| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash1456357aecbd23f21ad98da57e0127eb 7074815b39fa8da9013883971d665e4c1b0797ea f3eba265ee64870b2f822f1511b36c747d763c382557789cdad8be1d3b52d1f5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F3EBA265EE64870B2F822F1511B36C747D763C382557789CDAD8BE1D3B52D1F5"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9631
Expires: Wed, 23 Nov 2022 07:22:24 GMT
Date: Wed, 23 Nov 2022 04:41:53 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashb59d95402dfb464c176610284ba13f65 1a6c62fb0d48654dd204b66161bb03fefe60f71a 40cfd59b890ec5a3570603d28d90bd7e5c506babd52c2ece93e09f1c7b2a6880
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 532
Cache-Control: max-age=107894
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:41:53 GMT
Etag: "637ca4f3-1d7"
Expires: Thu, 24 Nov 2022 10:40:07 GMT
Last-Modified: Tue, 22 Nov 2022 10:31:15 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
|
|
| seychellescultureinstitute.org/ |  192.185.78.53 | 301 Moved Permanently | 0 B |
URL HTTP/1.1seychellescultureinstitute.org/ IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET / HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 23 Nov 2022 04:41:53 GMT
Server: Apache
X-Redirect-By: WordPress
Set-Cookie: dYSpurIzCw=WHm4hVo1jr; expires=Thu, 24-Nov-2022 04:41:53 GMT; Max-Age=86400; path=/
fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D; expires=Thu, 24-Nov-2022 04:41:53 GMT; Max-Age=86400; path=/
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: https://seychellescultureinstitute.org/
Content-Length: 0
Keep-Alive: timeout=5, max=75
Content-Type: text/html; charset=UTF-8
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash054ff0d1a0a43f7cb1d78dbd34e27f99 3caf54f3de1d6a8c6f6454083f8b8e7dec77db54 fcdcef8306ae31f20c366489e1f88aa40b08f154d25d45f4055c4f8cdef47634
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FCDCEF8306AE31F20C366489E1F88AA40B08F154D25D45F4055C4F8CDEF47634"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14735
Expires: Wed, 23 Nov 2022 08:47:28 GMT
Date: Wed, 23 Nov 2022 04:41:53 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ | 34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash4d7e4eed097b9c4e5d509419f1cfc85a 290bb3d428a7c6330e2e3d73a952b16f820896c8 0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 23 Nov 2022 04:09:27 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1946
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash9ebddc2b260d081ebbefee47c037cb28 492bad62a7ca6a74738921ef5ae6f0be5edebf39 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: PutiEsiGWdtr/d963Zyrdrj2nMRJfnnHLq0t5WSWwlFZ59AiskJRM6/dmQlSzURDWkD22OBx3cg=
x-amz-request-id: DCRW3ZX12G8KZESK
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 23 Nov 2022 04:39:51 GMT
age: 122
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 04:41:53 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 34.102.187.140 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 23 Nov 2022 04:08:53 GMT
cache-control: public,max-age=3600
age: 1980
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash9ee583d68dd67303af723adb3260cc8a c85df8ceb4a0df604f834ab7bb68377216873c26 e517c687307fa600fffbbeb5e095266e449239b20adeb85a1657efa3329e9981
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E517C687307FA600FFFBBEB5E095266E449239B20ADEB85A1657EFA3329E9981"
Last-Modified: Wed, 23 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 23 Nov 2022 10:41:54 GMT
Date: Wed, 23 Nov 2022 04:41:54 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash8a181d95550cfdf3b1fc4deb71631e40 37866f7293c41fbfb817e321754cae5c5bf59f93 6aa3d2763181cc48d2ad0ce7d227f3cb3324045c3f7858ccdbae675768dcec55
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5524
Cache-Control: max-age=107825
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:41:54 GMT
Etag: "637c912f-1d7"
Expires: Thu, 24 Nov 2022 10:38:59 GMT
Last-Modified: Tue, 22 Nov 2022 09:06:55 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 35.167.231.108 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP35.167.231.108:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: H8IhoCKwKFAAYgm8xJuHew==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: qg+lTgl0iYpJHUZp2rMx3isE3FU=
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash065495ec7a963a205abd9c8dbc75cb5d ea416d0df4f6706150bda5da2077174f5cdd986b 1b2a2afee887651b23a849f14ace89b330329f6bf61c331545a3f6d12037aee5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:41:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash065495ec7a963a205abd9c8dbc75cb5d ea416d0df4f6706150bda5da2077174f5cdd986b 1b2a2afee887651b23a849f14ace89b330329f6bf61c331545a3f6d12037aee5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:41:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ajax.googleapis.com/ajax/libs/webfont/1/webfont.js | 216.58.211.10 | 200 OK | 5.4 kB |
URL HTTP/2ajax.googleapis.com/ajax/libs/webfont/1/webfont.js IP216.58.211.10:0
File typeASCII text, with very long lines (2134) Hash30ca3165d143baf2835023bfcf463450 62c662c0873b79a314c040fef28dcd29abb14480 4f405d00e8ced09d5826e3e070b7e4d3f3556f856ca790b0b4a2c2eaaf58d33b
GET /ajax/libs/webfont/1/webfont.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 5437
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 18:34:16 GMT
expires: Wed, 22 Nov 2023 18:34:16 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 36458
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.1 | 192.185.78.53 | 409 Conflict | 83 B |
URL HTTP/2seychellescultureinstitute.org/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.1 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text, with no line terminators Hash26267cd8990f15d3bbea71684a6d5995 ac3b38cf3fe0e112bb6aeb7e05226b7133575d93 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.1 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashb74e8b6ae71fc51d58d794dc5685418f b207cb49f36139729b309deef15b7acb20be6b6b 6cc37ab61a6d57526b0e2a3a6ead1bbc111fffc1c7f010ac54d0eb4b6cd96126
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5710
Cache-Control: max-age=145825
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:41:54 GMT
Etag: "637d24e5-1d7"
Expires: Thu, 24 Nov 2022 21:12:19 GMT
Last-Modified: Tue, 22 Nov 2022 19:37:09 GMT
Server: ECS (amb/6BAC)
X-Cache: HIT
Content-Length: 471
|
|
| maps.googleapis.com/maps/api/js?ver=1.0 | 216.58.211.10 | 200 OK | 53 kB |
URL HTTP/2maps.googleapis.com/maps/api/js?ver=1.0 IP216.58.211.10:0
File typeASCII text, with very long lines (2590) Hash9877b10081cfaa78559ce634c28207b3 d3e0f0f5b9c4fd18c80b7e5d53aa0fc7d44a66b8 814b0cf60dd4447743ae44610070c29bc4f4fc3e9b62ebcd9a88f16677fd3e35
GET /maps/api/js?ver=1.0 HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
date: Wed, 23 Nov 2022 04:41:54 GMT
expires: Wed, 23 Nov 2022 05:11:54 GMT
cache-control: public, max-age=1800
vary: Accept-Language
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 53403
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=11
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash065495ec7a963a205abd9c8dbc75cb5d ea416d0df4f6706150bda5da2077174f5cdd986b 1b2a2afee887651b23a849f14ace89b330329f6bf61c331545a3f6d12037aee5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:41:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash065495ec7a963a205abd9c8dbc75cb5d ea416d0df4f6706150bda5da2077174f5cdd986b 1b2a2afee887651b23a849f14ace89b330329f6bf61c331545a3f6d12037aee5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:41:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| seychellescultureinstitute.org/wp-content/plugins/taqyeem-buttons/assets/style.css?ver=5.8.6 | 192.185.78.53 | 200 OK | 1.3 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/plugins/taqyeem-buttons/assets/style.css?ver=5.8.6 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with CRLF line terminators Hash95c08e7ea06bf5a1fe7af7ae29225e42 aa8ffb2774c544a5d5568fb57976bcf0c50409a3 7985e1a596b72755061eafead1dd97741e7816bc8f4158289e67dcf49f49ea31
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/taqyeem-buttons/assets/style.css?ver=5.8.6 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:09:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1251
content-type: text/css
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/plugins/eventON/assets/css/eventon_dynamic_styles.css?ver=3.1.7 | 192.185.78.53 | 200 OK | 2.8 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/plugins/eventON/assets/css/eventon_dynamic_styles.css?ver=3.1.7 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeassembler source, ASCII text, with very long lines (2103), with CRLF line terminators Hashe7046207de17d3bbb1e14b866d02f3aa e025e656f6c0c44ea06c90250127fadbc211a12e 074eb2f83b851d19a6061e88c9f8871ac010d91aa0854ada26c16567c09d28e1
GET /wp-content/plugins/eventON/assets/css/eventon_dynamic_styles.css?ver=3.1.7 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:09:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2753
content-type: text/css
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/plugins/eventON/assets/fonts/all.css?ver=3.1.7 | 192.185.78.53 | 200 OK | 13 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/plugins/eventON/assets/fonts/all.css?ver=3.1.7 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash4553ef9a2bd45cdc99e4e83dfca058ab 9a4384fd4134aa06afd67cf022c050bc06a9249d 471d22125a722f96f75da060c0ed868caaadffb2f2364db416cdb02c7ff3ce61
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/eventON/assets/fonts/all.css?ver=3.1.7 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:09:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 13236
content-type: text/css
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/themes/jannah/assets/fonts/fontawesome/fa-brands-400.woff2 | 192.185.78.53 | 200 OK | 77 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/themes/jannah/assets/fonts/fontawesome/fa-brands-400.woff2 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeWeb Open Font Format (Version 2), TrueType, length 76612, version 331.524\012- data Hasha06da7f0950f9dd366fc9db9d56d618a 509988477da79c146cb93fb728405f18e923c2de 5d9190292acdd48ba0fc35080f7e7448f3cdf0d79199a4d23f0f49b5341fdf29
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/jannah/assets/fonts/fontawesome/fa-brands-400.woff2 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:01 GMT
accept-ranges: bytes
content-length: 76612
content-type: font/woff2
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/uploads/2021/10/logoUpdated191021.png | 192.185.78.53 | 200 OK | 43 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2021/10/logoUpdated191021.png IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typePNG image data, 589 x 120, 8-bit/color RGBA, non-interlaced\012- data Hash350c5d6df8af43e2438f95a43e7a81ea 55002d950ccdc7e0382756e03f02316a059bf649 a00d88ec8714891dff08dbf37c03e07f1462e69e7871038541b2b625e6731b65
GET /wp-content/uploads/2021/10/logoUpdated191021.png HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:02 GMT
accept-ranges: bytes
content-length: 43237
content-type: image/png
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/themes/jannah/assets/fonts/fontawesome/fa-regular-400.woff2 | 192.185.78.53 | 200 OK | 14 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/themes/jannah/assets/fonts/fontawesome/fa-regular-400.woff2 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeWeb Open Font Format (Version 2), TrueType, length 13584, version 331.524\012- data Hashc20b5b7362d8d7bb7eddf94344ace33e 260bb01acd44d88dcb7f501a238ab968f86bef9e 6a8c8e9e1e7f692c21af1956de163f3d026778e6449fe93a09a671847ca1ae65
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/jannah/assets/fonts/fontawesome/fa-regular-400.woff2 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:01 GMT
accept-ranges: bytes
content-length: 13584
content-type: font/woff2
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/themes/jannah/assets/fonts/tielabs-fonticon/tielabs-fonticon.woff | 192.185.78.53 | 200 OK | 40 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/themes/jannah/assets/fonts/tielabs-fonticon/tielabs-fonticon.woff IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeWeb Open Font Format, TrueType, length 40536, version 2.0\012- data Hash9773facce663de3a1554b64583ae667c f77938c8eb3bf18fc89fdfdf6653aaf2a6ea2a8e 82649ad7d4ec9c61f1e525b2dade75153ffb03610b88d22e1ba3ba98fd55de81
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/jannah/assets/fonts/tielabs-fonticon/tielabs-fonticon.woff HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:01 GMT
accept-ranges: bytes
content-length: 40536
content-type: font/woff
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/themes/jannah/assets/fonts/fontawesome/fa-solid-900.woff2 | 192.185.78.53 | 200 OK | 79 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/themes/jannah/assets/fonts/fontawesome/fa-solid-900.woff2 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeWeb Open Font Format (Version 2), TrueType, length 79444, version 331.524\012- data Hashb15db15f746f29ffa02638cb455b8ec0 75a88815c47a249eadb5f0edc1675957f860cca7 7f4d3fd0a705dbf8403298aad91d5de6972e6b5d536068eba8b24954a5a0a8c7
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/jannah/assets/fonts/fontawesome/fa-solid-900.woff2 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:01 GMT
accept-ranges: bytes
content-length: 79444
content-type: font/woff2
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/themes/jannah/assets/css/base.min.css?ver=5.4.7 | 192.185.78.53 | 200 OK | 12 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/themes/jannah/assets/css/base.min.css?ver=5.4.7 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (41903) Hash34101900c4f1aeed27aa291f916062b3 85820cfea12b720a09fc036489416b184ec17972 010473dd2f938e3aadfb08256e630e61c2148c85c387a96e484b87a5a043d532
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/jannah/assets/css/base.min.css?ver=5.4.7 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:01 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 12179
content-type: text/css
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/themes/jannah/assets/css/widgets.min.css?ver=5.4.7 | 192.185.78.53 | 200 OK | 14 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/themes/jannah/assets/css/widgets.min.css?ver=5.4.7 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (54141) Hashda7d1da09a620897301baf96a791eff3 d116214b5068e36f0d3db9af549d3edfa259dbf5 d4648cd45875bda96283d4bb03c45b60470462aded41bdc0a4390ade62d97fd5
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/jannah/assets/css/widgets.min.css?ver=5.4.7 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:01 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 13590
content-type: text/css
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/themes/jannah/assets/css/fontawesome.css?ver=5.4.7 | 192.185.78.53 | 200 OK | 12 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/themes/jannah/assets/css/fontawesome.css?ver=5.4.7 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (58661) Hash0913411c20bb983546f234d4685b40be 52b1104571de6fe046f0b76fece038bb06f7dcd4 1342814f0b2a66024a055e2037caab0bac8bdefe26a194d4a2605f13ab4cdc5f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/jannah/assets/css/fontawesome.css?ver=5.4.7 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:01 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 12516
content-type: text/css
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/themes/jannah/assets/css/helpers.min.css?ver=5.4.7 | 192.185.78.53 | 200 OK | 4.1 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/themes/jannah/assets/css/helpers.min.css?ver=5.4.7 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (15223) Hash93f8017b14a7ef3dacc4e452c36be763 ee8caeacb1055f2232ee2cda54f0dae46ef2ab3a d2221aaf0e2cf5db6fffc4f25f4a77879b977dac99361af123244053c10299b3
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/jannah/assets/css/helpers.min.css?ver=5.4.7 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:01 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4122
content-type: text/css
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.1 | 192.185.78.53 | 409 Conflict | 83 B |
URL HTTP/2seychellescultureinstitute.org/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.1 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text, with no line terminators Hash26267cd8990f15d3bbea71684a6d5995 ac3b38cf3fe0e112bb6aeb7e05226b7133575d93 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.1 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/themes/jannah/assets/css/plugins/taqyeem.min.css?ver=5.4.7 | 192.185.78.53 | 200 OK | 2.2 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/themes/jannah/assets/css/plugins/taqyeem.min.css?ver=5.4.7 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (7553) Hash04d0d2dfe9875d179f1d561bc4663739 3e2be31cf04e325edf5439a139671d9e600657a7 e8e7e453a2206355cb288f8045a880ff8049dd29348ff31b76bdb9ae9723531c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/jannah/assets/css/plugins/taqyeem.min.css?ver=5.4.7 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:01 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2154
content-type: text/css
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/themes/jannah/assets/css/plugins/shortcodes.min.css?ver=5.4.7 | 192.185.78.53 | 200 OK | 3.6 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/themes/jannah/assets/css/plugins/shortcodes.min.css?ver=5.4.7 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (11672) Hash868033eaf68ae475f4e7654c0590d8a7 07e09b96f368caa39f7426a4eca482cb3c969e66 95f143d47a80e3b1d8d07adf3b95fc17f54a6baa2b72534b3e7f7434fd3839a1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/jannah/assets/css/plugins/shortcodes.min.css?ver=5.4.7 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:01 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3566
content-type: text/css
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-includes/js/wp-emoji-release.min.js?ver=5.8.6 | 192.185.78.53 | 200 OK | 5.2 kB |
URL HTTP/2seychellescultureinstitute.org/wp-includes/js/wp-emoji-release.min.js?ver=5.8.6 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (15224) Hash00af0ddf324f69fcb25f0d2e5d08910a df0379ab0e1b2902957c8aba77f89d88e1239b59 f0a06ed3b8d3917b358def04d87668001cd1c6da31a5cb4bb452313feb64a2a7
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.8.6 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Jun 2021 08:45:12 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5243
content-type: application/javascript
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | 192.185.78.53 | 200 OK | 4.6 kB |
URL HTTP/2seychellescultureinstitute.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (11126) Hashacdb97105af28a7066790c6748ae2e1e 65794d2c5a9d04f747faf370bc8bacd330e69e5a dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Nov 2020 20:36:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4618
content-type: application/javascript
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/themes/jannah/assets/custom-css/style-custom.css?ver=46160 | 192.185.78.53 | 200 OK | 6.6 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/themes/jannah/assets/custom-css/style-custom.css?ver=46160 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (21614), with no line terminators Hashf01540f59e04a4e44b8cdd701d29b718 547fa43ea5ae22ce482ac8eebd862f17c7124c1f 133dcbd7acb7b1779dd7442050a77c718272f10e15a9e6247e56913392dfb03d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/jannah/assets/custom-css/style-custom.css?ver=46160 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 22 Nov 2022 14:50:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6637
content-type: text/css
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/plugins/eventON/assets/js/maps/eventon_gen_maps.js?ver=3.1.7 | 192.185.78.53 | 200 OK | 3.1 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/plugins/eventON/assets/js/maps/eventon_gen_maps.js?ver=3.1.7 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (1808), with CRLF line terminators Hash7f4567a0cced601984d3337ac74e7af8 42dec3fcba9ce30fcd7e1fc92d7c3741564d7ab2 d4ee0791d643ff6573f77034554e48c856270dd87e8f9d0b5507dd642c8b823c
GET /wp-content/plugins/eventON/assets/js/maps/eventon_gen_maps.js?ver=3.1.7 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:09:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3079
content-type: application/javascript
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.7 | 192.185.78.53 | 200 OK | 2.6 kB |
URL HTTP/2seychellescultureinstitute.org/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.7 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (6406), with no line terminators Hash340db4973d1ee14c5348599f661a3220 d4cf31e2af7774c276d7a883733a8392e232df49 85d0de0d6dbe1f487407829c52413d7e81c7c9ed28bc3ae9079c19303e91f678
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.7 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 23 Jun 2021 10:36:14 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2635
content-type: application/javascript
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 | 192.185.78.53 | 200 OK | 6.9 kB |
URL HTTP/2seychellescultureinstitute.org/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeUnicode text, UTF-8 text, with very long lines (16323) Hash122fe79a1d53d10946cded540d2e219f 6271fdf889afe8a13d7c69efea9b40cbd0d81939 94cb1b0ca86f7f0bb7bcc81b42a06b6199bd37ff77ca88dccf3acc92683f3e24
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 15 Jun 2021 09:48:12 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6935
content-type: application/javascript
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-includes/js/imagesloaded.min.js?ver=4.1.4 | 192.185.78.53 | 200 OK | 2.1 kB |
URL HTTP/2seychellescultureinstitute.org/wp-includes/js/imagesloaded.min.js?ver=4.1.4 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (5477) Hashf0bd7ad12acdee26cbb2701c1ba3610b 53c5d15129860868b60b74cb010b2c6050a64f69 e6d0cb19e56d22e8e511c23ca2bd233bedb40e3c7cf4ff38fe6f059bc7e0c64f
GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Jun 2020 05:23:28 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2103
content-type: application/javascript
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/themes/jannah/assets/js/shortcodes.js?ver=5.4.7 | 192.185.78.53 | 200 OK | 5.5 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/themes/jannah/assets/js/shortcodes.js?ver=5.4.7 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (9306) Hash634d73f8d41f34e2d1ae4c0636e016a2 5e91b886c4390d9ade236c0256d32b8834f3237b 2fe67f810a98f6dea190094f38a1ce8844995878f75045cfde34f242ad1f0860
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/jannah/assets/js/shortcodes.js?ver=5.4.7 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:01 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5487
content-type: application/javascript
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/themes/jannah/assets/js/scripts.min.js?ver=5.4.7 | 192.185.78.53 | 200 OK | 9.9 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/themes/jannah/assets/js/scripts.min.js?ver=5.4.7 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text, with very long lines (22453) Hashfc5f2a5094e0b8d176f57c2e26b18631 1f8cee88dbeab102e4eb92c17e2424e59e874c5d 3f5e3a5ddea3b6b3cd5ad762a3494ab06d9d392f4163ee74894cbe5dd662c10e
GET /wp-content/themes/jannah/assets/js/scripts.min.js?ver=5.4.7 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:01 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 9854
content-type: application/javascript
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/plugins/lazy-loading-responsive-images/js/lazysizes.min.js?ver=1646388598 | 192.185.78.53 | 200 OK | 4.8 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/plugins/lazy-loading-responsive-images/js/lazysizes.min.js?ver=1646388598 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (9659) Hashe9569d6a957336f0dbc7a7f53c8d7175 b39931a7f725021f07310a2d78f0e14ddfc20acd 7d692209cac1786c38fa805a0c385154f7110b2c0dbf0d73f74aa525bfa7f71d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/lazy-loading-responsive-images/js/lazysizes.min.js?ver=1646388598 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:09:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4770
content-type: application/javascript
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/plugins/eventON/assets/js/lib/jquery.mobile.min.js?ver=3.1.7 | 192.185.78.53 | 200 OK | 5.2 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/plugins/eventON/assets/js/lib/jquery.mobile.min.js?ver=3.1.7 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (15435), with CRLF line terminators Hash916a8ff1acee7f7b217f09f3e81a6cea 12a5cdc2563a44632f1fa592fb866d6f1fadf4cf 9d3ff812a352f46c14cda78a93a6824c2cdd6b7d31e75696187f195755a5cd16
GET /wp-content/plugins/eventON/assets/js/lib/jquery.mobile.min.js?ver=3.1.7 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:09:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5159
content-type: application/javascript
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/themes/jannah/assets/js/sliders.min.js?ver=5.4.7 | 192.185.78.53 | 200 OK | 17 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/themes/jannah/assets/js/sliders.min.js?ver=5.4.7 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (32024) Hash9aa1a94f16cf6d9893ee986fe1d93bed 0465eaf4e48f0515672f44ff1bcb2cab0a07a64d a0d85b9332049f6eebc54fa13bdf44f5932d9cc61640d2fe8ad74ccd0f96c3e1
GET /wp-content/themes/jannah/assets/js/sliders.min.js?ver=5.4.7 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:01 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 17411
content-type: application/javascript
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/plugins/eventON/assets/js/lib/jquery.easing.1.3.js?ver=1.0 | 192.185.78.53 | 200 OK | 3.7 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/plugins/eventON/assets/js/lib/jquery.easing.1.3.js?ver=1.0 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeUnicode text, UTF-8 text, with very long lines (1800) Hashfeffc10b978226f75beb0ff3fbb08095 150a905666e25ae646cdf6a67c29500d537f5e59 52dffd8e61f410a38051e42fcc205791e0756371b553c07927a9352ee92a3dcc
GET /wp-content/plugins/eventON/assets/js/lib/jquery.easing.1.3.js?ver=1.0 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:09:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3737
content-type: application/javascript
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/plugins/eventON/assets/js/lib/jquery.mousewheel.min.js?ver=3.1.7 | 192.185.78.53 | 200 OK | 1.6 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/plugins/eventON/assets/js/lib/jquery.mousewheel.min.js?ver=3.1.7 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (1797) Hash8f2bafdac8f871e200bb9ee9c78e15be 7f4430400840e2b69513e56479aa20626ccfcb37 cd9fc73fb55e3208055e221b8f964ddc92962c83e949c7abe8c04da6f05e6c23
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/eventON/assets/js/lib/jquery.mousewheel.min.js?ver=3.1.7 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:09:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1636
content-type: application/javascript
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/themes/jannah/assets/js/videos-playlist.js?ver=5.4.7 | 192.185.78.53 | 200 OK | 4.7 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/themes/jannah/assets/js/videos-playlist.js?ver=5.4.7 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text, with very long lines (9124) Hash4f1c9a3c91c7ef482afdeebfaee1ffc1 938a50e9a4a1bc61e22d241b5a4ff10e93a9a56f b2b1ea8719111bfbbd7a4f8f3f8c501e41f7efde350b4e2bbe945d62bb5e7ca5
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/jannah/assets/js/videos-playlist.js?ver=5.4.7 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:01 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4716
content-type: application/javascript
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/plugins/eventON/assets/js/eventon_functions.js?ver=3.1.7 | 192.185.78.53 | 200 OK | 5.5 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/plugins/eventON/assets/js/eventon_functions.js?ver=3.1.7 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (1808), with CRLF line terminators Hasha34a588f731f776ba2f7c2451128e30f 3ee97b3298a1d148ce5093034587e7141b033e95 d969867bb49b8b254969832c4e4010d9d5233405c2f810a714febfbd7c7314f9
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/eventON/assets/js/eventon_functions.js?ver=3.1.7 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:09:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5471
content-type: application/javascript
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/themes/jannah/assets/js/desktop.min.js?ver=5.4.7 | 192.185.78.53 | 200 OK | 7.3 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/themes/jannah/assets/js/desktop.min.js?ver=5.4.7 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (16791) Hashff7e3e9f02b30b965da51586b9fd9641 7aeecb29b907b312f055e2785036db782096e781 39f1b6c39147ecae40b713ac3e2c02e71ad8266e5f02d6599e93bbed56f7969f
GET /wp-content/themes/jannah/assets/js/desktop.min.js?ver=5.4.7 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:01 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7340
content-type: application/javascript
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/themes/jannah/assets/js/parallax.js?ver=5.4.7 | 192.185.78.53 | 200 OK | 11 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/themes/jannah/assets/js/parallax.js?ver=5.4.7 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (11127) Hashf73de64936a1e7bf497d2a54ef37ee41 aca47aaff9864c71698986f7e97ab942b16675ee 60ab0f9eefe487f140298a5a88c9c45319a5771f1b292cf4a34570c1e6da7a1a
GET /wp-content/themes/jannah/assets/js/parallax.js?ver=5.4.7 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:01 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 10560
content-type: application/javascript
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/plugins/page-links-to/dist/new-tab.js?ver=3.3.5 | 192.185.78.53 | 200 OK | 10 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/plugins/page-links-to/dist/new-tab.js?ver=3.3.5 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeUnicode text, UTF-8 text, with very long lines (24733), with no line terminators Hash045b2e4fb439a7260bec75f77134c189 47fa8f88be8a3501305369697b2934a89adb8e2a 4d53dcbb6f07ecbe0f9a8f3ed9ce769665f3551c3c63c3ad64fa24c733c7fda3
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/page-links-to/dist/new-tab.js?ver=3.3.5 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:09:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 10524
content-type: application/javascript
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/uploads/2022/09/UNESCO-Patrimonito-Storyboard-Competition-2022_.jpg | 192.185.78.53 | 200 OK | 90 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2022/09/UNESCO-Patrimonito-Storyboard-Competition-2022_.jpg IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 695x960, components 3\012- data Hash957527f3386597be09201cb3b1ab97e7 721e95cd63b1e5a6f34263173133ab9eaf00ff42 dabf771e067013a0fe40ffae469a4fdb217bc53cafe3885e8c307877caebaa93
GET /wp-content/uploads/2022/09/UNESCO-Patrimonito-Storyboard-Competition-2022_.jpg HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 27 Sep 2022 07:45:39 GMT
accept-ranges: bytes
content-length: 90281
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/uploads/2022/05/Competition_r2.jpg | 192.185.78.53 | 200 OK | 120 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2022/05/Competition_r2.jpg IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 695x960, components 3\012- data Size120 kB (120303 bytes) Hash3a4eb9d0e20824808e9f72201d3985d3 51ea63bc96c6a54be0edc7fb1cda408e25e0f2aa c9df160b83cf131321c3103059eada07412ff0664fbe29b81f7715131de0299b
GET /wp-content/uploads/2022/05/Competition_r2.jpg HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 12 May 2022 10:44:19 GMT
accept-ranges: bytes
content-length: 120303
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash8069f5e67c25fc0b7388ba5d4decd8c9 64a85ba44c80ea206f4382f573c3d61e4f607ccf 7587cd04333ddf1cff15ae219cb8fca0618786a9fe4cee989975f4d50889e72a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:41:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| seychellescultureinstitute.org/wp-content/uploads/2022/05/StateHouseTours.jpg | 192.185.78.53 | 200 OK | 212 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2022/05/StateHouseTours.jpg IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1191x1674, components 3\012- data Size212 kB (211555 bytes) Hashc1fe8bdff9e863afe0120b179055ea73 7bb60d0c41de169f27f4a983a83184cce2b33fde 4f7447b86fc028910840550ea3428e9ddd5c8b8973c85ea3df32087088e20b27
GET /wp-content/uploads/2022/05/StateHouseTours.jpg HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 12 May 2022 10:51:11 GMT
accept-ranges: bytes
content-length: 211555
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/uploads/2022/01/contactuslh_NE.jpg | 192.185.78.53 | 200 OK | 232 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2022/01/contactuslh_NE.jpg IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2022:01:27 14:26:18], baseline, precision 8, 800x740, components 3\012- data Size232 kB (231466 bytes) Hasha6b5a64ba44f50af1c03050d965a25d4 4cc52c653ecbc2a6e5d72972caeb88e9595fd1e6 9d13c2997cbd8f19596165af2c1fa67e432d16559b62d6942b9969e7341c3ef7
GET /wp-content/uploads/2022/01/contactuslh_NE.jpg HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:02 GMT
accept-ranges: bytes
content-length: 231466
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hashadb3448eb71178c9660330148424469f c299752f6b8a89362cbc5b2254aef1a64181d963 f38213cdc59fe1619d4c4f4a7a4c1d364d1a28552144475e742e76335ec3dd4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:41:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hashadb3448eb71178c9660330148424469f c299752f6b8a89362cbc5b2254aef1a64181d963 f38213cdc59fe1619d4c4f4a7a4c1d364d1a28552144475e742e76335ec3dd4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:41:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash4f22437494cab8f3b1de6d48c3677f43 42461557365b59e300ae356c37b95f652e10dacd 420bc8cc7c6624d9201c6e12fb6478f4a9cf77e90aad033b4d12687968003ccf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:41:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hashadb3448eb71178c9660330148424469f c299752f6b8a89362cbc5b2254aef1a64181d963 f38213cdc59fe1619d4c4f4a7a4c1d364d1a28552144475e742e76335ec3dd4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:41:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash4f22437494cab8f3b1de6d48c3677f43 42461557365b59e300ae356c37b95f652e10dacd 420bc8cc7c6624d9201c6e12fb6478f4a9cf77e90aad033b4d12687968003ccf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:41:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| seychellescultureinstitute.org/wp-content/uploads/2022/10/SFK2022.jpg | 192.185.78.53 | 200 OK | 474 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2022/10/SFK2022.jpg IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=GIMP 2.10.32, datetime=2022:10:10 21:15:17], progressive, precision 8, 1191x1674, components 3\012- data Size474 kB (474502 bytes) Hash8c84fe58363b14fb4e63c6ff0f3c5951 284cd95fad1320e3c0cbb69ec011ed14b62b9246 e25acdb0b5b4531e4d05107df2187e470df0e869537170d8f04cbbc8e3eb24ce
GET /wp-content/uploads/2022/10/SFK2022.jpg HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 10 Oct 2022 17:17:56 GMT
accept-ranges: bytes
content-length: 474502
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.1 | 192.185.78.53 | 409 Conflict | 83 B |
URL HTTP/2seychellescultureinstitute.org/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.1 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text, with no line terminators Hash26267cd8990f15d3bbea71684a6d5995 ac3b38cf3fe0e112bb6aeb7e05226b7133575d93 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.1 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Wed, 23 Nov 2022 04:41:55 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.195 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://seychellescultureinstitute.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 19:34:08 GMT
expires: Thu, 16 Nov 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 551267
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash4f22437494cab8f3b1de6d48c3677f43 42461557365b59e300ae356c37b95f652e10dacd 420bc8cc7c6624d9201c6e12fb6478f4a9cf77e90aad033b4d12687968003ccf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:41:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.195 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://seychellescultureinstitute.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 18:53:49 GMT
expires: Thu, 16 Nov 2023 18:53:49 GMT
cache-control: public, max-age=31536000
age: 553686
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| i.ytimg.com/vi/-W7S5qIIy58/default.jpg | 216.58.211.22 | 200 OK | 1.4 kB |
URL HTTP/2i.ytimg.com/vi/-W7S5qIIy58/default.jpg IP216.58.211.22:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data Hash83049b85ee5348fd7f46d93b178eb566 d6f62080f7fcd114c8b22018ce4498c527e29a2d 946d14bbb307d7797f2b08526c6237736b86a9df1ec01d6ee0de9d3617c13d94
GET /vi/-W7S5qIIy58/default.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 1371
date: Wed, 23 Nov 2022 04:41:55 GMT
expires: Wed, 23 Nov 2022 06:41:55 GMT
cache-control: public, max-age=7200
etag: "0"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/uploads/2021/10/Moutya-exhibition.jpg | 192.185.78.53 | 200 OK | 163 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2021/10/Moutya-exhibition.jpg IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1500x1000, components 3\012- data Size163 kB (162949 bytes) Hash4d17952acb174bf37acaea068004eca6 2fe2e5fef6191ee85aff70318dfea62af90407e3 4d07d06c9472816be21d923266c588ddc933f77325c32cce337fae9dce01f8b4
GET /wp-content/uploads/2021/10/Moutya-exhibition.jpg HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:03 GMT
accept-ranges: bytes
content-length: 162949
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:41:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| i.ytimg.com/vi/EVOjLk7GtOI/default.jpg | 216.58.211.22 | 200 OK | 2.3 kB |
URL HTTP/2i.ytimg.com/vi/EVOjLk7GtOI/default.jpg IP216.58.211.22:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data Hash2ca27f90700b00eab2949c16592219ad d673f3f277935afb45aa57cfb12d40864f4d4ba2 6de467fc74ea00ba8cb7c62765d08fd07f38b0ab96c283680c09c421771ab629
GET /vi/EVOjLk7GtOI/default.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 2256
date: Wed, 23 Nov 2022 04:41:55 GMT
expires: Wed, 23 Nov 2022 06:41:55 GMT
cache-control: public, max-age=7200
etag: "1666439712"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.195 | 200 OK | 45 kB |
URL HTTP/2fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data Hash565ce506190ad3af920b40baf1794cec ad3cba5d06100e09449a864d3b5e58403b478b3d 8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://seychellescultureinstitute.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Nov 2022 05:42:51 GMT
expires: Fri, 17 Nov 2023 05:42:51 GMT
cache-control: public, max-age=31536000
age: 514744
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/uploads/2021/10/poem5.jpg | 192.185.78.53 | 200 OK | 139 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2021/10/poem5.jpg IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1500x900, components 3\012- data Size139 kB (138964 bytes) Hash6785cd53fe8d61fea86d842cad7c7c1e 762528f7ae5c34ca56852abab810c2ae54d3d968 7bd3bf09b14b9e43fc364cb3e07710c3e43597760b01488684dd6aaa0b071397
GET /wp-content/uploads/2021/10/poem5.jpg HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:03 GMT
accept-ranges: bytes
content-length: 138964
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:41:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/uploads/2021/10/slide1-390x220.jpg | 192.185.78.53 | 200 OK | 42 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2021/10/slide1-390x220.jpg IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=14, height=5180, bps=182, PhotometricIntepretation=RGB, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, width=7766], baseline, precision 8, 390x220, components 3\012- data Hash767127d32b602474af0544f714a685bf 3efccd7d2059dcb1921e4dab6ed27aabd2a7a734 9b01787fde78b1a693987fd0e97ee411d857a4f89b45f0d9268c48cbea99d395
GET /wp-content/uploads/2021/10/slide1-390x220.jpg HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:03 GMT
accept-ranges: bytes
content-length: 42264
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:41:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/uploads/2021/10/Kamtole1_500.jpg | 192.185.78.53 | 200 OK | 114 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2021/10/Kamtole1_500.jpg IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1500x500, components 3\012- data Size114 kB (114223 bytes) Hashd2319d4bce087be151edf6c0f75c8844 f8f5acc2aa65f1696a99215619c30488373471bf 6e99cfc8273f8ac3cbc8bfffac73259c395c723a7c635218ae445f50651268b4
GET /wp-content/uploads/2021/10/Kamtole1_500.jpg HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:02 GMT
accept-ranges: bytes
content-length: 114223
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:41:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash4f22437494cab8f3b1de6d48c3677f43 42461557365b59e300ae356c37b95f652e10dacd 420bc8cc7c6624d9201c6e12fb6478f4a9cf77e90aad033b4d12687968003ccf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:41:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| i.ytimg.com/vi/MFleTCaZfd4/default.jpg | 216.58.211.22 | 200 OK | 3.4 kB |
URL HTTP/2i.ytimg.com/vi/MFleTCaZfd4/default.jpg IP216.58.211.22:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data Hash2facab6e7ecb7db9fbb4ff38a5c302e6 f49c11b906af631907f8954b4b9641ff8845ee73 3258efa17546171db827ed5fc47574ab04beea40a4533ae898f6ef365a7466d9
GET /vi/MFleTCaZfd4/default.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 3402
date: Wed, 23 Nov 2022 04:41:55 GMT
expires: Wed, 23 Nov 2022 06:41:55 GMT
cache-control: public, max-age=7200
etag: "0"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hashadb3448eb71178c9660330148424469f c299752f6b8a89362cbc5b2254aef1a64181d963 f38213cdc59fe1619d4c4f4a7a4c1d364d1a28552144475e742e76335ec3dd4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:41:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash8069f5e67c25fc0b7388ba5d4decd8c9 64a85ba44c80ea206f4382f573c3d61e4f607ccf 7587cd04333ddf1cff15ae219cb8fca0618786a9fe4cee989975f4d50889e72a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:41:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.195 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.195:0
File typegzip compressed data, max compression\012- data Hashce418125d5f524a1df50912921c52246 500aa839ca7f30b84ea206cc7e1d7722c5aa8f2b fef0c5a063be2f5311bc4ea6d7b51e68aaeefd965927dc15b7a20d40cb44849d
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 19 Nov 2022 12:31:58 GMT
expires: Sun, 19 Nov 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 317397
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/ | 192.185.78.53 | 200 OK | 58 kB |
URL HTTP/2seychellescultureinstitute.org/ IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash81df43689e51dec21c7865eb78dd480d 94e35fbc79b6f4a03b281bb4dbfcc161604a17e4 c6854170f211811d7df0308d8da64b7a333e06e1b4cf51623950d6b4da1d5110
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET / HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
link: <https://seychellescultureinstitute.org/wp-json/>; rel="https://api.w.org/", <https://seychellescultureinstitute.org/wp-json/wp/v2/pages/2190>; rel="alternate"; type="application/json", <https://seychellescultureinstitute.org/>; rel=shortlink
set-cookie: dYSpurIzCw=WHm4hVo1jr; expires=Thu, 24-Nov-2022 04:41:54 GMT; Max-Age=86400; path=/
fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D; expires=Thu, 24-Nov-2022 04:41:54 GMT; Max-Age=86400; path=/
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true | 142.250.74.106 | 200 OK | 23 B |
URL HTTP/2maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true IP142.250.74.106:0
File typeJSON data\012- , ASCII text Hashe3981ca10169a319d5aa062bf43a5fa1 2c6ed584767b65688ce99b1ebe1a3b7448a67421 8b0b8749aba12de93f3cf5d86f9fac9d6de7cac400a17473718f182a34ebb7e9
GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://seychellescultureinstitute.org
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 23 Nov 2022 04:41:55 GMT
server: scaffolding on HTTPServer2
cache-control: private
content-length: 23
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://seychellescultureinstitute.org
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/plugins/eventON/assets/js/lib/handlebars.js?ver=3.1.7 | 192.185.78.53 | 200 OK | 644 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/plugins/eventON/assets/js/lib/handlebars.js?ver=3.1.7 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
Size644 kB (643553 bytes) Hashac857786ff88d2b147681d2352c98f7e 651b9de7405584d7db041cb34c3d2c79b8020069 410edaeb10b4241c784a301e9889a622285eedc1a941d80e71f6a9eed01f4466
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/eventON/assets/js/lib/handlebars.js?ver=3.1.7 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:09:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/uploads/2021/10/cropped-android-chrome-512x512-1-32x32.png | 192.185.78.53 | 200 OK | 2.4 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2021/10/cropped-android-chrome-512x512-1-32x32.png IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data Hash01ffabad916eca6590173ecc72d499a3 84ede9e86bce49f84efcfd92b9f24bf4e66e4d9d 626e154422a1a56169674cf60c93b85d64eab69fab3559c328e4b0ad06a03d61
GET /wp-content/uploads/2021/10/cropped-android-chrome-512x512-1-32x32.png HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:03 GMT
accept-ranges: bytes
content-length: 2355
content-type: image/png
date: Wed, 23 Nov 2022 04:41:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/uploads/2021/10/cropped-android-chrome-512x512-1-192x192.png | 192.185.78.53 | 200 OK | 38 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2021/10/cropped-android-chrome-512x512-1-192x192.png IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data Hash53ad607eda33f3cc50b9ab91e5ac7176 dbc041ecc00b387df501d27cde54932b45532714 0339eaf80e7de166b9a82a05dc4d7ae8a7e4ade450e8489571ecf904e9c9679c
GET /wp-content/uploads/2021/10/cropped-android-chrome-512x512-1-192x192.png HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:03 GMT
accept-ranges: bytes
content-length: 37582
content-type: image/png
date: Wed, 23 Nov 2022 04:41:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash611d1eca860866489908506a26bd6a2a 5e8c401f098357cd12889a6e507baf7c8a87772a e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14815
Expires: Wed, 23 Nov 2022 08:48:50 GMT
Date: Wed, 23 Nov 2022 04:41:55 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash611d1eca860866489908506a26bd6a2a 5e8c401f098357cd12889a6e507baf7c8a87772a e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14815
Expires: Wed, 23 Nov 2022 08:48:50 GMT
Date: Wed, 23 Nov 2022 04:41:55 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash611d1eca860866489908506a26bd6a2a 5e8c401f098357cd12889a6e507baf7c8a87772a e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14815
Expires: Wed, 23 Nov 2022 08:48:50 GMT
Date: Wed, 23 Nov 2022 04:41:55 GMT
Connection: keep-alive
|
|
| seychellescultureinstitute.org/wp-content/plugins/eventON/assets/css/eventon_styles.css?ver=3.1.7 | 192.185.78.53 | 200 OK | 45 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/plugins/eventON/assets/css/eventon_styles.css?ver=3.1.7 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashceebd2478f78de28b70b9f650dfc5ab0 3e66998a4962c190838015ac50d2d6e9039dd58f f6ea0386005b3d895dabc30ac8d6f36545af9c395245290545e41ebc4deb4f42
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/eventON/assets/css/eventon_styles.css?ver=3.1.7 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:09:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash481c033b9ffd030ff0de6e35cf788b47 85d3baad9217af2b5d75c019d2ef95dbb919a788 02443c7869914c2b29892deb0c645395bcf4e8379da3cf20974614ff9c92893b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11249
x-amzn-requestid: 65a3db77-b2e6-40b9-a776-021c2e9b56d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bubSsHbZoAMFZNg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6375a5aa-1286b97968cc2e4c7fe8ab29;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 03:08:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: iGM_HV13dzz5eOswbOJfjj14jlFW4jy2YsW7eJumS_TM5TxxG8VMwQ==
via: 1.1 38eecd3ca21bf068d69a2f9cfe668d14.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 03:49:13 GMT
age: 3162
etag: "85d3baad9217af2b5d75c019d2ef95dbb919a788"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F719df867-6e3b-42ad-bb29-bacd6908c756.jpeg | 34.120.237.76 | 200 OK | 5.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F719df867-6e3b-42ad-bb29-bacd6908c756.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash858121146f13af8b53e7bfb9d143490c 2a0aa4d6e3d648b23e15db38559fa9be9ca2cdd8 5c79f7d9479cdaca6fca1abc2af768f8dbe2e7df70959a6620c676a4a4060b9e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F719df867-6e3b-42ad-bb29-bacd6908c756.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5721
x-amzn-requestid: d6a84920-e8e5-4160-aea1-ccabce26d36f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bvCq5EH4IAMFlSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6375e4ab-7835c4341c7b2fb700784aa2;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 07:37:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KX8eExctOwlkCuEo1G-yxhL4FaM-DquAvgfYTjwekflhfWccr5LU1Q==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 03:53:44 GMT
age: 2891
etag: "2a0aa4d6e3d648b23e15db38559fa9be9ca2cdd8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19004cd2-76fa-499a-9749-67f2994dc084.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19004cd2-76fa-499a-9749-67f2994dc084.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasha539a7b4a38c495d8d7efd7b95fec6de 8f8bdba45b4fdf16783758eb6e53f957e53987bc 2d209c13af43c4237e36291cb24140e4993361311489ad27943b1209262592e1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19004cd2-76fa-499a-9749-67f2994dc084.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11839
x-amzn-requestid: b0429c36-a8c3-49e7-b25a-1ecdfc6e7648
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: btVS7Hp2oAMF32g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637535ac-097bd45a569a4cff672486de;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 19:10:36 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MQV3azOGYjEB4MTie1E3cfTIDWAVus4-A2QsezKllq0GzMi-gD3nSg==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 21:52:55 GMT
age: 24540
etag: "8f8bdba45b4fdf16783758eb6e53f957e53987bc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0ea68cc-d723-41ae-8bc2-16e2e422e2aa.jpeg | 34.120.237.76 | 200 OK | 5.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0ea68cc-d723-41ae-8bc2-16e2e422e2aa.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashc6380f73d47906bd63b9c48137e4df61 94e053461d2db89e9d08321f26a2555ebcd7e0b9 84144e3c3e7acc7339fd1da9b373f18582734b6f4d235b2aef8c90616ed1c8a7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0ea68cc-d723-41ae-8bc2-16e2e422e2aa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5914
x-amzn-requestid: 175363fa-bb7a-4c95-8aa4-ebb3f16f3745
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1lI3HaqIAMFmTA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63788238-1bb736b52bbae37c5e19486f;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 07:14:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 39Lmple6qq9vrKeKJ4lcditVdK5XfRFtv3Cs0_R8B7pVDYPiRAGFtg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 22:13:08 GMT
age: 23327
etag: "94e053461d2db89e9d08321f26a2555ebcd7e0b9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Oswald%3A400%2C300%7COpen+Sans%3A700%2C400%2C400i%7CRoboto%3A700%2C400&ver=5.8.6 | 142.250.74.10 | 200 OK | 9.2 kB |
URL HTTP/2fonts.googleapis.com/css?family=Oswald%3A400%2C300%7COpen+Sans%3A700%2C400%2C400i%7CRoboto%3A700%2C400&ver=5.8.6 IP142.250.74.10:0
Hashe27f0f6d8674f0aaf97d4e0c4765c8e0 20140088baa0c2a09c8a0bf6d5dc77fe0547fe35 632694e21a229de90d8cae37fd7dcb5ffa73c5f0b7f706d2ea3272e011c20b9e
GET /css?family=Oswald%3A400%2C300%7COpen+Sans%3A700%2C400%2C400i%7CRoboto%3A700%2C400&ver=5.8.6 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 23 Nov 2022 04:41:54 GMT
date: Wed, 23 Nov 2022 04:41:54 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/uploads/2021/10/slide10-390x220.jpg | 192.185.78.53 | 200 OK | 25 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2021/10/slide10-390x220.jpg IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 220x220, segment length 16, baseline, precision 8, 390x220, components 3\012- data Hashff75b67a68e2ad6ef05cd89f20e7a1fe 38adadf6aa8a7b92aeb8c057f5f8d42424272c3e bf4cd813bd2d7170f39a1f2e77bcc785684c4cd4d5ee852c19f138cb256891cb
GET /wp-content/uploads/2021/10/slide10-390x220.jpg HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:03 GMT
accept-ranges: bytes
content-length: 25019
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:41:56 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/uploads/2021/10/slide3-390x220.jpg | 192.185.78.53 | 200 OK | 43 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2021/10/slide3-390x220.jpg IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=14, height=5304, bps=182, PhotometricIntepretation=RGB, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, width=7952], baseline, precision 8, 390x220, components 3\012- data Hash098969eb3dcc34566a8c542213e7cabb ff7a5b9d7e526af3a46f96152aba36b5fe4611a9 ac2762ecc38be9b792d15f5ceb90cc60d5a2cf6a2cb5adbdad9628407783fe4d
GET /wp-content/uploads/2021/10/slide3-390x220.jpg HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:02 GMT
accept-ranges: bytes
content-length: 42921
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:41:56 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/uploads/2021/10/slide6-390x220.jpg | 192.185.78.53 | 200 OK | 36 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2021/10/slide6-390x220.jpg IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=14, height=5304, bps=182, PhotometricIntepretation=RGB, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, width=7952], baseline, precision 8, 390x220, components 3\012- data Hash332d49d7f5ab06803d282cecef5f82a8 3ad0484e1d881d72d17b2afcf47de9e3ebda7960 d9649f86c46fd51efa5758ec4da814c12b1a8bf273823d59d62db435c27a232e
GET /wp-content/uploads/2021/10/slide6-390x220.jpg HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:03 GMT
accept-ranges: bytes
content-length: 36076
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:41:56 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/uploads/2021/10/slide2-390x220.jpg | 192.185.78.53 | 200 OK | 39 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2021/10/slide2-390x220.jpg IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=14, height=5081, bps=182, PhotometricIntepretation=RGB, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, width=7618], baseline, precision 8, 390x220, components 3\012- data Hashef275fd34dd1eea754299dbcfeddb7b6 1b69c91f1c1390571c0db851e02e79ea65d8ab97 13e3012fd1ea5643755797606ba69c0270d5330baf01ab26fadccae97eb717cc
GET /wp-content/uploads/2021/10/slide2-390x220.jpg HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:02 GMT
accept-ranges: bytes
content-length: 39192
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:41:56 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/uploads/2021/10/slide4-390x220.jpg | 192.185.78.53 | 200 OK | 42 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2021/10/slide4-390x220.jpg IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=14, height=5304, bps=182, PhotometricIntepretation=RGB, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, width=7952], baseline, precision 8, 390x220, components 3\012- data Hash9ab70722916268333a896776548ef196 d69198499574b196d34511da950a31505a1e926a 37725225a732fee6404eb4d374ece60929d5543f825b709b5d3d33402fc74eba
GET /wp-content/uploads/2021/10/slide4-390x220.jpg HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:03 GMT
accept-ranges: bytes
content-length: 41646
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:41:56 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/uploads/2021/10/slide5-390x220.jpg | 192.185.78.53 | 200 OK | 45 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2021/10/slide5-390x220.jpg IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=14, height=4846, bps=182, PhotometricIntepretation=RGB, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, width=7265], baseline, precision 8, 390x220, components 3\012- data Hash07fc40637b95dbde1db8f4deb5e8f7c7 4a366c8f829353540333192f5ce6a91cee4a1f32 c4c3e38f1c4059989571cb474912f1b85a9590c267727fb33622010e27b4f681
GET /wp-content/uploads/2021/10/slide5-390x220.jpg HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:03 GMT
accept-ranges: bytes
content-length: 44884
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:41:56 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/uploads/2021/10/slide7-390x220.jpg | 192.185.78.53 | 200 OK | 49 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2021/10/slide7-390x220.jpg IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=14, height=5304, bps=182, PhotometricIntepretation=RGB, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, width=7952], baseline, precision 8, 390x220, components 3\012- data Hashd9ddab1d226ecf36cf2e95336741f90d c47cf848ac41dee9177f0ceab359b74476adc9d3 74d4f794070bf535d4ed6d98ecc13cd77f616037ea46048d865fcff47688e4f1
GET /wp-content/uploads/2021/10/slide7-390x220.jpg HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:02 GMT
accept-ranges: bytes
content-length: 49111
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:41:56 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/uploads/2021/10/slide9-390x220.jpg | 192.185.78.53 | 200 OK | 21 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2021/10/slide9-390x220.jpg IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 390x220, components 3\012- data Hash2aa5ed6a5309318dab2d23caccfb5e64 5197dfead0d3336ad96bb69944756fbc657235e6 3252ff513743d59f93a42ada32fa3daef131b065dceb82ae0c4175caeb071909
GET /wp-content/uploads/2021/10/slide9-390x220.jpg HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:03 GMT
accept-ranges: bytes
content-length: 20775
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:41:56 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/uploads/2021/10/slide8-390x220.jpg | 192.185.78.53 | 200 OK | 49 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2021/10/slide8-390x220.jpg IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=14, height=5304, bps=182, PhotometricIntepretation=RGB, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, width=7952], baseline, precision 8, 390x220, components 3\012- data Hash24989bec64212f14edfabb09e25d07f7 89d8c1750a04fbfef60a8ea479d05f3aad6f5889 0267cbbcf08369fe62a69ad20cb31b3b904d52508a899ea7a762965534cb6b46
GET /wp-content/uploads/2021/10/slide8-390x220.jpg HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:03 GMT
accept-ranges: bytes
content-length: 48936
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:41:56 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/uploads/2021/10/slide11.jpg | 192.185.78.53 | 200 OK | 76 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2021/10/slide11.jpg IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1500x500, components 3\012- data Hash145f9014f1f00518a330f94233463e37 b9d6f8d08fd90469d73351a6d9c87bb0b8362eec 582c3c46d1907cc0aa83f402413faf0fefcbcc4415d5248e0c5a768a10874516
GET /wp-content/uploads/2021/10/slide11.jpg HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:02 GMT
accept-ranges: bytes
content-length: 75451
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:41:56 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create | 142.250.74.106 | 200 OK | 0 B |
URL HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create IP142.250.74.106:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Wed, 23 Nov 2022 04:41:56 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashb2b92f1110c82662bfa1addc9bab3130 d6f86300cbfd5b21b3d505c08ffd6edef34b654a 6914944644172d563d0d7c2a5084690fce86ead13949ff29f42842d4bb6e0734
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:41:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash0cad81444995839dd0adaf518298011a 97d2d4b41484082ff580dd136d4f3e4dc790846d 409e8883208535817ae29e119508475b362fe773214542a9a562923558c767e5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:41:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| googleads.g.doubleclick.net/pagead/id | 142.250.74.130 | 302 Found | 0 B |
URL HTTP/2googleads.g.doubleclick.net/pagead/id IP142.250.74.130:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Wed, 23 Nov 2022 04:41:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| static.doubleclick.net/instream/ad_status.js | 142.250.74.166 | 200 OK | 29 B |
URL HTTP/2static.doubleclick.net/instream/ad_status.js IP142.250.74.166:0
Hash1fa71744db23d0f8df9cce6719defcb7 e4be9b7136697942a036f97cf26ebaf703ad2067 eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 04:30:21 GMT
expires: Wed, 23 Nov 2022 04:45:21 GMT
cache-control: public, max-age=900
age: 695
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create | 142.250.74.106 | 200 OK | 31 kB |
URL HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create IP142.250.74.106:0
File typeJSON data\012- , ASCII text, with very long lines (65536), with no line terminators Hashb4e0f217bd38c8c9d6017680eae80024 775e60cf1e97cda87b53b4f0aa1ca1ee01a59104 9cc311cb9568b747eeeb9a0d9ad12c8dc4af8183a9e92c5a282b2739555dec5f
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 23 Nov 2022 04:41:56 GMT
server: ESF
cache-control: private
content-length: 31079
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/uploads/2021/10/slide6-1.jpg | 192.185.78.53 | 200 OK | 131 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2021/10/slide6-1.jpg IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1500x500, components 3\012- data Size131 kB (130751 bytes) Hash844c1e0b5206771bb93b0019f2e8bea7 7e4f4d2bd505bad4512a5375d5477f3f1a5f7d08 3310f1a7b3b9e5061dd85c00a918b82e06c66a84d2b8b37218c7a4bef19b2114
GET /wp-content/uploads/2021/10/slide6-1.jpg HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:02 GMT
accept-ranges: bytes
content-length: 130751
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:41:56 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashae7674294f5a17ef8761b33ac4dad848 30a771e623dd1e3cb8694bb5f71393aaa9e87b6a cac85ed50ce25c45d5093aaaa231a0d1cd9667f47bd2312947070ba202c5d96b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:41:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| seychellescultureinstitute.org/wp-content/uploads/2021/10/slide9-1.jpg | 192.185.78.53 | 200 OK | 143 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2021/10/slide9-1.jpg IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1500x500, components 3\012- data Size143 kB (143006 bytes) Hash533a26df9131fa63a5d726ce885f17d3 a821027d1d171ea8109ce39a698b1c80dc4d16b2 c8049ba1bcb475a996b5482a2f8542f02f9e45078f655f7ada1065656b3281dc
GET /wp-content/uploads/2021/10/slide9-1.jpg HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:02 GMT
accept-ranges: bytes
content-length: 143006
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:41:56 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/uploads/2021/10/Kamtole2.jpg | 192.185.78.53 | 200 OK | 139 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2021/10/Kamtole2.jpg IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1500x500, components 3\012- data Size139 kB (138954 bytes) Hash123842ad77f71e6b896aaf306c6b5e4a 185aee981a7e99d9b86554284ad32007b3986091 9b3d99ed3270b34e4ff186517b28cd5d23d28bf536d38ae285224abf912f93fb
GET /wp-content/uploads/2021/10/Kamtole2.jpg HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:03 GMT
accept-ranges: bytes
content-length: 138954
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:41:56 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/uploads/2021/10/slide7-1.jpg | 192.185.78.53 | 200 OK | 97 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2021/10/slide7-1.jpg IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1500x500, components 3\012- data Hash430ce68adafa66876dd94b6fa4547638 b11f4514d687f1d03e206ef7644625df436d817a e851c0a15927ee391f8fa1cf9bc7246c972629af4390bbc07ee2adb424013ded
GET /wp-content/uploads/2021/10/slide7-1.jpg HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:02 GMT
accept-ranges: bytes
content-length: 96619
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:41:56 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/uploads/2021/10/slide3-1.jpg | 192.185.78.53 | 200 OK | 173 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2021/10/slide3-1.jpg IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1500x500, components 3\012- data Size173 kB (172928 bytes) Hash89c8ced7d061051bb2c6d57ae8cf8577 94131e08dba235897c6109941b1ba78eddd63b79 7e5f4bab6efb733a2db0e683684992b1f4f64a2427884bcb68c3aa9771c9c3de
GET /wp-content/uploads/2021/10/slide3-1.jpg HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:03 GMT
accept-ranges: bytes
content-length: 172928
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:41:56 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/uploads/2021/10/slide4-1.jpg | 192.185.78.53 | 200 OK | 164 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2021/10/slide4-1.jpg IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1500x500, components 3\012- data Size164 kB (164190 bytes) Hashaaf75bdfae2daf23b8460b95a49f86a7 cd95f78716ca3d862df1dd7a4bd5f018bc7fd8c1 a7c54e9b8ae896ad5481464b0f10bac205bd1d99dbab2b9984140b261da3135e
GET /wp-content/uploads/2021/10/slide4-1.jpg HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:03 GMT
accept-ranges: bytes
content-length: 164190
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:41:56 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.google.com/js/th/G-wi0KRrIjmTWIDOn44AFVMvZ_aKLO1c96DfwAE3d4M.js | 142.250.74.164 | 200 OK | 14 kB |
URL HTTP/2www.google.com/js/th/G-wi0KRrIjmTWIDOn44AFVMvZ_aKLO1c96DfwAE3d4M.js IP142.250.74.164:0
File typeASCII text, with very long lines (36143) Hasha08dfd96c563f96f7d11b4858aecfa13 d9abee2c38b89d3dea85e76bb741bb8f4f993d49 fedde263fa3b4116029d93d0250f5eab845964d5fcf24e40ffbcd9bf292a0db4
GET /js/th/G-wi0KRrIjmTWIDOn44AFVMvZ_aKLO1c96DfwAE3d4M.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14211
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 06:09:06 GMT
expires: Thu, 16 Nov 2023 06:09:06 GMT
cache-control: public, max-age=31536000
age: 599570
last-modified: Thu, 03 Nov 2022 10:00:00 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/uploads/2021/10/slide8-1.jpg | 192.185.78.53 | 200 OK | 56 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2021/10/slide8-1.jpg IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1499x500, components 3\012- data Hash5a64ab4d3da63d2338ebb851adab248c b675960c44b3ed860c0a9b138ea69a92ef9a3f86 c27c3608e78577233c3942ddea39c4cf64a54897588237db107f374990311809
GET /wp-content/uploads/2021/10/slide8-1.jpg HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:02 GMT
accept-ranges: bytes
content-length: 56063
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:41:56 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/uploads/2021/10/slide5-1.jpg | 192.185.78.53 | 200 OK | 210 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2021/10/slide5-1.jpg IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1500x500, components 3\012- data Size210 kB (209914 bytes) Hashd54acd29de82bf0b23b0562fbf80bc18 385577ebfb389ff656a96181e4c5e7ccc3be88a9 762b59501d46163cc350e1e3bc29017082c74071a4c1d029d2b9a1d79a12469d
GET /wp-content/uploads/2021/10/slide5-1.jpg HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:03 GMT
accept-ranges: bytes
content-length: 209914
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:41:56 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash0cad81444995839dd0adaf518298011a 97d2d4b41484082ff580dd136d4f3e4dc790846d 409e8883208535817ae29e119508475b362fe773214542a9a562923558c767e5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:41:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashb2b92f1110c82662bfa1addc9bab3130 d6f86300cbfd5b21b3d505c08ffd6edef34b654a 6914944644172d563d0d7c2a5084690fce86ead13949ff29f42842d4bb6e0734
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:41:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash68ab5865b415e2e421a4eaa3a206ce0e fa492d5a66e9d07ffdc14b3d8e11f0cdc27aed87 10298e9120db56a4aeaf950d2fa25af662172358e534aa5fa6d4af8ab53ce146
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:41:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| seychellescultureinstitute.org/wp-content/uploads/2021/10/slide10-1.jpg | 192.185.78.53 | 200 OK | 3.4 kB |
URL HTTP/2seychellescultureinstitute.org/wp-content/uploads/2021/10/slide10-1.jpg IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3\012- data Hash53a66f00c93646f01dff79a48a96696b 832fae3710a2e29bc0b1e96812022997f9769a21 a646b623ffe478288f43030d0220f132d6a5b7760c8a3302481054dc34d58a2f
GET /wp-content/uploads/2021/10/slide10-1.jpg HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:03 GMT
accept-ranges: bytes
content-length: 169469
content-type: image/jpeg
date: Wed, 23 Nov 2022 04:41:56 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT | 142.250.74.106 | 200 OK | 0 B |
URL HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT IP142.250.74.106:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Wed, 23 Nov 2022 04:41:56 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT | 142.250.74.106 | 200 OK | 110 B |
URL HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT IP142.250.74.106:0
File typeJSON data\012- , ASCII text, with no line terminators Hash97655dfca2676a1585638e6e192cbc64 b946e12457c60069ff39af8fbcbdd8ef9443b691 55f68cd2016043f76dadecc56daa1522786cae8a5d413b011f7aa9577460d97c
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 919
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 23 Nov 2022 04:41:56 GMT
server: ESF
cache-control: private
content-length: 110
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash68ab5865b415e2e421a4eaa3a206ce0e fa492d5a66e9d07ffdc14b3d8e11f0cdc27aed87 10298e9120db56a4aeaf950d2fa25af662172358e534aa5fa6d4af8ab53ce146
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 04:41:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdde883bc-a7d5-4543-99fc-54e30eee2be6.jpeg | 34.120.237.76 | 200 OK | 8.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdde883bc-a7d5-4543-99fc-54e30eee2be6.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash5cecd4d046fad1853298fa268a3c0c71 cc4dae732136f04ab6824e78e834cef8c3174ede 1cbcdbb8756d7fa385c66a8e4f688d26a42b91e2760d13d69898b5845a4daaea
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdde883bc-a7d5-4543-99fc-54e30eee2be6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8577
x-amzn-requestid: c0a5f9a1-e6f6-480e-a534-3d1b16c79a75
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1jHVGFYIAMFyFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63787efb-544394f15e8380910447d48a;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 07:00:11 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: jUnOXD_n9DpLqeKBY_T-FVh-zWBfZddGKkHQHasqESKrYvXyZxljag==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 29a825d8a219984d47bec4350779b558.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 08:14:23 GMT
age: 73659
etag: "cc4dae732136f04ab6824e78e834cef8c3174ede"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/themes/jannah/assets/ilightbox/dark-skin/skin.css?ver=5.4.7 | 192.185.78.53 | 200 OK | 0 B |
URL HTTP/2seychellescultureinstitute.org/wp-content/themes/jannah/assets/ilightbox/dark-skin/skin.css?ver=5.4.7 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/jannah/assets/ilightbox/dark-skin/skin.css?ver=5.4.7 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:01 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2928
content-type: text/css
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/plugins/eventON/assets/js/eventon_script.js?ver=3.1.7 | 192.185.78.53 | 200 OK | 0 B |
URL HTTP/2seychellescultureinstitute.org/wp-content/plugins/eventON/assets/js/eventon_script.js?ver=3.1.7 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/eventON/assets/js/eventon_script.js?ver=3.1.7 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:09:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.youtube.com/embed/EVOjLk7GtOI?enablejsapi=1&rel=0&showinfo=0 | 142.250.74.78 | 200 OK | 0 B |
URL HTTP/2www.youtube.com/embed/EVOjLk7GtOI?enablejsapi=1&rel=0&showinfo=0 IP142.250.74.78:0
GET /embed/EVOjLk7GtOI?enablejsapi=1&rel=0&showinfo=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 23 Nov 2022 04:41:55 GMT
strict-transport-security: max-age=31536000
cross-origin-resource-policy: cross-origin
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=RwRn1Dx3cF8; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=BMMfBqBrrwM; Domain=.youtube.com; Expires=Mon, 22-May-2023 04:41:55 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+271; expires=Fri, 22-Nov-2024 04:41:55 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-includes/js/jquery/jquery.min.js?ver=3.6.0 | 192.185.78.53 | 200 OK | 0 B |
URL HTTP/2seychellescultureinstitute.org/wp-includes/js/jquery/jquery.min.js?ver=3.6.0 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 11 Mar 2021 02:37:24 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/plugins/eventON/assets/js/lib/moment.min.js?ver=3.1.7 | 192.185.78.53 | 200 OK | 0 B |
URL HTTP/2seychellescultureinstitute.org/wp-content/plugins/eventON/assets/js/lib/moment.min.js?ver=3.1.7 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/eventON/assets/js/lib/moment.min.js?ver=3.1.7 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:09:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/themes/jannah/assets/css/style.min.css?ver=5.4.7 | 192.185.78.53 | 200 OK | 0 B |
URL HTTP/2seychellescultureinstitute.org/wp-content/themes/jannah/assets/css/style.min.css?ver=5.4.7 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
GET /wp-content/themes/jannah/assets/css/style.min.css?ver=5.4.7 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:01 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| seychellescultureinstitute.org/wp-content/themes/jannah/assets/ilightbox/lightbox.js?ver=5.4.7 | 192.185.78.53 | 200 OK | 0 B |
URL HTTP/2seychellescultureinstitute.org/wp-content/themes/jannah/assets/ilightbox/lightbox.js?ver=5.4.7 IP192.185.78.53:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/jannah/assets/ilightbox/lightbox.js?ver=5.4.7 HTTP/1.1
Host: seychellescultureinstitute.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seychellescultureinstitute.org/
Cookie: dYSpurIzCw=WHm4hVo1jr; fKBhk-UeGDZCEmXd=YmKx1Arf9XRODZM%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 10:10:01 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Wed, 23 Nov 2022 04:41:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
0.0.0.0