;F++)Z.push(V(y));x(U,y,Z)}),[])),function(y,Z,z,U){if(U=y.KB.pop()){for(Z=V(y);0<Z;Z--)z=S(y),U[z]=y.L[z];U[478]=y.L[U[428]=y.L[428],478],y.L=U}else x(218,y,y.l)})),function(y){E4(4,y)})),{})),J).PC=0,[160,0,0])),function(y){Zn(4,y)})),J),function(y,Z,z,U,F,h,k,B,c,w,X,a){function D(r,l){for(;w<r;)Z|=V(y)<<w,w+=8;return l=(w-=r,Z&(1<<r)-1),Z>>=r,l}for(B=(h=(Z=w=(c=S(y),0),z=(D(3)|0)+1,D)(5),X=0,[]),a=0;a<h;a++)F=D(1),B.push(F),X+=F?0:1;for(X=((X|0)-1).toString(2).length,a=0,U=[];a<h;a++)B[a]||(U[a]=D(X));for(X=0;X<h;X++)B[X]&&(U[X]=S(y));for(k=[];z--;)k.push(b(y,S(y)));x(c,y,function(r,l,Y,m,TS){for(l=(Y=(TS=[],0),[]);Y<h;Y++){if(!B[m=U[Y],Y]){for(;m>=l.length;)l.push(S(r));m=l[m]}TS.push(m)}r.S=dX((r.u=dX(k.slice(),r),TS),r)})}),[F_]),J),K),T],J),n([xd,Q],J),true))},P=function(T,J,Q,W,v,y,Z,z,U,F,h,k,B,c){if(z=b(T,218),z>=T.l)throw[R,31];for(U=(v=z,B=Q,Z=0,T.gv.length);0<B;)k=v%8,c=v>>3,W=T.X[c],h=8-(k|0),h=h<B?h:B,J&&(F=T,F.A!=v>>6&&(F.A=v>>6,y=b(F,187),F.J=kd([0,0,y[1],y[2]],F.A,F.I)),W^=T.J[c&U]),Z|=(W>>8-(k|0)-(h|0)&(1<<h)-1)<<(B|0)-(h|0),B-=h,v+=h;return x(218,T,(J=Z,(z|0)+(Q|0))),J},wX=function(T,J,Q,W){function v(){}return{invoke:(Q=BN(T,function(y){v&&(J&&C(J),W=y,v(),v=void 0)},(W=void 0,!!J))[0],function(y,Z,z,U){function F(){W(function(h){C(function(){y(h)})},z)}if(!Z)return Z=Q(z),y&&y(Z),Z;W?F():(U=v,v=function(){U(),C(F)})})}},kd=function(T,J,Q,W,v){for(T=T[W=T[3]|0,2]|0,v=0;15>v;v++)J=J>>>8|J<<24,J+=Q|0,W=W>>>8|W<<24,W+=T|0,Q=Q<<3|Q>>>29,J^=T+823,T=T<<3|T>>>29,W^=v+823,T^=W,Q^=J;return[Q>>>24&255,Q>>>16&255,Q>>>8&255,Q>>>0&255,J>>>24&255,J>>>16&255,J>>>8&255,J>>>0&255]},Sr=function(T,J){if((T=(J=null,p).trustedTypes,!T)||!T.createPolicy)return J;try{J=T.createPolicy("bg",{createHTML:X_,createScript:X_,createScriptURL:X_})}catch(Q){p.console&&p.console.error(Q.message)}return J},$d=function(T,J){return(T=T.create().shift(),J.u.create().length)||J.S.create().length||(J.S=void 0,J.u=void 0),T},V=function(T){return T.u?$d(T.S,T):P(T,true,8)},vN=function(T,J,Q,W){for(W=(Q=S(J),0);0<T;T--)W=W<<8|V(J);x(Q,J,W)},H=function(T,J,Q){Q=this;try{hj(T,this,J)}catch(W){q(this,W),J(function(v){v(Q.v)})}},cN=function(T,J,Q,W,v,y,Z,z){return Z=d[(W=[2,15,64,-58,80,-100,(z=Q&7,v=aX,W),17,-45,-4],T).D](T.zH),Z[T.D]=function(U){z+=(y=U,6)+7*Q,z&=7},Z.concat=function(U){return((U=(y=(U=(U=J%16+1,43*y*y-3483*y+4*J*J*U+z)-645*J*y-172*J*J*y+W[z+19&7]*J*U+(v()|0)*U-U*y,void 0),W)[U],W)[(z+53&7)+(Q&2)]=U,W)[z+(Q&2)]=15,U},Z},bf=function(T,J,Q,W){try{W=T[((J|0)+2)%3],T[J]=(T[J]|0)-(T[((J|0)+1)%3]|0)-(W|0)^(1==J?W<<Q:W>>>Q)}catch(v){throw v;}},Mk=function(T,J){J.push(T[0]<<24|T[1]<<16|T[2]<<8|T[3]),J.push(T[4]<<24|T[5]<<16|T[6]<<8|T[7]),J.push(T[8]<<24|T[9]<<16|T[10]<<8|T[11])},E4=function(T,J,Q,W){W=(Q=S(J),S)(J),e(J,W,O(b(J,Q),T))},Q0=function(T,J){return d[J](d.prototype,{replace:T,console:T,pop:T,floor:T,call:T,propertyIsEnumerable:T,stack:T,parent:T,document:T,length:T,prototype:T,splice:T})},Lq=function(T,J,Q,W,v){if((W=J[0],W)==u)T.h=25,T.W(J);else if(W==E){Q=J[1];try{v=T.v||T.W(J)}catch(y){q(T,y),v=T.v}Q(v)}else if(W==GS)T.W(J);else if(W==K)T.W(J);else if(W==xd){try{for(v=0;v<T.Y.length;v++)try{Q=T.Y[v],Q[0][Q[1]](Q[2])}catch(y){}}catch(y){}(0,(T.Y=[],J)[1])(function(y,Z){T.i(y,true,Z)},function(y){(n([jr],(y=!T.s.length,T)),y)&&f(true,T,false)})}else{if(W==rX)return v=J[2],x(501,T,J[6]),x(365,T,v),T.W(J);W==jr?(T.H=[],T.X=[],T.L=null):W==F_&&"loading"===p.document.readyState&&(T.j=function(y,Z){function z(){Z||(Z=true,y())}(p.document.addEventListener("DOMContentLoaded",(Z=false,z),M),p).addEventListener("load",z,M)})}},IX=function(T,J,Q){return T.i(function(W){Q=W},false,J),Q},dX=function(T,J,Q){return((Q=d[J.D](J.DX),Q)[J.D]=function(){return T},Q).concat=function(W){T=W},Q},X_=function(T){return T},tj=function(T,J,Q,W,v){for(v=(Q=(T=T.replace(/\\r\\n/g,"\\n"),J=0),[]);J<T.length;J++)W=T.charCodeAt(J),128>W?v[Q++]=W:(2048>W?v[Q++]=W>>6|192:(55296==(W&64512)&&J+1<T.length&&56320==(T.charCodeAt(J+1)&64512)?(W=65536+((W&1023)<<10)+(T.charCodeAt(++J)&1023),v[Q++]=W>>18|240,v[Q++]=W>>12&63|128):v[Q++]=W>>12|224,v[Q++]=W>>6&63|128),v[Q++]=W&63|128);return v},BN=function(T,J,Q,W){return(W=g[T.substring(0,3)+"_"])?W(T.substring(3),J,Q):lf(T,J)},lf=function(T,J){return[(J(function(Q){Q(T)}),function(){return T})]},x=function(T,J,Q){if(218==T||284==T)J.L[T]?J.L[T].concat(Q):J.L[T]=dX(Q,J);else{if(J.F&&187!=T)return;119==T||266==T||35==T||428==T||84==T?J.L[T]||(J.L[T]=cN(J,T,38,Q)):J.L[T]=cN(J,T,89,Q)}187==T&&(J.I=P(J,false,32),J.A=void 0)},Dn=function(T,J,Q,W){return b(Q,(x(218,(pq(((W=b(Q,218),Q.X&&W<Q.l)?(x(218,Q,Q.l),zS(T,Q)):x(218,Q,T),J),Q),Q),W),365))},V0=function(T,J,Q){if(3==T.length){for(Q=0;3>Q;Q++)J[Q]+=T[Q];for(Q=(T=[13,8,13,12,16,5,3,10,15],0);9>Q;Q++)J[3](J,Q%3,T[Q])}},e=function(T,J,Q,W,v,y){if(T.K==T)for(v=b(T,J),266==J?(J=function(Z,z,U,F){if((z=(F=v.length,(F|0)-4>>3),v).fB!=z){z=[0,(U=((v.fB=z,z)<<3)-4,0),y[1],y[2]];try{v.uz=kd(z,PN((U|0)+4,v),PN(U,v))}catch(h){throw h;}}v.push(v.uz[F&7]^Z)},y=b(T,84)):J=function(Z){v.push(Z)},W&&J(W&255),T=0,W=Q.length;T<W;T++)J(Q[T])},N=function(T,J,Q,W,v,y){if(!T.F){if(3<(Q=b(T,((J=(0==(y=((v=void 0,Q&&Q[0]===R)&&(J=Q[1],v=Q[2],Q=void 0),b)(T,428),y.length)&&(W=b(T,284)>>3,y.push(J,W>>8&255,W&255),void 0!=v&&y.push(v&255)),""),Q)&&(Q.message&&(J+=Q.message),Q.stack&&(J+=":"+Q.stack)),478)),Q)){T.K=(v=(J=(J=J.slice(0,(Q|0)-3),Q-=(J.length|0)+3,tj)(J),T.K),T);try{e(T,266,O(J.length,2).concat(J),9)}finally{T.K=v}}x(478,T,Q)}},n=function(T,J){J.s.splice(0,0,T)},Zn=function(T,J,Q,W,v){e(((W=b(J,(v=S((W=S((T&=(Q=T&4,3),J)),J)),W)),Q&&(W=tj(""+W)),T)&&e(J,v,O(W.length,2)),J),v,W)},G=function(T,J){return(J=V(T),J)&128&&(J=J&127|V(T)<<7),J},s4=function(T,J,Q,W,v,y){for(y=(J=((W=S((Q=T[nq]||{},T)),Q).wv=S(T),Q.U=[],T.K)==T?(V(T)|0)-1:1,v=S(T),0);y<J;y++)Q.U.push(S(T));for(Q.kF=b(T,v);J--;)Q.U[J]=b(T,Q.U[J]);return Q.T=b(T,W),Q},S=function(T,J){if(T.u)return $d(T.S,T);return(J=P(T,true,8),J)&128&&(J^=128,T=P(T,true,2),J=(J<<2)+(T|0)),J},f=function(T,J,Q,W,v,y){if(J.s.length){J.LB=(J.V=(J.V&&0(),true),T);try{y=J.g(),J.P=y,J.G=y,J.C=0,W=Kq(J,T),v=J.g()-J.G,J.R+=v,v<(Q?0:10)||0>=J.h--||(v=Math.floor(v),J.H.push(254>=v?v:254))}finally{J.V=false}return W}},b=function(T,J){if(void 0===(T=T.L[J],T))throw[R,30,J];if(T.value)return T.create();return(T.create(4*J*J+15*J+81),T).prototype},Kq=function(T,J,Q,W){for(;T.s.length;){W=(T.j=null,T.s.pop());try{Q=Lq(T,W)}catch(v){q(T,v)}if(J&&T.j){J=T.j,J(function(){f(true,T,true)});break}}return Q},O=function(T,J,Q,W){for(W=(J|0)-(Q=[],1);0<=W;W--)Q[(J|0)-1-(W|0)]=T>>8*W&255;return Q},L=function(T,J,Q){if((Q=typeof T,"object")==Q)if(T){if(T instanceof Array)return"array";if(T instanceof Object)return Q;if("[object Window]"==(J=Object.prototype.toString.call(T),J))return"object";if("[object Array]"==J||"number"==typeof T.length&&"undefined"!=typeof T.splice&&"undefined"!=typeof T.propertyIsEnumerable&&!T.propertyIsEnumerable("splice"))return"array";if("[object Function]"==J||"undefined"!=typeof T.call&&"undefined"!=typeof T.propertyIsEnumerable&&!T.propertyIsEnumerable("call"))return"function"}else return"null";else if("function"==Q&&"undefined"==typeof T.call)return"object";return Q},zS=function(T,J){x(((J.KB.push(J.L.slice()),J).L[218]=void 0,218),J,T)},t=function(T,J,Q,W,v,y,Z,z,U){if((T.K=((v=(U=(y=(W=(z=(J||T.C++,0<(Z=W?255:J?5:2,T.B)&&T.V&&T.LB&&1>=T.o&&!T.u&&!T.j)&&(!J||1<T.Z-Q)&&0==document.hidden,4==T.C))||z?T.g():T.P,y-T.P),U>>14),T.I&&(T.I^=v*(U<<2)),T).N+=v,v||T.K),W)||z)T.C=0,T.P=y;if(!z||y-T.G<T.B-Z)return false;return!(x(218,(z=b(T,(T.Z=Q,J)?284:218),T),T.l),T.s.push([GS,z,J?Q+1:Q]),T.j=C,0)},g,p=this||self,PN=function(T,J){return J[T]<<24|J[(T|0)+1]<<16|J[(T|0)+2]<<8|J[(T|0)+3]},C=p.requestIdleCallback?function(T){requestIdleCallback(function(){T()},{timeout:4})}:p.setImmediate?function(T){setImmediate(T)}:function(T){setTimeout(T,0)},q=function(T,J){T.v=((T.v?T.v+"~":"E:")+J.message+":"+J.stack).slice(0,2048)},U4=function(T,J,Q,W,v,y){function Z(){if(Q.K==Q){if(Q.L){var z=[rX,J,W,void 0,v,y,arguments];if(2==T)var U=f((n(z,Q),false),Q,false);else if(1==T){var F=!Q.s.length;(n(z,Q),F)&&f(false,Q,false)}else U=Lq(Q,z);return U}v&&y&&v.removeEventListener(y,Z,M)}}return Z},M={passive:true,capture:true},A,I=function(T,J){for(J=[];T--;)J.push(255*Math.random()|0);return J},pq=function(T,J,Q,W,v,y){if(!J.v){J.o++;try{for(v=(Q=0,J.l),W=void 0;--T;)try{if(y=void 0,J.u)W=$d(J.u,J);else{if((Q=b(J,218),Q)>=v)break;W=(y=(x(284,J,Q),S)(J),b)(J,y)}W&&W.call?W(J,T):N(J,0,[R,21,y]),t(J,false,T,false)}catch(Z){b(J,412)?N(J,22,Z):x(412,J,Z)}if(!T){if(J.rv){pq(667641748788,(J.o--,J));return}N(J,0,[R,33])}}catch(Z){try{N(J,22,Z)}catch(z){q(J,z)}}J.o--}},nq=String.fromCharCode(105,110,116,101,103,67,104,101,99,107,66,121,112,97,115,115),E=[],jr=[],R={},F_=[],K=((H.prototype.O="toString",H).prototype.GH=void 0,[]),u=(H.prototype.rv=false,H.prototype.bz=void 0,[]),GS=[],rX=[],xd=[],d=(A=((Mk,I,bf,function(){})(V0),H.prototype),A.Iz=function(){return Math.floor(this.R+(this.g()-this.G))},H.prototype.D="create",R.constructor),aX=((A.jS=function(){return Math.floor(this.g())},(A.mB=function(T,J,Q){return T^(J^=J<<13,J^=J>>17,(J=(J^J<<5)&Q)||(J=1),J)},A).g=(window.performance||{}).now?function(){return this.lz+window.performance.now()}:function(){return+new Date},A.U9=function(T,J,Q,W,v){for(W=v=0;v<T.length;v++)W+=T.charCodeAt(v),W+=W<<10,W^=W>>6;return(v=(W+=W<<3,W^=W>>11,T=W+(W<<15)>>>0,new Number(T&(1<<J)-1)),v)[0]=(T>>>J)%Q,v},A.i=function(T,J,Q,W,v){if((Q="array"===L(Q)?Q:[Q],this).v)T(this.v);else try{W=[],v=!this.s.length,n([u,W,Q],this),n([E,T,W],this),J&&!v||f(J,this,true)}catch(y){q(this,y),T(this.v)}},A).qR=function(T,J,Q,W,v,y){for(W=(Q=[],y=0);W<T.length;W++)for(y+=J,v=v<<J|T[W];7<y;)y-=8,Q.push(v>>y&255);return Q},void 0);H.prototype.W=function(T,J){return J=(T={},aX=function(){return T==J?81:93},{}),function(Q,W,v,y,Z,z,U,F,h,k,B,c,w,X,a){U=T,T=J;try{if(a=Q[0],a==K){v=Q[1];try{for(B=(X=(w=atob(v),c=0),[]);c<w.length;c++)h=w.charCodeAt(c),255<h&&(B[X++]=h&255,h>>=8),B[X++]=h;x(187,(this.l=(this.X=B,this.X.length<<3),this),[0,0,0])}catch(D){N(this,17,D);return}pq(8001,this)}else if(a==u)Q[1].push(b(this,266).length,b(this,35).length,b(this,478),b(this,119).length),x(365,this,Q[2]),this.L[121]&&Dn(b(this,121),8001,this);else{if(a==E){this.K=(Z=(X=Q[2],O((b(this,119).length|0)+2,2)),z=this.K,this);try{y=b(this,428),0<y.length&&e(this,119,O(y.length,2).concat(y),10),e(this,119,O(this.N,1),109),e(this,119,O(this[E].length,1)),w=0,w-=(b(this,119).length|0)+5,W=b(this,266),w+=b(this,94)&2047,4<W.length&&(w-=(W.length|0)+3),0<w&&e(this,119,O(w,2).concat(I(w)),15),4<W.length&&e(this,119,O(W.length,2).concat(W),156)}finally{this.K=z}if(k=((((B=I(2).concat(b(this,119)),B)[1]=B[0]^6,B)[3]=B[1]^Z[0],B)[4]=B[1]^Z[1],this.vC(B)))k="!"+k;else for(w=0,k="";w<B.length;w++)F=B[w][this.O](16),1==F.length&&(F="0"+F),k+=F;return b((x(478,(b(this,((c=k,b(this,266)).length=X.shift(),35)).length=X.shift(),this),X.shift()),this),119).length=X.shift(),c}if(a==GS)Dn(Q[1],Q[2],this);else if(a==rX)return Dn(Q[1],8001,this)}}finally{T=U}}}();var y0,Jj=/./,fq=K.pop.bind((H.prototype.vC=(H.prototype.dv=0,H.prototype.oz=0,H.prototype[xd]=[0,0,1,1,0,1,1],function(T,J,Q,W){if(Q=window.btoa){for(J=(W=0,"");W<T.length;W+=8192)J+=String.fromCharCode.apply(null,T.slice(W,W+8192));T=Q(J).replace(/\\+/g,"-").replace(/\\//g,"_").replace(/=/g,"")}else T=void 0;return T}),H.prototype)[u]),WN=function(T,J){return(J=Sr())&&1===T.eval(J.createScript("1"))?function(Q){return J.createScript(Q)}:function(Q){return""+Q}}(((y0=(Jj[H.prototype.O]=fq,Q0({get:fq},H.prototype.D)),H.prototype).AO=void 0,p));(g=p.botguard||(p.botguard={}),40)<g.m||(g.m=41,g.bg=wX,g.a=BN),g.RBK_=function(T,J,Q){return[(Q=new H(T,J),function(W){return IX(Q,W)})]};}).call(this);'));
}).call(this);
#2 JavaScript::Eval (size: 22694) - SHA256: 70c5e0d2747c5c373f0d7c7d0bcb7ccc26966766b073313a3f913acc72b0cb01
(function() {
    var hj = function(T, J, Q, W, v) {
            for (W = (J.DX = (J.zH = ((J.WC = y0, J).XJ = (J.gv = J[E], Jj), Q0({get: function() {
                        return this.concat()
                    }
                }, J.D)), d[J.D](J.zH, {
                    value: {
                        value: {}
                    }
                })), v = [], 0); 128 > W; W++) v[W] = String.fromCharCode(W);
            f(true, J, (n([(n((x(152, (x(494, J, (x(119, J, ((x(365, J, (x(181, J, (x(290, J, (x(428, J, (x((x(478, J, (x(103, J, (x(105, (x(216, (x((x(122, J, (x(118, J, (x(371, (x(112, (x(224, (x(35, J, (x(242, J, (x(156, J, (x((x(346, J, (x(184, (x(4, (x(94, (x(84, (x(210, J, (x(357, (x(64, (x(367, J, (x(266, J, (x(412, J, (x(130, J, (J.cC = (x(264, (x(178, (J.SS = (x(344, (x(194, J, (x((x(13, J, ((x(218, J, ((J.P = 0, (J.S = void 0, J).V = false, J).lz = ((W = (J.C = (J.B = 0, void 0), ((J.pB = 0, J.I = void 0, J).l = (J.N = 1, J.H = [], 0), J.L = [], J).u = void 0, J.LB = false, J.F = false, (J.Y = (J.J = void 0, []), J.G = (J.v = void 0, 0), J).j = null, J.KB = [], J.s9 = function(y) {
                this.K = y
            }, J.A = void 0, (J.X = [], J).K = J, (J.R = 0, J.o = 0, window.performance) || {}), (J.h = 25, J).s = [], J).Z = 8001, W).timeOrigin || (W.timing || {}).navigationStart || 0, 0)), x)(284, J, 0), function(y, Z) {
                y = (Z = S(y), b(y.K, Z)), y[0].removeEventListener(y[1], y[2], M)
            })), 352), J, function(y, Z, z, U, F, h, k) {
                for (z = (F = (U = (Z = G((k = S(y), y)), ""), b(y, 369)), F.length), h = 0; Z--;) h = ((h | 0) + (G(y) | 0)) % z, U += v[F[h]];
                x(k, y, U)
            }), function(y) {
                Zn(3, y)
            })), J), function(y, Z, z, U) {
                Z = b(y, (U = (Z = (z = S(y), S(y)), S(y)), Z)), z = b(y, z), x(U, y, z[Z])
            }), 0), J), function(y, Z, z) {
                x((Z = L((Z = (z = (Z = S(y), S(y)), b)(y, Z), Z)), z), y, Z)
            }), J), function(y, Z) {
                (Z = b(y, S(y)), zS)(Z, y.K)
            }), 0), 0)), 630)), I(4))), function(y, Z, z, U) {
                (z = (Z = b(y, (U = (Z = S(y), z = S(y), S(y)), Z)), b)(y, z), x)(U, y, Z in z | 0)
            })), J), function(y, Z, z, U, F, h) {
                t(y, true, Z, false) || (z = s4(y.K), Z = z.U, F = Z.length, U = z.T, h = z.kF, z = z.wv, Z = 0 == F ? new h[U] : 1 == F ? new h[U](Z[0]) : 2 == F ? new h[U](Z[0], Z[1]) : 3 == F ? new h[U](Z[0], Z[1], Z[2]) : 4 == F ? new h[U](Z[0], Z[1], Z[2], Z[3]) : 2(), x(z, y, Z))
            }), J), function() {}), function(y, Z, z, U) {
                !t(y, true, Z, false) && (Z = s4(y), U = Z.T, z = Z.kF, y.K == y || U == y.s9 && z == y) && (x(Z.wv, y, U.apply(z, Z.U)), y.P = y.g())
            })), J), [0, 0, 0]), J), 0), J), function(y, Z, z) {
                x((Z = (z = S(y), S(y)), Z), y, "" + b(y, z))
            }), J), function(y, Z, z, U, F) {
                (U = (z = (F = b(y, (Z = b(y, (U = (Z = (z = S(y), S)(y), S)(y), F = S(y), Z)), F)), b)(y.K, z), b)(y, U), 0) !== z && (U = U4(1, U, y, F, z, Z), z.addEventListener(Z, U, M), x(130, y, [z, Z, U]))
            }), function(y, Z, z, U) {
                x((Z = b(y, (U = b(y, (z = (U = S((Z = S(y), y)), S(y)), U)), Z)) == U, z), y, +Z)
            })), 485), J, function(y, Z, z, U, F, h) {
                if (!t(y, true, Z, true)) {
                    if ("object" == L((y = b((Z = (Z = S((h = (z = S((F = S(y), y)), S(y)), y)), b(y, Z)), h = b(y, h), z = b(y, z), y), F), y))) {
                        for (U in F = [], y) F.push(U);
                        y = F
                    }
                    for (F = (U = y.length, h = 0 < h ? h : 1, 0); F < U; F += h) z(y.slice(F, (F | 0) + (h | 0)), Z)
                }
            }), function(y, Z, z, U) {
                (Z = b(y, (z = (Z = S(y), S(y)), U = b(y, z), Z)), x)(z, y, U + Z)
            })), function(y) {
                vN(4, y)
            })), [])), J), p), J), function(y, Z, z, U, F) {
                z = b((Z = (U = (U = (Z = (z = (F = S(y), S(y)), S(y)), S(y)), b(y, U)), b(y, Z)), y), z), x(F, y, U4(U, z, y, Z))
            }), J), function(y, Z, z, U) {
                x((Z = (U = (z = S(y), V(y)), S(y)), Z), y, b(y, z) >>> U)
            }), J)), function(y, Z, z) {
                t(y, true, Z, false) || (Z = S(y), z = S(y), x(z, y, function(U) {
                    return eval(U)
                }(WN(b(y.K, Z)))))
            })), 283), J, function(y, Z, z) {
                (Z = b(y, (z = 0 != (Z = (z = S(y), S(y)), b(y, z)), Z)), z) && x(218, y, Z)
            }), J), function(y, Z, z, U) {
                x((U = S((Z = S((z = S(y), y)), y)), U), y, b(y, z) || b(y, Z))
            }), J), function(y) {
                E4(1, y)
            }), function(y, Z, z, U) {
                (z = (U = (Z = S(y), S(y)), S(y)), y.K == y) && (U = b(y, U), z = b(y, z), b(y, Z)[U] = z, 187 == Z && (y.A = void 0, 2 == U && (y.I = P(y, false, 32), y.A = void 0)))
            })), 2048)), 114), J, function(y, Z, z, U, F) {
                for (Z = (F = (z = G((U = S(y), y)), 0), []); F < z; F++) Z.push(V(y));
                x(U, y, Z)
            }), [])), function(y, Z, z, U) {
                if (U = y.KB.pop()) {
                    for (Z = V(y); 0 < Z; Z--) z = S(y), U[z] = y.L[z];
                    U[478] = y.L[U[428] = y.L[428], 478], y.L = U
                } else x(218, y, y.l)
            })), function(y) {
                E4(4, y)
            })), {})), J).PC = 0, [160, 0, 0])), function(y) {
                Zn(4, y)
            })), J), function(y, Z, z, U, F, h, k, B, c, w, X, a) {
                function D(r, l) {
                    for (; w < r;) Z |= V(y) << w, w += 8;
                    return l = (w -= r, Z & (1 << r) - 1), Z >>= r, l
                }
                for (B = (h = (Z = w = (c = S(y), 0), z = (D(3) | 0) + 1, D)(5), X = 0, []), a = 0; a < h; a++) F = D(1), B.push(F), X += F ? 0 : 1;
                for (X = ((X | 0) - 1).toString(2).length, a = 0, U = []; a < h; a++) B[a] || (U[a] = D(X));
                for (X = 0; X < h; X++) B[X] && (U[X] = S(y));
                for (k = []; z--;) k.push(b(y, S(y)));
                x(c, y, function(r, l, Y, m, TS) {
                    for (l = (Y = (TS = [], 0), []); Y < h; Y++) {
                        if (!B[m = U[Y], Y]) {
                            for (; m >= l.length;) l.push(S(r));
                            m = l[m]
                        }
                        TS.push(m)
                    }
                    r.S = dX((r.u = dX(k.slice(), r), TS), r)
                })
            }), [F_]), J), K), T], J), n([xd, Q], J), true))
        },
        P = function(T, J, Q, W, v, y, Z, z, U, F, h, k, B, c) {
            if (z = b(T, 218), z >= T.l) throw [R, 31];
            for (U = (v = z, B = Q, Z = 0, T.gv.length); 0 < B;) k = v % 8, c = v >> 3, W = T.X[c], h = 8 - (k | 0), h = h < B ? h : B, J && (F = T, F.A != v >> 6 && (F.A = v >> 6, y = b(F, 187), F.J = kd([0, 0, y[1], y[2]], F.A, F.I)), W ^= T.J[c & U]), Z |= (W >> 8 - (k | 0) - (h | 0) & (1 << h) - 1) << (B | 0) - (h | 0), B -= h, v += h;
            return x(218, T, (J = Z, (z | 0) + (Q | 0))), J
        },
        wX = function(T, J, Q, W) {
            function v() {}
            return {
                invoke: (Q = BN(T, function(y) {
                    v && (J && C(J), W = y, v(), v = void 0)
                }, (W = void 0, !!J))[0], function(y, Z, z, U) {
                    function F() {
                        W(function(h) {
                            C(function() {
                                y(h)
                            })
                        }, z)
                    }
                    if (!Z) return Z = Q(z), y && y(Z), Z;
                    W ? F() : (U = v, v = function() {
                        U(), C(F)
                    })
                })
            }
        },
        kd = function(T, J, Q, W, v) {
            for (T = T[W = T[3] | 0, 2] | 0, v = 0; 15 > v; v++) J = J >>> 8 | J << 24, J += Q | 0, W = W >>> 8 | W << 24, W += T | 0, Q = Q << 3 | Q >>> 29, J ^= T + 823, T = T << 3 | T >>> 29, W ^= v + 823, T ^= W, Q ^= J;
            return [Q >>> 24 & 255, Q >>> 16 & 255, Q >>> 8 & 255, Q >>> 0 & 255, J >>> 24 & 255, J >>> 16 & 255, J >>> 8 & 255, J >>> 0 & 255]
        },
        Sr = function(T, J) {
            if ((T = (J = null, p).trustedTypes, !T) || !T.createPolicy) return J;
            try {
                J = T.createPolicy("bg", {
                    createHTML: X_,
                    createScript: X_,
                    createScriptURL: X_
                })
            } catch (Q) {
                p.console && p.console.error(Q.message)
            }
            return J
        },
        $d = function(T, J) {
            return (T = T.create().shift(), J.u.create().length) || J.S.create().length || (J.S = void 0, J.u = void 0), T
        },
        V = function(T) {
            return T.u ? $d(T.S, T) : P(T, true, 8)
        },
        vN = function(T, J, Q, W) {
            for (W = (Q = S(J), 0); 0 < T; T--) W = W << 8 | V(J);
            x(Q, J, W)
        },
        H = function(T, J, Q) {
            Q = this;
            try {
                hj(T, this, J)
            } catch (W) {
                q(this, W), J(function(v) {
                    v(Q.v)
                })
            }
        },
        cN = function(T, J, Q, W, v, y, Z, z) {
            return Z = d[(W = [2, 15, 64, -58, 80, -100, (z = Q & 7, v = aX, W), 17, -45, -4], T).D](T.zH), Z[T.D] = function(U) {
                z += (y = U, 6) + 7 * Q, z &= 7
            }, Z.concat = function(U) {
                return ((U = (y = (U = (U = J % 16 + 1, 43 * y * y - 3483 * y + 4 * J * J * U + z) - 645 * J * y - 172 * J * J * y + W[z + 19 & 7] * J * U + (v() | 0) * U - U * y, void 0), W)[U], W)[(z + 53 & 7) + (Q & 2)] = U, W)[z + (Q & 2)] = 15, U
            }, Z
        },
        bf = function(T, J, Q, W) {
            try {
                W = T[((J | 0) + 2) % 3], T[J] = (T[J] | 0) - (T[((J | 0) + 1) % 3] | 0) - (W | 0) ^ (1 == J ? W << Q : W >>> Q)
            } catch (v) {
                throw v;
            }
        },
        Mk = function(T, J) {
            J.push(T[0] << 24 | T[1] << 16 | T[2] << 8 | T[3]), J.push(T[4] << 24 | T[5] << 16 | T[6] << 8 | T[7]), J.push(T[8] << 24 | T[9] << 16 | T[10] << 8 | T[11])
        },
        E4 = function(T, J, Q, W) {
            W = (Q = S(J), S)(J), e(J, W, O(b(J, Q), T))
        },
        Q0 = function(T, J) {
            return d[J](d.prototype, {
                replace: T,
                console: T,
                pop: T,
                floor: T,
                call: T,
                propertyIsEnumerable: T,
                stack: T,
                parent: T,
                document: T,
                length: T,
                prototype: T,
                splice: T
            })
        },
        Lq = function(T, J, Q, W, v) {
            if ((W = J[0], W) == u) T.h = 25, T.W(J);
            else if (W == E) {
                Q = J[1];
                try {
                    v = T.v || T.W(J)
                } catch (y) {
                    q(T, y), v = T.v
                }
                Q(v)
            } else if (W == GS) T.W(J);
            else if (W == K) T.W(J);
            else if (W == xd) {
                try {
                    for (v = 0; v < T.Y.length; v++) try {
                        Q = T.Y[v], Q[0][Q[1]](Q[2])
                    } catch (y) {}
                } catch (y) {}(0, (T.Y = [], J)[1])(function(y, Z) {
                    T.i(y, true, Z)
                }, function(y) {
                    (n([jr], (y = !T.s.length, T)), y) && f(true, T, false)
                })
            } else {
                if (W == rX) return v = J[2], x(501, T, J[6]), x(365, T, v), T.W(J);
                W == jr ? (T.H = [], T.X = [], T.L = null) : W == F_ && "loading" === p.document.readyState && (T.j = function(y, Z) {
                    function z() {
                        Z || (Z = true, y())
                    }(p.document.addEventListener("DOMContentLoaded", (Z = false, z), M), p).addEventListener("load", z, M)
                })
            }
        },
        IX = function(T, J, Q) {
            return T.i(function(W) {
                Q = W
            }, false, J), Q
        },
        dX = function(T, J, Q) {
            return ((Q = d[J.D](J.DX), Q)[J.D] = function() {
                return T
            }, Q).concat = function(W) {
                T = W
            }, Q
        },
        X_ = function(T) {
            return T
        },
        tj = function(T, J, Q, W, v) {
            for (v = (Q = (T = T.replace(/\r\n/g, "\n"), J = 0), []); J < T.length; J++) W = T.charCodeAt(J), 128 > W ? v[Q++] = W : (2048 > W ? v[Q++] = W >> 6 | 192 : (55296 == (W & 64512) && J + 1 < T.length && 56320 == (T.charCodeAt(J + 1) & 64512) ? (W = 65536 + ((W & 1023) << 10) + (T.charCodeAt(++J) & 1023), v[Q++] = W >> 18 | 240, v[Q++] = W >> 12 & 63 | 128) : v[Q++] = W >> 12 | 224, v[Q++] = W >> 6 & 63 | 128), v[Q++] = W & 63 | 128);
            return v
        },
        BN = function(T, J, Q, W) {
            return (W = g[T.substring(0, 3) + "_"]) ? W(T.substring(3), J, Q) : lf(T, J)
        },
        lf = function(T, J) {
            return [(J(function(Q) {
                Q(T)
            }), function() {
                return T
            })]
        },
        x = function(T, J, Q) {
            if (218 == T || 284 == T) J.L[T] ? J.L[T].concat(Q) : J.L[T] = dX(Q, J);
            else {
                if (J.F && 187 != T) return;
                119 == T || 266 == T || 35 == T || 428 == T || 84 == T ? J.L[T] || (J.L[T] = cN(J, T, 38, Q)) : J.L[T] = cN(J, T, 89, Q)
            }
            187 == T && (J.I = P(J, false, 32), J.A = void 0)
        },
        Dn = function(T, J, Q, W) {
            return b(Q, (x(218, (pq(((W = b(Q, 218), Q.X && W < Q.l) ? (x(218, Q, Q.l), zS(T, Q)) : x(218, Q, T), J), Q), Q), W), 365))
        },
        V0 = function(T, J, Q) {
            if (3 == T.length) {
                for (Q = 0; 3 > Q; Q++) J[Q] += T[Q];
                for (Q = (T = [13, 8, 13, 12, 16, 5, 3, 10, 15], 0); 9 > Q; Q++) J[3](J, Q % 3, T[Q])
            }
        },
        e = function(T, J, Q, W, v, y) {
            if (T.K == T)
                for (v = b(T, J), 266 == J ? (J = function(Z, z, U, F) {
                        if ((z = (F = v.length, (F | 0) - 4 >> 3), v).fB != z) {
                            z = [0, (U = ((v.fB = z, z) << 3) - 4, 0), y[1], y[2]];
                            try {
                                v.uz = kd(z, PN((U | 0) + 4, v), PN(U, v))
                            } catch (h) {
                                throw h;
                            }
                        }
                        v.push(v.uz[F & 7] ^ Z)
                    }, y = b(T, 84)) : J = function(Z) {
                        v.push(Z)
                    }, W && J(W & 255), T = 0, W = Q.length; T < W; T++) J(Q[T])
        },
        N = function(T, J, Q, W, v, y) {
            if (!T.F) {
                if (3 < (Q = b(T, ((J = (0 == (y = ((v = void 0, Q && Q[0] === R) && (J = Q[1], v = Q[2], Q = void 0), b)(T, 428), y.length) && (W = b(T, 284) >> 3, y.push(J, W >> 8 & 255, W & 255), void 0 != v && y.push(v & 255)), ""), Q) && (Q.message && (J += Q.message), Q.stack && (J += ":" + Q.stack)), 478)), Q)) {
                    T.K = (v = (J = (J = J.slice(0, (Q | 0) - 3), Q -= (J.length | 0) + 3, tj)(J), T.K), T);
                    try {
                        e(T, 266, O(J.length, 2).concat(J), 9)
                    } finally {
                        T.K = v
                    }
                }
                x(478, T, Q)
            }
        },
        n = function(T, J) {
            J.s.splice(0, 0, T)
        },
        Zn = function(T, J, Q, W, v) {
            e(((W = b(J, (v = S((W = S((T &= (Q = T & 4, 3), J)), J)), W)), Q && (W = tj("" + W)), T) && e(J, v, O(W.length, 2)), J), v, W)
        },
        G = function(T, J) {
            return (J = V(T), J) & 128 && (J = J & 127 | V(T) << 7), J
        },
        s4 = function(T, J, Q, W, v, y) {
            for (y = (J = ((W = S((Q = T[nq] || {}, T)), Q).wv = S(T), Q.U = [], T.K) == T ? (V(T) | 0) - 1 : 1, v = S(T), 0); y < J; y++) Q.U.push(S(T));
            for (Q.kF = b(T, v); J--;) Q.U[J] = b(T, Q.U[J]);
            return Q.T = b(T, W), Q
        },
        S = function(T, J) {
            if (T.u) return $d(T.S, T);
            return (J = P(T, true, 8), J) & 128 && (J ^= 128, T = P(T, true, 2), J = (J << 2) + (T | 0)), J
        },
        f = function(T, J, Q, W, v, y) {
            if (J.s.length) {
                J.LB = (J.V = (J.V && 0(), true), T);
                try {
                    y = J.g(), J.P = y, J.G = y, J.C = 0, W = Kq(J, T), v = J.g() - J.G, J.R += v, v < (Q ? 0 : 10) || 0 >= J.h-- || (v = Math.floor(v), J.H.push(254 >= v ? v : 254))
                } finally {
                    J.V = false
                }
                return W
            }
        },
        b = function(T, J) {
            if (void 0 === (T = T.L[J], T)) throw [R, 30, J];
            if (T.value) return T.create();
            return (T.create(4 * J * J + 15 * J + 81), T).prototype
        },
        Kq = function(T, J, Q, W) {
            for (; T.s.length;) {
                W = (T.j = null, T.s.pop());
                try {
                    Q = Lq(T, W)
                } catch (v) {
                    q(T, v)
                }
                if (J && T.j) {
                    J = T.j, J(function() {
                        f(true, T, true)
                    });
                    break
                }
            }
            return Q
        },
        O = function(T, J, Q, W) {
            for (W = (J | 0) - (Q = [], 1); 0 <= W; W--) Q[(J | 0) - 1 - (W | 0)] = T >> 8 * W & 255;
            return Q
        },
        L = function(T, J, Q) {
            if ((Q = typeof T, "object") == Q)
                if (T) {
                    if (T instanceof Array) return "array";
                    if (T instanceof Object) return Q;
                    if ("[object Window]" == (J = Object.prototype.toString.call(T), J)) return "object";
                    if ("[object Array]" == J || "number" == typeof T.length && "undefined" != typeof T.splice && "undefined" != typeof T.propertyIsEnumerable && !T.propertyIsEnumerable("splice")) return "array";
                    if ("[object Function]" == J || "undefined" != typeof T.call && "undefined" != typeof T.propertyIsEnumerable && !T.propertyIsEnumerable("call")) return "function"
                } else return "null";
            else if ("function" == Q && "undefined" == typeof T.call) return "object";
            return Q
        },
        zS = function(T, J) {
            x(((J.KB.push(J.L.slice()), J).L[218] = void 0, 218), J, T)
        },
        t = function(T, J, Q, W, v, y, Z, z, U) {
            if ((T.K = ((v = (U = (y = (W = (z = (J || T.C++, 0 < (Z = W ? 255 : J ? 5 : 2, T.B) && T.V && T.LB && 1 >= T.o && !T.u && !T.j) && (!J || 1 < T.Z - Q) && 0 == document.hidden, 4 == T.C)) || z ? T.g() : T.P, y - T.P), U >> 14), T.I && (T.I ^= v * (U << 2)), T).N += v, v || T.K), W) || z) T.C = 0, T.P = y;
            if (!z || y - T.G < T.B - Z) return false;
            return !(x(218, (z = b(T, (T.Z = Q, J) ? 284 : 218), T), T.l), T.s.push([GS, z, J ? Q + 1 : Q]), T.j = C, 0)
        },
        g, p = this || self,
        PN = function(T, J) {
            return J[T] << 24 | J[(T | 0) + 1] << 16 | J[(T | 0) + 2] << 8 | J[(T | 0) + 3]
        },
        C = p.requestIdleCallback ? function(T) {
            requestIdleCallback(function() {
                T()
            }, {
                timeout: 4
            })
        } : p.setImmediate ? function(T) {
            setImmediate(T)
        } : function(T) {
            setTimeout(T, 0)
        },
        q = function(T, J) {
            T.v = ((T.v ? T.v + "~" : "E:") + J.message + ":" + J.stack).slice(0, 2048)
        },
        U4 = function(T, J, Q, W, v, y) {
            function Z() {
                if (Q.K == Q) {
                    if (Q.L) {
                        var z = [rX, J, W, void 0, v, y, arguments];
                        if (2 == T) var U = f((n(z, Q), false), Q, false);
                        else if (1 == T) {
                            var F = !Q.s.length;
                            (n(z, Q), F) && f(false, Q, false)
                        } else U = Lq(Q, z);
                        return U
                    }
                    v && y && v.removeEventListener(y, Z, M)
                }
            }
            return Z
        },
        M = {
            passive: true,
            capture: true
        },
        A, I = function(T, J) {
            for (J = []; T--;) J.push(255 * Math.random() | 0);
            return J
        },
        pq = function(T, J, Q, W, v, y) {
            if (!J.v) {
                J.o++;
                try {
                    for (v = (Q = 0, J.l), W = void 0; --T;) try {
                        if (y = void 0, J.u) W = $d(J.u, J);
                        else {
                            if ((Q = b(J, 218), Q) >= v) break;
                            W = (y = (x(284, J, Q), S)(J), b)(J, y)
                        }
                        W && W.call ? W(J, T) : N(J, 0, [R, 21, y]), t(J, false, T, false)
                    } catch (Z) {
                        b(J, 412) ? N(J, 22, Z) : x(412, J, Z)
                    }
                    if (!T) {
                        if (J.rv) {
                            pq(667641748788, (J.o--, J));
                            return
                        }
                        N(J, 0, [R, 33])
                    }
                } catch (Z) {
                    try {
                        N(J, 22, Z)
                    } catch (z) {
                        q(J, z)
                    }
                }
                J.o--
            }
        },
        nq = String.fromCharCode(105, 110, 116, 101, 103, 67, 104, 101, 99, 107, 66, 121, 112, 97, 115, 115),
        E = [],
        jr = [],
        R = {},
        F_ = [],
        K = ((H.prototype.O = "toString", H).prototype.GH = void 0, []),
        u = (H.prototype.rv = false, H.prototype.bz = void 0, []),
        GS = [],
        rX = [],
        xd = [],
        d = (A = ((Mk, I, bf, function() {})(V0), H.prototype), A.Iz = function() {
            return Math.floor(this.R + (this.g() - this.G))
        }, H.prototype.D = "create", R.constructor),
        aX = ((A.jS = function() {
            return Math.floor(this.g())
        }, (A.mB = function(T, J, Q) {
            return T ^ (J ^= J << 13, J ^= J >> 17, (J = (J ^ J << 5) & Q) || (J = 1), J)
        }, A).g = (window.performance || {}).now ? function() {
            return this.lz + window.performance.now()
        } : function() {
            return +new Date
        }, A.U9 = function(T, J, Q, W, v) {
            for (W = v = 0; v < T.length; v++) W += T.charCodeAt(v), W += W << 10, W ^= W >> 6;
            return (v = (W += W << 3, W ^= W >> 11, T = W + (W << 15) >>> 0, new Number(T & (1 << J) - 1)), v)[0] = (T >>> J) % Q, v
        }, A.i = function(T, J, Q, W, v) {
            if ((Q = "array" === L(Q) ? Q : [Q], this).v) T(this.v);
            else try {
                W = [], v = !this.s.length, n([u, W, Q], this), n([E, T, W], this), J && !v || f(J, this, true)
            } catch (y) {
                q(this, y), T(this.v)
            }
        }, A).qR = function(T, J, Q, W, v, y) {
            for (W = (Q = [], y = 0); W < T.length; W++)
                for (y += J, v = v << J | T[W]; 7 < y;) y -= 8, Q.push(v >> y & 255);
            return Q
        }, void 0);
    H.prototype.W = function(T, J) {
        return J = (T = {}, aX = function() {
                return T == J ? 81 : 93
            }, {}),
            function(Q, W, v, y, Z, z, U, F, h, k, B, c, w, X, a) {
                U = T, T = J;
                try {
                    if (a = Q[0], a == K) {
                        v = Q[1];
                        try {
                            for (B = (X = (w = atob(v), c = 0), []); c < w.length; c++) h = w.charCodeAt(c), 255 < h && (B[X++] = h & 255, h >>= 8), B[X++] = h;
                            x(187, (this.l = (this.X = B, this.X.length << 3), this), [0, 0, 0])
                        } catch (D) {
                            N(this, 17, D);
                            return
                        }
                        pq(8001, this)
                    } else if (a == u) Q[1].push(b(this, 266).length, b(this, 35).length, b(this, 478), b(this, 119).length), x(365, this, Q[2]), this.L[121] && Dn(b(this, 121), 8001, this);
                    else {
                        if (a == E) {
                            this.K = (Z = (X = Q[2], O((b(this, 119).length | 0) + 2, 2)), z = this.K, this);
                            try {
                                y = b(this, 428), 0 < y.length && e(this, 119, O(y.length, 2).concat(y), 10), e(this, 119, O(this.N, 1), 109), e(this, 119, O(this[E].length, 1)), w = 0, w -= (b(this, 119).length | 0) + 5, W = b(this, 266), w += b(this, 94) & 2047, 4 < W.length && (w -= (W.length | 0) + 3), 0 < w && e(this, 119, O(w, 2).concat(I(w)), 15), 4 < W.length && e(this, 119, O(W.length, 2).concat(W), 156)
                            } finally {
                                this.K = z
                            }
                            if (k = ((((B = I(2).concat(b(this, 119)), B)[1] = B[0] ^ 6, B)[3] = B[1] ^ Z[0], B)[4] = B[1] ^ Z[1], this.vC(B))) k = "!" + k;
                            else
                                for (w = 0, k = ""; w < B.length; w++) F = B[w][this.O](16), 1 == F.length && (F = "0" + F), k += F;
                            return b((x(478, (b(this, ((c = k, b(this, 266)).length = X.shift(), 35)).length = X.shift(), this), X.shift()), this), 119).length = X.shift(), c
                        }
                        if (a == GS) Dn(Q[1], Q[2], this);
                        else if (a == rX) return Dn(Q[1], 8001, this)
                    }
                } finally {
                    T = U
                }
            }
    }();
    var y0, Jj = /./,
        fq = K.pop.bind((H.prototype.vC = (H.prototype.dv = 0, H.prototype.oz = 0, H.prototype[xd] = [0, 0, 1, 1, 0, 1, 1], function(T, J, Q, W) {
            if (Q = window.btoa) {
                for (J = (W = 0, ""); W < T.length; W += 8192) J += String.fromCharCode.apply(null, T.slice(W, W + 8192));
                T = Q(J).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "")
            } else T = void 0;
            return T
        }), H.prototype)[u]),
        WN = function(T, J) {
            return (J = Sr()) && 1 === T.eval(J.createScript("1")) ? function(Q) {
                return J.createScript(Q)
            } : function(Q) {
                return "" + Q
            }
        }(((y0 = (Jj[H.prototype.O] = fq, Q0({get: fq
        }, H.prototype.D)), H.prototype).AO = void 0, p));
    (g = p.botguard || (p.botguard = {}), 40) < g.m || (g.m = 41, g.bg = wX, g.a = BN), g.RBK_ = function(T, J, Q) {
        return [(Q = new H(T, J), function(W) {
            return IX(Q, W)
        })]
    };
}).call(this);
#3 JavaScript::Eval (size: 22) - SHA256: ec57c81fb17f8e49d6e24632131ff2435195de95932fda8509037ae4b0d41dda
0,
function(y) {
    vN(1, y)
}
#4 JavaScript::Eval (size: 22) - SHA256: 797f3a04f8544034ebbf1fbac72103451f9c802ace19cb9f057f4eb23d4200ec
0,
function(y) {
    vN(2, y)
}
#5 JavaScript::Eval (size: 64) - SHA256: 9ea236d2bdaebe77b1c584bccfc9e289e8fcff1a532a8796b9b59dfbe1832c60
0,
function(y, Z, z) {
    x((z = (Z = (z = S(y), S(y)), y.L[z]) && b(y, z), Z), y, z)
}

Executed Writes (0)


HTTP Transactions (128)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 20 Sep 2022 19:13:14 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 9F4fUVm0A1wQG7JbElqvh8tmHTb5O3kfpjRg5NmNKiMMRZzgq9f7aQ==
Age: 3156


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    2d12f67fe57a87e7366b662d153a5582
Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1
Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "5C706B2718B1698995F4FEB91223779AEF4BF6DC967C31F9EF9A93873197D5F9"
Last-Modified: Sun, 18 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2568
Expires: Tue, 20 Sep 2022 20:48:38 GMT
Date: Tue, 20 Sep 2022 20:05:50 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.35
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 20 Sep 2022 04:35:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wytoLziVrvXjvhW0hIRdnnksKden3bhIYmwIm0KZnXO6xH3lY_2DpQ==
age: 55837
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 20 Sep 2022 20:05:51 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Tue, 20 Sep 2022 20:03:22 GMT
Expires: Tue, 20 Sep 2022 20:31:23 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: pvbdDsEUDVeWpLEs96GQ08UFEd-5JonkeT8xvxDaaALsVO2luVTeqQ==
Age: 149


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET / HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         85.17.8.228
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Tue, 20 Sep 2022 20:05:51 GMT
Server: Apache/2
Location: https://nextgearmedia.nl/
Content-Length: 233
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   233
Md5:    a557a98f8c207640333bdedf9df2c45f
Sha1:   60844b87e8ffee1159aa86ed65601a051b80153c
Sha256: 823a8c2ce3006ca807d99b6fe1e86cf1a70cb452cc1506e9268a5ea12595a058

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2961
Cache-Control: 'max-age=158059'
Date: Tue, 20 Sep 2022 20:05:51 GMT
Last-Modified: Tue, 20 Sep 2022 19:16:30 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C85A7302EE55952A33B9E6A6A3E5A4D1D30A00F56D360D460C404999F3C36658"
Last-Modified: Tue, 20 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21499
Expires: Wed, 21 Sep 2022 02:04:10 GMT
Date: Tue, 20 Sep 2022 20:05:51 GMT
Connection: keep-alive

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: plTXuf0ym3SCKVC2EDVcmw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.42.74.230
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: c30yrc5K8ixu1YwexFyXdhvTZHA=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5432
Expires: Tue, 20 Sep 2022 21:36:25 GMT
Date: Tue, 20 Sep 2022 20:05:53 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5432
Expires: Tue, 20 Sep 2022 21:36:25 GMT
Date: Tue, 20 Sep 2022 20:05:53 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5432
Expires: Tue, 20 Sep 2022 21:36:25 GMT
Date: Tue, 20 Sep 2022 20:05:53 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5432
Expires: Tue, 20 Sep 2022 21:36:25 GMT
Date: Tue, 20 Sep 2022 20:05:53 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28b8af49-2631-4a57-aeca-43e33f0f6d83.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11145
x-amzn-requestid: dcb726a6-2f43-4170-a53c-4f0d2883309e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yuh7yHfHIAMFu4g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e37e-11bf06e96123e01c11854cbb;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:47:42 GMT
x-amz-cf-pop: SEA73-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: oJyChyEdTbGx6oQCRy6IVMS8qU22LupFYn6FOii3p4BUVFyKnssQ7Q==
via: 1.1 b47618c03bd47cf085f27b1e215f76cc.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:05:54 GMT
age: 79199
etag: "ff8286c4d2cf87a1865d56d082bc5235dba60ad7"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11145
Md5:    c283017ec789693602177a2785177e21
Sha1:   ff8286c4d2cf87a1865d56d082bc5235dba60ad7
Sha256: 520db2567ad5529d35d2ac63b94d4186848382e9c86d0c4355ab979b34f0e0ab
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b9b6fcc-4a98-463a-8c9c-a60812d5b535.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9865
x-amzn-requestid: 7eeeff5b-cb13-4060-96a6-bf5a4be57331
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugokGQVoAMFXmA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e169-4211dbbe1a22d0255a45aff0;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:38:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2kU9PLuzusMR04mNUdwbU6-120ESVhYJtNaIixERO68Vo9jEfP3JWg==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:04:47 GMT
age: 79266
etag: "b8484fb5443344b03e52dd56b1d6c5682eb6221a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9865
Md5:    1a7d863845e96c5927e812f325c08c16
Sha1:   b8484fb5443344b03e52dd56b1d6c5682eb6221a
Sha256: fcb382029332a44deaf212298b618074a752d674d0c735a1b8b861ab4bb6ff0f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a91bc33-86f4-4bda-af70-da083ceb7c72.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10894
x-amzn-requestid: f7aad96e-af80-4db7-8bc1-d1e09a9b37e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YeJQGHhOIAMFYuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322559a-538534e91448af217c59ab3d;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 22:28:42 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: P7aZQzmAvqn2rcHJUQjHo0Dcg8dsrqseey5mNOabfq1b857M4SUMDQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 10:06:02 GMT
age: 35991
etag: "ebd83f29edd95217dfa4f4c7a94eddf34dd58b14"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10894
Md5:    d3e70b2859ca89b353682d03f6b46b93
Sha1:   ebd83f29edd95217dfa4f4c7a94eddf34dd58b14
Sha256: 43ad8f8b0a664bbec39e0410c1201498a2d2e36e5bd7d5ece8d65b15230ec50b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d1af9c9-23b5-42e1-b7c6-655c21db6627.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9873
x-amzn-requestid: 7171299f-e6e3-40ef-a292-33779346e1ee
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugI-FDIIAMF-xg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e09f-31f9413434a6b00e77e7709b;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: evL3aL1ULo6B2a8Rp6iILKCX7F14O9HMSbEqkEY3XHFhmMptE8FaVw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:09:44 GMT
age: 78969
etag: "0e14f5062e40ce94346494ff947bfcf74b5e88c1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9873
Md5:    7ca0c1a7f205ad07f1cce80b26448873
Sha1:   0e14f5062e40ce94346494ff947bfcf74b5e88c1
Sha256: ebc960279032671136749823c126ec807334d9eaf2b019abcc63b41bcdbf4a7f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c2e0de8-088f-449b-a3cb-bbb83e3883a6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11832
x-amzn-requestid: 75065a71-5f2d-4987-915b-9bddc772c76a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugI_EsLIAMFdmQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e09f-1248d25405209da3353d4a4a;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: gLh2EBTPdXvFtZuYKH1NVZebvnz4Rhs-f_rZPtfJpIWNemEk0upeOQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:09:43 GMT
etag: "8b91bc3069a3217bc719c27959d578b353b5d9dc"
age: 78970
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11832
Md5:    2ed7323b395e757f7766ea0045efdaca
Sha1:   8b91bc3069a3217bc719c27959d578b353b5d9dc
Sha256: 8daf8cb1464daa5f72bc4f1049adb4aba00b2c2dec11cb3ade3454ec2ebbfb63
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72c9eb8-103b-4d09-b405-97d1a7ae99a8.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9543
x-amzn-requestid: 17be04c9-54f0-4988-82dd-f13911a2a629
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugINHN1IAMF8iA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e09a-35496b4c21c23dec75257964;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -VBFetQNkmIiWeJtW5IOheaPLdDHM9iKhiGPzVcA3_KQk7Qha5VrXg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:14:25 GMT
age: 78688
etag: "a852edb64a7220532aa619ab2a440c3a7e11b97a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9543
Md5:    30fbdfee7ec4513a5ff3dfcb7282f816
Sha1:   a852edb64a7220532aa619ab2a440c3a7e11b97a
Sha256: 4adee59f97bea412c6a0a786d0a27e431a497198b9047a75841b0a530803bdfe
                                        
                                            GET / HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
x-powered-by: PHP/7.4.26
link: <https://nextgearmedia.nl/wp-json/>; rel="https://api.w.org/", <https://nextgearmedia.nl/wp-json/wp/v2/pages/12>; rel="alternate"; type="application/json", <https://nextgearmedia.nl/>; rel=shortlink
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 20819
date: Tue, 20 Sep 2022 20:05:51 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Size:   20819
Md5:    a3ab40f18c0d4404b28cb680b83e3972
Sha1:   e9a85b303b1bf0ef09936e6afb17e98e2a68f043
Sha256: f37e8ec02d309e66b78c3d102e22c97c15801e65a60f22212bf915b44a024cdd

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/reusable-content-blocks/includes/css/reusablec-block.css?ver=6.0.2 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 10 May 2021 11:41:39 GMT
etag: "16e-5c1f842b8a2c0-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 239
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   239
Md5:    40c0a6fa19a00c68e7719c54d6aa3e96
Sha1:   b8726a3237e6c70afc02ebde5b1367a029634b9b
Sha256: 12dd313d0569799aa1399f4246935cf9905ebb4945dd6f3753bc127906047769
                                        
                                            GET /wp-content/plugins/woocommerce-ajax-filters/berocket/assets/css/font-awesome.min.css?ver=6.0.2 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 06 Sep 2022 12:11:09 GMT
etag: "7844-5e8011773ac6c-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 7009
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (30621), with CRLF line terminators
Size:   7009
Md5:    59523bade4e5f787229c19470e5c6412
Sha1:   e1ae5d048ab7f21670fb9637a25d378930ef8b55
Sha256: c6883f4445529ed39078708515057755845b8cee81b5088628591fc82d507ebc
                                        
                                            GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.3.2 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 20 Sep 2022 11:49:46 GMT
etag: "28c3-5e91a6cc77bd9-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1962
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (10435), with no line terminators
Size:   1962
Md5:    38b1f483d4bf6b1548990385c8673746
Sha1:   1668edb02c5170be308368292a4c12033d0a42f4
Sha256: 98138d83d7cb12e99802ba034b400a67e0d7b6e378d8bcd1b4d9f4fe44ce1111

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.2 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 06 Sep 2022 11:56:25 GMT
etag: "15b64-5e800e2c087e3-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 11681
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (43771)
Size:   11681
Md5:    e5548800176e913a9084f47a3e1e04f6
Sha1:   eff4604acc5c26ae82a19188de2f98bf5b79d80c
Sha256: a2569c768eaca09f2483b971fcebb97badd57c9a16b5ae3e16b8cdcd8c688b07
                                        
                                            GET /wp-content/plugins/woocommerce-ajax-filters/assets/frontend/css/fullmain.min.css?ver=1.6.3.1 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 06 Sep 2022 12:11:09 GMT
etag: "254ed-5e801176fb4d1-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 18736
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (44578), with CRLF line terminators
Size:   18736
Md5:    55f9df76f9f20d28bf759ce31f3ac686
Sha1:   8aad8044806b0079a9896d99e76cc23d776ef47a
Sha256: 83c065aac36f44f2e736a34385b8246eaeb3fd472b32476b13e8e00aeede1f30

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/ajax-search-for-woocommerce/build/blocks/search-nav/index.css?ver=6.0.2 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 20 Sep 2022 11:48:58 GMT
etag: "3ec-5e91a69e8e1a0-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 205
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1003)
Size:   205
Md5:    a5823846178a35218c8f1c6479a81c85
Sha1:   ec3b14b92d5a57e132ad228fe4dd597caa848e01
Sha256: b461beee2082ac3e0114ffaf8ee8c4e3af4c070461f2d6f2e9acda8c5dcdd480

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=6.9.2 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 20 Sep 2022 11:49:39 GMT
etag: "4591-5e91a6c500a6b-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2554
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (17809), with no line terminators
Size:   2554
Md5:    d45c9e0b4109fd68bc2eaae40d01f61a
Sha1:   f0fd80fcb3e8b7a9d95782d0f0c79ddc19b2fa96
Sha256: 072aa95bd2ad493914030593b84c611b2dfcc39444f726ddab52751f4b4bf926

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/ajax-search-for-woocommerce/build/blocks/search/index.css?ver=6.0.2 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 20 Sep 2022 11:48:58 GMT
etag: "32d-5e91a69e900e0-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 157
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (812)
Size:   157
Md5:    14c195ea5c435f0c4a95ce936c1ecfc5
Sha1:   9bb138f52a41739badda47787c429e9088a12b54
Sha256: adc4865547ab30f3fafec5c2756988c5886f237b5ff8b33756bc765fd252c485

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5181
Cache-Control: 'max-age=158059'
Date: Tue, 20 Sep 2022 20:05:54 GMT
Last-Modified: Tue, 20 Sep 2022 18:39:33 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.3.2 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 20 Sep 2022 11:49:46 GMT
etag: "33805-5e91a6cc410de-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 22539
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65527), with no line terminators
Size:   22539
Md5:    9706fd6c4fd98d190897f3c107a53d72
Sha1:   906e95cc7656a85f2e3f4f5ac898b8d942017b59
Sha256: 288ec9bae1e7067e86acda75a521a85b46d8976f511e7894c962a58663ff00e3
                                        
                                            GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=6.9.2 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 20 Sep 2022 11:49:39 GMT
etag: "f523-5e91a6c50d58a-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 8895
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (62753), with no line terminators
Size:   8895
Md5:    6c8772ecf168559902155fb7bbbb6ff5
Sha1:   437a2c6b53493b57f4dd490368c53070c903be85
Sha256: afcaf780edbf3bc69ee80db3e8b9420cc1c7a458b270bf7df979f53a21136288
                                        
                                            GET /wp-content/plugins/woo-fly-cart/assets/css/fonts.css?ver=6.0.2 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 22 Jun 2021 08:40:40 GMT
etag: "c7e-5c556bea69200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 682
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   682
Md5:    faa6ade16b5bc0899c033aa28829ea43
Sha1:   82adcb9df83f9f871f7d36b079b3e583353667cb
Sha256: f6e569a12e90f5c82a15c3042354c3d483e8f009d0b78c76859c0927ca3180c7

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/woo-phone-input-plugin/css/styles.css?ver=2.0.3 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 24 Feb 2022 13:05:36 GMT
etag: "24a-5d8c33cede800-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 240
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   240
Md5:    a1a3d81c0835aa4700bb44fbb7bf5b51
Sha1:   4192261302029071e2e40a128a955ba4b6c23f25
Sha256: 06e24734a26bba382ee7658c4f77946d99417b4bd33644070621357ad8159585

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/woo-fly-cart/assets/hint/hint.min.css?ver=6.0.2 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 22 Jun 2021 08:40:40 GMT
etag: "259b-5c556bea69200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1525
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (9518)
Size:   1525
Md5:    03cd2f11c1a2786778149df67b63a723
Sha1:   0ba00ef403ad42216585989cfdb5609b4e4ec9f0
Sha256: 5863c2a339ddd6dbe07ce7e02b34087f42b4fe2bd29047c72b73cd9b708180ef

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/woo-phone-input-plugin/css/intlTelInput.min.css?ver=2.0.3 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 24 Feb 2022 13:05:35 GMT
etag: "5114-5d8c33cdea5c0-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3134
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (20756), with no line terminators
Size:   3134
Md5:    bb1343b6addefa6265d19e677ea59a8a
Sha1:   6f24834788c96c8c9c3bbd8bc7f604885c5f3930
Sha256: 43238a6b9c7006be9962f6377b85759b476abf4bfc28f2c60e52ca0bcf074c1b
                                        
                                            GET /wp-content/plugins/woo-fly-cart/assets/perfect-scrollbar/css/perfect-scrollbar.min.css?ver=6.0.2 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 22 Jun 2021 08:40:40 GMT
etag: "1215-5c556bea69200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 607
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4596)
Size:   607
Md5:    6f4c1e677962c90a2504984fb9bd1e88
Sha1:   816978638fc745ec6f25e9f16a9691743e7540cb
Sha256: 8fd289dbfbdf9d827bbbfd125c6450f248baa88fd61fc6a7ebd7078363d3e6df

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/ajax-search-for-woocommerce/assets/css/style.min.css?ver=1.20.0 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 20 Sep 2022 11:48:58 GMT
etag: "81a2-5e91a69e44dc7-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 5808
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (33185)
Size:   5808
Md5:    61d25807c2a7d63196b9a29db1c6e4e1
Sha1:   a49cc3c7bb34fb5a80740c8e3c921bcf545134a1
Sha256: d0d34fd37f52c1c54bb48f9c1236648e553812c0167330c4b1a8714676c0e89e

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5181
Cache-Control: 'max-age=158059'
Date: Tue, 20 Sep 2022 20:05:54 GMT
Last-Modified: Tue, 20 Sep 2022 18:39:33 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /wp-content/plugins/woo-fly-cart/assets/perfect-scrollbar/css/custom-theme.css?ver=6.0.2 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 22 Jun 2021 08:40:40 GMT
etag: "fa0-5c556bea69200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 621
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   621
Md5:    6165595afea9574ba0fb26de1be9b7cd
Sha1:   9054ccfee7e8a36ebfc5311e79096b129355148c
Sha256: b4dbfe92773768ba5ffde4a1acea9bd98df503087176bcb5976818cf09df3db3

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/woo-fly-cart/assets/css/frontend.css?ver=6.0.2 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 22 Jun 2021 08:40:40 GMT
etag: "16ebe-5c556bea69200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 6800
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (424)
Size:   6800
Md5:    b3e0f54d386c9a7841a92d9aa8f29117
Sha1:   cdd29565b30ee2756627e8d460c372628c2d1351
Sha256: 404065dabd5a69ad77bfb1b89b8e6f9f6e9587511b23a2a2a10ed68151ddc57a

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css?ver=6.3.3 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 20 Sep 2022 11:48:26 GMT
etag: "aa3-5e91a67fa8203-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 713
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2723), with no line terminators
Size:   713
Md5:    7e67979bdd7b91ff88c5113cd3db186e
Sha1:   1ef16fddac63946359c3d47b46d1985c3961ea26
Sha256: 10f99207a897bca4be545b3a4a330907e90e0dc49326c774946393ed4adcd83c
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.9.2 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 20 Sep 2022 11:49:39 GMT
etag: "2525-5e91a6c5bb2ba-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3499
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (9115)
Size:   3499
Md5:    4eb090d1d9263b041ec90bac1a6e6e8f
Sha1:   0b0a01684ed1e07a41a9f6eb02423738a68f8b12
Sha256: f621d8d1bdc2c1508699ef2510c1b35122fef1ee7da3ed10fe66a881a6d882b2

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 06 Sep 2022 11:56:12 GMT
etag: "2bd8-5e800e1fe424f-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4169
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11126)
Size:   4169
Md5:    5629711d7fdd5b28441bac39b851299f
Sha1:   4e0bf2b7383097f7c352023a1b1b1b48a50356b6
Sha256: 44c444309c7a6c05ff4a9bc198bed9e9596bedb5658637c85689c9a471dcdd16

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.9.2 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 20 Sep 2022 11:49:39 GMT
etag: "bdd-5e91a6c59ce5c-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1086
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (3037), with no line terminators
Size:   1086
Md5:    0d03578b274ddfa19d4be46ff5d4f242
Sha1:   5d5322d264d2219c50b60abcf9625533088afbf2
Sha256: 342455e97f9438a6f336423fa4f6fc6dc59da5d84c23f4d39ebc5425aa9ada27

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.5.0 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 20 Jan 2021 10:35:46 GMT
etag: "3e0-5b952848f6480-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 374
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   374
Md5:    99f478aea66ce928c3dda9ab3a0dbbb3
Sha1:   29bb3e5ccb81defba6cf1749768f4c57533e261a
Sha256: 44b0fdb4d849dfa85411e2e814e8352a89f04fad8e65924f477368dad133955e
                                        
                                            GET /wp-content/plugins/woo-phone-input-plugin/js/main.js?ver=2.0.3 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 24 Feb 2022 13:05:41 GMT
etag: "403-5d8c33d3a3340-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 462
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   462
Md5:    58c40804d3c9ff21ba276d751a94c585
Sha1:   4b13e6c06708798e65b3fcf44a4d100a117e7d0e
Sha256: 05abb90a51745a50bafee16fd560a2e668d03300358465220470ab09be7aafe1

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5181
Cache-Control: 'max-age=158059'
Date: Tue, 20 Sep 2022 20:05:54 GMT
Last-Modified: Tue, 20 Sep 2022 18:39:33 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 06 Sep 2022 11:56:13 GMT
etag: "15db1-5e800e2063187-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 30908
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65447)
Size:   30908
Md5:    9640915738503451aa21181699feab5b
Sha1:   c053eaf36ef0da96619706b3abda326305063bd6
Sha256: f8834e669ad1f4039442c26aaa373ec39c35a233b9786d374fc3f670f16b0adc

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/woo-phone-input-plugin/js/phone-validate.js?ver=2.0.3 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 24 Feb 2022 13:05:41 GMT
etag: "66e-5d8c33d3a3340-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 609
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   609
Md5:    3a563060faa7f5b99d8c21c8856d93b5
Sha1:   371126d2b4bd0735baf9deb0ee93c40d5fb2af0d
Sha256: 7397ecb11be6871cc446419adcd70d936986b7a7daafd682972e662196b2ece7

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/uploads/sterren.svg HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: image/svg+xml
                                        
last-modified: Thu, 24 Feb 2022 09:47:54 GMT
etag: "175-5d8c079e62680-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 286
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (373), with no line terminators
Size:   286
Md5:    80742ec9dc6dcf40b1ffe9c36f815a10
Sha1:   eed63e553b3502de15139364d98d43135e761dbd
Sha256: 5e229dc11ecb5a5586c0d46ed61ffed78b0a4a582ce8215ff8d3c96dbf10b5cf

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/uploads/gratis-sample.svg HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: image/svg+xml
                                        
last-modified: Thu, 24 Feb 2022 09:47:15 GMT
etag: "26e-5d8c077930ec0-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 395
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (622), with no line terminators
Size:   395
Md5:    1e23e136ef22de2e0b5fd0d37e9934bb
Sha1:   6501b8af55f16ba61945e67234ad2ce86a47230f
Sha256: 0866509189c7797fef8ea3fea7b23b438b88ae09805fa127a5eed3f819dc9ef3

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/uploads/cart-icon.svg HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: image/svg+xml
                                        
last-modified: Thu, 02 Jun 2022 14:48:10 GMT
etag: "3ff-5e078182f3e80-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 454
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (1023), with no line terminators
Size:   454
Md5:    dd96948d680d1116e3336688c27c75f2
Sha1:   050745f9e188647a34d6fe28de06917517fc5d51
Sha256: 200ad5c92561de0b6966ef0433f680e87da493c7388b348e3ff57971051f09d5

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 20 Sep 2022 20:05:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 20 Sep 2022 20:05:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/search-icon-mobile.svg HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: image/svg+xml
                                        
last-modified: Fri, 03 Jun 2022 14:17:10 GMT
etag: "23e-5e08bc7294580-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 365
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (574), with no line terminators
Size:   365
Md5:    12c83cdfc99509920117fe0179b93523
Sha1:   7815105caa05a16a16010d0d145f85f7a42b0cee
Sha256: 929aca76368cd673af12b64111803dd137f1f322eb660c6f1647c5eb7285de7a

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/uploads/gratis-verzending.svg HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: image/svg+xml
                                        
last-modified: Thu, 24 Feb 2022 09:47:29 GMT
etag: "103-5d8c07868ae40-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 217
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with no line terminators
Size:   217
Md5:    e8a96b413ffe91f26ba11ffacc1bbf3c
Sha1:   9b71ade2c625c94f02ae788f4e9119f19caa9fab
Sha256: e23ba33ed5a8b09c896de40ab5abb3a23665bb37e472c87991bbdecd0ab2daf9

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/uploads/Next-Gear-Media-logo-witte-woordmerk-en-groene-beeldmerk.svg HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: image/svg+xml
                                        
last-modified: Thu, 02 Jun 2022 11:42:05 GMT
etag: "202c-5e0757eb2dd40-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3184
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (8236), with no line terminators
Size:   3184
Md5:    5d72d70f6090fdd6c65009b7fd2707b5
Sha1:   c785dada5bc3c9225db07864aad3c596bd8311cd
Sha256: d7c1654ddfdb4813d64fc5b152880ee57529ba201b801c11ead845e1c342ccb9

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/uploads/fb_icon.svg HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: image/svg+xml
                                        
last-modified: Tue, 22 Jun 2021 07:50:04 GMT
etag: "24c-5c55609b0e300-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 348
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (588), with no line terminators
Size:   348
Md5:    4739fa1e23906c68695a26cf395a5eba
Sha1:   ef2d226a49a64b198c101f8c0c8c72ef9f02a6f1
Sha256: eee9bc0d17e8309b7f90437cf834d8168d86c4d9724f79fdfb5cd9664e8b492a

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/uploads/Audi-Logo-PNG-File.png HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Fri, 03 Jun 2022 11:38:38 GMT
etag: "372a-5e0899033ab80"
accept-ranges: bytes
content-length: 14122
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 302 x 302, 8-bit colormap, non-interlaced\012- data
Size:   14122
Md5:    889018cf27cf9781491d57bc62ff7330
Sha1:   a5af5774e0e117a9d4125b963ebe4e55177400a0
Sha256: b86959b5486f7df3aef6366b8e591d642e19f696f92a733d69a51628e3d2a366
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 20 Sep 2022 20:05:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/Logo-bmw-vector-transparent-PNG-400x400.png HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Fri, 03 Jun 2022 08:05:37 GMT
etag: "3b81-5e08696651640"
accept-ranges: bytes
content-length: 15233
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 400 x 400, 8-bit colormap, non-interlaced\012- data
Size:   15233
Md5:    7afa1e439129ce0ac9c9952f1a98fc55
Sha1:   03eb57aee2d3aa707742ddb08cfc2cb36ef02000
Sha256: f1bda9cd71e7ebf7aa3fd83fa1d5d9d1ca44c35c10a95c6caf6be2d146496d65
                                        
                                            GET /wp-content/uploads/mini-8-Transparent-Images.png HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Mon, 09 May 2022 12:01:27 GMT
etag: "5bfe-5de92f7c493c0"
accept-ranges: bytes
content-length: 23550
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 400 x 400, 8-bit colormap, non-interlaced\012- data
Size:   23550
Md5:    a611934539649a724944e6e0b632be06
Sha1:   6ccd79666a4b2341797ffc2dbdd093d3ed9253b4
Sha256: 1f398265eb14c34437da5694ed343fee384a9a1908fed978bfabcd5b0c6fc25c
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 20 Sep 2022 20:05:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.9.2 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 20 Sep 2022 11:49:39 GMT
etag: "72a-5e91a6c5be199-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 982
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1668)
Size:   982
Md5:    e66463f2023b738680c9bdefece69a37
Sha1:   315dc8e6ebdfb18c662851244ee33e2758ad3c83
Sha256: fd83e7fc6d81aa6f6680ea640e9c086aa1950a17757a582aa74ea9797a70f346

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/themes/sellaton/style.css?ver=1663704353 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 12 Sep 2022 11:30:57 GMT
etag: "5f787-5e8793abdd2d4-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 54000
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (430)
Size:   54000
Md5:    bebab9899766ba507296b486f6b38ba1
Sha1:   70eb29a81beceafaa12cd7029b86fdb420944c01
Sha256: d8bee97d3459490e096da7e22eb3fc5ca1846d03d43e26295ea79d5d1d8add95
                                        
                                            GET /wp-content/uploads/ig_icon.svg HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: image/svg+xml
                                        
last-modified: Tue, 22 Jun 2021 07:50:08 GMT
etag: "2df-5c55609edec00-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 387
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (735), with no line terminators
Size:   387
Md5:    9af172b0090ca8590fc5b649f62f8af8
Sha1:   08739f6550fea3cf833c53a7c0292c4cc4315eed
Sha256: 567b70865b0715ed7aad8b4483cff7e1e6272bd9e583462d79e53e58292859fa

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/uploads/js_composer/js_composer_front_custom.css?ver=6.5.0 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Wed, 18 May 2022 15:04:43 GMT
etag: "8a283-5df4a93c098c0-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 49383
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (684), with CRLF line terminators
Size:   49383
Md5:    d86b524601463ee4dd7b75221cf621d0
Sha1:   6597cce89c72c1af10fc0f484822a5a3be38b1d1
Sha256: 46ae77fbab4eeac46da7d5f33fd7da5cc0a52b5e979fd44da7cbb9bb0fb96ab7

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5181
Cache-Control: 'max-age=158059'
Date: Tue, 20 Sep 2022 20:05:54 GMT
Last-Modified: Tue, 20 Sep 2022 18:39:33 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /wp-content/uploads/cropped-Next-Gear-Media-favicon.png HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Thu, 02 Jun 2022 09:55:00 GMT
etag: "be1e-5e073ffbd2500"
accept-ranges: bytes
content-length: 48670
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 512 x 512, 8-bit colormap, non-interlaced\012- data
Size:   48670
Md5:    993b7b55e59a7a4771ba056238876d4b
Sha1:   147b9612783a662d9a1568cfe4677dc91a9842b5
Sha256: d5648699e2c8ea8c70eae1fd3a21c309c51827f342020dcdd47b4290ee4606ee
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.9.2 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 20 Sep 2022 11:49:39 GMT
etag: "b7a-5e91a6c59ddfc-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1039
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2938), with no line terminators
Size:   1039
Md5:    45db3d2887c26700a51bf469e3bb3aa1
Sha1:   d070b5fb53d2fbb66964bbfd482270b855d0ee96
Sha256: 1abc0cff49f82d9a063c04cd086b991af6ad00467efc4cb8d8d4e3c9a0f95777

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /gtag/js?id=G-F4DNFRNW09 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.72
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 20 Sep 2022 20:05:54 GMT
expires: Tue, 20 Sep 2022 20:05:54 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 75309
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (20189)
Size:   75309
Md5:    e006f5fbd03106242e2c90a012f97891
Sha1:   a0364de70b721a7777c8bdab8c446483c607cbce
Sha256: e64d16006b21337f0f6a402036d4743b1e4cfc66b90af1eb3bffd36ebb06345b
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.9.2 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 20 Sep 2022 11:49:39 GMT
etag: "85b-5e91a6c599f7d-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 794
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2139), with no line terminators
Size:   794
Md5:    29307e8dec33cf3411ca4e1f2c84e9d0
Sha1:   484402289464d7ffb1475827f3438329d520bfc6
Sha256: a2db59efaa416ef0c9d5d58f142cd5e44c475348cff20a664586fd3cda1b5f5b

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.74
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30774
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 15:53:22 GMT
expires: Wed, 20 Sep 2023 15:53:22 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 15152
last-modified: Mon, 13 May 2019 14:37:17 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   30774
Md5:    81182f4b684635f6bdcbdd907ee66f25
Sha1:   a1f2f151df72ede41397c8131bd47a3ce85575b3
Sha256: be40946c98d9a78a3c7c9ad097d379ab12549a195bd7a4766919a1d3fd987396
                                        
                                            GET /wp-content/plugins/woo-fly-cart/assets/js/frontend.js?ver=3.0.6 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 22 Jun 2021 08:40:40 GMT
etag: "31de-5c556bea69200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2705
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   2705
Md5:    ca49945e75bfd95f904d3f4884a602c6
Sha1:   85c7ea616401433a60842e04b337e92d305b14de
Sha256: 6b3c0739833c86dd42b56703c726a12fc11915429f60c66726e367d9e10c9a43

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/js_composer/assets/css/js_composer_tta.min.css?ver=6.5.0 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Wed, 20 Jan 2021 10:35:46 GMT
etag: "431b5-5b952848f6480-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 14467
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65358)
Size:   14467
Md5:    fd6c30d4223c48ff5435d98f9c21e667
Sha1:   4bff83bafcc5d4f51295a7fc0f452035074d3f27
Sha256: dc164eb16390b524973875d2b375518b854941d7f91a34124b96f1372f100307

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/woo-fly-cart/assets/perfect-scrollbar/js/perfect-scrollbar.jquery.min.js?ver=3.0.6 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 22 Jun 2021 08:40:40 GMT
etag: "62f4-5c556bea69200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 6506
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (25300)
Size:   6506
Md5:    f80db36391d43b98c8665526555420d2
Sha1:   e6a3fcbb863e8d4d0b0141d666281664d3863194
Sha256: dd98e7533fc18d58eea5f5d8c63f5df258b2296ee97d18c5329ea0c12814f1fb

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/themes/sellaton/js/skip-link-focus-fix.js?ver=20151215 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 18 Jun 2021 15:07:29 GMT
etag: "2ad-5c50baea64e40-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 417
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   417
Md5:    73f7704398d8f6be9748d30791950984
Sha1:   3231f3786c364c7665cd7123d8fae0f42bbfd836
Sha256: c1d9b23aff05fb52e5d6e68aff86d808097185c6dbaac6c3fc3ec6e5bea31ef4

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/themes/sellaton/js/navigation.js?ver=20151215 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 18 Jun 2021 15:07:28 GMT
etag: "b97-5c50bae970c00-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1094
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   1094
Md5:    7eec6995203e3994a2714c41a388df66
Sha1:   99c08555971c9962b5ade2806e05ed29d0f00258
Sha256: 040c47ba29f4c8eefa8d359cd715eadc0888aa080ce6187a23b8eb8852bc54b9

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /recaptcha/api.js?render=6LfqRdkhAAAAAPPOtcXWpt8bR6LKpx4171zwfrXD&ver=3.0 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.164
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
expires: Tue, 20 Sep 2022 20:05:54 GMT
date: Tue, 20 Sep 2022 20:05:54 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 587
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (884), with no line terminators
Size:   587
Md5:    f1c18af7c69bfac340274a68b0c98f83
Sha1:   36b536207d0e11ff8b269ba7348f291f403afdda
Sha256: 3f3ea31b63bfcbbd4a6c6c9f2b4bf6df55a933ac51b9edb2de6ee7e093d945a6
                                        
                                            GET /wp-content/themes/sellaton/js/main.js?ver=6.0.2 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 01 Sep 2022 14:28:01 GMT
etag: "6786-5e79e6bae7e40-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 6288
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   6288
Md5:    068e37ea1271093acac62928808070e4
Sha1:   a8e6f4241ff24faa4b8cd3af1fee84284c5923ab
Sha256: 1ee0b7ebe7a48af3f1831a45ca7d6597c8ee5189b9c42a32ff1efeee10fcf9c4

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 06 Sep 2022 11:56:31 GMT
etag: "194b-5e800e3172367-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2457
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6475), with no line terminators
Size:   2457
Md5:    27cbbd0a9d7c5ad9402118c4afc36035
Sha1:   7659d08a005f5ecfa6c779e3cda45c30007fd059
Sha256: ebc771d0af626966e38535357861fab0090e0bd7ff346cbe3c7ffdde1683809f

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 06 Sep 2022 11:56:31 GMT
etag: "4ac6-5e800e321b27c-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 7095
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (19138), with no line terminators
Size:   7095
Md5:    2f4fcc5a628b379672d76b7e91cbdf07
Sha1:   9d72f2c9cbc1e9b036360acfce8c8ccc8b832b8c
Sha256: a360f715a418026d2e1acd81c02c83233d0c0b60fdf4ce0b4d33562925d6a0b5
                                        
                                            GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.6.3 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 06 Sep 2022 12:11:28 GMT
etag: "3e7-5e80118914ff4-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 507
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (999), with no line terminators
Size:   507
Md5:    22f32f77e17fa7640cda0a401c2b0844
Sha1:   019765feeed7ea2a9e9e506ce000978ea3ecd171
Sha256: 269c0f075ceb9464731b25afc21ae41536b76ef76bf0cf856c42e3e6311ec6ce
                                        
                                            GET /wp-content/plugins/wp-seopress/assets/js/seopress-analytics.min.js?ver=5.9.0.3 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 06 Sep 2022 12:09:07 GMT
etag: "164-5e801102df48e-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 221
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (356), with no line terminators
Size:   221
Md5:    4dca67c4e76a339621b15842d81ab16f
Sha1:   edda0ffda207ba1836f3e4ae55fd7fb708beb248
Sha256: b3303f7400967974797d85db54a8f3208e3552e88a0d25f34465bfca62a2ef19
                                        
                                            GET /wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js?ver=6.3.3 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 20 Sep 2022 11:48:26 GMT
etag: "bbaf-5e91a67f91aa5-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 11061
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  C source textAlgol 68 source text\012- Pascal source, ASCII text, with very long lines (48047), with no line terminators
Size:   11061
Md5:    9d8f001a59dc380e83526cb4a5ccbd91
Sha1:   0a82be5bb9c3a2bb6d2f1498d18d160feb682c98
Sha256: 9be66b9338a4ff6157f8c5e6743cc51f8739ddd525c1975817ccd0b6afc1de71
                                        
                                            GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.5.0 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 20 Jan 2021 10:35:45 GMT
etag: "50a0-5b95284802240-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 5816
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (20421)
Size:   5816
Md5:    9a18ba220a1cfe950c090f7614d98167
Sha1:   f3a53f6251060940d84f9dea21cc7063a7a6ea3f
Sha256: 803ff0e4d506f0a13250a9877386eaa2572dedb0512b7bf824771be02d5ce453

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 20 Sep 2022 20:05:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/plugins/js_composer/assets/lib/vc_accordion/vc-accordion.min.js?ver=6.5.0 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 20 Jan 2021 10:35:45 GMT
etag: "2b85-5b95284802240-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2687
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (10922)
Size:   2687
Md5:    0dc2d0ccfce10647cefd23aa4f8cfcc2
Sha1:   7f8f550fe032b8314a05c15540734b6a1fe22b17
Sha256: 44f44185e44f9ee4b261b624c6e35e861088828aa74dad673c8e6fb19fa60c85

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 20 Sep 2022 20:05:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/plugins/ajax-search-for-woocommerce/assets/js/search.min.js?ver=1.20.0 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 20 Sep 2022 11:48:58 GMT
etag: "e62e-5e91a69e47ca7-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 15552
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (58925)
Size:   15552
Md5:    e430210a64166e0d2a11a76d51d953f2
Sha1:   a5b48f02b98a33c519c307179a9a3a26ccd3ca12
Sha256: 9c97d47bfb947ff6bbecca66780da6aa71dbd885382917987e629cb850fbd3c8

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/js_composer/assets/lib/vc-tta-autoplay/vc-tta-autoplay.min.js?ver=6.5.0 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 20 Jan 2021 10:35:45 GMT
etag: "9f1-5b95284802240-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 953
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2326)
Size:   953
Md5:    01276b22eb03069788fe5592222d8a7f
Sha1:   e4e70540d658d13e080d2a9fa564c1145e60699b
Sha256: 63a8f3b9b07e051a0d081e4c496026af282910b4d4deeab61832571c2005b5c8

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/js_composer/assets/lib/vc_tabs/vc-tabs.min.js?ver=6.5.0 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 20 Jan 2021 10:35:45 GMT
etag: "1062-5b95284802240-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1288
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3975)
Size:   1288
Md5:    886d7b9d2e24bf5425ca1131f22a57bc
Sha1:   0a3f9440fac0aca3386a695b162ffa7a3c03368a
Sha256: b06d7ea5b0c8369e09fac747a91dd1dbcc7a1d1a145bbf748e118dd0d1624b78

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 20 Sep 2022 20:05:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 20 Sep 2022 20:05:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 06 Sep 2022 11:55:18 GMT
etag: "48b9-5e800dec6c91f-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 5009
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (15660)
Size:   5009
Md5:    e6624e0b978e6ddba476be41aaaa82df
Sha1:   822e920d8233072110ed7c8a7f379e5b13209b18
Sha256: dac86a9ce08e4d8cded47b4fa900a664b0c997d8910c2a1be54a423678925a41

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /ueb1pcv.css HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: text/css;charset=utf-8
                                        
server: nginx
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: private, max-age=600, stale-while-revalidate=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 690
date: Tue, 20 Sep 2022 20:05:54 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (516)
Size:   690
Md5:    793577e0b3998c7bf733d6ca91b21d67
Sha1:   3bb4f930d436fce3d65f05198618ae5c251587b2
Sha256: 01733e9727f630529cadea6b11762c18f964fae71c91ad190144b12dddcf67c5
                                        
                                            GET /p.css?s=1&k=ueb1pcv&ht=tk&f=30331.30334.30335&a=12142167&app=typekit&e=css HTTP/1.1 
Host: p.typekit.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: text/css
                                        
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=604800
cross-origin-resource-policy: cross-origin
etag: "613bee4d-5"
last-modified: Fri, 10 Sep 2021 23:46:21 GMT
server: nginx
content-length: 5
unused62: 8096267
date: Tue, 20 Sep 2022 20:05:54 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   5
Md5:    83d24d4b43cc7eef2b61e66c95f3d158
Sha1:   f0cafc285ee23bb6c28c5166f305493c4331c84d
Sha256: 1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb
                                        
                                            GET /wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=6.9.2 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 20 Sep 2022 11:49:39 GMT
etag: "1b83-5e91a6c50b64a-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1177
date: Tue, 20 Sep 2022 20:05:54 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7043), with no line terminators
Size:   1177
Md5:    7a01d757cd8aced5af866e83a6d0ce76
Sha1:   f352b0e25c2a3ca7af84f93c9bc1fd700db3586f
Sha256: da5327f259e09fafac875160fbcd3fe934f48359e751e42b802f5577310b014c
                                        
                                            GET /wp-content/uploads/Next-Gear-Media-favicon.svg HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/wp-content/themes/sellaton/style.css?ver=1663704353
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: image/svg+xml
                                        
last-modified: Fri, 03 Jun 2022 11:00:53 GMT
etag: "704-5e08909328340-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 824
date: Tue, 20 Sep 2022 20:05:55 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (1796), with no line terminators
Size:   824
Md5:    65e373f10d0a9fb9dbd7c0b03fadda05
Sha1:   062ec0e85504a231f8ca18a47c9a0631d60245ed
Sha256: a3f82f7ffbfaf92b5541dabe4901702680b41f4b1b10eec83946c4b27657219b

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /af/142ef3/00000000000000003b9ae4c6/27/l?subset_id=2&fvd=n7&v=3 HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nextgearmedia.nl
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: application/font-woff2
                                        
server: nginx
content-length: 22696
etag: "988c4b754f2c963a9f71b6562bacd30954213e01"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Tue, 20 Sep 2022 20:05:55 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 22696, version 1.0\012- data
Size:   22696
Md5:    e302ce525135af1ee1a52639092be9f4
Sha1:   098ccba3a764c77a95d12682316fc5636c7ef2a4
Sha256: 7a3502fd80899d0405f1a76bf629d615358f443746813261f3a3c0be821dd78d
                                        
                                            GET /af/cfdf43/00000000000000003b9ae4c2/27/l?subset_id=2&fvd=n5&v=3 HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nextgearmedia.nl
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.76.122
HTTP/2 200 OK
content-type: application/font-woff2
                                        
server: nginx
content-length: 23852
etag: "5abb85e0f71a526db0db1d8d3f68e07a0406e8ba"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Tue, 20 Sep 2022 20:05:55 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 23852, version 1.0\012- data
Size:   23852
Md5:    b5a9b81c237bd449976106764ceaa949
Sha1:   b9ba38922e15c1b22fe80eea15ac61b47e26d1de
Sha256: 58e53483ddda5eecb3045e3033d1bed8045f8bd76439bd94c93fe04c1bc217a0
                                        
                                            GET /wp-content/uploads/IMG_2256.jpg?id=22061860 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Fri, 24 Jun 2022 08:43:35 GMT
etag: "7ca21-5e22d90d77bc0"
accept-ranges: bytes
content-length: 510497
date: Tue, 20 Sep 2022 20:05:55 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2049x1536, components 3\012- data
Size:   510497
Md5:    961b8d911d31e223f7d70615caaedaa3
Sha1:   fc89894bcf9a68be1d93ca2186c65255207f9102
Sha256: b89c3b452b3a0821700600a7c5baf6540d3130c0adaf71d262535cc206205788

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/woo-fly-cart/assets/fonts/woofc.ttf HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/wp-content/plugins/woo-fly-cart/assets/css/fonts.css?ver=6.0.2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: application/x-font-ttf
                                        
last-modified: Tue, 22 Jun 2021 08:40:40 GMT
etag: "32dc-5c556bea69200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 7282
date: Tue, 20 Sep 2022 20:05:55 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, woosmc \012- data
Size:   7282
Md5:    08a23f2f9ec03417029b43eb67dcf68e
Sha1:   f4d964c45a8d09a9aa8dccd072b2a5d9a5402c7b
Sha256: 22ca97ffef4904f691083f7a10facd99e2406619c4c45b02202e1e6f2f762407

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 20 Sep 2022 20:05:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 20 Sep 2022 20:05:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/hqdefault-400x360.jpg HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Mon, 12 Sep 2022 14:14:06 GMT
etag: "4afa-5e87b822cea90"
accept-ranges: bytes
content-length: 19194
date: Tue, 20 Sep 2022 20:05:55 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 400x360, components 3\012- data
Size:   19194
Md5:    5b8d65d82bfe9eb5a40d9fa7370510c5
Sha1:   68301ec39c6ce95f6cd31776bd4a52c7feb91bba
Sha256: 4a1d248702c6579720ebba90ef283cfc2850b1665315514a4ff43242d040ab17
                                        
                                            GET /wp-content/uploads/pexels-ingo-joseph-13781-1536x1024.jpg HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Mon, 16 May 2022 11:43:34 GMT
etag: "2862a-5df1f88b38580"
accept-ranges: bytes
content-length: 165418
date: Tue, 20 Sep 2022 20:05:55 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1536x1024, components 3\012- data
Size:   165418
Md5:    72994ebade17ac14a5f18efcd7bb62d0
Sha1:   31cf5ecca37698baf9924028caa7f7394964101e
Sha256: 5188a98f57eeaccd7009d200b8114e7975c2c7043c56cbcd15096ab3dbeb9ad5
                                        
                                            GET /wp-content/uploads/IMG_0105-400x400.jpg HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Mon, 12 Sep 2022 14:17:54 GMT
etag: "561b-5e87b8fc9f416"
accept-ranges: bytes
content-length: 22043
date: Tue, 20 Sep 2022 20:05:55 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3\012- data
Size:   22043
Md5:    96d05c48ef5ce7c281fb648b4ae6916c
Sha1:   f6ceeba390b34ae05f3f278061390de0d4382962
Sha256: 44f9bc3b1c482e5fd950160b6bd9d5d27f8044393f9ac5264d48971754e8411b
                                        
                                            GET /wp-content/uploads/IMG_2258-1536x1151.jpg HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Fri, 24 Jun 2022 08:43:44 GMT
etag: "3489b-5e22d9160d000"
accept-ranges: bytes
content-length: 215195
date: Tue, 20 Sep 2022 20:05:55 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1536x1151, components 3\012- data
Size:   215195
Md5:    3b9a836ece74bed1a06ed17e72059cad
Sha1:   23d25c4a97f2b591f979aaa7873a31a04563f84d
Sha256: c3cec675e85855b6b3b8b9bf6a6d551efde7091250446b73f1f449c66727d092
                                        
                                            GET /wp-content/uploads/62505af9-9b05-4232-9306-54ab0756063c-400x400.jpg HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: image/jpeg
                                        
last-modified: Mon, 12 Sep 2022 13:50:59 GMT
etag: "7e4c-5e87b2f864cd9"
accept-ranges: bytes
content-length: 32332
date: Tue, 20 Sep 2022 20:05:55 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3\012- data
Size:   32332
Md5:    8988dcf729c601bc52f49693a93fc59b
Sha1:   06edc0c39fc7c80845e6a2a4c5623d3ac071e29b
Sha256: 68c962b8090319a4b6530b200f0b761f7a734dba89a694dbc216a62c28aea06e
                                        
                                            GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nextgearmedia.nl
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 08:31:01 GMT
expires: Wed, 20 Sep 2023 08:31:01 GMT
cache-control: public, max-age=31536000
age: 41694
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Size:   44856
Md5:    565ce506190ad3af920b40baf1794cec
Sha1:   ad3cba5d06100e09449a864d3b5e58403b478b3d
Sha256: 8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
                                        
                                            GET /s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nextgearmedia.nl
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 128352
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Sep 2022 20:36:08 GMT
expires: Fri, 15 Sep 2023 20:36:08 GMT
cache-control: public, max-age=31536000
age: 430187
last-modified: Thu, 25 Aug 2022 00:26:06 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 128352, version 1.0\012- data
Size:   128352
Md5:    53436aca8627a49f4deaaa44dc9e3c05
Sha1:   0bc0c675480d94ec7e8609dda6227f88c5d08d2c
Sha256: 8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1
                                        
                                            GET /wp-content/uploads/complianz/css/banner-1-optin.css?v=15 HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 20 Sep 2022 11:48:38 GMT
etag: "3e17-5e91a68b583eb-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2869
date: Tue, 20 Sep 2022 20:05:55 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (15895), with no line terminators
Size:   2869
Md5:    cc615eceed2ae7441b7386e35da0cc58
Sha1:   a649cd1b579357a7bc89327eb14bcbb51149adf1
Sha256: 9c3fa1931286849777830302b70d53d2640ed67708fbc7865603ddec1abc63b2
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 20 Sep 2022 20:05:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /recaptcha/releases/zmiYzsHi8INTJBWt2QZC9aM5/recaptcha__en.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nextgearmedia.nl
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 157726
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 05:37:29 GMT
expires: Thu, 14 Sep 2023 05:37:29 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 14 Sep 2022 00:24:01 GMT
age: 570506
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (581)
Size:   157726
Md5:    6519c7c04cf32a57b1c5ee45a73c233e
Sha1:   4939bb921988e9eb13780cc2244f3099776e9bfb
Sha256: 8352dd4e3e0fe82562cdc280c020fc31d2c6d054f7ead441a3b18de8ef04401b
                                        
                                            GET /wp-content/uploads/cropped-Next-Gear-Media-favicon-192x192.png HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Thu, 02 Jun 2022 09:55:09 GMT
etag: "1dad-5e07400467940"
accept-ranges: bytes
content-length: 7597
date: Tue, 20 Sep 2022 20:05:55 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 192 x 192, 8-bit colormap, non-interlaced\012- data
Size:   7597
Md5:    efc3c7375bcd7009104eb93b0323b9a6
Sha1:   d7ae2a2056a3185e4b2c9f76c8ebabb9dd23f9d8
Sha256: 5fcd172e230e0f10034c82648cfd0cfcc34df2204e27aeaefc9d91c136d6cff9
                                        
                                            GET /wp-content/uploads/cropped-Next-Gear-Media-favicon-32x32.png HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Thu, 02 Jun 2022 09:55:11 GMT
etag: "57c-5e0740064fdc0"
accept-ranges: bytes
content-length: 1404
date: Tue, 20 Sep 2022 20:05:55 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Size:   1404
Md5:    c2130dbf6ae21f0f365050f01b7bf5c5
Sha1:   5a88cde0a1905eb7cbb991f19fd6e76292e44d29
Sha256: d6c4cdafe08651c9c129564593296050177e5dd877b8dab040a1241ceb4d814e
                                        
                                            GET /recaptcha/releases/zmiYzsHi8INTJBWt2QZC9aM5/styles__ltr.css HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: text/css
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24251
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 05:19:12 GMT
expires: Thu, 14 Sep 2023 05:19:12 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 14 Sep 2022 00:24:01 GMT
age: 571603
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (52762), with no line terminators
Size:   24251
Md5:    f2d649025c814be9c33f166a5e04fe88
Sha1:   26bf59de631415927ba2c6c9e44fe9c763f95313
Sha256: f95ec963b7657097e1ef827fc07d96eda5b63f7d3e17b5a1b5eeb7a8d0b67921
                                        
                                            GET /recaptcha/releases/zmiYzsHi8INTJBWt2QZC9aM5/recaptcha__en.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 157726
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 05:37:29 GMT
expires: Thu, 14 Sep 2023 05:37:29 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 14 Sep 2022 00:24:01 GMT
age: 570506
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (581)
Size:   157726
Md5:    6519c7c04cf32a57b1c5ee45a73c233e
Sha1:   4939bb921988e9eb13780cc2244f3099776e9bfb
Sha256: 8352dd4e3e0fe82562cdc280c020fc31d2c6d054f7ead441a3b18de8ef04401b
                                        
                                            POST /g/collect?v=2&tid=G-F4DNFRNW09&gtm=2oe9j0&_p=406743646&cid=833369141.1663704356&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663704355&sct=1&seg=0&dl=https%3A%2F%2Fnextgearmedia.nl%2F&dt=Next%20Gear%20Media&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.allow_display_features=false HTTP/1.1 
Host: region1.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nextgearmedia.nl
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

search
                                         216.239.34.36
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: https://nextgearmedia.nl
date: Tue, 20 Sep 2022 20:05:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST /?wc-ajax=get_refreshed_fragments HTTP/1.1 
Host: nextgearmedia.nl
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 18
Origin: https://nextgearmedia.nl
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Cookie: _ga_F4DNFRNW09=GS1.1.1663704355.1.0.1663704355.0.0.0; _ga=GA1.1.833369141.1663704356
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         85.17.8.228
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
                                        
x-powered-by: PHP/7.4.26
access-control-allow-origin: https://nextgearmedia.nl
access-control-allow-credentials: true
x-content-type-options: nosniff
x-robots-tag: noindex
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 569
date: Tue, 20 Sep 2022 20:05:55 GMT
server: Apache/2
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1841), with no line terminators
Size:   569
Md5:    4fe776bc47006e62ded97a1ff3e2eb16
Sha1:   1b985efc7664fef979074f0fb939cfd3ec0f7d01
Sha256: a68886df40666236777c9ae099a05d070b8a3ec0ad812a2b152aca69f2e6bdbb
                                        
                                            GET /bootstrap/4.3.1/js/bootstrap.min.js HTTP/1.1 
Host: stackpath.bootstrapcdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nextgearmedia.nl
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         104.18.10.207
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Tue, 20 Sep 2022 20:05:54 GMT
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"e1d98d47689e00f8ecbc5d9f61bdb42e"
last-modified: Mon, 25 Jan 2021 22:04:08 GMT
cdn-cachedat: 04/09/2022 02:51:51
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 601
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: 286c5e9f55b314c644347235a363cc32
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 74dd2db7cc0ab511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /css2?family=Open+Sans:ital,wght@0,300;0,400;0,600;0,700;1,300;1,400&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nextgearmedia.nl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 20 Sep 2022 20:05:54 GMT
date: Tue, 20 Sep 2022 20:05:54 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---