Overview

URLscotianmaterials.info/
IP 199.34.228.55 (United States)
ASN#27647 WEEBLY
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2023-01-12 08:50:51 UTC
StatusLoading report..
IDS alerts0
Blocklist alert7
urlquery alerts No alerts detected
Tags None

Domain Summary (18)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
www.scotianmaterials.info (11) 0 2016-03-26 13:01:53 UTC 2023-01-09 08:48:10 UTC 199.34.228.55 Unknown ranking
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2023-01-12 04:10:14 UTC 54.190.123.170
ocsp.globalsign.com (1) 2075 2012-05-25 06:20:55 UTC 2023-01-12 04:09:35 UTC 104.18.20.226
www.google-analytics.com (2) 40 2012-05-21 09:41:50 UTC 2023-01-12 07:05:56 UTC 142.250.74.14
ocsp.pki.goog (9) 175 2017-06-14 07:23:31 UTC 2023-01-12 04:09:09 UTC 142.250.74.131
www.google.com (1) 7 2012-11-08 00:08:21 UTC 2023-01-12 07:12:12 UTC 216.58.207.228
ssl.google-analytics.com (1) 275 2012-10-02 04:58:30 UTC 2023-01-12 07:21:19 UTC 142.250.74.40
www.gstatic.com (1) 0 2012-05-29 15:36:17 UTC 2023-01-12 05:24:35 UTC 142.250.74.35 Domain (gstatic.com) ranked at: 540
ocsp.sca1b.amazontrust.com (2) 1015 2016-02-14 02:37:56 UTC 2019-03-27 04:05:54 UTC 54.230.245.118
scotianmaterials.info (1) 0 2016-03-26 13:01:53 UTC 2023-01-11 08:51:56 UTC 199.34.228.55 Unknown ranking
r3.o.lencr.org (9) 344 2020-12-02 08:52:13 UTC 2023-01-12 04:09:20 UTC 23.33.119.27
ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2023-01-12 05:44:37 UTC 93.184.220.29
img-getpocket.cdn.mozilla.net (5) 1631 2017-09-01 03:40:57 UTC 2023-01-12 04:09:15 UTC 34.120.237.76
ec.editmysite.com (2) 12806 2017-01-29 21:50:35 UTC 2023-01-11 07:48:22 UTC 44.241.20.95
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2023-01-12 04:09:20 UTC 35.241.9.150
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2023-01-12 04:10:01 UTC 34.160.144.191
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2023-01-12 04:12:05 UTC 34.117.237.239
cdn2.editmysite.com (10) 11564 2012-10-02 18:27:39 UTC 2023-01-11 09:38:42 UTC 151.101.1.46

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2023-01-12 2 scotianmaterials.info/ Malware
2023-01-12 2 www.scotianmaterials.info/ Malware
2023-01-12 2 www.scotianmaterials.info/ Malware
2023-01-12 2 www.scotianmaterials.info/files/theme/plugins.js?1486484267 Malware
2023-01-12 2 www.scotianmaterials.info/files/templateArtifacts.js?1666105073 Malware
2023-01-12 2 www.scotianmaterials.info/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccoun (...) Malware
2023-01-12 2 www.scotianmaterials.info/ajax/api/JsonRPC/Membership/?Membership[Member::g (...) Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 199.34.228.55
Date UQ / IDS / BL URL IP
2023-02-28 05:22:09 +0000 0 - 0 - 6 email-verification.company.com/ 199.34.228.55
2023-02-24 06:59:09 +0000 0 - 0 - 5 noticemaintenance897.company.com/ 199.34.228.55
2023-02-21 22:00:30 +0000 0 - 3 - 0 www.eminc.biz/ 199.34.228.55
2023-01-24 07:07:52 +0000 0 - 0 - 11 sign-in-att.company.com/ 199.34.228.55
2023-01-20 08:02:16 +0000 0 - 0 - 6 mail-update-2023.company.com/ 199.34.228.55


Last 5 reports on ASN: WEEBLY
Date UQ / IDS / BL URL IP
2023-03-23 15:41:42 +0000 0 - 0 - 4 att-108310.weeblysite.com/ 199.34.228.97
2023-03-23 14:07:10 +0000 0 - 0 - 10 att-104546.weeblysite.com/ 199.34.228.97
2023-03-23 14:06:43 +0000 0 - 0 - 10 att-108726.weeblysite.com/ 199.34.228.97
2023-03-23 14:01:05 +0000 0 - 0 - 5 upgradeatttmail.weebly.com/ 199.34.228.54
2023-03-23 13:56:51 +0000 0 - 0 - 0 www.ndnm.org 199.34.228.74


Last 5 reports on domain: scotianmaterials.info
Date UQ / IDS / BL URL IP
2023-01-12 08:50:51 +0000 0 - 0 - 7 scotianmaterials.info/ 199.34.228.55
2023-01-09 08:48:22 +0000 0 - 0 - 7 scotianmaterials.info/ 199.34.228.55
2022-12-13 08:49:36 +0000 0 - 0 - 8 scotianmaterials.info/ 199.34.228.55
2022-11-27 08:49:21 +0000 0 - 0 - 8 scotianmaterials.info/ 199.34.228.55
2022-11-16 10:09:55 +0000 0 - 0 - 8 scotianmaterials.info/ 199.34.228.55


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-01-09 08:48:22 +0000 0 - 0 - 7 scotianmaterials.info/ 199.34.228.55
2022-12-13 08:49:36 +0000 0 - 0 - 8 scotianmaterials.info/ 199.34.228.55
2022-11-27 08:49:21 +0000 0 - 0 - 8 scotianmaterials.info/ 199.34.228.55
2022-11-16 10:09:55 +0000 0 - 0 - 8 scotianmaterials.info/ 199.34.228.55
2022-11-12 08:48:44 +0000 0 - 0 - 8 scotianmaterials.info/ 199.34.228.55

JavaScript

Executed Scripts (28)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (61)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: scotianmaterials.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         199.34.228.55
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Thu, 12 Jan 2023 08:50:39 GMT
Server: Apache
Location: http://www.scotianmaterials.info/
Content-Length: 241
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   241
Md5:    a7b40133e0fe380fb024d429aeabe4fc
Sha1:   8083ce7551f0ffb22646f53503dff1ec1ae2f194
Sha256: 6a50ccd203f497024c28296b767b97be6368d7b8125ef9601457844efefec32b

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D3818AFD1493030105341B4CFB91037ACBF27085C96068B3EF91C5071277C8E5"
Last-Modified: Mon, 09 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9307
Expires: Thu, 12 Jan 2023 11:25:46 GMT
Date: Thu, 12 Jan 2023 08:50:39 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "11BE07342F3AA4E059DDC3149337895D55BC71E30AD045DC72E4CCA4BE4C6951"
Last-Modified: Wed, 11 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9687
Expires: Thu, 12 Jan 2023 11:32:06 GMT
Date: Thu, 12 Jan 2023 08:50:39 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 12 Jan 2023 08:48:43 GMT
age: 116
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    ff250d3ef3fa45322bf05039a0122a9f
Sha1:   b3e7a2c383bce1bab807dbe1a03c375258b51f1d
Sha256: d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "398D02E16DA466FFE87B64AC34B007615951CCA14D43610B4ACD58BC2A5FADFF"
Last-Modified: Tue, 10 Jan 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4221
Expires: Thu, 12 Jan 2023 10:01:00 GMT
Date: Thu, 12 Jan 2023 08:50:39 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: FPZM1GFrGWbQHkveh7SmnoO1ZbNMyyO8MLsq274hJoFkpdYnz8PH9VzHL7zu2WAtk+WPM9/KByw=
x-amz-request-id: 6RWYE6VTDXXABRFN
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 12 Jan 2023 08:17:22 GMT
age: 1997
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    b1fcd419a4245617397846e8d17233f6
Sha1:   2a037ce244587640b27ead9a0ec2af4f862d91b2
Sha256: e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Thu, 12 Jan 2023 08:50:39 GMT
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Expires, Last-Modified, Alert, Content-Type, Content-Length, ETag, Pragma, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 12 Jan 2023 08:33:45 GMT
age: 1014
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET / HTTP/1.1 
Host: www.scotianmaterials.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         199.34.228.55
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 12 Jan 2023 08:50:39 GMT
Server: Apache
Set-Cookie: is_mobile=0; path=/; domain=www.scotianmaterials.info
Vary: X-W-SSL,User-Agent
Location: https://www.scotianmaterials.info/
X-Host: blu103.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 382
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   382
Md5:    ce541e474cf4f8ea2385eedb84cdf394
Sha1:   e953d43c882f1358eba891e02d2945e1d7656e1e
Sha256: 8a1591621a2b5f87aa090bd2d589900c3e3c67671b6fb4afc65d5a6dece88c4b

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2179
Cache-Control: 'max-age=158059'
Date: Thu, 12 Jan 2023 08:50:40 GMT
Last-Modified: Thu, 12 Jan 2023 08:14:21 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: qPGzS3dDyTWJF9xJ+Pv8Kw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         54.190.123.170
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: jFNozV7i3PKvsIbLERfsTMLgPpg=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "46DFA6158C5BB2EDF771814DA0B1B25CD762744299BE7A60E709CA48E4C8ABAB"
Last-Modified: Thu, 12 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21547
Expires: Thu, 12 Jan 2023 14:49:47 GMT
Date: Thu, 12 Jan 2023 08:50:40 GMT
Connection: keep-alive

                                        
                                            GET / HTTP/1.1 
Host: www.scotianmaterials.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         199.34.228.55
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 12 Jan 2023 08:50:40 GMT
Server: Apache
Vary: X-W-SSL,Accept-Encoding,User-Agent
Set-Cookie: is_mobile=0; path=/; domain=www.scotianmaterials.info language=en; expires=Thu, 26-Jan-2023 08:50:40 GMT; Max-Age=1209600; path=/
Cache-Control: private
ETag: W/"33af5acf639272cddf9feaf3c26688d2-gzip"
Content-Encoding: gzip
X-Host: blu144.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 8477
Keep-Alive: timeout=10, max=74
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1546), with CRLF, LF line terminators
Size:   8477
Md5:    b8c104cc285d3b862b299fee64c090a1
Sha1:   2cf919f0b68729cfc4a069ea1a6ba89527078b04
Sha256: 895f6df426e939bde9113fe813ea32b557baccc1614ec22a1ef37729ce2ab266

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /css/sites.css?buildTime=1666036008 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.scotianmaterials.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.1.46
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
last-modified: Tue, 03 Jan 2023 21:16:02 GMT
etag: W/"63b49b12-347ac"
expires: Wed, 18 Jan 2023 07:34:41 GMT
cache-control: max-age=1209600
x-host: blu63.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 12 Jan 2023 08:50:40 GMT
age: 695760
x-served-by: cache-sjc10068-SJC, cache-bma1670-BMA
x-cache: HIT, HIT
x-cache-hits: 24, 2
x-timer: S1673513441.964269,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 29746
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   29746
Md5:    d10158b22b553f723d99dc78eaee6390
Sha1:   80f2d6670cfb0d01cd20c471cf8e3e6465ddd3f6
Sha256: 939c7a8e1ad74a44e0c847e38533e69e36454b6805d25acf3fb0cb5c472d245e
                                        
                                            GET /js/lang/en/stl.js?buildTime=1666036008& HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.scotianmaterials.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         151.101.1.46
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
last-modified: Fri, 16 Dec 2022 19:53:10 GMT
etag: "639ccca6-2c22a"
expires: Sat, 31 Dec 2022 00:54:24 GMT
cache-control: max-age=1209600
x-host: grn7.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 12 Jan 2023 08:50:40 GMT
age: 1065376
x-served-by: cache-sjc10026-SJC, cache-bma1670-BMA
x-cache: HIT, HIT
x-cache-hits: 23, 1
x-timer: S1673513441.964734,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 32800
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65024)
Size:   32800
Md5:    58a9c1c02a5743ff2107715d041d28b7
Sha1:   619d9394e8b3afce9f9cc066b924ddb5d3265265
Sha256: 98b8090e2292b69bb8ad0ef4082f55458b891130ee6b3d9c6fce5075eec64dbf
                                        
                                            GET /css/site_membership.css?buildTime=1666036008 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.scotianmaterials.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         151.101.1.46
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
last-modified: Wed, 04 Jan 2023 19:28:09 GMT
etag: W/"63b5d349-12199"
expires: Thu, 19 Jan 2023 07:35:55 GMT
cache-control: max-age=1209600
x-host: blu9.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 12 Jan 2023 08:50:40 GMT
age: 609286
x-served-by: cache-sjc10057-SJC, cache-bma1670-BMA
x-cache: HIT, HIT
x-cache-hits: 227, 1
x-timer: S1673513441.964505,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 10785
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65460), with no line terminators
Size:   10785
Md5:    2c6df0e79227a7b5092ea87ec3e02e26
Sha1:   fbffc930ad527fdc1fa712bd4986d98ed29467bb
Sha256: b948bc1c5c741e8d4ba78a9334e5be9d1d503492b4e6c2ea2c8dc23470104373
                                        
                                            GET /css/old/fancybox.css?1666036008 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.scotianmaterials.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.1.46
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
last-modified: Fri, 16 Dec 2022 19:54:20 GMT
etag: "639cccec-f47"
expires: Tue, 03 Jan 2023 11:39:16 GMT
cache-control: max-age=1209600
x-host: grn105.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 12 Jan 2023 08:50:40 GMT
age: 767481
x-served-by: cache-sjc10041-SJC, cache-bma1670-BMA
x-cache: HIT, HIT
x-cache-hits: 2302, 1
x-timer: S1673513441.969436,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1218
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3910)
Size:   1218
Md5:    b644e92258f4c7c0b4270047652d1e60
Sha1:   93734d52ee9e86a768159e514076051813c39cd9
Sha256: 29199496fb817668f887938571046abcdfb49063d0207d571b361f221f467907
                                        
                                            GET /fonts/Raleway/font.css?2 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.scotianmaterials.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.1.46
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
last-modified: Fri, 16 Dec 2022 19:50:32 GMT
etag: "639ccc08-a10"
expires: Tue, 03 Jan 2023 08:24:53 GMT
cache-control: max-age=1209600
x-host: grn114.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 12 Jan 2023 08:50:40 GMT
age: 779147
x-served-by: cache-sjc10033-SJC, cache-bma1670-BMA
x-cache: HIT, HIT
x-cache-hits: 35, 27
x-timer: S1673513441.970819,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 360
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   360
Md5:    b92addf54672827faa7cc50d55a699a3
Sha1:   ff85b06e2c6f390b6ea783ec718e4fe985430847
Sha256: 086c4ff009ef8815a185dacfe8c8d394e3e6cbc6128a8ad950392f7a872d7160
                                        
                                            GET /css/social-icons.css?buildtime=1666036008 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.scotianmaterials.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.1.46
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
last-modified: Fri, 16 Dec 2022 19:54:14 GMT
etag: W/"639ccce6-3319"
expires: Thu, 12 Jan 2023 10:20:30 GMT
cache-control: max-age=1209600
x-host: blu21.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 12 Jan 2023 08:50:40 GMT
age: 1204210
x-served-by: cache-sjc10042-SJC, cache-bma1670-BMA
x-cache: HIT, HIT
x-cache-hits: 2238, 1
x-timer: S1673513441.970437,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1638
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (13080)
Size:   1638
Md5:    03f309e96ce0dd83ba8f7754ff3cf854
Sha1:   778de49f4961a2b63912c3aebc2f45444df76b63
Sha256: 6f5dfae580d7ee9bb236fca05f0562f1e6a5fa5362c6607a0aab3e1c2d483192
                                        
                                            GET /fonts/Lora/font.css?2 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.scotianmaterials.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.1.46
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
last-modified: Fri, 16 Dec 2022 19:50:31 GMT
etag: "639ccc07-6aa"
expires: Tue, 03 Jan 2023 11:35:58 GMT
cache-control: max-age=1209600
x-host: grn56.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 12 Jan 2023 08:50:40 GMT
age: 767681
x-served-by: cache-sjc10034-SJC, cache-bma1670-BMA
x-cache: HIT, HIT
x-cache-hits: 30, 208
x-timer: S1673513441.972522,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 321
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   321
Md5:    73bc8f5c36181a89bab4c7388c6e964b
Sha1:   a1489dba52342bcb09ae18bb2c71805489ac2c6a
Sha256: ffe360dfb861aaf517a2bea4dd5dcb9615073984186f2e3bd4a49b00871b776d
                                        
                                            GET /js/site/main-membership-site.js?buildTime=1666036008 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.scotianmaterials.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         151.101.1.46
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
last-modified: Fri, 16 Dec 2022 19:54:38 GMT
etag: "639cccfe-19348"
expires: Tue, 03 Jan 2023 08:37:32 GMT
cache-control: max-age=1209600
x-host: blu153.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 12 Jan 2023 08:50:40 GMT
age: 778387
x-served-by: cache-sjc10056-SJC, cache-bma1670-BMA
x-cache: HIT, HIT
x-cache-hits: 127, 1
x-timer: S1673513441.965220,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 27201
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32007)
Size:   27201
Md5:    bfef4e8e43513f50fec5f5089fecb596
Sha1:   d5d4682830e6b4e411808f3858d00327c4f3f289
Sha256: 5e25e899214cefcbab913246dcaef601475e142ac7d3ffc785f44b991f543fce
                                        
                                            GET /js/site/main-customer-accounts-site.js?buildTime=1666036008 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.scotianmaterials.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         151.101.1.46
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
last-modified: Sat, 07 Jan 2023 00:20:51 GMT
etag: "63b8bae3-82588"
expires: Mon, 23 Jan 2023 13:30:38 GMT
cache-control: max-age=1209600
x-host: grn106.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 12 Jan 2023 08:50:40 GMT
age: 242403
x-served-by: cache-sjc10055-SJC, cache-bma1670-BMA
x-cache: HIT, HIT
x-cache-hits: 18, 1
x-timer: S1673513441.969130,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 158973
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32007)
Size:   158973
Md5:    89fb93f3b911a60f91bc7f4063777a8f
Sha1:   fed88e48664b4e6b90df231038a205abc11d30b1
Sha256: 966b66e4bf0e1aaac8947bc61bd432e5c194936ddebed90fabefb88286db8a12
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Jan 2023 08:50:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /ca/gsatlasr3dvtlsca2022q3 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Jan 2023 08:50:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "880768692366CF0A552E88F00FA4E8D79525595C"
Expires: Thu, 12 Jan 2023 19:00:00 GMT
Last-Modified: Thu, 12 Jan 2023 07:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2846
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7884a55e8b0db4f7-OSL


--- Additional Info ---
Magic:  data
Size:   1462
Md5:    deaa7db5c51f26b9888aea4b5140239f
Sha1:   723ef84d386dcaba125804a9e5bfa2cc167ab84b
Sha256: 129475d3bcefa954b32f3fc2e0b9e328982b447450e1b4fef4836760db65c16f
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Jan 2023 08:50:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /files/theme/plugins.js?1486484267 HTTP/1.1 
Host: www.scotianmaterials.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.scotianmaterials.info/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         199.34.228.55
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Thu, 12 Jan 2023 08:50:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Fri, 21 May 2021 20:17:30 GMT
x-rgw-object-type: Normal
ETag: W/"7f6df4939d4102a752a5c1989d81afd4"
x-amz-request-id: tx000000000000000c9cd74-0061a71505-a9f4046-sfo1
X-Storage-Bucket: z6ee5
X-Storage-Object: 6ee5ff05679a26a9027cbb63cadee08104fa248a93d3582a333a5d134c25460b
X-Host: blu40.sf2p.intern.weebly.net
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text
Size:   18996
Md5:    17c0b51cd6ba1b91479bfe0274feed18
Sha1:   785a5cfa1ee86fd40b1a9deab58477ac101cb20a
Sha256: 64fa489daea8001c79f266c076946a1dd2b3568d3c6810bc1db9fb27529dee28

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /files/templateArtifacts.js?1666105073 HTTP/1.1 
Host: www.scotianmaterials.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.scotianmaterials.info/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         199.34.228.55
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Thu, 12 Jan 2023 08:50:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: grn132.sf2p.intern.weebly.net
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (2943)
Size:   3238
Md5:    42d7de4855289978ab87af4c84606fab
Sha1:   ea27ac7eee05428080b9fad15ebe0db1024b9b58
Sha256: a2a58642519c93a10f937d8a84549395361d8db1239be8bbd67532c57fe28aa9

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /files/theme/custom.js?1486484267 HTTP/1.1 
Host: www.scotianmaterials.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.scotianmaterials.info/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         199.34.228.55
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Thu, 12 Jan 2023 08:50:41 GMT
Content-Length: 3189
Connection: keep-alive
Last-Modified: Sat, 12 Oct 2019 06:19:40 GMT
x-rgw-object-type: Normal
ETag: "cb99c9cf38bef28aadfeb91627c6f6ea"
x-amz-request-id: tx000000000000000d7571f-0063224411-c669cc6-sfo1
X-Storage-Bucket: zbcb9
X-Storage-Object: bcb9f08db07163c73eecf611815bfe1467d300e077ceed9a1bee28c02d072f2f
X-Host: blu135.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   3189
Md5:    cb99c9cf38bef28aadfeb91627c6f6ea
Sha1:   d03235d8473e225e756998044b237d3fb40653d8
Sha256: bcb9f08db07163c73eecf611815bfe1467d300e077ceed9a1bee28c02d072f2f
                                        
                                            GET /files/theme/mobile.js?1486484267 HTTP/1.1 
Host: www.scotianmaterials.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.scotianmaterials.info/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         199.34.228.55
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Thu, 12 Jan 2023 08:50:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sat, 22 May 2021 22:42:27 GMT
x-rgw-object-type: Normal
ETag: W/"008fd6990b3bdf96b9d46f87e52a7730"
x-amz-request-id: tx000000000000001d19aa4-0062849a0c-b9fbc7f-sfo1
X-Storage-Bucket: z52fc
X-Storage-Object: 52fce566223a538d2037cd7f8ee707362452d0e935d018f857322f10c4446e64
X-Host: blu81.sf2p.intern.weebly.net
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text
Size:   3048
Md5:    df46997a63ceb84c8708e197225bf22e
Sha1:   461b6fa23df29f7da9b3a03f3dba6f846bedf917
Sha256: 84881ad46cfd8cd5adf57ee99e47fd4790e655d5bfc4e45e0b833f0beeacb602
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C82B794C471D79568F5EEE05529CEDDBEFC383AC0D035578DA7BC3866062E5CC"
Last-Modified: Tue, 10 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4672
Expires: Thu, 12 Jan 2023 10:08:33 GMT
Date: Thu, 12 Jan 2023 08:50:41 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C82B794C471D79568F5EEE05529CEDDBEFC383AC0D035578DA7BC3866062E5CC"
Last-Modified: Tue, 10 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4672
Expires: Thu, 12 Jan 2023 10:08:33 GMT
Date: Thu, 12 Jan 2023 08:50:41 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C82B794C471D79568F5EEE05529CEDDBEFC383AC0D035578DA7BC3866062E5CC"
Last-Modified: Tue, 10 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4672
Expires: Thu, 12 Jan 2023 10:08:33 GMT
Date: Thu, 12 Jan 2023 08:50:41 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C82B794C471D79568F5EEE05529CEDDBEFC383AC0D035578DA7BC3866062E5CC"
Last-Modified: Tue, 10 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4672
Expires: Thu, 12 Jan 2023 10:08:33 GMT
Date: Thu, 12 Jan 2023 08:50:41 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C82B794C471D79568F5EEE05529CEDDBEFC383AC0D035578DA7BC3866062E5CC"
Last-Modified: Tue, 10 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4672
Expires: Thu, 12 Jan 2023 10:08:33 GMT
Date: Thu, 12 Jan 2023 08:50:41 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3573ee52-2f26-4d59-9c6b-3058a2df51d2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9652
x-amzn-requestid: bc619a58-6d22-4bfb-aced-5e7fd4572e20
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: emPNlFmyoAMFVMQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bf2bf0-10dc7a496df5d3971fe29eae;Sampled=0
x-amzn-remapped-date: Wed, 11 Jan 2023 21:36:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: j4siXzGNe7eD-6IQZ1ewJIQJhGPusgnESKx0uV2R4xAJ1WBPYNfuFg==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Wed, 11 Jan 2023 21:54:10 GMT
age: 39391
etag: "90c6426313c98d437ca66e6ba674ba11e419a9d8"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9652
Md5:    e14b05e7ffee91a3d54c4bf971fd19ca
Sha1:   90c6426313c98d437ca66e6ba674ba11e419a9d8
Sha256: 9c7bb1fc835615913bb99f2291759893331529d02577dd8f6d3c7357b9ee704f
                                        
                                            GET /js/site/main.js?buildTime=1666036008 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.scotianmaterials.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         151.101.1.46
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
last-modified: Fri, 16 Dec 2022 19:54:38 GMT
etag: "639cccfe-74804"
expires: Sat, 31 Dec 2022 00:55:12 GMT
cache-control: max-age=1209600
x-host: grn4.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 12 Jan 2023 08:50:40 GMT
age: 1065314
x-served-by: cache-sjc10026-SJC, cache-bma1670-BMA
x-cache: HIT, HIT
x-cache-hits: 3687, 1
x-timer: S1673513441.964821,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 146400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   11115
Md5:    8356e95181dbd657fa14e3c502704f30
Sha1:   cf052aee06d74da968cd2c7bad46fef32b5f8456
Sha256: bfb897dbf5136c95862408dd3051172f3a1ff8ffa07b299b62c733786087526b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd511e402-775e-49af-87f1-40b071ae947e.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9413
x-amzn-requestid: fb0125f5-e899-463d-ae4a-0a92945c1731
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: emPDYFKgIAMF7mQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bf2baf-080b963d391741252d9f67ee;Sampled=0
x-amzn-remapped-date: Wed, 11 Jan 2023 21:35:43 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: -bYZilXGEW2PNyCeUAopo5yCLFhnLbyz2d7dxQyVZK3xI2xyFKQGcw==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Wed, 11 Jan 2023 21:58:00 GMT
age: 39161
etag: "a45408076bf9fa5c6ec83c96a4c5680dc7be7da9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9413
Md5:    cbf9979c9463fc2681e757256e9d028c
Sha1:   a45408076bf9fa5c6ec83c96a4c5680dc7be7da9
Sha256: 1d0d45cbbba75f0add27aae361e0dc31ce6e317ec62b23acf10db34b47f125e5
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52f112f6-2553-4ba2-971f-71e30bee1d9c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10579
x-amzn-requestid: 8760acae-f770-45e2-9639-53967ef1cdb2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: emPDWET4oAMFo-w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bf2bae-153ebb3e4ec7d5045529ce0a;Sampled=0
x-amzn-remapped-date: Wed, 11 Jan 2023 21:35:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FC9xd9brDeAOtHjXnkpSO0IOX1rLjGRVkuBguuwJ2xFDTq0x9-QtaQ==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 11 Jan 2023 21:55:02 GMT
age: 39339
etag: "a881a7d88f08035b9e045f2bf73a4d9fabc640a0"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10579
Md5:    fb89a11a1dca9a2924adf7e3712c6405
Sha1:   a881a7d88f08035b9e045f2bf73a4d9fabc640a0
Sha256: 8a0c9f295dd30123847eaed0ba8d4e7c2c6dea8b9c645fc70cdcb4fa8c082ee4
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd60a3a13-835c-4663-a77b-e6f12db97608.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4118
x-amzn-requestid: b5d86a67-dd01-4446-83f9-395efc85f56f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: egZ9qEbQoAMFrVQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bcd6bd-657c4b995ea0618a3a92665e;Sampled=0
x-amzn-remapped-date: Tue, 10 Jan 2023 03:08:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: S8H0gnX3gmg5_D8JqXtqVgcUYei-VpuQeu0wOSzpOmHd7qM-QC9AQQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 12 Jan 2023 04:07:48 GMT
age: 16973
etag: "5c8d4f2160f9b86072b2e2d91fa4b65dc1384493"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4118
Md5:    49f4a4b1cbd9ec8af7c5e15d7c29c54b
Sha1:   5c8d4f2160f9b86072b2e2d91fa4b65dc1384493
Sha256: a6aa855159b3988d9155a0ea5b387a504c0fc2180486ce967308522e0b7bf118
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0fbbc90d-c4c5-45db-ac55-16077e5b0d1d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8689
x-amzn-requestid: c88866a0-e22b-4f8c-b423-1d970ebde318
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: egZ9sHuuoAMFzvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bcd6bd-063dab1f2c6aaab03e5fdb9a;Sampled=0
x-amzn-remapped-date: Tue, 10 Jan 2023 03:08:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: R_7dfck1JpoBljLhEqdVOXQQxz4HERkMcGbN0-V0Q3hqNdNA9-_jrA==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 12 Jan 2023 03:29:07 GMT
age: 19294
etag: "bb41e2958d267cc2d5b24457a6048f484c8cd429"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8689
Md5:    94f1c1490ac711097f5eef5e6adab49d
Sha1:   bb41e2958d267cc2d5b24457a6048f484c8cd429
Sha256: 94f854077e6008b97f63419a283f70327ebc8a05794a9dd9fa0518f0f5b00e14
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Jan 2023 08:50:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /recaptcha/api.js?_=1673513426813 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.scotianmaterials.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.228
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
expires: Thu, 12 Jan 2023 08:50:41 GMT
date: Thu, 12 Jan 2023 08:50:41 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 552
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (850), with no line terminators
Size:   552
Md5:    760f8751978f13903fbb5b593bea05c7
Sha1:   3c463f9d47be6cafa5acd0c828a42054054debd3
Sha256: ba7b03872b122ab1d52e67ee1d6ad77d7749c5504b0c733bd90392d16c509410
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Jan 2023 08:50:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /uploads/6/7/5/2/67529773/1449264522.png HTTP/1.1 
Host: www.scotianmaterials.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.scotianmaterials.info/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         199.34.228.55
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Thu, 12 Jan 2023 08:50:41 GMT
Content-Length: 20587
Connection: keep-alive
Last-Modified: Mon, 08 Oct 2018 18:30:51 GMT
x-rgw-object-type: Normal
ETag: "62d3b5ad4260c6ab7d0c8ae756b71b46"
x-amz-request-id: tx00000000000005d0265af-0063bfc9e1-c669cc6-sfo1
X-Storage-Bucket: z984c
X-Storage-Object: 984c640495cda05b211a495dea4092959c0a05fefc0d2de94c796701ee2eea1b
X-Host: blu40.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 339 x 101, 8-bit/color RGBA, non-interlaced\012- data
Size:   20587
Md5:    62d3b5ad4260c6ab7d0c8ae756b71b46
Sha1:   234e869a641b93241d022f5b48de24883d36f5f2
Sha256: 984c640495cda05b211a495dea4092959c0a05fefc0d2de94c796701ee2eea1b
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Jan 2023 08:50:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Jan 2023 08:50:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.scotianmaterials.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.14
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Thu, 12 Jan 2023 08:21:54 GMT
expires: Thu, 12 Jan 2023 10:21:54 GMT
cache-control: public, max-age=7200
age: 1728
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20039
Md5:    47e6f374ca946fddd5b59871b325736c
Sha1:   baa9282efc8785e84d247c3bff518eaa45f101c4
Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Jan 2023 08:50:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ga.js HTTP/1.1 
Host: ssl.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.scotianmaterials.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.40
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 17168
date: Thu, 12 Jan 2023 07:33:16 GMT
expires: Thu, 12 Jan 2023 09:33:16 GMT
cache-control: public, max-age=7200
age: 4646
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1305)
Size:   17168
Md5:    01d5892e6e243b52998310c2925b9f3a
Sha1:   58180151b6a6ee4af73583a214b68efb9e8844d4
Sha256: 7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
                                        
                                            GET /recaptcha/releases/5qcenVbrhOy8zihcc2aHOWD4/recaptcha__en.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.scotianmaterials.info
Connection: keep-alive
Referer: https://www.scotianmaterials.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.35
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 164706
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 12 Jan 2023 06:01:23 GMT
expires: Fri, 12 Jan 2024 06:01:23 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 15 Dec 2022 05:24:10 GMT
age: 10159
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (658)
Size:   164706
Md5:    0b7fccb24ee065a01fdde10928c03c3f
Sha1:   9b198014f81844820588c202cc24bf5e03bf3dd7
Sha256: 68756de8f0d6742525ddaca56ab350e34d822777e86939fea27eb704ae013280
                                        
                                            POST /j/collect?v=1&_v=j98&a=717229922&t=pageview&_s=1&dl=https%3A%2F%2Fwww.scotianmaterials.info%2F&ul=en-us&de=UTF-8&dt=Scotian%20Materials%20Goffs%20Quarry%20Information%20Site%20-%20Home&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=620158230&gjid=712574073&cid=1112246114.1673513427&tid=UA-74593255-2&_gid=1879425645.1673513427&_r=1&_slc=1&z=1053586694 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.scotianmaterials.info
Connection: keep-alive
Referer: https://www.scotianmaterials.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.14
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: https://www.scotianmaterials.info
date: Thu, 12 Jan 2023 08:50:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    38684612f0c6bb6dfa16da92f4a6878f
Sha1:   6fe62d0dd7db314b7f9bb945672f078e01d27f0f
Sha256: a048e640908046be06e00eab37742b5d5ff80964af58cfd22f7cb2de4dfe375f
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Jan 2023 08:50:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Jan 2023 08:50:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.118
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 12 Jan 2023 08:50:42 GMT
Last-Modified: Thu, 12 Jan 2023 07:18:41 GMT
Server: ECS (nyb/1D2E)
X-Cache: Miss from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: h7Fqr8s91n0kPmCEVv2Ic_VOFh30dZwOw4Mn1q1omiwREmgEhIHOKw==
Age: 5525

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.118
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 12 Jan 2023 08:50:42 GMT
Etag: "63bef528-1d7"
Last-Modified: Thu, 12 Jan 2023 07:29:50 GMT
Server: ECS (dcb/7F17)
X-Cache: Miss from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: SRH3uib6_ovQR8SzsZDEhLiVMq1vSexAulRCDqp8uog7TthfCUWrWg==
Age: 4852

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.scotianmaterials.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.scotianmaterials.info/
Cookie: is_mobile=0; language=en; _snow_ses.6c69=*; _snow_id.6c69=10ec2cda-3cba-4f1c-b743-75d0dcc15da7.1673513427.1.1673513427.1673513427.65ea3a0a-149d-4174-8564-06633062bf59
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         199.34.228.55
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Server: nginx
Date: Thu, 12 Jan 2023 08:50:42 GMT
Content-Length: 1150
Connection: keep-alive
Last-Modified: Mon, 08 Oct 2018 18:30:58 GMT
x-rgw-object-type: Normal
ETag: "6fd88fb17c98f6f18c3971e5128b0131"
x-amz-request-id: tx00000000000005d3a78f9-0063bfc9e2-c695612-sfo1
X-Storage-Bucket: z5218
X-Storage-Object: 5218414b189e8599a50329067a8592653d2e3c5074f3ce1622eb045700ca5df5
X-Host: blu61.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size:   1150
Md5:    6fd88fb17c98f6f18c3971e5128b0131
Sha1:   10f9b05aca2afa606bee8de5a73aac3cc1226044
Sha256: 5218414b189e8599a50329067a8592653d2e3c5074f3ce1622eb045700ca5df5
                                        
                                            POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 
Host: www.scotianmaterials.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 83
Origin: https://www.scotianmaterials.info
Connection: keep-alive
Referer: https://www.scotianmaterials.info/
Cookie: is_mobile=0; language=en; _snow_ses.6c69=*; _snow_id.6c69=10ec2cda-3cba-4f1c-b743-75d0dcc15da7.1673513427.1.1673513427.1673513427.65ea3a0a-149d-4174-8564-06633062bf59
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

search
                                         199.34.228.55
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Date: Thu, 12 Jan 2023 08:50:42 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: grn34.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 348
Keep-Alive: timeout=10, max=69
Connection: Keep-Alive


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (348), with no line terminators
Size:   348
Md5:    a944dd688c99d2901d6719be713271c0
Sha1:   4f5454d5d434829baf46671638610791758725d9
Sha256: adb97e1bc686c58b4286f1208d2bd969687c6cf3e2fc468697dfd956d260de49

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST /ajax/api/JsonRPC/Membership/?Membership[Member::get_session_details] HTTP/1.1 
Host: www.scotianmaterials.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 75
Origin: https://www.scotianmaterials.info
Connection: keep-alive
Referer: https://www.scotianmaterials.info/
Cookie: is_mobile=0; language=en; _snow_ses.6c69=*; _snow_id.6c69=10ec2cda-3cba-4f1c-b743-75d0dcc15da7.1673513427.1.1673513427.1673513427.65ea3a0a-149d-4174-8564-06633062bf59
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

search
                                         199.34.228.55
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Date: Thu, 12 Jan 2023 08:50:42 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
Set-Cookie: site_session=63bfc9e2455f90.07328751; path=/ language=en; expires=Thu, 26-Jan-2023 08:50:42 GMT; Max-Age=1209600; path=/
X-Host: blu33.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 273
Keep-Alive: timeout=10, max=62
Connection: Keep-Alive


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   273
Md5:    69c48c131090672c9fdb1b3ea1c01747
Sha1:   b520e234cb4461fecd30904463317ee7e068ca71
Sha256: a0a751dc186b87e0ac99b0dff9281a4ec2bb8f6f8bd70dc561f779ac6c137b94

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 
Host: ec.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.scotianmaterials.info/
Origin: https://www.scotianmaterials.info
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         44.241.20.95
HTTP/2 200 OK
                                        
date: Thu, 12 Jan 2023 08:50:42 GMT
content-length: 0
server: nginx
access-control-allow-origin: https://www.scotianmaterials.info
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, SP-Anonymous
access-control-max-age: 600
X-Firefox-Spdy: h2

                                        
                                            POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 
Host: ec.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 1795
Origin: https://www.scotianmaterials.info
Connection: keep-alive
Referer: https://www.scotianmaterials.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         44.241.20.95
HTTP/2 200 OK
content-type: text/plain; charset=UTF-8
                                        
date: Thu, 12 Jan 2023 08:50:42 GMT
content-length: 2
server: nginx
set-cookie: sp=34c2aa32-7e54-4cc6-875d-7cdb6fd1ea9c; Expires=Fri, 12 Jan 2024 08:50:42 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://www.scotianmaterials.info
access-control-allow-credentials: true
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    444bcb3a3fcf8389296c49467f27e1d6
Sha1:   7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
Sha256: 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
                                        
                                            GET /uploads/6/7/5/2/67529773/background-images/1816354034.png HTTP/1.1 
Host: www.scotianmaterials.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.scotianmaterials.info/
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         199.34.228.55
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Thu, 12 Jan 2023 08:50:41 GMT
Content-Length: 807012
Connection: keep-alive
Last-Modified: Mon, 08 Oct 2018 18:31:30 GMT
x-rgw-object-type: Normal
ETag: "04814de3b40cc59f0cec6a3c625542df"
x-amz-request-id: tx000000000000058a2c4cc-0063ba9679-c6aed46-sfo1
X-Storage-Bucket: z1a8b
X-Storage-Object: 1a8b92f86612239266bc0a6499f108538722b35e938e059287b558a88725fcd7
X-Host: blu40.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 1220 x 333, 8-bit/color RGB, non-interlaced\012- data
Size:   807012
Md5:    04814de3b40cc59f0cec6a3c625542df
Sha1:   f57a0ad4af17babca50e7d6591ef344dbc688297
Sha256: 1a8b92f86612239266bc0a6499f108538722b35e938e059287b558a88725fcd7