Overview

URLmegamartpromos.com/
IP 172.67.221.155 (United States)
ASN#13335 CLOUDFLARENET
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-11-26 15:43:18 UTC
StatusLoading report..
IDS alerts0
Blocklist alert23
urlquery alerts No alerts detected
Tags None

Domain Summary (11)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-11-26 05:33:20 UTC 34.102.187.140
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-11-26 05:33:16 UTC 34.117.237.239
fonts.gstatic.com (2) 0 2014-09-09 00:40:21 UTC 2022-11-26 10:10:14 UTC 216.58.207.195 Domain (gstatic.com) ranked at: 540
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 34.215.94.42
fonts.googleapis.com (1) 8877 2013-06-10 20:14:26 UTC 2022-11-26 07:22:52 UTC 142.250.74.10
ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
megamartpromos.com (34) 0 2020-10-07 17:52:08 UTC 2022-08-06 13:56:19 UTC 172.67.221.155 Unknown ranking
ocsp.pki.goog (6) 175 2018-07-01 06:43:07 UTC 2020-05-02 20:58:16 UTC 142.250.74.3
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76
r3.o.lencr.org (7) 344 No data No data 23.36.76.226

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-26 2 megamartpromos.com/ Phishing
2022-11-26 2 megamartpromos.com/wp-includes/css/dist/block-library/style.min.css?ver=5.7.1 Phishing
2022-11-26 2 megamartpromos.com/wp-content/plugins/contact-form-7/includes/css/styles.cs (...) Phishing
2022-11-26 2 megamartpromos.com/wp-content/themes/betheme/css/base.css?ver=22.0.2.1 Phishing
2022-11-26 2 megamartpromos.com/wp-content/themes/betheme/css/shortcodes.css?ver=22.0.2.1 Phishing
2022-11-26 2 megamartpromos.com/wp-content/plugins/revslider/public/assets/css/rs6.css?v (...) Phishing
2022-11-26 2 megamartpromos.com/wp-content/themes/betheme/assets/animations/animations.m (...) Phishing
2022-11-26 2 megamartpromos.com/wp-content/themes/betheme/assets/jplayer/css/jplayer.blu (...) Phishing
2022-11-26 2 megamartpromos.com/wp-content/themes/betheme/css/responsive.css?ver=22.0.2.1 Phishing
2022-11-26 2 megamartpromos.com/wp-includes/js/wp-emoji-release.min.js?ver=5.7.1 Phishing
2022-11-26 2 megamartpromos.com/wp-content/themes/betheme-child/style.css?ver=22.0.2.1 Phishing
2022-11-26 2 megamartpromos.com/wp-includes/js/jquery/jquery.min.js?ver=3.5.1 Phishing
2022-11-26 2 megamartpromos.com/wp-content/plugins/revslider/public/assets/js/rbtools.mi (...) Phishing
2022-11-26 2 megamartpromos.com/wp-includes/js/jquery/ui/core.min.js?ver=1.12.1 Phishing
2022-11-26 2 megamartpromos.com/wp-content/plugins/contact-form-7/includes/js/index.js?v (...) Phishing
2022-11-26 2 megamartpromos.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4 Phishing
2022-11-26 2 megamartpromos.com/wp-content/themes/betheme/assets/ui/jquery.ui.all.css?ve (...) Phishing
2022-11-26 2 megamartpromos.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js (...) Phishing
2022-11-26 2 megamartpromos.com/wp-includes/js/jquery/ui/accordion.min.js?ver=1.12.1 Phishing
2022-11-26 2 megamartpromos.com/wp-content/themes/betheme/js/plugins.js?ver=22.0.2.1 Phishing
2022-11-26 2 megamartpromos.com/wp-content/themes/betheme/js/menu.js?ver=22.0.2.1 Phishing
2022-11-26 2 megamartpromos.com/wp-content/themes/betheme/js/scripts.js?ver=22.0.2.1 Phishing
2022-11-26 2 megamartpromos.com/wp-includes/js/wp-embed.min.js?ver=5.7.1 Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 2 reports on IP: 172.67.221.155
Date UQ / IDS / BL URL IP
2023-03-13 07:16:30 +0000 0 - 0 - 1 wwwinfororico.litgjbm.cn/jp.php 172.67.221.155
2022-11-26 15:43:18 +0000 0 - 0 - 23 megamartpromos.com/ 172.67.221.155


Last 5 reports on ASN: CLOUDFLARENET
Date UQ / IDS / BL URL IP
2023-03-27 20:22:01 +0000 0 - 1 - 0 qxmpjtrd.agamameena.shop/ 188.114.97.1
2023-03-27 20:21:55 +0000 0 - 1 - 0 qwltayxh.gholbilune.shop/ 104.21.47.95
2023-03-27 20:20:28 +0000 0 - 5 - 0 lp.duz.pw/lp/fl-1?_p_=eyJhbGciOiJQQkVTMi1IUzI (...) 172.67.188.43
2023-03-27 20:20:08 +0000 0 - 2 - 0 winzone.buzz/saudiaair/MkDu3q6uNjmn60LvK2DjpK 104.21.30.211
2023-03-27 20:16:44 +0000 0 - 1 - 0 cdn.discordapp.com/attachments/92692441257227 (...) 162.159.133.233


Last 1 reports on domain: megamartpromos.com
Date UQ / IDS / BL URL IP
2022-11-26 15:43:18 +0000 0 - 0 - 23 megamartpromos.com/ 172.67.221.155


No other reports with similar screenshot

JavaScript

Executed Scripts (23)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (62)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "164D11173045B569CAFB32E300E4C1EC6D6AB177FD34D0414CC40C541268779F"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5060
Expires: Sat, 26 Nov 2022 17:07:26 GMT
Date: Sat, 26 Nov 2022 15:43:06 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3377
Cache-Control: max-age=157459
Date: Sat, 26 Nov 2022 15:43:06 GMT
Etag: "6381eaec-1d7"
Expires: Mon, 28 Nov 2022 11:27:25 GMT
Last-Modified: Sat, 26 Nov 2022 10:31:08 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15025
Expires: Sat, 26 Nov 2022 19:53:31 GMT
Date: Sat, 26 Nov 2022 15:43:06 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 26 Nov 2022 15:19:13 GMT
cache-control: public,max-age=3600
age: 1433
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    567df7db606cf5d0871aa5bc9311b6da
Sha1:   4263faac7cbab2fcaf6661911dcad5091c06be17
Sha256: e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: tLYECE1joTLU8aDwMh+M2aKJv4e3769fTFZSBoH6x/bVdhmcpGnIi8zUX/88k9XuB9OrYLEq1vg=
x-amz-request-id: Z8EJM1RE02GE66VS
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 26 Nov 2022 15:41:16 GMT
age: 110
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET / HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Sat, 26 Nov 2022 15:43:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Link: <http://megamartpromos.com/wp-json/>; rel="https://api.w.org/", <http://megamartpromos.com/wp-json/wp/v2/pages/6>; rel="alternate"; type="application/json", <http://megamartpromos.com/>; rel=shortlink
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=opH5JcC0h1KJFuyhvKqWsaSPtyVb5p8ryca3hcbbt8ze55bkUCdTKFgUogJxkgKJteFxXu3i3lri5q1o0%2F1PsSZaDnSnapwl%2Bn2bBVFSvRSKq4w3MjvI%2B7EH8XgVIQWEDDLZFFk%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7703bcdfd8eab505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (59877)
Size:   19669
Md5:    733b29cde3712a584e5396b1a4267c7a
Sha1:   52e4db1fef5d7118b62bb47c2135dabb9decd242
Sha256: 27918f5ea68dd37d30da10b0ed002ffa9e6d6f0209551c2210ebb6d5315d6a59

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sat, 26 Nov 2022 15:43:06 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 26 Nov 2022 15:43:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-includes/css/dist/block-library/style.min.css?ver=5.7.1 HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sat, 26 Nov 2022 15:43:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 16:53:27 GMT
ETag: W/"6079c107-e33b"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2QfnzHc7zvCIOoR5BvayQqxTcGQHwYzA4pJpdT%2BeU3VUYr5QpcCWfDkPxOpFyEprzNhXTpd8FDCpt%2BtLw2gRxmiv2DeXBPvpkYl3aUTVobQGAvD%2FTMAV%2FlaF99Nlr7CCBV1QhsU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce33db0b505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (29677)
Size:   8609
Md5:    9fb5134f2a659735f48ff96b78196847
Sha1:   9c39894b8e981273e4a45754f8f3ad93e8955522
Sha256: 28d1eb4db568bac23b22b4f660dce0bbf0adbf2de7114fffa8249b4e2f59acc1

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.4.1 HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sat, 26 Nov 2022 15:43:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 01 May 2021 10:34:56 GMT
ETag: W/"608d2ed0-a50"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K8BCXvBCJ%2BE6nYBq5txjWITghnm5hRdQY1lcqE2kW9b3z9M4ckFPaZl9u%2BfbeWH7%2B22BnRbGYwA1JOt6Rmm5QPlRnlfYf9Q166OC7o6PI8uT76erWFRZkM%2F%2FvBXwZKaSc0TaYZ0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce34e19b511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   931
Md5:    070e58dd5626a7818b95a45186b09f03
Sha1:   a8435734724f8c1f6a12a79dcfca74b8dfc74fdd
Sha256: f54992341e21cecbeaed29bc649c7eb3a9cd1f1db7e3a4cb083b46bb5ae5eec2

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/betheme/css/base.css?ver=22.0.2.1 HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sat, 26 Nov 2022 15:43:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 16:53:27 GMT
ETag: W/"6079c107-da37"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=38zZqB5t9%2Fb0CzCLIu81OUSzYHkvFAgYiED3EANaPLjdDOp5l8q1vBLwg6HHWDO%2F%2F%2B%2FKjmCoMgYwU9BD1ECKu3HEZ56xrUpKL1AdtlsUoj0X1ZtRRj%2BOg9%2BvQNCai0DHSZEKT7E%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce34ebd1c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (464)
Size:   12164
Md5:    6b383666bde5f372c46de3647a65902a
Sha1:   338bcac7114415df117f5324060caae7e66a080b
Sha256: b65eb9a1757d1112d6716391b2f23b727b3af4e8bf16509e26f5050340634857

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/betheme/css/layout.css?ver=22.0.2.1 HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sat, 26 Nov 2022 15:43:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 16:53:27 GMT
ETag: W/"6079c107-1cdb6"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Be1%2BmIzQxeH2lz1zUl%2Bih%2B%2Bey9jU0T1yHxMOVN0046uV3NW3CAJmaLa%2B2FYlrbFV99R6yXUJZz8t51vztXlZtcxZIv7nPJKbbwd2dslmuVGnf7W8gjAGES7B6A1nPS42qSX2nnE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce34db5b50b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (393)
Size:   20045
Md5:    4d7da415c4537fb49e2638a445c1e919
Sha1:   32f903ce8c4cc0a6301a29744fcea502d89b663d
Sha256: 32cb1cb2e0378ba44c8fab3804cb7e16eabc42112a9c252a516858c5136ae98c
                                        
                                            GET /wp-content/themes/betheme/css/shortcodes.css?ver=22.0.2.1 HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sat, 26 Nov 2022 15:43:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 16:53:27 GMT
ETag: W/"6079c107-20dd1"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XFpwSiNuL7l1GbWZe79B6MQH%2FvMuxxbrLAaSS6A4d524faYi9YdbD8HEuYRMm%2Fpdhw4oEV1ZIISOmxaq7X%2FK50SwEm2ramafdzQoC4xSBR42vzC763sBETwc5ZlK1h6kcfKXBpg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce34cfd0b41-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (404)
Size:   22386
Md5:    d5ea3456a9e23b7a25a696e49188ab0c
Sha1:   b4cfafe2d6f9c5ba586be1c62a2efe8ac4d318ac
Sha256: c58cb407bce60838dca9d83c93b718cc81b47ce39db83842efac3861f8917b04

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.4.3 HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sat, 26 Nov 2022 15:43:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 16:53:27 GMT
ETag: W/"6079c107-ee74"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cRnN9GaykJtvzjCCqYam25GZqtrGskPAF4i2qPbBVjFygzUYoKLFf4wZsd6QA0gyk9sMOPrbe7YQUUKgHNEbNQ1aMZCv0vpTSxO620jdl%2FwY7GEJ4%2FHPwsfDoq1IYERzrf89%2FIw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce34bde0b69-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators
Size:   12897
Md5:    d4311f654e528cd6ca63698520f73ee2
Sha1:   585f28636a7f5653dfaff711a5d26cbac4f3f4c3
Sha256: 2ad51112a0e667544113d56543e64e0fd7b58171a9bf042250f27834d6ba0e96

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/betheme/assets/animations/animations.min.css?ver=22.0.2.1 HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sat, 26 Nov 2022 15:43:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 16:53:27 GMT
ETag: W/"6079c107-e4a1"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L3%2B4bAYRCJvJ7etpr%2B3dHqCNRqzsx5HKF3YWHGJ4MkGwqvSEQVWHmYfCHCt5EDjAx5w9maprAyRP7jltF%2BdfqpqQTTck386I9F40wnrne64RpJgqksIDL1P2v%2BjPfi56QimXExE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce3fec2b505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (58528)
Size:   5011
Md5:    829ec5b505b16c44139edfa2d845dee7
Sha1:   dcffdff1526768605e59e15b50d0095956c27967
Sha256: 17d04b160edfcea07bdf62019dd672f741f9515754d26fb5f73c37f5c1e8e1e9

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/betheme/assets/jplayer/css/jplayer.blue.monday.css?ver=22.0.2.1 HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 16:53:27 GMT
ETag: W/"6079c107-266a"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2tNxzHnKPDQHR7XN%2Bs0QT8UCf0Bz7HLlN0SGoYi%2FqsXPyZ8vv8rJBeIzQjxzciEKvuRn9ku%2B%2F45VIQ6QT%2Fr3Usnab4mYZF8%2FGyy9Mo%2FialmQlvXxkU80M9649V7q8%2FO%2BT1hOVzU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce40f701c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   2085
Md5:    cee483f4382760566b598402bde77ffa
Sha1:   77b02cf540b0326316489a87d788d6b265c35327
Sha256: f7ce3b2afe8345e8755e29f44168751d2cf508998821119fad8b5030a48c65ce

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/betheme/css/responsive.css?ver=22.0.2.1 HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 16:53:27 GMT
ETag: W/"6079c107-e1ba"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W7Mw2HXh%2FPNAg34oVBcn3kIAe25wWuFpLqtQP2pIyAQJMI8iDE92iDyxZut%2BSzAASnFxIgkFaNd4TTd2pQpJdBPJSJf%2Fo4U81cJrlSPT6qVHjAebcpXjsxM9Ohkjv42Px%2B%2FqSUQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce40e98b50b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (612)
Size:   10230
Md5:    f160d385688fba9c70f44bfe9b4330ac
Sha1:   980f82e425c74e770b799df8dc7b8c98ca47838c
Sha256: a2087c3d6a980be6e13aafa186f4d33fdd6a5decff83fd4d1c0e61b594326af3

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-includes/js/wp-emoji-release.min.js?ver=5.7.1 HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 16:53:27 GMT
ETag: W/"6079c107-3795"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XvL8ETBtlvmTo2dPIM%2F%2BYdFifouHPiWl7nftmLitE3qOLEM5XS%2FwRNOAhU0ssnt3z362jQa5uBzvZSK41EB4JaznzJNP2qUWnyDDCu6s5jNQz1nZvnK6y4Uh0BkxygENPAgFgLc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce41dab0b41-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (11272)
Size:   4657
Md5:    71b6d75cd4e93368516cec04a93790f8
Sha1:   d274862e4ee8bea24bf1d6d6f8f1e231abd778c2
Sha256: 7f1d272195370f3d6541779815b23d961b1cb9474d3bf57786f9844840083596

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/themes/betheme-child/style.css?ver=22.0.2.1 HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 16:53:27 GMT
ETag: W/"6079c107-d1"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vICGQGVQ7W3Y8j8NLglSolol7ZgSzr91zZDdnGQb%2FgRXF1lz2clCHX9DGdfkGPqEcQ%2Flk3ysyVhtcdhvrtwl2lngQ8ejvpvdJapwD%2FQNLOeSc4pr%2BXJehMAeAYAKX8DJ0m1mzWU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce45cdc0b69-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   151
Md5:    a5ac87127a9526ae657bd3bcc145ecb5
Sha1:   e12d3f17fbefda2913025f7bebedb0eb25a6edc3
Sha256: 2d365f6f5db1a8d9312a1ef5eedf6ef83e8544b5cb14c2c7abb49b09607e0b86

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 16:53:27 GMT
ETag: W/"6079c107-2bd8"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KI5xv8xoABqgjvyCT3sqifhMeGN%2F%2BJA0VFRHIZM2ndW7aDPvYLslFCyO63InrkmCE9aNk5l4ohaWQaLEu0Mi5CJHbJ%2FFvTtKN3WEAkJcoK8dJrgQC%2FFhyMlrimzl9kOIk6Guvj4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce4cfed1c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (11126)
Size:   4165
Md5:    0d5bb2a36d1fc2e095235bc201eb5579
Sha1:   98f0154e2ed5322a9f65077f954868d6c800b337
Sha256: fe6382620c35c12aa4f3f96fe395e5813defe330c1d95fd3de1e94f8f5d1f0a5
                                        
                                            GET /wp-includes/js/jquery/jquery.min.js?ver=3.5.1 HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 16:53:27 GMT
ETag: W/"6079c107-15d98"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vb%2BQUKtEleThdlWOmp1I6d3N9mmByYsnIdk4HkOUl75KMXZiidAgW5hpAqs5pLgRMiml7AQQT9bbrztz7v7AVBslGKuXA%2FS%2BMYwjV2olIcqfVUPW5L8ca4z2KN2HY%2FfMvhqd6tg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce4bfcab505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   30908
Md5:    de51a7f2c2c244ceb7103216144f03dc
Sha1:   9545e4547e01b6fcabebdfa08c2d75089808fbee
Sha256: 10b58517301b7a47ed1354030c9b652a1d96259d24e1e1b4c4b1aa33b94682ee

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.4.3 HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 16:53:27 GMT
ETag: W/"6079c107-1e437"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TISGWb3%2BtwIq0pQUrBrTAFkozcCobPExdE6GIS9zWESps7Le%2BmtNpOEvbJbYi%2B8P7NKjaa6i2%2BP%2F12ZQvw%2Bm%2Fqelktd89VgCUgvMziDagsJaagsJ%2Bzax4dncBo2otBI36j%2FKSF8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce4df7fb50b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (42889)
Size:   46962
Md5:    00e409fef6ecf1ea4c9c7b571978bf3f
Sha1:   b2e48c9062ff3d4c48a1863b0a2dff37d57a6d0d
Sha256: f166f7881901936cfe1e44f9ac31ce087f833a47a270f804afd2f2d008532bf0

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 26 Nov 2022 15:11:12 GMT
cache-control: public,max-age=3600
age: 1915
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /wp-includes/js/jquery/ui/core.min.js?ver=1.12.1 HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 16:53:27 GMT
ETag: W/"6079c107-5133"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wG5gkIg2qGM2uziX%2FCFCy%2BjwD8DPBlzkM4q2B%2BJ4T2i25n2XQNJnDkkY8H0M9e7gt1VODTsks3sgJeCoCauM0%2BnhCLeIv9gf%2FiMXYhQuLoDVDSosVSY8O23EeKtLhhnZbYZ6fj0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce58906b505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (7973)
Size:   6859
Md5:    97427162a3287e2a44e758b14839c6de
Sha1:   9b38ec9f301d54a3eb2ea1da12a5f1464e1a19b2
Sha256: bd5550423958f5eba378c8fb77c628f67ecfbf654d1be7b54a3f2fb7183dbe20

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.4.1 HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 01 May 2021 10:34:56 GMT
ETag: W/"608d2ed0-34ad"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=euJ46VERm7leCXCemYXfqhWChqQbo5b%2BGVHbyb6gYBAeKNjUHMjUrsO2EI3w4fZM2JZduwIeBS%2Ft5Gk4rUVzIWU%2BDP1AUf9%2BiNxprn4up9shTD67CTHzkSiHZhQM8tQ08OSO4xI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce578a41c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (13485), with no line terminators
Size:   3976
Md5:    52f8adb981f1c9978a1c93e06dd6464c
Sha1:   ff42e8ed3e39ceadab9f5802d244ea860cb1dfef
Sha256: 3d2845eb4da7777b45627df42f595b1510d560b1ff219331fd467bfb4dfdeed7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4 HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 16:53:27 GMT
ETag: W/"6079c107-183ee"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b6vg2DrRBiMjPBMI96mSGPbh2fCcmp7iu3sEPzZ4nJ%2BApKc4PGBmwEOsVY5XLUnO0NNfB4VbrAQU6be6A54AAZUUuP6xYa3q0hRihSVS0u3tmeXRyHdJfL3nlei93VHu5k3020c%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce52dcd0b69-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (34729), with NEL line terminators
Size:   34213
Md5:    7700052880938fe98594cdf1e2ba3054
Sha1:   ea7e60afdb107fda98f82f917b819eaee23ccb80
Sha256: e142ee6e547fe3ed111e22f803b1c56adbb8a3b3355ac2984ef7d8b1bae70f5b

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-includes/js/jquery/ui/mouse.min.js?ver=1.12.1 HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 16:53:27 GMT
ETag: W/"6079c107-d34"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w8opIVn7jZl5VYO2ZLI%2Fj9UmTCFYIX9SZel%2FeMrxFlAFXCqgISFZe%2FG%2FA2HyHUf9y9xKiL6TeVfyMFGNWxd4N4UGR5WEYBrvoCUzm%2FM9dUiNfRPP3j9iyyq1Xy4mrBdKDInBxgQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce5986cb50b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (3202)
Size:   1071
Md5:    4ac49fb5b52ec8795e4931a624590273
Sha1:   68b9634cc3b9a71b72a4fc3373c92e81e2b1b94e
Sha256: 9369581069383c3d73ed8dcde832390154accf24433bdd7e87125bafac06e4b9
                                        
                                            GET /wp-content/themes/betheme/assets/ui/jquery.ui.all.css?ver=22.0.2.1 HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 16:53:27 GMT
ETag: W/"6079c107-48eb"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lo%2BCj7j9JKtKjxOyCpjdQ6Y3L%2F3Rj%2FjK1mVT6R5IyNn%2Bvkynx%2FgiaH9LHSmevECiY1pjMZM4HJdYQkUYZ52nNh2u47GYFxjhKVX5dU4czui4dp59rqqrHX%2FDxHtf333ona8UvJk%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce40ecbb511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (365)
Size:   3284
Md5:    d8faf901c994171bc66fac62ec08fe8c
Sha1:   5824bdc8d5adf9aedd532fdd1f15cae1ca5e14b9
Sha256: 4d708cf7a7a94f79b5561de8308725329a40495b80f843332546200066df4004

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.4.3 HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 16:53:27 GMT
ETag: W/"6079c107-56d47"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NNxzJC6ZUZiy7KehrG%2BOYg1692FoQ9Q8yXgbNFByd%2FC62eE3u1%2FecCznjkO0jOLdJTxKk9EjlCs5ZmT58Bss%2BTyhqAVmniIHWZynKo97XYv%2FPstAzt%2FmPKWKD2ZEHtI%2F8Gz8K94%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce4ee840b41-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (64270)
Size:   92754
Md5:    c9bc68a54f8f4d26bb1bb7e78147ffcf
Sha1:   f88731e4eb511453055730bc174bfca4372ca11d
Sha256: c8576a771ab28dc6af1ed3781c3759bb18a853bfd68b7423c425257d9cd1987c

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-includes/js/jquery/ui/sortable.min.js?ver=1.12.1 HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 16:53:27 GMT
ETag: W/"6079c107-60ce"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rrUUw0hpKcNE0y4aSiZDnh6KYPJjq5dICwYjdx3uaNcbnnACYMmUOF5Bbn7QcYnxGD01nu65%2BKWu8e8LcvvIEDnOeu76Ih3Ru%2BzL0SeQeSTbI%2BUiR8CNEFSYwUtEgYP5xkJuoB8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce649f6b505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (24601)
Size:   6404
Md5:    ecaff73f0b29b161e0e01a47f37813de
Sha1:   cd509442f93552e5d1c503ca693d918baf816c88
Sha256: d48b09b12921e27946ceea1b549220ff99d3abc9dd977777b68bfecfe92abf1d
                                        
                                            GET /wp-includes/js/jquery/ui/accordion.min.js?ver=1.12.1 HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 16:53:27 GMT
ETag: W/"6079c107-21d7"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2YOUXOV7bIzrOa4D2adrDVXHVctt74%2FoZgqh%2BllnpgJFKcaBFBY%2B95hd%2B%2FeTaVuIpkQmG%2FL6%2FH0eDqI9ISIjN5ZyIk%2FzQJkHBhQfgNiHEVxIjKQvAgEO%2FogGL4G3ypyc%2BQIQdrg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce65f000b69-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (8481)
Size:   2722
Md5:    8ca6a1f7deee3cc4e3ffd8640eac6503
Sha1:   042a3324d6f6b203969aebba85573d83b850dfff
Sha256: 3ea3ba58ad4d6a29d6515973c56a01b2ebbfaf1c57c4aa290aa1713445b3db20

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/betheme/js/plugins.js?ver=22.0.2.1 HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 16:53:27 GMT
ETag: W/"6079c107-31077"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2pCIM%2BFMbjF%2F%2FTiAxgQ0K0czuqpWUDSdG5CuxzZaBlVf%2BRBhMG8u2F4vw5TXI%2FnCL%2F0bZ8mo%2BKBHaGx5B8Ps1hBYj7a96TadxHpgEAPftx1fQJrcccvyvroYQCFmHCDZT2cZoIE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce679a5b50b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (32019)
Size:   55125
Md5:    69ca01bd11adcce0be7815c739e06660
Sha1:   98ccceed423d7aff867edc9342b3bcaaa90f595d
Sha256: 7c8e339c6e3bb78e44fc783b965a7e424bd99328d181413651b22dc7e00a3898

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/betheme/js/menu.js?ver=22.0.2.1 HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 16:53:27 GMT
ETag: W/"6079c107-98d"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C3NDPHly0534yCH1d0wJC4twu9Q9PfqCwVCfENNhWVX9WJClt5QJrObf3N78GQl%2F0LQgutA57sVMVmRvN74kRX0E%2F89wE4itA7wHeZY8VpA3e1q0EASi%2FVm3imzTVGatcvgkE5k%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce6a9c9b511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   827
Md5:    d6da4e961358e937789556df7b854d7c
Sha1:   a92f1052a0bb386d9f4a93cc7575eea83cfffe3b
Sha256: 14167bc5e111cf35d665209e30294a1daff31688351db15fdfc5c6043016ce11

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/betheme/js/parallax/translate3d.js?ver=22.0.2.1 HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 16:53:27 GMT
ETag: W/"6079c107-f7b"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0W3PYjFTSJqEmdnzC1QAdp3KnyZGTPlOUXcmXUPULBNOGUo8fonurQyvsRSduRDMXan0xQ9boS1FcsBAupff2YrWm2t27H96gHlpeE5jPz50B9VDqqFy43CwnhM3Kal2W%2B%2BsVz0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce71f9f0b69-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   1292
Md5:    0a7052f0e364035fd503fcbe3ad8858a
Sha1:   18fcd3f33823eb7b557d643c2d8fc53a7d810be7
Sha256: 2b0302a46df7248ff554d49a37652ca056165b579b97a25125fcbcb1664ef695
                                        
                                            GET /wp-content/themes/betheme/assets/animations/animations.min.js?ver=22.0.2.1 HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 16:53:27 GMT
ETag: W/"6079c107-727"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e5VfUP0QNwOGftDSgQHzSoNZxQ3oY18wMmHkMu0cjJ7XkV5Zm97x7r%2FF9UIrgOYJvK6G12E5x4HucNc3RSUWwsi1BhNkKY5U7lIsgUkxhw8tL%2BhalujiXmRZQWZbgbyfFcXYzHw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce718450b41-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (1733)
Size:   626
Md5:    91b6b0ba832b2390e0930759fb9a866b
Sha1:   e967368b271f862c28ec3e5bd50f0fba15299673
Sha256: 5b8a99e5bb38374577ac7d161f20f406257423df4cbdf09d6a3c156581695833
                                        
                                            GET /wp-content/themes/betheme/assets/jplayer/jplayer.min.js?ver=22.0.2.1 HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 16:53:27 GMT
ETag: W/"6079c107-cd61"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ud9cpPJPPJ5le8zWvtHhwk5iZxWPgdT4CnvvBwn02IM0Gi4jKrQd1SOmVqCyymFcisRWsV%2BBZBV6w%2BshnqSUbtW7VWvMJpiW3RyjjTkxaCNNiOl0qFIR8ti7KKZRp%2FpmwBoxSas%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce71b09b505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (634)
Size:   12679
Md5:    821688c4b6c4c769c69ccfadf1cc21fb
Sha1:   786485874f86efa4e961a3ad5d47ffea3d41e8d9
Sha256: cfda6b16dd7e0cc9bdac3131e0d80c014d9ec8272b17b4bde4d1225af0bf9b63
                                        
                                            GET /wp-content/themes/betheme/js/scripts.js?ver=22.0.2.1 HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 16:53:27 GMT
ETag: W/"6079c107-11342"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2i4CbPnaoxATeZieJeHBM59qCXdx%2BGeT9Da%2BhlBtc7PTF0bR5mqQlOC3fIGykXriepBW8gnoDatrcBBwapqEmXNZHVqbmmdGBif2gfx5uZiIV4RoCGOiL%2B%2BYnImvgyhtvkgKkvU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce74a4d1c02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   14446
Md5:    b96382715748348567f17dba9b2af1f4
Sha1:   be3d705cfa9b7b301238a6e20af474f9c59c3c05
Sha256: 0f8d4a31676cc9ab6091880e6459f957bc11a350b0b855bea71d6ac68b647cd2

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-includes/js/wp-embed.min.js?ver=5.7.1 HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 16:53:27 GMT
ETag: W/"6079c107-592"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BYqjaBsaSXRktEkXXYO915W1l9aW%2BXyJFE62GtULOflwnxI0WA1kl2UtIkIJx4CT7BuHb0OXyt1fECbX%2FHcTzujyTp6nHXgKv%2Bm%2BHSlCs2crGxN5SnBF2QA4U3koqpmivb57wBI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce75aa3b50b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (1391)
Size:   769
Md5:    82e67f050afdb38c20ac6eb305f97c17
Sha1:   df1349df76d66a9cf64377cf335c67c337d85470
Sha256: 5f6c33116e2106cd0f2f28c16062f1d584e74b8539a14ed45e17957634d71b7e

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/uploads/2021/04/promotions_logo.png HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Content-Length: 5161
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 16:53:27 GMT
ETag: "6079c107-1429"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wjo%2BdokMOF%2Fl0yYCCz6HE7asETLFbqbZme7jOBIHvA13Bkfr%2FaGYbSgqHYGy%2BA4g4vi3z7KHOY9%2FKpQsgQVUQ3kLd6Uc01wdYCJfFf72mkZAPWf9pnJO1ac27AEwCd6NaoDNpD8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce77a7eb511-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 423 x 97, 8-bit/color RGBA, non-interlaced\012- data
Size:   5161
Md5:    d86c1fbc53b3d7919f70c67ce1eda367
Sha1:   91513d4c76000571a4dfee5c8079923ce4e72b00
Sha256: e7752f3a9541768efee02512352a88de403c53eaa6a3fde66c0aecc8eefc7f33
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/2021/04/promotions_sm_logo.png HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Content-Length: 4598
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 16:53:27 GMT
ETag: "6079c107-11f6"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z5zKIkamqPc04iVnpQO0NdaHBdlkrEn8ZesKsjK60Eh%2B%2Fa0QhbARa2TeEbviZk8RtTR8w3Fc7pnLQE2PAdqAwShmLcXFhFhLfv3jYhVL%2BAqTcf7BGHMT1Xqc8Z2bnuB1slyAxlY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce7c8da0b41-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 229 x 53, 8-bit/color RGBA, non-interlaced\012- data
Size:   4598
Md5:    638035ee7a4e28e7f004c0336662b860
Sha1:   9a0ab8d9f337d11aba062836a4ac49f2838ed7d3
Sha256: daef5638199555639cc1044ee838a2f2a1093b191ec4b8e263d3d9aeed5e15d9
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://megamartpromos.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 16:40:18 GMT
expires: Fri, 24 Nov 2023 16:40:18 GMT
cache-control: public, max-age=31536000
age: 169369
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Size:   30928
Md5:    ac0d2859ea5f8fd6bcb3c305c08ec184
Sha1:   7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
Sha256: ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
                                        
                                            GET /wp-content/uploads/2021/04/promotions_logo_blk.png HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Content-Length: 4456
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 16:53:27 GMT
ETag: "6079c107-1168"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j%2FwL1KTANEptM6av6gDm2R%2Fk%2FCAXxT6FdzpoYNutKWFK9NILfSvgUNfKizpXLq3ndzYbFssGnriICXTZyKGGTl7BKErjHgPDSugm8GtarCxO4qGbbVSxpAWGa%2FzpVGAo58XxDZo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce7c82c0b69-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 423 x 97, 8-bit/color RGBA, non-interlaced\012- data
Size:   4456
Md5:    72760b97a109ad66db8a825c7461d9fd
Sha1:   9cccc099f7db94f8a97d9b3e651482217591280b
Sha256: 8451468ec7fb75b15857b49c090b77f045bba4aaf5a645de2b27e2b66de4bee1
                                        
                                            GET /s/montserrat/v25/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://megamartpromos.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 31760
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 21 Nov 2022 22:19:13 GMT
expires: Tue, 21 Nov 2023 22:19:13 GMT
cache-control: public, max-age=31536000
age: 408234
last-modified: Mon, 11 Jul 2022 18:54:16 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 31760, version 1.0\012- data
Size:   31760
Md5:    fda4d0b623999af43148ba34c3b1ff73
Sha1:   ca5496af89720cc3e94e6279132f252b7cd471a6
Sha256: 33befdbbb24930584f5ac94ea3117adcd56518f20ab1619d05de83ffd1821d38
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 5QIN0mXH8vZkJZFHtDpw8A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         34.215.94.42
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Ts3qfzBi9ZSygZuyJLvg/T69lKo=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7936
Expires: Sat, 26 Nov 2022 17:55:24 GMT
Date: Sat, 26 Nov 2022 15:43:08 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7936
Expires: Sat, 26 Nov 2022 17:55:24 GMT
Date: Sat, 26 Nov 2022 15:43:08 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7936
Expires: Sat, 26 Nov 2022 17:55:24 GMT
Date: Sat, 26 Nov 2022 15:43:08 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7936
Expires: Sat, 26 Nov 2022 17:55:24 GMT
Date: Sat, 26 Nov 2022 15:43:08 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7936
Expires: Sat, 26 Nov 2022 17:55:24 GMT
Date: Sat, 26 Nov 2022 15:43:08 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4309
x-amzn-requestid: 47c2739d-73c5-4d91-914c-fe635cb09772
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1U8xGxgIAMF-qQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63786851-6fbe19dc5c4c20dd657604e3;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 05:23:29 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ezHvyK3va4SioabOjSittTiLQRs_Q8k4TPxkiGp_svtZ8omDPTUN-A==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 05:04:28 GMT
age: 38320
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4309
Md5:    841a4b110022a99ddea6f7bf66df0fa1
Sha1:   126771b86638108050cf57c0d12faa27f80f0edb
Sha256: 240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 3502
x-amzn-requestid: ca3f2610-e03c-48a7-abb3-fbbab76f63d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvYUHO5IAMFqDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5ce-7e36137711dc4668278c1c94;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:03:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QS3ZKYetcm87GNwSr34eRPF2d4r8ppwf3fT19aV-u84f7ObX4bU8wQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 07:13:26 GMT
age: 30582
etag: "61f9bed607e81606be78285596acdc5e0e4f4994"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3502
Md5:    a783df85f30f9c555f9df6b99f61744d
Sha1:   61f9bed607e81606be78285596acdc5e0e4f4994
Sha256: 19db42201d0fa059f680d890ede6683c04e893e6308a2256d0203f826a7f34de
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1de44df6-bdc7-487f-a2a0-b42d26be2420.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 15818
x-amzn-requestid: a6570859-3b03-492e-9f84-e25b01223da2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLXrUF3bIAMF8CA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381397b-379b1bcf2ac0715835e10e48;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:54:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: HgiyaodE2vJx5JL8QfOiTersSAgAwq74gtsPkpHUhnQ3In2vZ-3rbQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:33:09 GMT
etag: "1ac7a410cd4f3709f476c776dd5646dd982dcfa8"
age: 61799
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   15818
Md5:    17ebe470d040a6ea8c57e9b9d4f4e828
Sha1:   1ac7a410cd4f3709f476c776dd5646dd982dcfa8
Sha256: d65114b68fcc12344c6df7bf294718b79822fa9782d3bd54ca044b66f82052b1
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9914
x-amzn-requestid: 4db4ed29-20b4-4ca7-8835-2463d0989d5b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVVFHQYIAMFc4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638135b9-613da006118724124e345b29;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:38:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7cJmhEGkKqLUQUMqGuYtWBeu_1nlEUAxgTMy4ABekPJYrJP95wE6Jg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:59:05 GMT
age: 63843
etag: "47fac81a2dd809df5c42ca1362f71d553572d2b1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9914
Md5:    3b1c6878914466cfece680fa7cb73502
Sha1:   47fac81a2dd809df5c42ca1362f71d553572d2b1
Sha256: 6458883dfa2bdfd483e92e5f847a229508ef00ce1dbd11f49eec369d0bd3160a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9049
x-amzn-requestid: 6cbd9639-c29d-4ff4-8091-3168f64f4c78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVVGHzKoAMFSuA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638135ba-100ea4235fdf1df8491041c8;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:38:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: OJZkZ18TlSgdBWsmSroQPIcYIvBFvz5-7hu9_GravTcz6zqxKXHZrg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:43:36 GMT
age: 64772
etag: "3d32bff85cb7ec118c4496d0c3802829fdc9af3b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9049
Md5:    c8dc4b8a7e9f7f4f84f0da568b43392b
Sha1:   3d32bff85cb7ec118c4496d0c3802829fdc9af3b
Sha256: 4b0ffde427085c796a7a5823604b29a4af43dbb93e99ec41f34feb37f52ac7d9
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc537c2d0-d011-4ed0-a5d4-5f5d2190c49b.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4366
x-amzn-requestid: ce25f5ab-0c92-431e-ae4e-618829594a74
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVNZFjHoAMFXLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813588-6a3a8dff70e717011e3a0606;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:37:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 75AMMfa7oq0Y51YPEC_FEDOoNVc9cgfjg9bOSOXwikONPdhW7OG3uQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:48:10 GMT
age: 64498
etag: "8665e5f3026f2c2b9505eb139c478f4d359851c3"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4366
Md5:    abd79421a3c44a8df11ad2cc50083309
Sha1:   8665e5f3026f2c2b9505eb139c478f4d359851c3
Sha256: 3a66b00498fa1322730705b1c4502614b5a520ac3f884f494d65e27a5bb62c3f
                                        
                                            GET /wp-content/uploads/2021/04/megapromo2021.png HTTP/1.1 
Host: megamartpromos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://megamartpromos.com/

search
                                         172.67.221.155
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 26 Nov 2022 15:43:07 GMT
Content-Length: 2055109
Connection: keep-alive
Last-Modified: Tue, 20 Apr 2021 15:02:22 GMT
ETag: "607eecfe-1f5bc5"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=D9W1vbg902sURFisjKCtLWPs3H%2BtfJ8qyJ9fPhFCH02%2FmaXxXWZmeba0ZBfkX3KrQdDRz6N71VYnM3u%2F51FE%2BX3v55Bcg%2BOzn4RYXRbD1%2F6XWmw%2F1cWvfidXD941L%2F09CmBGv5M%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7703bce82b91b50b-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 1920 x 1088, 8-bit/color RGBA, non-interlaced\012- data
Size:   2055109
Md5:    8b8da222d3bba00baee853aaa8efe60f
Sha1:   8f50958dc30957a1614b1b54f082a4e03e5fbac7
Sha256: 28ea0437f347b93220210bbacf98269d258721a149e5833da865b838e463e328
                                        
                                            GET /css?family=Montserrat%3A1%2C300%2C400%2C400italic%2C500%2C700%2C700italic&display=swap&ver=5.7.1 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://megamartpromos.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 26 Nov 2022 15:43:06 GMT
date: Sat, 26 Nov 2022 15:43:06 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---