r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d4e95d0d8982bcd07804baf6fc88231c
5027abda0875bd2529dd4d6691784c74da71a9ee
373799b5749d2cb08b5721699a3e4c6b94b0d41604ac07d4ef7179e47dabc71f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "373799B5749D2CB08B5721699A3E4C6B94B0D41604AC07D4EF7179E47DABC71F"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19757
Expires: Thu, 02 Feb 2023 10:34:54 GMT
Date: Thu, 02 Feb 2023 05:05:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 62de35a6c8e4efd7633fc5236b5b086f
6a92912a86dfcd0330d040cef06bef36889c76ab
ebb8ca05df5ba73b92174105d54d192a8d9e3e10fba48bf96161b0cb759220ec
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EBB8CA05DF5BA73B92174105D54D192A8D9E3E10FBA48BF96161B0CB759220EC"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20406
Expires: Thu, 02 Feb 2023 10:45:43 GMT
Date: Thu, 02 Feb 2023 05:05:37 GMT
Connection: keep-alive
pepaperea.com/
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 02 Feb 2023 05:05:37 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
X-Redirect-By: WordPress
Location: https://pepaperea.com/
X-Powered-By: PHP/7.3.33, PleskLin
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 02 Feb 2023 04:43:28 GMT
content-type: application/json
age: 1329
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8d45deaa7ebfcd996c2055dae592ab8
55befe074589fe7b39757c145968058162a8fc6b
50d7d516f446458145a304b288a0a39d391cd37ea50dabea36ae48d291c65ba7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "50D7D516F446458145A304B288A0A39D391CD37EA50DABEA36AE48D291C65BA7"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14269
Expires: Thu, 02 Feb 2023 09:03:26 GMT
Date: Thu, 02 Feb 2023 05:05:37 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: VVsiu+1EktKGRMKF4ge1Ywknd0AHwPJk6dWkK9dxACK6pKsRPCg5sVcqknyXUwNrbFM72dmoBDI=
x-amz-request-id: R6BTGFK5J9GAB84T
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 02 Feb 2023 04:22:56 GMT
age: 2561
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:37 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d247049a38a549d2294b9f954794d808
26efff38f82f7a4db82101b10fb7eb22c6c49c54
48964369c951634596419f8fb70e02de0a8d2634aae155e27afe888dcfec26a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48964369C951634596419F8FB70E02DE0A8D2634AAE155E27AFE888DCFEC26A9"
Last-Modified: Thu, 02 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21531
Expires: Thu, 02 Feb 2023 11:04:28 GMT
Date: Thu, 02 Feb 2023 05:05:37 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Content-Type, ETag, Last-Modified, Alert, Retry-After, Content-Length, Cache-Control, Pragma, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 02 Feb 2023 04:49:05 GMT
age: 992
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8913af0be619500295008bb91f506660
a7b8068ba9aa506205a295b24458c2616997a0d1
6a9838d00256431807ca382fc205064b07c08d5054f2895c2ae3cc4e9094179a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19629
Expires: Thu, 02 Feb 2023 10:32:47 GMT
Date: Thu, 02 Feb 2023 05:05:38 GMT
Connection: keep-alive
pepaperea.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
200 OK 12 kB URL HTTP/2 pepaperea.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
IP
File type ASCII text, with very long lines (47826)
Hash 6b4c7c02f80e28369c31b87c852d5266
d485ff7da994b5431cdb7c00aeaed6b811a19d89
105dcb5b62228656916181d7eab1be1eede5cd90b9685e47020129183ce4dced
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: text/css
last-modified: Mon, 16 Jan 2023 14:44:50 GMT
vary: Accept-Encoding
etag: W/"63c562e2-172a9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash de49044c9365e16fec3a6d361cb94728
2b7b69c16de6fda1ae5206f92fe781ee07bd182a
6e76887b036544a5da3918116a180876c094cc3b31676abce8d5b7b716b00c30
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 05:05:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pepaperea.com/wp-content/uploads/redux/custom-fonts/fonts.css?ver=1675314337
200 OK 0 B URL HTTP/2 pepaperea.com/wp-content/uploads/redux/custom-fonts/fonts.css?ver=1675314337
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/redux/custom-fonts/fonts.css?ver=1675314337 HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: text/css
content-length: 0
last-modified: Mon, 23 Jan 2023 09:42:36 GMT
etag: "63ce568c-0"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash de49044c9365e16fec3a6d361cb94728
2b7b69c16de6fda1ae5206f92fe781ee07bd182a
6e76887b036544a5da3918116a180876c094cc3b31676abce8d5b7b716b00c30
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 05:05:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pepaperea.com/wp-content/uploads/2017/02/pepa-perea-logo-300x151.png
200 OK 8.9 kB URL HTTP/2 pepaperea.com/wp-content/uploads/2017/02/pepa-perea-logo-300x151.png
IP
File type PNG image data, 300 x 151, 8-bit/color RGBA, non-interlaced\012- data
Hash 25bb23c7ff4987c4002bdf7c48d272ba
f2f495b6b267b03d59d4347dcdc7d25664059c09
467eda21e226a05b300fb0962cec06fa0d665f13b7a3c17a6093fd2f7ce400b7
GET /wp-content/uploads/2017/02/pepa-perea-logo-300x151.png HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: image/png
content-length: 8863
last-modified: Tue, 21 Feb 2017 17:49:31 GMT
etag: "58ac7dab-229f"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
pepaperea.com/wp-content/uploads/2017/02/logo-white-PP-home.png
200 OK 18 kB URL HTTP/2 pepaperea.com/wp-content/uploads/2017/02/logo-white-PP-home.png
IP
File type PNG image data, 650 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash a460e950248ec5a376d8c84fe35e0e02
16e9b61096f41fc72321f5f8a235b685661a6d19
db7d898e8cb61a27fd270de68b61240ef5c0bfbe713287e493f3c13abb982828
GET /wp-content/uploads/2017/02/logo-white-PP-home.png HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: image/png
content-length: 18041
last-modified: Wed, 15 Feb 2017 12:31:58 GMT
etag: "58a44a3e-4679"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
pepaperea.com/wp-content/plugins/revslider/public/assets/assets/dummy.png
200 OK 68 B URL HTTP/2 pepaperea.com/wp-content/plugins/revslider/public/assets/assets/dummy.png
IP
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 2a637d3d825673c0e3462fa4ed9a1c5c
81668d396da22832d75a986407ff10035e0d5899
69539b5b3777cffda28a66d7f2aa9b17c91ee1ec8fd50c00c442af91753a60f7
GET /wp-content/plugins/revslider/public/assets/assets/dummy.png HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: image/png
content-length: 68
last-modified: Sun, 29 Jan 2023 13:42:26 GMT
etag: "63d677c2-44"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: dyuKr6nIbNp2KzD47/Y8yg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: gxoKBDDtvHvYGQVnGyVkr5k6zBA=
pepaperea.com/wp-content/themes/fatmoon/js/plugins.js?ver=1.1.7
200 OK 16 kB URL HTTP/2 pepaperea.com/wp-content/themes/fatmoon/js/plugins.js?ver=1.1.7
IP
File type Unicode text, UTF-8 text, with very long lines (11460)
Hash d20af22815c983dc179665ca17cb0885
88cca95121fa78def836d675f92cabd944a8dfae
5888603c40a49a6e78106632576457903468d7234313bd540491eec7704f69c6
GET /wp-content/themes/fatmoon/js/plugins.js?ver=1.1.7 HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: application/javascript
last-modified: Tue, 03 Jan 2017 15:30:26 GMT
vary: Accept-Encoding
etag: W/"586bc392-9115"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
pepaperea.com/wp-content/themes/fatmoon/js/light-gallery/js/lightgallery-all.min.js?ver=1.3.7
200 OK 88 kB URL HTTP/2 pepaperea.com/wp-content/themes/fatmoon/js/light-gallery/js/lightgallery-all.min.js?ver=1.3.7
IP
File type ASCII text, with very long lines (17686)
Hash 02f695ed164b80a50e6cad419756c276
283c7ac43684d1cd5633b55487cb075f06c68360
3bc71f0cb3c453ca399cc3c853b723067a010a39e075b19832ef5fc79a734da2
GET /wp-content/themes/fatmoon/js/light-gallery/js/lightgallery-all.min.js?ver=1.3.7 HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: application/javascript
last-modified: Wed, 21 Dec 2016 12:49:22 GMT
vary: Accept-Encoding
etag: W/"585a7a52-c1b3"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
pepaperea.com/wp-content/themes/fatmoon/js/jquery.countdown.min.js?ver=1.0
200 OK 12 kB URL HTTP/2 pepaperea.com/wp-content/themes/fatmoon/js/jquery.countdown.min.js?ver=1.0
IP
File type ASCII text, with very long lines (3854)
Hash 15972cb7161e71df10eea0f6c27de20e
0e3183f57560ef759dfe3938434270044ee41460
46c8ca9014d07553419c8c1517fabe848877cbe6343bc8970db363ee292d9516
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/fatmoon/js/jquery.countdown.min.js?ver=1.0 HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: application/javascript
last-modified: Thu, 18 Feb 2016 10:14:14 GMT
vary: Accept-Encoding
etag: W/"56c59976-81ce"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
pepaperea.com/wp-content/themes/fatmoon/js/jquery.mCustomScrollbar.min.js?ver=3.1.5
200 OK 12 kB URL HTTP/2 pepaperea.com/wp-content/themes/fatmoon/js/jquery.mCustomScrollbar.min.js?ver=3.1.5
IP
File type ASCII text, with very long lines (32001)
Hash 650a9efb41f438d34186908ac32115b4
25f12682e80443a6ed291a1bdf9f48172fad54c4
d07bee8bb2084776dfc0b7f157940ff30f81e45af0735a908af67ed489d9bc47
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/fatmoon/js/jquery.mCustomScrollbar.min.js?ver=3.1.5 HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: application/javascript
last-modified: Mon, 14 Nov 2016 14:00:36 GMT
vary: Accept-Encoding
etag: W/"5829c384-9cf3"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
pepaperea.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.3
200 OK 20 kB URL HTTP/2 pepaperea.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.3
IP
File type HTML document, ASCII text, with very long lines (12761), with no line terminators
Hash d93cfc1f6d34d8379f1e15668a3b40d4
4002a0195ed900bbf17106b0ff6eedc12b34dda6
da9f3142fb0c8c7bc7a20e4aba1464cf1ee88e55aa93c93db62a7d9e3c6cf34e
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.3 HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: application/javascript
last-modified: Sun, 29 Jan 2023 13:42:23 GMT
vary: Accept-Encoding
etag: W/"63d677bf-31d9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
pepaperea.com/wp-content/themes/fatmoon/js/light-gallery/css/lightgallery.css?ver=1.3.7
200 OK 4.3 kB URL HTTP/2 pepaperea.com/wp-content/themes/fatmoon/js/light-gallery/css/lightgallery.css?ver=1.3.7
IP
Hash 6b512fdeb28b1e54257f297adef44a19
f3c43204fc43e66d862ba762bbec6599e5ceb714
03f05e076e439b747ea67b24a8ca62a279b64cf9bf2b6c9c50bec3fc3ef6e96f
GET /wp-content/themes/fatmoon/js/light-gallery/css/lightgallery.css?ver=1.3.7 HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: text/css
last-modified: Wed, 21 Dec 2016 12:52:36 GMT
vary: Accept-Encoding
etag: W/"585a7b14-6058"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
pepaperea.com/wp-content/themes/fatmoon/js/TweenMax.min.js?ver=1.16.1
200 OK 36 kB URL HTTP/2 pepaperea.com/wp-content/themes/fatmoon/js/TweenMax.min.js?ver=1.16.1
IP
File type ASCII text, with very long lines (32066)
Hash c336c4a5307e2fcc3411db7f65f8ddd2
f62d767b05cd98325300661f508ba0a462a14c8d
d668fea21876dee3c0b03c72b066ad96e9625b77769d1fbc0448b1b3476a3545
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/fatmoon/js/TweenMax.min.js?ver=1.16.1 HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: application/javascript
last-modified: Wed, 06 Jul 2016 11:47:32 GMT
vary: Accept-Encoding
etag: W/"577cefd4-1b29a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
pepaperea.com/wp-content/themes/fatmoon/js/isotope.pkgd.min.js?ver=3.0.1
200 OK 60 kB URL HTTP/2 pepaperea.com/wp-content/themes/fatmoon/js/isotope.pkgd.min.js?ver=3.0.1
IP
File type ASCII text, with very long lines (32010)
Hash e4aa776e1e9ddc214ba0d1a780d22041
b9e341f56876aaba5a7a026ed16f220f9f1602a3
abf3f5c8e954f3634f079eae520e861baf919b48c374df435c84c715f91c7daa
GET /wp-content/themes/fatmoon/js/isotope.pkgd.min.js?ver=3.0.1 HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: application/javascript
last-modified: Fri, 01 Jul 2016 09:15:10 GMT
vary: Accept-Encoding
etag: W/"5776349e-d1dd"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
pepaperea.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=5.0.1
200 OK 21 kB URL HTTP/2 pepaperea.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=5.0.1
IP
File type ASCII text, with very long lines (19302), with no line terminators
Hash cf658a992097d79e39ec3d3575d9e60d
958efa47317134e78bee969cc250ad754ee54520
f0527c6c5d191d2585206844d083ad7a56950afb8090549ca3833c1aab637c3c
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=5.0.1 HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: application/javascript
last-modified: Fri, 17 Feb 2017 11:18:33 GMT
vary: Accept-Encoding
etag: W/"58a6dc09-4b66"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 42d54c8c12a2f90c448a11bf42800e86
bb66d35435411c825bfcd0a091f33b7d1708191e
3b67d91fbb38e5c47b6ebff53da366b87af3a308e5c588775ac66a808761dbb1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 05:05:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 278 B IP
Hash 1fd5a57e1ade9b56d75002bfeef02984
5282903b1536bab437d742fb88c019b7a0c7391d
40ba148ffb976ca66d9c0e08fdbdbf3f427a872a46c381dbd07ac6db28685b4d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3256
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 05:05:38 GMT
Last-Modified: Thu, 02 Feb 2023 04:11:22 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 278
pepaperea.com/wp-content/uploads/2016/03/cropped-logo01-cuadrado-192x192.jpg
200 OK 4.6 kB URL HTTP/2 pepaperea.com/wp-content/uploads/2016/03/cropped-logo01-cuadrado-192x192.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 192x192, components 3\012- data
Hash 8da1be25d427d6e16b830f1a7cc15dd3
089b04e00aecd25cf7d3d4c95ab12c7f53fc0959
9d5b9a2cbe63f695dde9e2af2adfa0a6b0c5275cc9011844dff5c46849bce35a
GET /wp-content/uploads/2016/03/cropped-logo01-cuadrado-192x192.jpg HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: image/jpeg
content-length: 4634
last-modified: Wed, 17 Oct 2018 16:43:29 GMT
etag: "5bc766b1-121a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
pepaperea.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
200 OK 11 kB URL HTTP/2 pepaperea.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
IP
File type ASCII text, with very long lines (15660)
Hash 8536b4719d16f5d8f2fe4d3eb6d80f08
467158fcd61045bf62fc8ebd3392e657690ec4ef
bccda02dcfc3b384938abcd1627ec440ca3eb4d7510bf36f4578c21c027cbfc0
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: application/javascript
last-modified: Mon, 16 Jan 2023 14:44:50 GMT
vary: Accept-Encoding
etag: W/"63c562e2-48b9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
pepaperea.com/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=5.0.1
200 OK 40 kB URL HTTP/2 pepaperea.com/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=5.0.1
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 72f46057414655d97e5b589085208c3f
10762064e3edcc620dff4c63d6462b08475c9ead
f5b05afd7c2729bfc8388ea19790d39d434ab7fac76852b7e379bd4814fa1f72
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=5.0.1 HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: text/css
last-modified: Fri, 17 Feb 2017 11:18:29 GMT
vary: Accept-Encoding
etag: W/"58a6dc05-700bd"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
pepaperea.com/wp-content/plugins/revslider/public/assets/assets/transparent.png
200 OK 122 B URL HTTP/2 pepaperea.com/wp-content/plugins/revslider/public/assets/assets/transparent.png
IP
File type PNG image data, 300 x 200, 1-bit grayscale, non-interlaced\012- data
Hash 86c58b484b48eac285e131e8b55d2ce7
3d3ee4c137a6f36e5fbee31e21a4d08f2c38d20e
9603ffeb6772f1cf745e0097d5d6c046eaf16151e5bc521f20764bba5ddb7713
GET /wp-content/plugins/revslider/public/assets/assets/transparent.png HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: image/png
content-length: 122
last-modified: Sun, 29 Jan 2023 13:42:26 GMT
etag: "63d677c2-7a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
pepaperea.com/wp-content/uploads/2016/04/Captura-de-pantalla-2016-11-10-a-las-20.53.451-1024x640-e1487702901449.png
200 OK 629 kB URL HTTP/2 pepaperea.com/wp-content/uploads/2016/04/Captura-de-pantalla-2016-11-10-a-las-20.53.451-1024x640-e1487702901449.png
IP
File type PNG image data, 1021 x 573, 8-bit/color RGBA, non-interlaced\012- data
Size 629 kB (628824 bytes)
Hash 9af480dc218c9ecfbb2937b44b95c311
a3625a0672daccae8da2216dc93394c5bdc682ee
822aa09f8df0e185fc876b9186b29b98d0e6e7e869b59e713d1faee3c35e515b
GET /wp-content/uploads/2016/04/Captura-de-pantalla-2016-11-10-a-las-20.53.451-1024x640-e1487702901449.png HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: image/png
content-length: 628824
last-modified: Tue, 21 Feb 2017 18:48:22 GMT
etag: "58ac8b76-99858"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
pepaperea.com/wp-content/uploads/2023/01/pepaperea01.jpg
200 OK 80 kB URL HTTP/2 pepaperea.com/wp-content/uploads/2023/01/pepaperea01.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data
Hash 900df3999ae0c39b36619c02562572e3
451f53371491f527dff27ec4ab06603b27b942e3
2fb835502a4adc19700f99db5a6edfa306f6c002e99008d45feb92383f4f187b
GET /wp-content/uploads/2023/01/pepaperea01.jpg HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: image/jpeg
content-length: 79615
last-modified: Tue, 17 Jan 2023 15:24:01 GMT
etag: "63c6bd91-136ff"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
pepaperea.com/wp-content/uploads/2017/03/Captura-de-pantalla-138.png
200 OK 1.8 MB URL HTTP/2 pepaperea.com/wp-content/uploads/2017/03/Captura-de-pantalla-138.png
IP
File type PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Size 1.8 MB (1814110 bytes)
Hash de1a443075b49d029b1486c67a7a6999
23c903ed28fca3193ec7b7afb433695b963fc6f5
4b48dbe4def4c65f7e7f571fe8c0e8e258f592c5032a4ad467d25e27d87b64ac
GET /wp-content/uploads/2017/03/Captura-de-pantalla-138.png HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: image/png
content-length: 1814110
last-modified: Thu, 02 Mar 2017 09:41:21 GMT
etag: "58b7e8c1-1bae5e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
pepaperea.com/wp-content/uploads/2017/02/Captura-de-pantalla-2015-12-01-a-las-14.35.25-1024x602-1-e1488192553496.png
200 OK 540 kB URL HTTP/2 pepaperea.com/wp-content/uploads/2017/02/Captura-de-pantalla-2015-12-01-a-las-14.35.25-1024x602-1-e1488192553496.png
IP
File type PNG image data, 1024 x 514, 8-bit/color RGBA, non-interlaced\012- data
Size 540 kB (539556 bytes)
Hash 7ae03d0c3d860268c89bfb568adf5d29
e4a2b2467ba8e73aca4e2f773f592ab45033d955
447f6629303a1d8cab32124892ecbf48433b39d4d98734b4d10210fb902c8ec5
GET /wp-content/uploads/2017/02/Captura-de-pantalla-2015-12-01-a-las-14.35.25-1024x602-1-e1488192553496.png HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: image/png
content-length: 539556
last-modified: Mon, 27 Feb 2017 10:49:14 GMT
etag: "58b4042a-83ba4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
player.vimeo.com/video/789739332?autoplay=1&title=0&byline=0&portrait=0&background=1&player_id=iframe10072
200 OK 5.5 kB URL HTTP/1.1 player.vimeo.com/video/789739332?autoplay=1&title=0&byline=0&portrait=0&background=1&player_id=iframe10072
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (16553), with no line terminators
Hash 676780736edd3e6c69f7959ae6cee095
01be95ce0200b4624db6c840d4aa44592a00f922
5198bee336f2d1f53b9e5103864b90115dc0bf302e32a1fe9da960c7c5fb69c2
GET /video/789739332?autoplay=1&title=0&byline=0&portrait=0&background=1&player_id=iframe10072 HTTP/1.1
Host: player.vimeo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 05:05:39 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
x-xss-protection: 1; mode=block
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: resource: https://f.vimeocdn.com https://vimeo.com https://js-agent.newrelic.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://bam.nr-data.net https://src.litix.io https://www.gstatic.com https://cdn.streamroot.io https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.tv https://f.vimeocdn.com; style-src 'self' 'unsafe-inline' https://f.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://f.vimeocdn.com; connect-src 'self' ws: wss: https://vimeo.com https://vimeo.dev https://api.vimeo.com https://api.vimeo.dev https://*.ci.vimeows.com https://csi.gstatic.com https://fresnel-player-staging.vimeows.com https://fresnel-event-staging.vimeows.com https://player-telemetry.vimeo.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://netflux.cloud.vimeo.com https://lic.staging.drmtoday.com https://lic.drmtoday.com https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://storage.googleapis.com https://bam.nr-data.net https://live-api.cloud.vimeo.com https://live-api-dev.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.dna-delivery.com https://*.kollective.app/ https://mimir.cloud.vimeo.com https://*.wirewax.com https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com https://live-api-dev.cloud.vimeo.com https://devcaptions.cloud.vimeo.com/; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; default-src 'none'; font-src https://edge-assets.wirewax.com https://player.vimeo.com https://fonts.gstatic.com; img-src 'self' data: https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://player.vimeo.com https://*.ci.vimeows.com https://videoapi-sprites.vimeocdn.com https://i.vimeocdn.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://edge-assets.wirewax.com https://maps.googleapis.com https://f.vimeocdn.com; frame-src 'self' https://*
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
link: <https://i.vimeocdn.com>; rel=preconnect; crossorigin, <https://f.vimeocdn.com>; rel=preconnect; crossorigin, <https://fresnel.vimeocdn.com>; rel=preconnect; crossorigin
p3p: CP="This is not a P3P policy! See https://vimeo.com/privacy"
expires: Thu, 02 Feb 2023 05:15:39 GMT
x-host: player-6b7bc96c5-t9nf2
via: 1.1 varnish, 1.1 varnish
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
x-varnish-cache: 0
x-vserver: playproxy-rollout-prod-varnish-4
x-backend-proxy: playproxy5
x-bapp-server: player-6b7bc96c5-t9nf2
Age: 0
X-Served-By: cache-cph2320048-CPH
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1675314339.793859,VS0,VE320
Vary: Accept-Encoding
X-Player-Backend: p
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=YBVpK2aaeLCTZtuGTtDIv4CIJI.Qo8twNnMTrZ1ypok-1675314339-0-AdoAkz3gAz350yBgxdu9NOc4X/pvtYDq/A0nrUQYQvc4HEN1IYzQii65Kc1EhYnvhsNVGmMt1+i3GaQcIxEcdfQ=; path=/; expires=Thu, 02-Feb-23 05:35:39 GMT; domain=.vimeo.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 793064996894b529-OSL
Content-Encoding: gzip
f.vimeocdn.com/p/4.19.2/css/player.css
200 OK 20 kB URL HTTP/2 f.vimeocdn.com/p/4.19.2/css/player.css
IP
File type ASCII text, with very long lines (65495)
Hash c0026d31413bb2152b7719a0760a9e35
7807e493c951cb8ad095ae2456cde9719470ea44
89344b91b186bccdd3f4a2a9c71702950700b9cfa66aced10935de2ab81b9a67
GET /p/4.19.2/css/player.css HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 02 Feb 2023 05:05:39 GMT
age: 125001
x-served-by: cache-iad-kiad7000158-IAD, cache-bma1641-BMA
x-cache: HIT, HIT
x-cache-hits: 10, 33135
x-timer: S1675314339.218138,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
access-control-allow-origin: *
content-length: 20069
X-Firefox-Spdy: h2
f.vimeocdn.com/p/4.19.2/js/player.module.js
200 OK 118 kB URL HTTP/2 f.vimeocdn.com/p/4.19.2/js/player.module.js
IP
File type Unicode text, UTF-8 text, with very long lines (65445)
Size 118 kB (118106 bytes)
Hash a3997f52d132221645130f34951abf8d
ed1765341e8f05646536584c18d519ee3f455f47
dba3f740169da84d5ad9c5a18d60c16b7b1b5a084ff33abc9abff3758381d54d
GET /p/4.19.2/js/player.module.js HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 02 Feb 2023 05:05:39 GMT
age: 125002
x-served-by: cache-iad-kiad7000084-IAD, cache-bma1677-BMA
x-cache: HIT, HIT
x-cache-hits: 10, 26996
x-timer: S1675314339.263576,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
access-control-allow-origin: *
content-length: 118106
X-Firefox-Spdy: h2
f.vimeocdn.com/p/4.19.2/js/vendor.module.js
200 OK 92 kB URL HTTP/2 f.vimeocdn.com/p/4.19.2/js/vendor.module.js
IP
File type ASCII text, with very long lines (65457)
Hash e19c45e679b1f6522d7fd4e720bbc735
5c3dcd4a1a4509f1c6ae0106da139d3993faeb4c
36921f993763972f5e285ae77f8714d4c84402aed750f2f456ecde98d727c684
GET /p/4.19.2/js/vendor.module.js HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://f.vimeocdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 02 Feb 2023 05:05:39 GMT
age: 125002
x-served-by: cache-iad-kiad7000044-IAD, cache-bma1677-BMA
x-cache: HIT, HIT
x-cache-hits: 20, 32864
x-timer: S1675314339.412224,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
access-control-allow-origin: *
content-length: 92489
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d719402de0cd695e55dab2767247da49
f12f4795987a284820f6785ec16b5032b9861d79
98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5879
Expires: Thu, 02 Feb 2023 06:43:38 GMT
Date: Thu, 02 Feb 2023 05:05:39 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d719402de0cd695e55dab2767247da49
f12f4795987a284820f6785ec16b5032b9861d79
98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5879
Expires: Thu, 02 Feb 2023 06:43:38 GMT
Date: Thu, 02 Feb 2023 05:05:39 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d719402de0cd695e55dab2767247da49
f12f4795987a284820f6785ec16b5032b9861d79
98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5879
Expires: Thu, 02 Feb 2023 06:43:38 GMT
Date: Thu, 02 Feb 2023 05:05:39 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d719402de0cd695e55dab2767247da49
f12f4795987a284820f6785ec16b5032b9861d79
98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5879
Expires: Thu, 02 Feb 2023 06:43:38 GMT
Date: Thu, 02 Feb 2023 05:05:39 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9dac6192-89b0-4161-86a2-38f3998a1bc4.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9dac6192-89b0-4161-86a2-38f3998a1bc4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f1d06527f75868ea84da730b7c8b5660
6c0cb65a477d6bc7d013529411d5735bd39e3d46
2ff4fb12b9ac4dff67bf89cc69f1bfce3ffa738696f904172044a5a537a704c9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9dac6192-89b0-4161-86a2-38f3998a1bc4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6783
x-amzn-requestid: 5ab60169-ec65-483a-828b-3312c74ee4b2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frc5BGjqoAMFV6g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadb6c-73a465244f89adaa27626246;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:36:44 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: S012XKdrl7ID1qnfD-G2fcAxWoseP_mAnaDi12Y-UmdBW8yXgGlpgQ==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 22:18:46 GMT
age: 24413
etag: "6c0cb65a477d6bc7d013529411d5735bd39e3d46"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3825d7eb-9bf8-4ff1-ac96-196cbf5c1873.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3825d7eb-9bf8-4ff1-ac96-196cbf5c1873.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 93ef9da6520124f03883a2b5241e0623
41b557bb05e1769c124aa0195c398e2dbd1fc0e9
dd6a1589ae40fb69c60f1675ea49a6a1a00d43e29d1a18f0d30b7c4e9bceee5c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3825d7eb-9bf8-4ff1-ac96-196cbf5c1873.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11198
x-amzn-requestid: f21313a6-3ca8-4c58-981c-a1700769719c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frdKUGu6IAMFsww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadbdb-1d60cc337f91692e436f2990;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:38:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: E6YLzYtdv40sBiYxz_GALMjA-Jk2RF9Ghflw68EvB2ty5XDxSQMUjg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 22:17:09 GMT
age: 24510
etag: "41b557bb05e1769c124aa0195c398e2dbd1fc0e9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00c1df1d-5e83-46c4-87de-093028c17afe.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00c1df1d-5e83-46c4-87de-093028c17afe.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dbb3b7fe13504478f3fe5e8c0190b8db
b8ca03ed416b5ab9cd118f32a1890ffa764a7aec
e47f269c393ee8d87bfce593f31fd49309e1d9b47b8745dd3b6568036da50d55
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00c1df1d-5e83-46c4-87de-093028c17afe.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7416
x-amzn-requestid: c4e8c4e6-5f2a-4b94-ad48-f10fb51c78c2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frc5BH1-IAMF17g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadb6c-40e58e6e49f919a3740bb92a;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:36:44 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2-O9YJrb-baVaEYFpesrbfMrIDBautEp2f5ilm1-vmHcjUGxE0c1VA==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 22:18:55 GMT
age: 24404
etag: "b8ca03ed416b5ab9cd118f32a1890ffa764a7aec"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3366ef4f8733cb9c89a5c88f63a0a441
7da46843b6d885f38a4759a08e6c899906ab7b97
7114397ee5c251cc5cb46f3433c2cc17ff68a08e0872e227671198e9b61eba0a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9600
x-amzn-requestid: 48094e1a-d550-4a91-b87c-4a08505f7cce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVsWcFN7IAMF2pg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d2275c-5ced593a7e2126c9494563df;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:10:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: aZOeDFqBJQoGwLpIs-GpPvY0FKGCAOXY6MgzG32qzX-kVzUCKKv-kw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 02:29:58 GMT
age: 9341
etag: "7da46843b6d885f38a4759a08e6c899906ab7b97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe18f9e12-0986-423b-911d-6271bb996db4.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe18f9e12-0986-423b-911d-6271bb996db4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7c823f1d6bf1c50d58eb263b85e6e37c
a7b74d11494fb3254df907e5cc1eead070d84617
b2706961eb756383e0988dfdb501dc424aea59697aedd1e4a6c294c314a31935
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe18f9e12-0986-423b-911d-6271bb996db4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5356
x-amzn-requestid: fef22c83-35a4-4990-9008-af5853f838d1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frc5BEB6oAMFczg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadb6c-68d3017555c069bc3107d150;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:36:44 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XyDZc0F-b0rxwoS5wvSXBuBfYE7JljMmuXseBjLOBk4HvxU5gE7Oqg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 22:18:55 GMT
age: 24404
etag: "a7b74d11494fb3254df907e5cc1eead070d84617"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04301881-7728-4218-a61a-642cd5ffae53.jpeg
200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04301881-7728-4218-a61a-642cd5ffae53.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0224e848c34cb32cf932ed99dfd8468a
31c1abac8979bca5a998a6649ca3e6f59c0fb2f5
f93d5a69758e57d4d2b0d307ce98ad5ea8d86b825108873e8ea5bc36567dc5c0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04301881-7728-4218-a61a-642cd5ffae53.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5061
x-amzn-requestid: a266acae-8f1e-4cd7-b93b-e40aa5393521
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frdUpGcmoAMF16Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadc1d-1fbae7785fccc58f71c1b3e9;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:39:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: PevXZz9rkBo3Cy6EooCVOpSoHyeKHMoYFjKRrvDld34WFWXzOmpANQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 22:11:31 GMT
age: 24848
etag: "31c1abac8979bca5a998a6649ca3e6f59c0fb2f5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
f.vimeocdn.com/js_opt/modules/utils/vuid.min.js
200 OK 985 B URL HTTP/2 f.vimeocdn.com/js_opt/modules/utils/vuid.min.js
IP
File type ASCII text, with very long lines (1839)
Hash 0541e0ff8702adadfd34ee8c298afbdf
c10da432fdb8736622c8c1fb7708b2599cae882c
967903be4f14e85fe685577417cf83d53b5363e5f02baa3b2242c19a7030b652
GET /js_opt/modules/utils/vuid.min.js HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: gzip
cache-control: public, max-age=2592000
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 02 Feb 2023 05:05:39 GMT
age: 1376905
x-served-by: cache-iad-kiad7000106-IAD, cache-bma1641-BMA
x-cache: HIT, HIT
x-cache-hits: 4460, 35737
x-timer: S1675314340.546396,VS0,VE0
vary: Accept-Encoding,x-http-method-override
content-length: 985
X-Firefox-Spdy: h2
52vod-adaptive.akamaized.net/exp=1675318239~acl=%2Fe76823e7-65b8-43b0-9db2-7b0b311d6653%2F%2A~hmac=47ca38d6167c80e099fc11499a4e965a3e3f1d90862bdc5eaaaacd079f9cbc60/e76823e7-65b8-43b0-9db2-7b0b311d6653/sep/video/ee785624,2482ee07,459db8b0,40318e90,9dc9c040/audio/ab34cce2,e68d0f64,9b9a4d41/master.json?query_string_ranges=1&base64_init=1
200 OK 3.8 kB URL HTTP/1.1 52vod-adaptive.akamaized.net/exp=1675318239~acl=%2Fe76823e7-65b8-43b0-9db2-7b0b311d6653%2F%2A~hmac=47ca38d6167c80e099fc11499a4e965a3e3f1d90862bdc5eaaaacd079f9cbc60/e76823e7-65b8-43b0-9db2-7b0b311d6653/sep/video/ee785624,2482ee07,459db8b0,40318e90,9dc9c040/audio/ab34cce2,e68d0f64,9b9a4d41/master.json?query_string_ranges=1&base64_init=1
IP
ASN #20940 Akamai International B.V.
File type JSON data\012- , ASCII text, with very long lines (19680)
Hash ea4f9b1b8e0db2d65de2e2483ca01240
e2b22bf1b8f3799c181693a661a22b113a1bb198
77769edfb889d4c3089f6ccc6d6fd16591c808a20b399959a2c9dda20f5b0e3f
GET /exp=1675318239~acl=%2Fe76823e7-65b8-43b0-9db2-7b0b311d6653%2F%2A~hmac=47ca38d6167c80e099fc11499a4e965a3e3f1d90862bdc5eaaaacd079f9cbc60/e76823e7-65b8-43b0-9db2-7b0b311d6653/sep/video/ee785624,2482ee07,459db8b0,40318e90,9dc9c040/audio/ab34cce2,e68d0f64,9b9a4d41/master.json?query_string_ranges=1&base64_init=1 HTTP/1.1
Host: 52vod-adaptive.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Content-Type: application/json
ETag: W/"523048e7f5ca9550505f2d8ea6d587e7"
origin-retrieved-hour: 1673982000
Access-Control-Max-Age: 86400
timing-allow-origin: *
Content-Length: 3769
Aka-c-hit: cache-hit
Cache-Control: max-age=30206824
Date: Thu, 02 Feb 2023 05:05:40 GMT
Connection: keep-alive
Vary: Accept-Encoding
Akamai-Mon-Iucid-Del: 877678
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
AK-REFERENCE-ID: 0.754c2417.1675314340.a7f4ec7
X-VIM-CACHEBC: EP:H11,E:m,TD0:m,CW:h
Access-Control-Expose-Headers: Akamai-Edge-IP, X-VIM-CACHEBC, X-Akamai-Request-ID, AK-REFERENCE-ID
Akamai-Edge-IP: 23.36.76.121
Access-Control-Allow-Headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
Access-Control-Allow-Origin: *
ocsp.pki.goog/s/gts1d4/dzJAsmEe9WY
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/dzJAsmEe9WY
IP
Hash 6ce3571ee38fcaa34b33ff84c066a392
5ec7c56d433f846bd6c9b1b4e0bb82bb07aa1c6f
6f9259caad4d79b8edb9461de47fdfdf627ea1bf0fc89299bc782c60d16f86ba
POST /s/gts1d4/dzJAsmEe9WY HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 05:05:40 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
52vod-adaptive.akamaized.net/exp=1675318239~acl=%2Fe76823e7-65b8-43b0-9db2-7b0b311d6653%2F%2A~hmac=47ca38d6167c80e099fc11499a4e965a3e3f1d90862bdc5eaaaacd079f9cbc60/e76823e7-65b8-43b0-9db2-7b0b311d6653/parcel/audio/ab34cce2.mp4?r=dXM%3D&range=862-144237
200 OK 143 kB URL HTTP/1.1 52vod-adaptive.akamaized.net/exp=1675318239~acl=%2Fe76823e7-65b8-43b0-9db2-7b0b311d6653%2F%2A~hmac=47ca38d6167c80e099fc11499a4e965a3e3f1d90862bdc5eaaaacd079f9cbc60/e76823e7-65b8-43b0-9db2-7b0b311d6653/parcel/audio/ab34cce2.mp4?r=dXM%3D&range=862-144237
IP
ASN #20940 Akamai International B.V.
Size 143 kB (143376 bytes)
Hash bb27282b56de67339f72649cada0f8d5
9347bc34cb249487558bf1e67677cc3227c56777
583816989a48d707d5178e66b1edf5206ea0d0e5d8682c64bec4d2043897fac1
GET /exp=1675318239~acl=%2Fe76823e7-65b8-43b0-9db2-7b0b311d6653%2F%2A~hmac=47ca38d6167c80e099fc11499a4e965a3e3f1d90862bdc5eaaaacd079f9cbc60/e76823e7-65b8-43b0-9db2-7b0b311d6653/parcel/audio/ab34cce2.mp4?r=dXM%3D&range=862-144237 HTTP/1.1
Host: 52vod-adaptive.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 143376
ETag: "-CICJ4eGxzPwCEAE="
Last-Modified: Mon, 16 Jan 2023 15:19:32 GMT
Server: parcel
origin-retrieved-hour: 1673967600
Access-Control-Max-Age: 86400
timing-allow-origin: *
Aka-c-hit: cache-hit
Cache-Control: max-age=30190726
Date: Thu, 02 Feb 2023 05:05:40 GMT
Connection: keep-alive
Akamai-Mon-Iucid-Del: 877678
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Content-Type: video/mp4
AK-REFERENCE-ID: 0.754c2417.1675314340.a7f4ed8
X-VIM-CACHEBC: EP:H11,E:m,TD0:m,CW:h
Access-Control-Expose-Headers: Akamai-Edge-IP, X-VIM-CACHEBC, X-Akamai-Request-ID, AK-REFERENCE-ID
Akamai-Edge-IP: 23.36.76.121
Access-Control-Allow-Headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
Access-Control-Allow-Origin: *
Set-Cookie: aka_debug=cpcode:877678~clientip:91.90.42.154~ghostip:23.36.76.121~requestid:a7f4ed8~time:1675314340~ghostforwardip:95.100.158.81~edgecache:cache-miss~rtt:2~region:NO-; path=/; domain=.akamaized.net;
ocsp.pki.goog/s/gts1d4/dzJAsmEe9WY
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/dzJAsmEe9WY
IP
Hash 6ce3571ee38fcaa34b33ff84c066a392
5ec7c56d433f846bd6c9b1b4e0bb82bb07aa1c6f
6f9259caad4d79b8edb9461de47fdfdf627ea1bf0fc89299bc782c60d16f86ba
POST /s/gts1d4/dzJAsmEe9WY HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 05:05:40 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fresnel.vimeocdn.com/add/player-stats?beacon=1&session-id=7541f456a1cde9a6af45af5c574fd31116fead031675314339
200 OK 0 B URL HTTP/2 fresnel.vimeocdn.com/add/player-stats?beacon=1&session-id=7541f456a1cde9a6af45af5c574fd31116fead031675314339
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /add/player-stats?beacon=1&session-id=7541f456a1cde9a6af45af5c574fd31116fead031675314339 HTTP/1.1
Host: fresnel.vimeocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1776
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://player.vimeo.com
date: Thu, 02 Feb 2023 05:05:40 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fresnel.vimeocdn.com/add/player-stats?beacon=1&session-id=7541f456a1cde9a6af45af5c574fd31116fead031675314339
200 OK 0 B URL HTTP/2 fresnel.vimeocdn.com/add/player-stats?beacon=1&session-id=7541f456a1cde9a6af45af5c574fd31116fead031675314339
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /add/player-stats?beacon=1&session-id=7541f456a1cde9a6af45af5c574fd31116fead031675314339 HTTP/1.1
Host: fresnel.vimeocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1454
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://player.vimeo.com
date: Thu, 02 Feb 2023 05:05:40 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
player-telemetry.vimeo.com/player-events/log/play
200 OK 0 B URL HTTP/2 player-telemetry.vimeo.com/player-events/log/play
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /player-events/log/play HTTP/1.1
Host: player-telemetry.vimeo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 650
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://player.vimeo.com
content-type: text/html; charset=UTF-8
date: Thu, 02 Feb 2023 05:05:40 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fresnel.vimeocdn.com/add/player-test-impression?beacon=1
200 OK 0 B URL HTTP/2 fresnel.vimeocdn.com/add/player-test-impression?beacon=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /add/player-test-impression?beacon=1 HTTP/1.1
Host: fresnel.vimeocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 116
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://player.vimeo.com
date: Thu, 02 Feb 2023 05:05:40 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/dzJAsmEe9WY
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/dzJAsmEe9WY
IP
Hash 6ce3571ee38fcaa34b33ff84c066a392
5ec7c56d433f846bd6c9b1b4e0bb82bb07aa1c6f
6f9259caad4d79b8edb9461de47fdfdf627ea1bf0fc89299bc782c60d16f86ba
POST /s/gts1d4/dzJAsmEe9WY HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 05:05:40 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
52vod-adaptive.akamaized.net/exp=1675318239~acl=%2Fe76823e7-65b8-43b0-9db2-7b0b311d6653%2F%2A~hmac=47ca38d6167c80e099fc11499a4e965a3e3f1d90862bdc5eaaaacd079f9cbc60/e76823e7-65b8-43b0-9db2-7b0b311d6653/parcel/video/2482ee07.mp4?r=dXMtY2VudHJhbDE%3D&range=986-263379
200 OK 262 kB URL HTTP/1.1 52vod-adaptive.akamaized.net/exp=1675318239~acl=%2Fe76823e7-65b8-43b0-9db2-7b0b311d6653%2F%2A~hmac=47ca38d6167c80e099fc11499a4e965a3e3f1d90862bdc5eaaaacd079f9cbc60/e76823e7-65b8-43b0-9db2-7b0b311d6653/parcel/video/2482ee07.mp4?r=dXMtY2VudHJhbDE%3D&range=986-263379
IP
ASN #20940 Akamai International B.V.
Size 262 kB (262394 bytes)
Hash c85d394bfec90b8ea8589f352e9fc30e
e513615833b4600a0a636e917782606055b0f0d5
cbdebfdea91aae0bcb2b2ec17f3249e5b2560495df18cb5c0d2596fb73c5a34e
GET /exp=1675318239~acl=%2Fe76823e7-65b8-43b0-9db2-7b0b311d6653%2F%2A~hmac=47ca38d6167c80e099fc11499a4e965a3e3f1d90862bdc5eaaaacd079f9cbc60/e76823e7-65b8-43b0-9db2-7b0b311d6653/parcel/video/2482ee07.mp4?r=dXMtY2VudHJhbDE%3D&range=986-263379 HTTP/1.1
Host: 52vod-adaptive.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 262394
ETag: "-CNaBku6xzPwCEAE="
Last-Modified: Mon, 16 Jan 2023 15:19:58 GMT
Server: parcel
origin-retrieved-hour: 1673881200
Access-Control-Max-Age: 86400
timing-allow-origin: *
Aka-c-hit: cache-hit
Cache-Control: max-age=30104262
Date: Thu, 02 Feb 2023 05:05:40 GMT
Connection: keep-alive
Akamai-Mon-Iucid-Del: 877678
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Content-Type: video/mp4
AK-REFERENCE-ID: 0.754c2417.1675314340.a7f4ee6
X-VIM-CACHEBC: EP:H11,E:m,TD0:m,CW:h
Access-Control-Expose-Headers: Akamai-Edge-IP, X-VIM-CACHEBC, X-Akamai-Request-ID, AK-REFERENCE-ID
Akamai-Edge-IP: 23.36.76.121
Access-Control-Allow-Headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
Access-Control-Allow-Origin: *
Set-Cookie: aka_debug=cpcode:877678~clientip:91.90.42.154~ghostip:23.36.76.121~requestid:a7f4ee6~time:1675314340~ghostforwardip:95.100.158.81~edgecache:cache-miss~rtt:0~region:NO-; path=/; domain=.akamaized.net;
i.vimeocdn.com/video/1589647388-f55295cfa37064666f1ad03b103000091a59a7cfe69a477ccf817590df57f99c-d?mw=1700&mh=956
200 OK 28 kB URL HTTP/2 i.vimeocdn.com/video/1589647388-f55295cfa37064666f1ad03b103000091a59a7cfe69a477ccf817590df57f99c-d?mw=1700&mh=956
IP
File type ISO Media, AVIF Image\012- data
Hash 2af2a0d89126ac6f4ea5d5889687fd65
d77a51888819a10576e7e63cd6794773ef2bf085
bc75e8feb4e530c194a98c74d7c36830c5c80161ba6bce50d874b41344832b01
GET /video/1589647388-f55295cfa37064666f1ad03b103000091a59a7cfe69a477ccf817590df57f99c-d?mw=1700&mh=956 HTTP/1.1
Host: i.vimeocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/avif
etag: 2af2a0d89126ac6f4ea5d5889687fd65
x-viewmaster-lossless-format: automatic
viewmaster-server: viewmaster-us-central1-lh7k
cache-control: public, max-age=2592000
via: vvarnish, 1.1 varnish, 1.1 varnish
x-backend-server: varnish
access-control-allow-origin: *
access-control-expose-headers: X-Viewmaster-Status
access-control-max-age: 86400
accept-ranges: bytes
date: Thu, 02 Feb 2023 05:05:40 GMT
age: 0
x-served-by: cache-dfw-kdfw8210064-DFW, cache-bma1641-BMA
x-cache: miss, MISS, MISS
x-cache-hits: 0, 0
x-timer: S1675314340.584091,VS0,VE960
vary: Accept
content-length: 28456
X-Firefox-Spdy: h2
52vod-adaptive.akamaized.net/exp=1675318239~acl=%2Fe76823e7-65b8-43b0-9db2-7b0b311d6653%2F%2A~hmac=47ca38d6167c80e099fc11499a4e965a3e3f1d90862bdc5eaaaacd079f9cbc60/e76823e7-65b8-43b0-9db2-7b0b311d6653/parcel/video/40318e90.mp4?r=dXMtZWFzdDE%3D&range=985-2090658
200 OK 2.1 MB URL HTTP/1.1 52vod-adaptive.akamaized.net/exp=1675318239~acl=%2Fe76823e7-65b8-43b0-9db2-7b0b311d6653%2F%2A~hmac=47ca38d6167c80e099fc11499a4e965a3e3f1d90862bdc5eaaaacd079f9cbc60/e76823e7-65b8-43b0-9db2-7b0b311d6653/parcel/video/40318e90.mp4?r=dXMtZWFzdDE%3D&range=985-2090658
IP
ASN #20940 Akamai International B.V.
Size 2.1 MB (2089674 bytes)
Hash 232780a4cbb0e89d0c605cbf03ef6903
1e1ebf20f0120ed2dee39b03a46f2150a5b52cc7
487dbb0b76471699e2ee0632da98cd2e497edc1c21d42a4bf18d41befc4ea164
GET /exp=1675318239~acl=%2Fe76823e7-65b8-43b0-9db2-7b0b311d6653%2F%2A~hmac=47ca38d6167c80e099fc11499a4e965a3e3f1d90862bdc5eaaaacd079f9cbc60/e76823e7-65b8-43b0-9db2-7b0b311d6653/parcel/video/40318e90.mp4?r=dXMtZWFzdDE%3D&range=985-2090658 HTTP/1.1
Host: 52vod-adaptive.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 2089674
ETag: "-CMXKr5iyzPwCEAE="
Last-Modified: Mon, 16 Jan 2023 15:21:27 GMT
Server: parcel
origin-retrieved-hour: 1673892000
Access-Control-Max-Age: 86400
timing-allow-origin: *
Aka-c-hit: cache-hit
Cache-Control: max-age=30113975
Date: Thu, 02 Feb 2023 05:05:40 GMT
Connection: keep-alive
Akamai-Mon-Iucid-Del: 877678
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Content-Type: video/mp4
AK-REFERENCE-ID: 0.754c2417.1675314340.a7f4ef0
X-VIM-CACHEBC: EP:H11,E:m,TD0:m,CW:h
Access-Control-Expose-Headers: Akamai-Edge-IP, X-VIM-CACHEBC, X-Akamai-Request-ID, AK-REFERENCE-ID
Akamai-Edge-IP: 23.36.76.121
Access-Control-Allow-Headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
Access-Control-Allow-Origin: *
Set-Cookie: aka_debug=cpcode:877678~clientip:91.90.42.154~ghostip:23.36.76.121~requestid:a7f4ef0~time:1675314340~ghostforwardip:95.100.158.81~edgecache:cache-miss~rtt:0~region:NO-; path=/; domain=.akamaized.net;
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F496723d4-47ce-49a5-b3b3-9ae546523015.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F496723d4-47ce-49a5-b3b3-9ae546523015.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 395bb0f71f9eba82f5ca23548d08900f
b1fada280c7ea3eb775a6fa46ce173a51eb045f5
7443babb69532e1ee3ee779e05ad4f62de2c5bf62548bcb5702f8290a527664c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F496723d4-47ce-49a5-b3b3-9ae546523015.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 11367
x-amzn-requestid: 67702c15-9a68-46ec-95e5-efb57f08e2f1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frc5OGfBoAMF3Yw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadb6e-033182ba55fdd0230ad5a270;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:36:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: H1HIK6zdv95V96NxqSfHCqYtDQNPZ9NLAwG5oM5mwRr3nAUR0BPxlg==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 22:25:11 GMT
age: 24035
etag: "b1fada280c7ea3eb775a6fa46ce173a51eb045f5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
pepaperea.com/
200 OK 0 B IP
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:37 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
link: <https://pepaperea.com/wp-json/>; rel="https://api.w.org/", <https://pepaperea.com/wp-json/wp/v2/pages/9307>; rel="alternate"; type="application/json", <https://pepaperea.com/>; rel=shortlink
x-powered-by: PHP/7.3.33, PleskLin
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Raleway:100,200,300,400,500,600,700,800,900,100italic,200italic,300italic,400italic,500italic,600italic,700italic,800italic,900italic%7CRoboto:100,300,400,500,700,900,100italic,300italic,400italic,500italic,700italic,900italic&display=swap&ver=1573125579
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Raleway:100,200,300,400,500,600,700,800,900,100italic,200italic,300italic,400italic,500italic,600italic,700italic,800italic,900italic%7CRoboto:100,300,400,500,700,900,100italic,300italic,400italic,500italic,700italic,900italic&display=swap&ver=1573125579
IP
GET /css?family=Raleway:100,200,300,400,500,600,700,800,900,100italic,200italic,300italic,400italic,500italic,600italic,700italic,800italic,900italic%7CRoboto:100,300,400,500,700,900,100italic,300italic,400italic,500italic,700italic,900italic&display=swap&ver=1573125579 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 02 Feb 2023 05:05:38 GMT
date: Thu, 02 Feb 2023 05:05:38 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pepaperea.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.6.10
200 OK 0 B URL HTTP/2 pepaperea.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.6.10
IP
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.6.10 HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: application/javascript
last-modified: Sun, 29 Jan 2023 13:42:26 GMT
vary: Accept-Encoding
etag: W/"63d677c2-64f0d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
pepaperea.com/wp-content/themes/fatmoon/css/font-awesome.min.css?ver=4.7.0
200 OK 0 B URL HTTP/2 pepaperea.com/wp-content/themes/fatmoon/css/font-awesome.min.css?ver=4.7.0
IP
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/fatmoon/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: text/css
last-modified: Fri, 28 Oct 2016 09:25:46 GMT
vary: Accept-Encoding
etag: W/"5813199a-7918"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
pepaperea.com/wp-content/themes/fatmoon/user/user.css?ver=1.1.7
200 OK 0 B URL HTTP/2 pepaperea.com/wp-content/themes/fatmoon/user/user.css?ver=1.1.7
IP
GET /wp-content/themes/fatmoon/user/user.css?ver=1.1.7 HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: text/css
last-modified: Tue, 15 Jan 2019 17:31:45 GMT
vary: Accept-Encoding
etag: W/"5c3e1901-ec11"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
pepaperea.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.3
200 OK 0 B URL HTTP/2 pepaperea.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.3
IP
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.3 HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: application/javascript
last-modified: Sun, 29 Jan 2023 13:42:23 GMT
vary: Accept-Encoding
etag: W/"63d677bf-2945"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
pepaperea.com/wp-content/themes/fatmoon/js/script.js?ver=1.1.7
200 OK 0 B URL HTTP/2 pepaperea.com/wp-content/themes/fatmoon/js/script.js?ver=1.1.7
IP
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/fatmoon/js/script.js?ver=1.1.7 HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: application/javascript
last-modified: Fri, 13 Jan 2017 13:45:56 GMT
vary: Accept-Encoding
etag: W/"5878da14-1b238"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
pepaperea.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.3
200 OK 0 B URL HTTP/2 pepaperea.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.3
IP
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.3 HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: text/css
last-modified: Sun, 29 Jan 2023 13:42:23 GMT
vary: Accept-Encoding
etag: W/"63d677bf-af3"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
pepaperea.com/wp-content/themes/fatmoon/css/icomoon.css?ver=1.1.7
200 OK 0 B URL HTTP/2 pepaperea.com/wp-content/themes/fatmoon/css/icomoon.css?ver=1.1.7
IP
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/fatmoon/css/icomoon.css?ver=1.1.7 HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: text/css
last-modified: Wed, 20 Apr 2016 13:50:28 GMT
vary: Accept-Encoding
etag: W/"57178924-824"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
pepaperea.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 0 B URL HTTP/2 pepaperea.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: application/javascript
last-modified: Mon, 16 Jan 2023 14:44:50 GMT
vary: Accept-Encoding
etag: W/"63c562e2-2bd8"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:400&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:400&display=swap
IP
GET /css?family=Roboto:400&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 02 Feb 2023 05:05:38 GMT
date: Thu, 02 Feb 2023 05:05:38 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pepaperea.com/wp-content/themes/fatmoon/style.css?ver=1.1.7
200 OK 0 B URL HTTP/2 pepaperea.com/wp-content/themes/fatmoon/style.css?ver=1.1.7
IP
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/fatmoon/style.css?ver=1.1.7 HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: text/css
last-modified: Mon, 23 Jan 2017 18:38:10 GMT
vary: Accept-Encoding
etag: W/"58864d92-2a923"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
pepaperea.com/wp-content/themes/fatmoon-child-theme/style.css?ver=1.1.7
200 OK 0 B URL HTTP/2 pepaperea.com/wp-content/themes/fatmoon-child-theme/style.css?ver=1.1.7
IP
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/fatmoon-child-theme/style.css?ver=1.1.7 HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: text/css
last-modified: Thu, 30 Mar 2017 12:09:57 GMT
vary: Accept-Encoding
etag: W/"58dcf595-5ca"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
pepaperea.com/wp-content/themes/fatmoon/js/modernizr.custom.js?ver=2.8.3
200 OK 0 B URL HTTP/2 pepaperea.com/wp-content/themes/fatmoon/js/modernizr.custom.js?ver=2.8.3
IP
GET /wp-content/themes/fatmoon/js/modernizr.custom.js?ver=2.8.3 HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: application/javascript
last-modified: Wed, 06 Jul 2016 12:41:36 GMT
vary: Accept-Encoding
etag: W/"577cfc80-35e7"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
pepaperea.com/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.6.10
200 OK 0 B URL HTTP/2 pepaperea.com/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.6.10
IP
GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.6.10 HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: application/javascript
last-modified: Sun, 29 Jan 2023 13:42:26 GMT
vary: Accept-Encoding
etag: W/"63d677c2-28681"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
pepaperea.com/wp-includes/css/classic-themes.min.css?ver=1
200 OK 0 B URL HTTP/2 pepaperea.com/wp-includes/css/classic-themes.min.css?ver=1
IP
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: text/css
last-modified: Mon, 16 Jan 2023 14:44:50 GMT
vary: Accept-Encoding
etag: W/"63c562e2-d9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
pepaperea.com/wp-content/themes/fatmoon/css/jquery.mCustomScrollbar.css?ver=3.1.5
200 OK 0 B URL HTTP/2 pepaperea.com/wp-content/themes/fatmoon/css/jquery.mCustomScrollbar.css?ver=3.1.5
IP
GET /wp-content/themes/fatmoon/css/jquery.mCustomScrollbar.css?ver=3.1.5 HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: text/css
last-modified: Mon, 14 Nov 2016 15:54:56 GMT
vary: Accept-Encoding
etag: W/"5829de50-37d5"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
pepaperea.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
200 OK 0 B URL HTTP/2 pepaperea.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: application/javascript
last-modified: Mon, 16 Jan 2023 14:44:50 GMT
vary: Accept-Encoding
etag: W/"63c562e2-15e54"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
pepaperea.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.6.10
200 OK 0 B URL HTTP/2 pepaperea.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.6.10
IP
GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.6.10 HTTP/1.1
Host: pepaperea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pepaperea.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 05:05:38 GMT
content-type: text/css
last-modified: Sun, 29 Jan 2023 13:42:26 GMT
vary: Accept-Encoding
etag: W/"63d677c2-e926"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
87.98.242.203
34.117.237.239
151.101.86.109
162.159.128.61
93.184.220.29
23.36.76.226