Overview

URLzepedalawfirm.com/immigration.html
IP 199.34.228.65 (United States)
ASN#27647 WEEBLY
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-12-13 03:50:04 UTC
StatusLoading report..
IDS alerts0
Blocklist alert13
urlquery alerts No alerts detected
Tags None

Domain Summary (17)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
ajax.googleapis.com (1) 12905 2012-05-22 10:38:03 UTC 2022-12-12 19:01:55 UTC 142.250.74.170
fonts.gstatic.com (2) 0 2014-04-02 10:51:04 UTC 2022-12-12 17:14:58 UTC 142.250.74.35 Domain (gstatic.com) ranked at: 540
ec.editmysite.com (2) 12806 2017-01-29 21:50:35 UTC 2022-12-12 14:28:53 UTC 52.32.213.25
r3.o.lencr.org (7) 344 2020-12-02 08:52:13 UTC 2022-12-12 17:12:17 UTC 23.33.119.27
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2022-12-12 17:13:01 UTC 35.241.9.150
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-12-12 17:14:28 UTC 34.160.144.191
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-12-12 17:12:30 UTC 34.117.237.239
cdn2.editmysite.com (8) 11564 2012-10-02 18:27:39 UTC 2022-12-12 20:39:51 UTC 151.101.193.46
ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-12-12 18:45:47 UTC 93.184.220.29
ocsp.pki.goog (7) 175 2017-06-14 07:23:31 UTC 2022-12-12 17:12:18 UTC 142.250.74.131
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-12-12 17:34:28 UTC 34.120.237.76
www.zepedalawfirm.com (23) 0 2019-03-29 04:45:39 UTC 2022-12-07 02:44:42 UTC 199.34.228.65 Unknown ranking
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2022-12-12 17:26:41 UTC 44.242.3.166
ocsp.globalsign.com (1) 2075 2012-05-25 06:20:55 UTC 2022-12-12 17:19:23 UTC 104.18.20.226
ssl.google-analytics.com (1) 275 2012-10-02 04:58:30 UTC 2022-12-12 19:15:16 UTC 142.250.74.168
zepedalawfirm.com (1) 0 2017-03-27 05:03:20 UTC 2022-12-13 02:26:46 UTC 199.34.228.65 Unknown ranking
ocsp.sca1b.amazontrust.com (2) 1015 2016-02-14 02:37:56 UTC 2019-03-27 04:05:54 UTC 54.230.245.110

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-13 2 zepedalawfirm.com/immigration.html Malware
2022-12-13 2 www.zepedalawfirm.com/immigration.html Malware
2022-12-13 2 www.zepedalawfirm.com/immigration.html Malware
2022-12-13 2 www.zepedalawfirm.com/files/main_style.css?1549320163 Malware
2022-12-13 2 www.zepedalawfirm.com/files/templateArtifacts.js?1549320163 Malware
2022-12-13 2 www.zepedalawfirm.com/uploads/2/2/8/3/22837988/7109847.jpg?160 Malware
2022-12-13 2 www.zepedalawfirm.com/files/theme/nav-bg-current-light.jpg?1549320163 Malware
2022-12-13 2 www.zepedalawfirm.com/files/theme/corners.png?1549320163 Malware
2022-12-13 2 www.zepedalawfirm.com/files/theme/nav-saperator-light.jpg?1549320163 Malware
2022-12-13 2 www.zepedalawfirm.com/files/theme/button_large_highlight.png?1549320163 Malware
2022-12-13 2 www.zepedalawfirm.com/files/theme/search-button.png?1549320163 Malware
2022-12-13 2 www.zepedalawfirm.com/files/theme/search-text.png?1549320163 Malware
2022-12-13 2 www.zepedalawfirm.com/uploads/2/2/8/3/22837988/published/yadira-photo.png?1 (...) Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 199.34.228.65
Date UQ / IDS / BL URL IP
2023-02-20 19:30:59 +0000 0 - 0 - 1 power99wjcb.com/ 199.34.228.65
2023-02-20 19:24:00 +0000 0 - 0 - 1 www.power99wjcb.com/ 199.34.228.65
2023-02-20 19:24:01 +0000 0 - 0 - 1 www.power99wjcb.com/ 199.34.228.65
2023-01-30 11:50:15 +0000 0 - 1 - 0 www.philscomputerlab.com/uploads/3/7/2/3/3723 (...) 199.34.228.65
2023-01-30 11:50:15 +0000 0 - 1 - 0 www.philscomputerlab.com/uploads/3/7/2/3/3723 (...) 199.34.228.65


Last 5 reports on ASN: WEEBLY
Date UQ / IDS / BL URL IP
2023-03-29 02:36:08 +0000 0 - 0 - 10 att-108815-105511.weeblysite.com/ 199.34.228.97
2023-03-28 21:36:01 +0000 0 - 0 - 2 att-100298-101760.weeblysite.com/ 199.34.228.96
2023-03-28 16:57:33 +0000 0 - 0 - 1 yahoo-109179-108503.weeblysite.com/ 199.34.228.96
2023-03-28 15:34:26 +0000 0 - 0 - 5 256login.weebly.com/ 199.34.228.54
2023-03-28 14:25:05 +0000 0 - 0 - 1 faceconnect-103968.weeblysite.com/ 199.34.228.96


Last 5 reports on domain: zepedalawfirm.com
Date UQ / IDS / BL URL IP
2022-12-13 03:50:04 +0000 0 - 0 - 13 zepedalawfirm.com/immigration.html 199.34.228.65
2022-12-04 03:11:52 +0000 0 - 0 - 8 zepedalawfirm.com/contact-us.html 199.34.228.65
2022-11-22 01:58:58 +0000 0 - 0 - 11 zepedalawfirm.com/visa-bulletin.html 199.34.228.65
2022-11-15 02:46:31 +0000 0 - 0 - 13 zepedalawfirm.com/2014-executive-action.html 199.34.228.65
2022-11-08 03:19:04 +0000 0 - 0 - 8 zepedalawfirm.com/dallas-immigration-court.html 199.34.228.65


No other reports with similar screenshot

JavaScript

Executed Scripts (23)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (67)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4846D047A23903856BD113D02639CE7E08A1E40030151D302295B2D12DF98FFC"
Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7107
Expires: Tue, 13 Dec 2022 05:48:19 GMT
Date: Tue, 13 Dec 2022 03:49:52 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4B7213EC107CDF1C2CD61A124453FB682EC291AF0004D071105C87E2FE7528F5"
Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3221
Expires: Tue, 13 Dec 2022 04:43:33 GMT
Date: Tue, 13 Dec 2022 03:49:52 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Alert, Backoff, Content-Length, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 13 Dec 2022 03:08:43 GMT
age: 2469
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "22DA5E6E3F9507688FC8CB02183D52CF38F4ADF8B2C6C52EAF5F88182471EFEB"
Last-Modified: Sun, 11 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4775
Expires: Tue, 13 Dec 2022 05:09:27 GMT
Date: Tue, 13 Dec 2022 03:49:52 GMT
Connection: keep-alive

                                        
                                            GET /immigration.html HTTP/1.1 
Host: zepedalawfirm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         199.34.228.65
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Tue, 13 Dec 2022 03:49:52 GMT
Server: Apache
Location: http://www.zepedalawfirm.com/immigration.html
Content-Length: 253
Keep-Alive: timeout=10, max=71
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   253
Md5:    4aebf0a3a0400aaf0541be6b040bb56b
Sha1:   d7d438cac18306162da1c3130da80bd9a8dc4942
Sha256: e0a705dea32e08196cdc1dfadf2abaf9b07c946f74ef45922367503c5c04ff0c

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: 4voUKqWINza7dWl5KiSz3DhlbtQwDwop5hS3EKNDResjIWEcGN70UOnjtSwsIA9M45wtPRrEoNI=
x-amz-request-id: F2AA66W15KMCH5WD
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 13 Dec 2022 02:51:44 GMT
age: 3488
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    53341dea33f4f3d9b4966f80589f429a
Sha1:   20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
Sha256: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 13 Dec 2022 03:49:52 GMT
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Alert, Cache-Control, Backoff, Content-Length, Content-Type, Last-Modified, ETag, Expires, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 13 Dec 2022 03:07:57 GMT
age: 2516
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /immigration.html HTTP/1.1 
Host: www.zepedalawfirm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         199.34.228.65
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Date: Tue, 13 Dec 2022 03:49:53 GMT
Server: Apache
Set-Cookie: is_mobile=0; path=/; domain=www.zepedalawfirm.com
Vary: X-W-SSL,User-Agent
Location: https://www.zepedalawfirm.com/immigration.html
X-Host: grn27.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 430
Keep-Alive: timeout=10, max=64
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   430
Md5:    fcb27dd4d45fc4871a54ded379d27f16
Sha1:   105c33e9b459648065f7337b58553354e21ec3d9
Sha256: 2aceac74174820c0c44d827342e6bb1525cb79b9b40ac6865279a2dfb4a7d1ac

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5839
Cache-Control: max-age=111257
Date: Tue, 13 Dec 2022 03:49:53 GMT
Etag: "6396ef2b-1d7"
Expires: Wed, 14 Dec 2022 10:44:10 GMT
Last-Modified: Mon, 12 Dec 2022 09:06:51 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Wl4AmckyEBJ2AfH3W3wDTw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         44.242.3.166
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: j14Vd+OQSi6/JsSzbXeIx/eE5KE=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "6112B2E30249DAAEC4E67D73DB2B99BFEE8D642704558F8B65AC848E64148ABD"
Last-Modified: Sun, 11 Dec 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 13 Dec 2022 09:49:53 GMT
Date: Tue, 13 Dec 2022 03:49:53 GMT
Connection: keep-alive

                                        
                                            GET /immigration.html HTTP/1.1 
Host: www.zepedalawfirm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         199.34.228.65
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Tue, 13 Dec 2022 03:49:53 GMT
Server: Apache
Vary: X-W-SSL,Accept-Encoding,User-Agent
Set-Cookie: is_mobile=0; path=/; domain=www.zepedalawfirm.com language=en; expires=Tue, 27-Dec-2022 03:49:54 GMT; Max-Age=1209600; path=/
Cache-Control: private
ETag: W/"ff9e557971e102409e12290a6a99057e-gzip"
Content-Encoding: gzip
X-Host: grn142.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 7872
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2142), with CRLF, LF line terminators
Size:   7872
Md5:    3824749b2bc88998325a49ef24eb7a7c
Sha1:   d9655c3e1f107167e5f3c49646fd2e317f1ffcd7
Sha256: d5d880784550ae7beef7a0a783cf2a3e463f2f94a6e8fb718614526f826bb36e

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /js/lang/en/stl.js?buildTime=1549326559& HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         151.101.193.46
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
last-modified: Mon, 05 Dec 2022 23:37:49 GMT
etag: "638e80cd-2c22a"
expires: Tue, 20 Dec 2022 10:09:39 GMT
cache-control: max-age=1209600
x-host: blu125.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 13 Dec 2022 03:49:54 GMT
age: 582014
x-served-by: cache-sjc10021-SJC, cache-bma1679-BMA
x-cache: HIT, HIT
x-cache-hits: 33, 1
x-timer: S1670903394.286080,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 32800
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65024)
Size:   32800
Md5:    58a9c1c02a5743ff2107715d041d28b7
Sha1:   619d9394e8b3afce9f9cc066b924ddb5d3265265
Sha256: 98b8090e2292b69bb8ad0ef4082f55458b891130ee6b3d9c6fce5075eec64dbf
                                        
                                            GET /css/sites.css?buildTime=1549326559 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.193.46
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
last-modified: Tue, 29 Nov 2022 20:16:01 GMT
etag: W/"63866881-347ac"
expires: Wed, 14 Dec 2022 08:10:28 GMT
cache-control: max-age=1209600
x-host: grn124.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 13 Dec 2022 03:49:54 GMT
age: 1107565
x-served-by: cache-sjc10048-SJC, cache-bma1679-BMA
x-cache: HIT, HIT
x-cache-hits: 84, 1
x-timer: S1670903394.290410,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 29746
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   29746
Md5:    d10158b22b553f723d99dc78eaee6390
Sha1:   80f2d6670cfb0d01cd20c471cf8e3e6465ddd3f6
Sha256: 939c7a8e1ad74a44e0c847e38533e69e36454b6805d25acf3fb0cb5c472d245e
                                        
                                            GET /css/old/slideshow/slideshow.css?1549326559 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.193.46
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
last-modified: Tue, 29 Nov 2022 20:16:21 GMT
etag: W/"63866895-1cb9"
expires: Wed, 14 Dec 2022 13:54:07 GMT
cache-control: max-age=1209600
x-host: blu9.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 13 Dec 2022 03:49:54 GMT
age: 1086947
x-served-by: cache-sjc10048-SJC, cache-bma1679-BMA
x-cache: HIT, HIT
x-cache-hits: 26, 1
x-timer: S1670903394.292998,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1488
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7352)
Size:   1488
Md5:    ba9bbd4df86b5b255f5ef44658e52130
Sha1:   3970cecb6939475f95556c2d32d17de0d1645f32
Sha256: 244b7b062e6e558009c622e46008d5542604b9163315220199a2ac50868ff3e5
                                        
                                            GET /js/site/main.js?buildTime=1549326559 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.193.46
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
last-modified: Tue, 29 Nov 2022 20:16:26 GMT
etag: "6386689a-74804"
expires: Thu, 15 Dec 2022 08:38:02 GMT
cache-control: max-age=1209600
x-host: grn121.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 13 Dec 2022 03:49:54 GMT
age: 1019512
x-served-by: cache-sjc10083-SJC, cache-bma1679-BMA
x-cache: HIT, HIT
x-cache-hits: 14, 1
x-timer: S1670903394.287097,VS0,VE8
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 146400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32147)
Size:   146400
Md5:    81b8673c5d3aa3ab8c0574f2a8f0e3b4
Sha1:   2e0661bc7907d9e2703b3347c3fec579f0aef5d6
Sha256: 0e981f4de6287406ce261fddea24aa05ded4b6a8c4c07283c363c1502071cf40
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Dec 2022 03:49:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Dec 2022 03:49:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /js/lang/en/stl.js?buildTime=1549318948& HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.193.46
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
last-modified: Tue, 29 Nov 2022 20:14:49 GMT
etag: "63866839-2c00a"
expires: Thu, 15 Dec 2022 12:14:10 GMT
cache-control: max-age=1209600
x-host: blu74.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 13 Dec 2022 03:49:54 GMT
age: 1006543
x-served-by: cache-sjc10042-SJC, cache-bma1679-BMA
x-cache: HIT, HIT
x-cache-hits: 47, 1
x-timer: S1670903394.287010,VS0,VE8
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 32668
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65024)
Size:   32668
Md5:    d8a96093e4ac9525ad79fcfd57d8ef8a
Sha1:   c69965f81400795e52e7795f2befbb62dc84dbeb
Sha256: 260dadf35ac438d5101a0c5ad9f48d631d6e9652e92761af42e81338153831f2
                                        
                                            GET /ajax/libs/jquery/1.8.3/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.170
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33593
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 22:01:48 GMT
expires: Wed, 06 Dec 2023 22:01:48 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 539286
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65483)
Size:   33593
Md5:    a54a444f20643b131117dc2112cca05f
Sha1:   074964746b12ff1d30f7656310d6154ae1cc98b5
Sha256: aa3ca8485dd777d4d880b38c1cf3bc2fc290d28a79ba3e3e43cba1f653132830
                                        
                                            GET /files/main_style.css?1549320163 HTTP/1.1 
Host: www.zepedalawfirm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/immigration.html
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         199.34.228.65
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Tue, 13 Dec 2022 03:49:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: blu148.sf2p.intern.weebly.net
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (368)
Size:   2258
Md5:    d780f430ac96a22c1015c9db12ca3090
Sha1:   2731a5961ccdfa8196eac7c39a931c20da0ac671
Sha256: 387070d8c3c76b567b27088a01c2f719325cb62718a0552a4d3014013cae92c5

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /js/old/slideshow-jq.js?buildTime=1549326559 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.193.46
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
last-modified: Tue, 06 Dec 2022 18:44:07 GMT
etag: "638f8d77-9e0b"
expires: Wed, 21 Dec 2022 09:36:53 GMT
cache-control: max-age=1209600
x-host: grn68.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 13 Dec 2022 03:49:54 GMT
age: 497580
x-served-by: cache-sjc10081-SJC, cache-bma1679-BMA
x-cache: HIT, MISS
x-cache-hits: 44, 0
x-timer: S1670903394.283045,VS0,VE167
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 13265
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32013)
Size:   13265
Md5:    da04d4da36c827437eb064334cf40561
Sha1:   b54b259c2dce4a00e265deddf2ee0941dda6ed40
Sha256: 0064ed54b2f6244cda5252037026ceb744b58067811265aa1a10c3f7cd937b3a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Dec 2022 03:49:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /css/old/fancybox.css?1549318948 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.193.46
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
last-modified: Fri, 09 Dec 2022 14:38:36 GMT
etag: "6393486c-f47"
expires: Mon, 26 Dec 2022 07:42:31 GMT
cache-control: max-age=1209600
x-host: grn25.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 13 Dec 2022 03:49:54 GMT
age: 72442
x-served-by: cache-sjc10045-SJC, cache-bma1679-BMA
x-cache: HIT, MISS
x-cache-hits: 8, 0
x-timer: S1670903394.290806,VS0,VE181
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1218
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3910)
Size:   1218
Md5:    b644e92258f4c7c0b4270047652d1e60
Sha1:   93734d52ee9e86a768159e514076051813c39cd9
Sha256: 29199496fb817668f887938571046abcdfb49063d0207d571b361f221f467907
                                        
                                            GET /files/templateArtifacts.js?1549320163 HTTP/1.1 
Host: www.zepedalawfirm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/immigration.html
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         199.34.228.65
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Tue, 13 Dec 2022 03:49:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: grn141.sf2p.intern.weebly.net
Content-Encoding: gzip


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with very long lines (1630)
Size:   1632
Md5:    e0836e8203c22b8e4086f27e91e86f5a
Sha1:   28235e77f5a895c8cd411aff4a6ef4e6f7d419c2
Sha256: 32dbc4a2eeca39a57d35670f00e2cf59e03c279521e47506c56c5c36d8b664b6

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST /ca/gsatlasr3dvtlsca2022q3 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Dec 2022 03:49:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "27ADBB781238638B3B49C11C48E0105B72873AF9"
Expires: Tue, 13 Dec 2022 15:00:00 UTC
Last-Modified: Tue, 13 Dec 2022 03:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: EXPIRED
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778bbb870fb50b65-OSL


--- Additional Info ---
Magic:  data
Size:   1462
Md5:    fd07ebaf25549b0d6d4f53d39dedc678
Sha1:   56b2a01138ea21364c9c6928d28484f486212499
Sha256: 91c350870eff93fed6661189a7e94c0ff47d244a4bd7175ffcc5d1a81cb3cc56
                                        
                                            GET /uploads/2/2/8/3/22837988/7109847.jpg?160 HTTP/1.1 
Host: www.zepedalawfirm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/immigration.html
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         199.34.228.65
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 13 Dec 2022 03:49:54 GMT
Content-Length: 14398
Connection: keep-alive
Last-Modified: Thu, 14 Nov 2019 06:36:37 GMT
x-rgw-object-type: Normal
ETag: "ce72bd658a36eb65a944914d32421128"
x-amz-request-id: tx0000000000000467169d8-006397f662-c6aed46-sfo1
X-Storage-Bucket: z8e71
X-Storage-Object: 8e71c0fede69731bb8b606db08d25ebae5c7f56a8e631351117b4b3a2c4fbafb
X-Host: grn61.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 159x151, components 3\012- data
Size:   14398
Md5:    ce72bd658a36eb65a944914d32421128
Sha1:   eb90b05bb9e49cf7e304a61743af860c110b3e23
Sha256: 8e71c0fede69731bb8b606db08d25ebae5c7f56a8e631351117b4b3a2c4fbafb

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /js/site/main-customer-accounts-site.js?buildTime=1549326559 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         151.101.193.46
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
last-modified: Mon, 28 Nov 2022 20:03:55 GMT
etag: "6385142b-8250f"
expires: Tue, 13 Dec 2022 09:30:57 GMT
cache-control: max-age=1209600
x-host: grn119.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 13 Dec 2022 03:49:54 GMT
age: 1189137
x-served-by: cache-sjc10022-SJC, cache-bma1679-BMA
x-cache: HIT, HIT
x-cache-hits: 8, 1
x-timer: S1670903394.286171,VS0,VE15
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 158930
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Dec 2022 03:49:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/rosario/v27/xfux0WDhWW_fOEoY2FP9zQ.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.zepedalawfirm.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.35
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 32332
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 14:38:20 GMT
expires: Wed, 06 Dec 2023 14:38:20 GMT
cache-control: public, max-age=31536000
age: 565894
last-modified: Mon, 18 Jul 2022 19:46:02 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 32332, version 1.0\012- data
Size:   32332
Md5:    8ea83423eb421b5c10afec23c4327753
Sha1:   4310fcd99af0f4c2ce00f4b448e61047032aedae
Sha256: 88cd1f5c17d40565f6eff217d07528a0ac35bf441a490ca73ea4ce7246886cea
                                        
                                            GET /s/quattrocento/v17/OZpEg_xvsDZQL_LKIF7q4jP3w2j6.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.zepedalawfirm.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.35
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35872
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Dec 2022 13:33:52 GMT
expires: Sat, 09 Dec 2023 13:33:52 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 16:12:18 GMT
age: 310562
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 35872, version 1.0\012- data
Size:   35872
Md5:    62d2afa37918c2d8841c75898eadd68f
Sha1:   d6da38ee9ba1db21b7ee298f0018c2010d5ad882
Sha256: fe65e8f74381d5afc5a63c298f62b26c4b68531e9e2792e6fa63f4af24842596
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Dec 2022 03:49:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression\012- data
Size:   946
Md5:    f1419c607efb6c5b4fa76ace2361ea93
Sha1:   88800f04197c23268eab702781f475e1065d9037
Sha256: 46b13cc7ec0fee668622fab3d38d2e38c1318c273b552a6a4edaea415fc45907
                                        
                                            GET /uploads/2/2/8/3/22837988/background-images/378837242.jpg HTTP/1.1 
Host: www.zepedalawfirm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/immigration.html
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         199.34.228.65
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Server: nginx
Date: Tue, 13 Dec 2022 03:49:54 GMT
Content-Length: 3739
Connection: keep-alive
ETag: "630fbfe7-e9b"
X-Host: blu40.sf2p.intern.weebly.net


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (368)
Size:   3739
Md5:    2eeb3e560ca8f369be20ceb5858a4701
Sha1:   6c53e6b66c1bc6d0b93116e14fb79c30424bf36c
Sha256: ac2d9485acf7e9c29d94d31f19d3aedda958cd4f6119ddc888fbbde52d6078dd
                                        
                                            GET /files/theme/social-icons.png?1549320163 HTTP/1.1 
Host: www.zepedalawfirm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/files/main_style.css?1549320163
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         199.34.228.65
HTTP/1.1 200 OK
Content-Type: image/png; charset=binary
                                        
Server: nginx
Date: Tue, 13 Dec 2022 03:49:54 GMT
Content-Length: 7646
Connection: keep-alive
Last-Modified: Sun, 03 May 2020 00:17:43 GMT
x-rgw-object-type: Normal
ETag: "509096dfbbb8959a0d90ec5c30664785"
x-amz-request-id: tx00000000000000da729e6-0061ba651e-a9f41e7-sfo1
X-Storage-Bucket: z321c
X-Storage-Object: 321c9df01792ab2f80f171cf3549e04d9e1a1a26c436c2dade7c7bb997f97147
X-Host: blu62.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 336 x 29, 8-bit/color RGBA, non-interlaced\012- data
Size:   7646
Md5:    509096dfbbb8959a0d90ec5c30664785
Sha1:   39f4ea15ef6e016ee98727c6e071f1f62a0f9ff4
Sha256: 321c9df01792ab2f80f171cf3549e04d9e1a1a26c436c2dade7c7bb997f97147
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "36CA62B5281E0D5434F0BF6119B2074EB05F5336DB3113B5556D2A4273ED2816"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8239
Expires: Tue, 13 Dec 2022 06:07:14 GMT
Date: Tue, 13 Dec 2022 03:49:55 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "36CA62B5281E0D5434F0BF6119B2074EB05F5336DB3113B5556D2A4273ED2816"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8239
Expires: Tue, 13 Dec 2022 06:07:14 GMT
Date: Tue, 13 Dec 2022 03:49:55 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "36CA62B5281E0D5434F0BF6119B2074EB05F5336DB3113B5556D2A4273ED2816"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8239
Expires: Tue, 13 Dec 2022 06:07:14 GMT
Date: Tue, 13 Dec 2022 03:49:55 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbc382005-a626-4501-bbc4-dd292a018cd1.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9036
x-amzn-requestid: 24df0710-a186-4d2d-9957-ff0ff45ff945
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dDWfdGQpoAMFqeA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63979dfc-6b5ffd0173b00d7b29cc81b6;Sampled=0
x-amzn-remapped-date: Mon, 12 Dec 2022 21:32:44 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 8FPKH3nLXJEpUbHUf_XGNTfbqRd7aG50u-OivbpasSh3O0L1fPFj_Q==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 22:00:36 GMT
age: 20959
etag: "a4e84853e7f600d113ad5027c5ef240c9aa4756b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9036
Md5:    0af3d170e1aabf9c790605c13ca1859b
Sha1:   a4e84853e7f600d113ad5027c5ef240c9aa4756b
Sha256: 4933ac8f5a581588974240bb192ef7d1798b7e67428c98acd454ec0948848b29
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F356ea75b-4385-4813-8fb7-2ade07c6ae3d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6868
x-amzn-requestid: 1c5f94b4-a89c-451b-8fbe-414228dab4f7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dDWf8E5foAMFciQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63979dff-7d8940961dab819015ad675e;Sampled=0
x-amzn-remapped-date: Mon, 12 Dec 2022 21:32:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: xsWfoUNi3KvV0M6rlVVo4wPSPwmCY6-qHyvd0yJGQeT5kGtHHWTVbw==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 22:01:49 GMT
age: 20886
etag: "7ee779f4766a0d5bc9b9041237f93036dee1ac2d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6868
Md5:    b01091c95866be383fe4e3b8d29e44c0
Sha1:   7ee779f4766a0d5bc9b9041237f93036dee1ac2d
Sha256: 9866b6c3720fab3ed75937f816353341bb46af941599e59dd13b2c07b7b33cb3
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3319031c-7524-4aba-998b-86a7b8a1132f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6711
x-amzn-requestid: ac93518c-b2e1-4995-9152-11c30c05cc9b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c9h4oHmiIAMFXQA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639549d0-5180e10e467c4c4c5e7fd1f4;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 03:09:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YHHaFWjmRFuBvcFQ6orltY_4JuQEcHhfyjxHO3-XZduh_hEGfPcPoA==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 03:57:59 GMT
age: 85916
etag: "9f36b8f5cd7f540d18318c0b8ca55d40e85ed1d4"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6711
Md5:    690133687ca909986a7ac4e919193bbb
Sha1:   9f36b8f5cd7f540d18318c0b8ca55d40e85ed1d4
Sha256: d4913048b7f2b341c77a345420a855e6385e00c64ef30f6cf136ad16f6bda771
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2263c6ae-1846-44f1-8b25-471bca417daf.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4703
x-amzn-requestid: 975cb427-5feb-4c36-bcfe-bed0cc9bd3b5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czpW4Hh4IAMFeRA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639155c5-63d6d97371f11d6012edae68;Sampled=0
x-amzn-remapped-date: Thu, 08 Dec 2022 03:11:01 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: BouIqIrg_vfxBH0weDXiqoEBcSV8_d4qDVB3Er5PeIrZz249iHdqGQ==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 08:18:10 GMT
age: 70305
etag: "ab668e755bd742b165fa3ba46a4c486c616a7ff6"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4703
Md5:    d8b0477fb90d103e2155bbf7ab47d877
Sha1:   ab668e755bd742b165fa3ba46a4c486c616a7ff6
Sha256: 40e2282cf64da6034f73a2ff0c0d060550caa364244d5bdf282d2f54719d48ad
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d2521f8-aba3-4e43-a61f-566b33d81a58.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7235
x-amzn-requestid: 062761c0-29aa-44d6-9a3f-213766ba615c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctmEtE00oAMF4Cg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638eea1d-7f38911c00fdffac25cdf642;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 07:07:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: HHqgpbW7ZHxByKQTHklq6VVOKkidvdpt-XgqeFIHVYXbJ66nhu19yw==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 23:15:56 GMT
age: 16439
etag: "9f3da5618cd81d8b94b89a38860b5ea0e677b181"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7235
Md5:    61696fbb8743437b191c7141bc43228f
Sha1:   9f3da5618cd81d8b94b89a38860b5ea0e677b181
Sha256: e299f7842035dfae92b63c388613da806030c9e70f6344dd0c8e9176baa2a671
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefb81a20-e06f-4f47-bfa8-916a4837d754.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 12144
x-amzn-requestid: 0d00ec22-808c-4f60-98b1-87eef4aad829
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c6n0yFORIAMFskA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6394201e-58f1a5c87fc341bf56fa9d68;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 05:58:54 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: sW4dQXExyH6JvbdtSgIPJUiifHh-VfbfcG5hKMaJ4tZA3pO-fobF6w==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 04:10:33 GMT
age: 85162
etag: "4b8d7b5ff7cf1333bd0019b2d72cf2aadef6caf8"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12144
Md5:    703d359edb819eaefc6ccae224bbde15
Sha1:   4b8d7b5ff7cf1333bd0019b2d72cf2aadef6caf8
Sha256: 0452d24052bef979fd13f1a0fefb4c7803ff91c5afa3c871f85b73eb08f15489
                                        
                                            GET /files/theme/nav-saperator-current-light.jpg?1549320163 HTTP/1.1 
Host: www.zepedalawfirm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/files/main_style.css?1549320163
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         199.34.228.65
HTTP/1.1 200 OK
Content-Type: image/jpeg; charset=binary
                                        
Server: nginx
Date: Tue, 13 Dec 2022 03:49:55 GMT
Content-Length: 1252
Connection: keep-alive
Last-Modified: Sun, 03 May 2020 00:17:42 GMT
x-rgw-object-type: Normal
ETag: "42c29463df233af5d12564c4b9be9493"
x-amz-request-id: tx000000000000023f12740-00635c2fd7-c699baa-sfo1
X-Storage-Bucket: zba49
X-Storage-Object: ba4935f55839108b3034cbcb551b647bb487a04e209d517816f63d382be34d73
X-Host: blu61.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2x45, components 3\012- data
Size:   1252
Md5:    42c29463df233af5d12564c4b9be9493
Sha1:   22c23d15b1f675ee24f1d433e267d96ff5161e34
Sha256: ba4935f55839108b3034cbcb551b647bb487a04e209d517816f63d382be34d73
                                        
                                            GET /files/theme/nav-bg-current-light.jpg?1549320163 HTTP/1.1 
Host: www.zepedalawfirm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/files/main_style.css?1549320163
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         199.34.228.65
HTTP/1.1 200 OK
Content-Type: image/jpeg; charset=binary
                                        
Server: nginx
Date: Tue, 13 Dec 2022 03:49:55 GMT
Content-Length: 1403
Connection: keep-alive
Last-Modified: Sun, 03 May 2020 00:17:40 GMT
x-rgw-object-type: Normal
ETag: "35efd0d4d13feca1394301a5167dceba"
x-amz-request-id: tx00000000000001aec03ca-0062aac0f1-b9fbc29-sfo1
X-Storage-Bucket: z650f
X-Storage-Object: 650f52174780b6198b3afb32487b6cf7936b8619edd0ccf10815096f9e6e2c59
X-Host: grn14.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 30x45, components 3\012- data
Size:   1403
Md5:    35efd0d4d13feca1394301a5167dceba
Sha1:   e1ea3efc3d0f6cfe06a96f602eb9c3a3dba80bfa
Sha256: 650f52174780b6198b3afb32487b6cf7936b8619edd0ccf10815096f9e6e2c59

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /files/theme/corners.png?1549320163 HTTP/1.1 
Host: www.zepedalawfirm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/files/main_style.css?1549320163
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         199.34.228.65
HTTP/1.1 200 OK
Content-Type: image/png; charset=binary
                                        
Server: nginx
Date: Tue, 13 Dec 2022 03:49:55 GMT
Content-Length: 996
Connection: keep-alive
Last-Modified: Sun, 03 May 2020 00:17:40 GMT
x-rgw-object-type: Normal
ETag: "9bfb8cb657765f9ba5d0a0e3e3a47fd0"
x-amz-request-id: tx000000000000044d5868c-006394f58f-c67eadd-sfo1
X-Storage-Bucket: z9120
X-Storage-Object: 9120932c77c9042c849751690dc41ba730510e9af7cbc2b90b802c6ec88e0c0a
X-Host: grn73.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 8 x 8, 8-bit/color RGBA, non-interlaced\012- data
Size:   996
Md5:    9bfb8cb657765f9ba5d0a0e3e3a47fd0
Sha1:   e227dbbf4031d45f01b1c5a636c8a35810f81d8b
Sha256: 9120932c77c9042c849751690dc41ba730510e9af7cbc2b90b802c6ec88e0c0a

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /files/theme/button.png?1549320163 HTTP/1.1 
Host: www.zepedalawfirm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/files/main_style.css?1549320163
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         199.34.228.65
HTTP/1.1 200 OK
Content-Type: image/png; charset=binary
                                        
Server: nginx
Date: Tue, 13 Dec 2022 03:49:55 GMT
Content-Length: 7282
Connection: keep-alive
Last-Modified: Sun, 03 May 2020 00:17:39 GMT
x-rgw-object-type: Normal
ETag: "12c692b0e68aac7dd5447ab68db321c5"
x-amz-request-id: tx0000000000000081c7ee1-0061b14729-a9f41e7-sfo1
X-Storage-Bucket: z7262
X-Storage-Object: 7262ccbcd3ca0a08d46a87f7dbcf73b52047be07cb375b98df31642bdee77b7a
X-Host: grn77.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 500 x 228, 8-bit/color RGBA, non-interlaced\012- data
Size:   7282
Md5:    12c692b0e68aac7dd5447ab68db321c5
Sha1:   82619856de28877adab6976cc9f60bb7503a6acd
Sha256: 7262ccbcd3ca0a08d46a87f7dbcf73b52047be07cb375b98df31642bdee77b7a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.110
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 13 Dec 2022 03:49:55 GMT
Last-Modified: Tue, 13 Dec 2022 03:23:00 GMT
Server: ECS (nyb/1D04)
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: KSwzIIy-3dFztXZCncePPOCKgplfHNZp3YOyXw0Fe8brD_6wjdjVGA==
Age: 1615

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.110
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=141556
Date: Tue, 13 Dec 2022 03:49:55 GMT
Etag: "63976825-1d7"
Expires: Wed, 14 Dec 2022 19:09:11 GMT
Last-Modified: Mon, 12 Dec 2022 17:43:01 GMT
Server: ECS (bsa/EB19)
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 58rEiN0aKGp5CPY9uC0bMIdhyKueUYVDAA5l-z0tJFkpGeuXbxwOmQ==
Age: 5170

                                        
                                            GET /files/theme/nav-bg-light.jpg?1549320163 HTTP/1.1 
Host: www.zepedalawfirm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/files/main_style.css?1549320163
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         199.34.228.65
HTTP/1.1 200 OK
Content-Type: image/jpeg; charset=binary
                                        
Server: nginx
Date: Tue, 13 Dec 2022 03:49:55 GMT
Content-Length: 1329
Connection: keep-alive
Last-Modified: Sun, 03 May 2020 00:17:41 GMT
x-rgw-object-type: Normal
ETag: "d4ddabca61f0c44928a69625931c3508"
x-amz-request-id: tx00000000000003549821d-006313ef49-bfe36ba-sfo1
X-Storage-Bucket: z5a60
X-Storage-Object: 5a60fdcd631baba9a887b8528bd6e031305290aa300d5e5448cac22c105487ec
X-Host: grn72.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 30x45, components 3\012- data
Size:   1329
Md5:    d4ddabca61f0c44928a69625931c3508
Sha1:   cf1054b74d23fd9ff6a53af78318b0cd5ea490e1
Sha256: 5a60fdcd631baba9a887b8528bd6e031305290aa300d5e5448cac22c105487ec
                                        
                                            GET /files/theme/nav-saperator-light.jpg?1549320163 HTTP/1.1 
Host: www.zepedalawfirm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/files/main_style.css?1549320163
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         199.34.228.65
HTTP/1.1 200 OK
Content-Type: image/jpeg; charset=binary
                                        
Server: nginx
Date: Tue, 13 Dec 2022 03:49:55 GMT
Content-Length: 1238
Connection: keep-alive
Last-Modified: Sun, 03 May 2020 00:17:42 GMT
x-rgw-object-type: Normal
ETag: "64711fe311ff7aba6791b6d394c65c44"
x-amz-request-id: tx00000000000003b9186f2-0063852489-c67eadd-sfo1
X-Storage-Bucket: zffbc
X-Storage-Object: ffbcfce943bb665b5c6016b179e2d4e88b9baadfceb77c84e8b9eb6e13fe5087
X-Host: grn82.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2x45, components 3\012- data
Size:   1238
Md5:    64711fe311ff7aba6791b6d394c65c44
Sha1:   cef16e21c769b6f042a14d231a26e6e386242d60
Sha256: ffbcfce943bb665b5c6016b179e2d4e88b9baadfceb77c84e8b9eb6e13fe5087

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /files/theme/button_large_highlight.png?1549320163 HTTP/1.1 
Host: www.zepedalawfirm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/files/main_style.css?1549320163
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         199.34.228.65
HTTP/1.1 200 OK
Content-Type: image/png; charset=binary
                                        
Server: nginx
Date: Tue, 13 Dec 2022 03:49:55 GMT
Content-Length: 8181
Connection: keep-alive
Last-Modified: Sun, 03 May 2020 00:17:39 GMT
x-rgw-object-type: Normal
ETag: "e6ddb5224dd05fe1255d10bcf81fd364"
x-amz-request-id: tx000000000000020142d21-0062f4345b-c033918-sfo1
X-Storage-Bucket: z0f08
X-Storage-Object: 0f085ffceefd077c6a450c4beae01cc62b5c207de4d8913485147614b026438c
X-Host: blu61.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 500 x 270, 8-bit/color RGBA, non-interlaced\012- data
Size:   8181
Md5:    e6ddb5224dd05fe1255d10bcf81fd364
Sha1:   628a3c4275df37a63e3c9aefb5468834517b1e96
Sha256: 0f085ffceefd077c6a450c4beae01cc62b5c207de4d8913485147614b026438c

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /files/theme/search-button.png?1549320163 HTTP/1.1 
Host: www.zepedalawfirm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/files/main_style.css?1549320163
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         199.34.228.65
HTTP/1.1 200 OK
Content-Type: image/png; charset=binary
                                        
Server: nginx
Date: Tue, 13 Dec 2022 03:49:55 GMT
Content-Length: 2120
Connection: keep-alive
Last-Modified: Sun, 03 May 2020 00:17:43 GMT
x-rgw-object-type: Normal
ETag: "294a38867b268184cd8a7532379a48a1"
x-amz-request-id: tx00000000000003a7efcbb-00631bbf4e-c0351b0-sfo1
X-Storage-Bucket: zd551
X-Storage-Object: d55102feb442a4ad04ae617dd3c1461fc126b29e7110cd83cedebeeb1120b06e
X-Host: blu135.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 33 x 33, 8-bit/color RGBA, non-interlaced\012- data
Size:   2120
Md5:    294a38867b268184cd8a7532379a48a1
Sha1:   add1bb60d909c2ca910470ca31d8807535ad6d5c
Sha256: d55102feb442a4ad04ae617dd3c1461fc126b29e7110cd83cedebeeb1120b06e

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /uploads/2/2/8/3/22837988/published/6620009.jpg HTTP/1.1 
Host: www.zepedalawfirm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/immigration.html
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         199.34.228.65
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 13 Dec 2022 03:49:55 GMT
Content-Length: 8814
Connection: keep-alive
Last-Modified: Mon, 04 Feb 2019 21:08:29 GMT
x-rgw-object-type: Normal
ETag: "9eb7b2cadd9b610e19869fa977de15e3"
x-amz-request-id: tx0000000000000410be009-00638d2e6a-c696eea-sfo1
X-Storage-Bucket: zf457
X-Storage-Object: f45777fa7086b6a9d38de2026c2e53ee58a7a52f22f0bdca003ed36989bd97e6
X-Host: grn14.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x168, components 3\012- data
Size:   8814
Md5:    9eb7b2cadd9b610e19869fa977de15e3
Sha1:   cbdaffec30265e4eb87bccd227ad2186f75d5fe2
Sha256: f45777fa7086b6a9d38de2026c2e53ee58a7a52f22f0bdca003ed36989bd97e6
                                        
                                            GET /uploads/2/2/8/3/22837988/published/8138734.jpg HTTP/1.1 
Host: www.zepedalawfirm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/immigration.html
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         199.34.228.65
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 13 Dec 2022 03:49:55 GMT
Content-Length: 8302
Connection: keep-alive
Last-Modified: Mon, 04 Feb 2019 21:08:29 GMT
x-rgw-object-type: Normal
ETag: "3e5c1a94707081f9ac908632d528e948"
x-amz-request-id: tx0000000000000467bd05f-006397c24d-c67eadd-sfo1
X-Storage-Bucket: ze1ac
X-Storage-Object: e1ac94cdb8d55dc57616edd0ac40228b9b1c3c51d5ff2dc35de4f9fb9c7e6ce4
X-Host: grn132.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 284x177, components 3\012- data
Size:   8302
Md5:    3e5c1a94707081f9ac908632d528e948
Sha1:   1fde5eadf791fa70c377a8dc5f0a114f5397594e
Sha256: e1ac94cdb8d55dc57616edd0ac40228b9b1c3c51d5ff2dc35de4f9fb9c7e6ce4
                                        
                                            OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 
Host: ec.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.zepedalawfirm.com/
Origin: https://www.zepedalawfirm.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         52.32.213.25
HTTP/2 200 OK
                                        
date: Tue, 13 Dec 2022 03:49:55 GMT
content-length: 0
server: nginx
access-control-allow-origin: https://www.zepedalawfirm.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, SP-Anonymous
access-control-max-age: 600
X-Firefox-Spdy: h2

                                        
                                            GET /uploads/2/2/8/3/22837988/published/imagesca3kdd6q.jpg HTTP/1.1 
Host: www.zepedalawfirm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/immigration.html
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         199.34.228.65
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 13 Dec 2022 03:49:55 GMT
Content-Length: 11677
Connection: keep-alive
Last-Modified: Mon, 04 Feb 2019 20:59:53 GMT
x-rgw-object-type: Normal
ETag: "ebe59257c9a7549c6c10bf01bba80c72"
x-amz-request-id: tx000000000000047443b36-006397a479-c699baa-sfo1
X-Storage-Bucket: zce73
X-Storage-Object: ce73a56642bb6635e93e94c315c7fc35425d54ba8bec6d8499f1cb8ff55c8c8f
X-Host: blu149.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 266x190, components 3\012- data
Size:   11677
Md5:    ebe59257c9a7549c6c10bf01bba80c72
Sha1:   3dfe76012e99becd85aed06ea1c5848908442571
Sha256: ce73a56642bb6635e93e94c315c7fc35425d54ba8bec6d8499f1cb8ff55c8c8f
                                        
                                            GET /uploads/2/2/8/3/22837988/published/large-gray-and-white.jpg HTTP/1.1 
Host: www.zepedalawfirm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/immigration.html
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         199.34.228.65
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 13 Dec 2022 03:49:55 GMT
Content-Length: 9453
Connection: keep-alive
Last-Modified: Mon, 04 Feb 2019 21:01:14 GMT
x-rgw-object-type: Normal
ETag: "a3d921a6c29117d24916db665937d470"
x-amz-request-id: tx000000000000047c8e32b-006397f663-c695612-sfo1
X-Storage-Bucket: z79d6
X-Storage-Object: 79d6ef83d4866e34ecd5030294a2cbd923f73eb7d8b10aa2202e04627fb8d323
X-Host: blu49.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 480x244, components 3\012- data
Size:   9453
Md5:    a3d921a6c29117d24916db665937d470
Sha1:   59243a697dc9639210763d8da8093baf517a0fb4
Sha256: 79d6ef83d4866e34ecd5030294a2cbd923f73eb7d8b10aa2202e04627fb8d323
                                        
                                            GET /files/theme/search-text.png?1549320163 HTTP/1.1 
Host: www.zepedalawfirm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/files/main_style.css?1549320163
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         199.34.228.65
HTTP/1.1 200 OK
Content-Type: image/png; charset=binary
                                        
Server: nginx
Date: Tue, 13 Dec 2022 03:49:55 GMT
Content-Length: 3594
Connection: keep-alive
Last-Modified: Sun, 03 May 2020 00:17:43 GMT
x-rgw-object-type: Normal
ETag: "99aad15300538264ab34f322f2ff0a78"
x-amz-request-id: tx0000000000000021afcc6-0061a82197-a9f3e81-sfo1
X-Storage-Bucket: ze913
X-Storage-Object: e913eec1c945141dc25fc50c708bea790d519624579ae1c2698d119e67e73c91
X-Host: blu40.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 174 x 33, 8-bit/color RGBA, non-interlaced\012- data
Size:   3594
Md5:    99aad15300538264ab34f322f2ff0a78
Sha1:   625b24d45a5b2a41b32f268266e1fb8dadaddc81
Sha256: e913eec1c945141dc25fc50c708bea790d519624579ae1c2698d119e67e73c91

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 
Host: ec.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 1807
Origin: https://www.zepedalawfirm.com
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         52.32.213.25
HTTP/2 200 OK
content-type: text/plain; charset=UTF-8
                                        
date: Tue, 13 Dec 2022 03:49:55 GMT
content-length: 2
server: nginx
set-cookie: sp=ea44c4fd-7f54-4f30-94c9-a300cc872197; Expires=Wed, 13 Dec 2023 03:49:55 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://www.zepedalawfirm.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    444bcb3a3fcf8389296c49467f27e1d6
Sha1:   7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
Sha256: 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
                                        
                                            GET /uploads/2/2/8/3/22837988/published/yadira-photo.png?1549314304 HTTP/1.1 
Host: www.zepedalawfirm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/immigration.html
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         199.34.228.65
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Tue, 13 Dec 2022 03:49:55 GMT
Content-Length: 35722
Connection: keep-alive
Last-Modified: Mon, 04 Feb 2019 21:05:03 GMT
x-rgw-object-type: Normal
ETag: "813ce20787a3bfbbd6279b929bc69586"
x-amz-request-id: tx000000000000046dd7de0-0063972190-c699baa-sfo1
X-Storage-Bucket: zd44f
X-Storage-Object: d44f2d02b93016ee5ea33828cde80a4bd0fee79a5dc6e6a5a0213be2b77d0337
X-Host: grn61.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 248 x 156, 8-bit/color RGBA, non-interlaced\012- data
Size:   35722
Md5:    813ce20787a3bfbbd6279b929bc69586
Sha1:   149c3fb9fe39e2a00d8e07fe1479cf4c5b644388
Sha256: d44f2d02b93016ee5ea33828cde80a4bd0fee79a5dc6e6a5a0213be2b77d0337

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Dec 2022 03:49:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ga.js HTTP/1.1 
Host: ssl.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.168
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 17168
date: Tue, 13 Dec 2022 02:41:41 GMT
expires: Tue, 13 Dec 2022 04:41:41 GMT
cache-control: public, max-age=7200
age: 4094
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1305)
Size:   17168
Md5:    01d5892e6e243b52998310c2925b9f3a
Sha1:   58180151b6a6ee4af73583a214b68efb9e8844d4
Sha256: 7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 13 Dec 2022 03:49:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.zepedalawfirm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/immigration.html
Cookie: is_mobile=0; language=en; _snow_ses.464e=*; _snow_id.464e=d68bed13-fc72-4a85-a579-40dcef788fd1.1670903393.1.1670903393.1670903393.9fb29a61-fe27-4b9e-a8f1-990c925defdc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         199.34.228.65
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: nginx
Date: Tue, 13 Dec 2022 03:49:56 GMT
Content-Length: 4286
Connection: keep-alive
Last-Modified: Fri, 24 Sep 2021 21:48:12 GMT
x-rgw-object-type: Normal
ETag: "4d27526198ac873ccec96935198e0fb9"
x-amz-request-id: tx000000000000000b777f6-0061a70451-a9f4046-sfo1
X-Storage-Bucket: z40a2
X-Storage-Object: 40a2146151863bcf46c786d596e81a308d1b0d26d74635be441e92656f29b1b4
X-Host: blu68.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Size:   4286
Md5:    4d27526198ac873ccec96935198e0fb9
Sha1:   b98d8b73ad6a0f7477c3397561b4aab37bf262aa
Sha256: 40a2146151863bcf46c786d596e81a308d1b0d26d74635be441e92656f29b1b4
                                        
                                            POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 
Host: www.zepedalawfirm.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 83
Origin: https://www.zepedalawfirm.com
Connection: keep-alive
Referer: https://www.zepedalawfirm.com/immigration.html
Cookie: is_mobile=0; language=en; _snow_ses.464e=*; _snow_id.464e=d68bed13-fc72-4a85-a579-40dcef788fd1.1670903393.1.1670903393.1670903393.9fb29a61-fe27-4b9e-a8f1-990c925defdc
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

search
                                         199.34.228.65
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Date: Tue, 13 Dec 2022 03:49:56 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: grn44.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 348
Keep-Alive: timeout=10, max=71
Connection: Keep-Alive


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (348), with no line terminators
Size:   348
Md5:    a944dd688c99d2901d6719be713271c0
Sha1:   4f5454d5d434829baf46671638610791758725d9
Sha256: adb97e1bc686c58b4286f1208d2bd969687c6cf3e2fc468697dfd956d260de49