r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 30c30d01178fc74ac5266ee64c3ee85b
c0c2af8a864c00aa85a8775d55f85ab107150a3b
c15644f69fbfeb99074c7e9711dfc9452ee164fa78eb981b6bae4fb7e3585f2a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C15644F69FBFEB99074C7E9711DFC9452EE164FA78EB981B6BAE4FB7E3585F2A"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2937
Expires: Sat, 19 Nov 2022 06:55:14 GMT
Date: Sat, 19 Nov 2022 06:06:17 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 67f53a639d57dd6237b5be86fe4f6c1b
287f09532dc331228d09c20b75f4160e91e9800a
41913a8af366685c42af59e9d8e02fccedbe68a3313d2d9fe353deb0c1019075
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4969
Cache-Control: max-age=107259
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 06:06:17 GMT
Etag: "63775eeb-1d7"
Expires: Sun, 20 Nov 2022 11:53:56 GMT
Last-Modified: Fri, 18 Nov 2022 10:31:07 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3a38b6dd8a4cc335c026aebf2ed348b6
8a386e0ccb0ca4dc502746c45b2ebc3aa3f83cf8
8b4040a645cec1841a00a22765eb3a74978559daf15c54bd4b41b6b48aab7f95
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B4040A645CEC1841A00A22765EB3A74978559DAF15C54BD4B41B6B48AAB7F95"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5267
Expires: Sat, 19 Nov 2022 07:34:04 GMT
Date: Sat, 19 Nov 2022 06:06:17 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 19 Nov 2022 05:45:06 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1271
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: wnxHzuB3IzNYmtItYZlOZkl7noftC8R4XODftMJuFvKUzey+AO4aPRBAwHLU+uFcbyqSrP46U6s=
x-amz-request-id: E71K36NSVKAS6KZQ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 19 Nov 2022 05:15:53 GMT
age: 3024
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
nancyskitchencatering.com/
301 Moved Permanently 245 B URL HTTP/1.1 nancyskitchencatering.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f025b2e385b833f351f61a81b8cfb1c2
c08ba7438ded8c375dac87ff29166c394d90824d
4705f9201c5615d2fffeaf3e696e793748b008a7e9a9ac682be22b1d25032e79
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: nancyskitchencatering.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 19 Nov 2022 06:06:17 GMT
Server: Apache
Location: http://www.nancyskitchencatering.com/
Content-Length: 245
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 19 Nov 2022 06:06:17 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 19 Nov 2022 05:25:01 GMT
cache-control: public,max-age=3600
age: 2476
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
www.nancyskitchencatering.com/
200 OK 7.8 kB URL HTTP/1.1 www.nancyskitchencatering.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1350), with CRLF, LF line terminators
Hash 386cfa60506fff8aa6330ce2b46ca75d
727ad776947d5aee05e12df9cbb2175a376b5082
12ec4dbf7f110abe72a1d5a85013a62489fd1516663e6a53270560914cead182
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: www.nancyskitchencatering.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sat, 19 Nov 2022 06:06:17 GMT
Server: Apache
Vary: X-W-SSL,Accept-Encoding,User-Agent
Set-Cookie: is_mobile=0; path=/; domain=www.nancyskitchencatering.com
language=en; expires=Sat, 03-Dec-2022 06:06:17 GMT; Max-Age=1209600; path=/
Cache-Control: private
ETag: W/"d179e202bff186318b2f08b9d0b68ab9-gzip"
Content-Encoding: gzip
X-Host: blu22.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 7845
Keep-Alive: timeout=10, max=73
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
ocsp.digicert.com/
200 OK 471 B IP
Hash fe40cc6ea871d80382b6082111393fbe
281f75d0a35dc8ef908bb0500e57abd86bd5388e
6d15422cdf7a6d72d06497188f27af893682314e82ac8a189a0ee2d798cb62d7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5001
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 06:06:17 GMT
Last-Modified: Sat, 19 Nov 2022 04:42:56 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
fonts.googleapis.com/css?family=Amaranth:400,700,400italic,700italic&subset=latin,latin-ext
200 OK 335 B URL HTTP/1.1 fonts.googleapis.com/css?family=Amaranth:400,700,400italic,700italic&subset=latin,latin-ext
IP
Hash a86ba3dcb274b57c1f8d88efadd1337f
c517d8eeefb6401a387064919f1f7bb688aad910
dcfc8baa581dc2c79ca4ce8984ded61ee18247112a102166c4b34444541571a6
GET /css?family=Amaranth:400,700,400italic,700italic&subset=latin,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Sat, 19 Nov 2022 06:06:17 GMT
Date: Sat, 19 Nov 2022 06:06:17 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
fonts.googleapis.com/css?family=Gentium+Book+Basic:400,700,400italic,700italic&subset=latin,latin-ext
200 OK 468 B URL HTTP/1.1 fonts.googleapis.com/css?family=Gentium+Book+Basic:400,700,400italic,700italic&subset=latin,latin-ext
IP
Hash 0592e7f3e4605e541ea9d4285dfc2128
3561da9714f1120b9fa18d7abb16ead721d66476
96a01f68e94a74c5b8e377b6bb027f882f548f0279c411fddefaa84fbede5283
GET /css?family=Gentium+Book+Basic:400,700,400italic,700italic&subset=latin,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Sat, 19 Nov 2022 06:06:17 GMT
Date: Sat, 19 Nov 2022 06:06:17 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
fonts.googleapis.com/css?family=Actor&subset=latin,latin-ext
200 OK 260 B URL HTTP/1.1 fonts.googleapis.com/css?family=Actor&subset=latin,latin-ext
IP
Hash 51867f8bad83f4b67a7bef4cec2ec0c5
2bae7cb31e9d2e875a67d4f7e64d6fbf27be6a42
7da17794363b1d8157bd2b633af0d2339e85e56f2dbafa604ac465eebf65c55c
GET /css?family=Actor&subset=latin,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Sat, 19 Nov 2022 06:06:17 GMT
Date: Sat, 19 Nov 2022 06:06:17 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
fonts.googleapis.com/css?family=Merriweather:400,300,300italic,700,400italic,700italic&subset=latin,latin-ext
200 OK 753 B URL HTTP/1.1 fonts.googleapis.com/css?family=Merriweather:400,300,300italic,700,400italic,700italic&subset=latin,latin-ext
IP
Hash 2c1d64ac3755d7caaf432cfe75f4b640
df95b33dc54841e20637ff4fd5508864df8a011a
29fba775d7377fc9dd72d270d48b4edd82a1f3928b79c2e790879569a248807c
GET /css?family=Merriweather:400,300,300italic,700,400italic,700italic&subset=latin,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Sat, 19 Nov 2022 06:06:17 GMT
Date: Sat, 19 Nov 2022 06:06:17 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
cdn2.editmysite.com/js/old/slideshow-jq.js?buildTime=1632434510
200 OK 13 kB URL HTTP/1.1 cdn2.editmysite.com/js/old/slideshow-jq.js?buildTime=1632434510
IP
File type ASCII text, with very long lines (32013)
Hash da04d4da36c827437eb064334cf40561
b54b259c2dce4a00e265deddf2ee0941dda6ed40
0064ed54b2f6244cda5252037026ceb744b58067811265aa1a10c3f7cd937b3a
GET /js/old/slideshow-jq.js?buildTime=1632434510 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 13265
Server: nginx
Content-Type: application/javascript
Last-Modified: Mon, 07 Nov 2022 17:13:03 GMT
ETag: "63693c9f-9e0b"
Expires: Tue, 22 Nov 2022 11:32:40 GMT
Cache-Control: max-age=1209600
X-Host: grn127.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sat, 19 Nov 2022 06:06:18 GMT
Age: 930817
X-Served-By: cache-sjc10021-SJC, cache-bma1683-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 110, 1
X-Timer: S1668837978.999947,VS0,VE1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1632434510&
200 OK 33 kB URL HTTP/1.1 cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1632434510&
IP
File type ASCII text, with very long lines (65024)
Hash d8a96093e4ac9525ad79fcfd57d8ef8a
c69965f81400795e52e7795f2befbb62dc84dbeb
260dadf35ac438d5101a0c5ad9f48d631d6e9652e92761af42e81338153831f2
GET /js/lang/en/stl.js?buildTime=1632434510& HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 32668
Server: nginx
Content-Type: application/javascript
Last-Modified: Wed, 16 Nov 2022 22:42:05 GMT
ETag: "6375673d-2c00a"
Expires: Thu, 01 Dec 2022 12:08:52 GMT
Cache-Control: max-age=1209600
X-Host: blu95.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sat, 19 Nov 2022 06:06:18 GMT
Age: 151045
X-Served-By: cache-sjc10060-SJC, cache-bma1658-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 8, 1
X-Timer: S1668837978.999632,VS0,VE1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/css/old/slideshow/slideshow.css?1632434510
200 OK 1.5 kB URL HTTP/1.1 cdn2.editmysite.com/css/old/slideshow/slideshow.css?1632434510
IP
File type ASCII text, with very long lines (7352)
Hash ba9bbd4df86b5b255f5ef44658e52130
3970cecb6939475f95556c2d32d17de0d1645f32
244b7b062e6e558009c622e46008d5542604b9163315220199a2ac50868ff3e5
GET /css/old/slideshow/slideshow.css?1632434510 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1488
Server: nginx
Content-Type: text/css
Last-Modified: Fri, 18 Nov 2022 18:59:37 GMT
ETag: W/"6377d619-1cb9"
Expires: Fri, 02 Dec 2022 20:14:46 GMT
Cache-Control: max-age=1209600
X-Host: blu40.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sat, 19 Nov 2022 06:06:18 GMT
Age: 35491
X-Served-By: cache-sjc10072-SJC, cache-bma1663-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 7, 1
X-Timer: S1668837978.000030,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/css/old/fancybox.css?1632434510
200 OK 1.2 kB URL HTTP/1.1 cdn2.editmysite.com/css/old/fancybox.css?1632434510
IP
File type ASCII text, with very long lines (3910)
Hash b644e92258f4c7c0b4270047652d1e60
93734d52ee9e86a768159e514076051813c39cd9
29199496fb817668f887938571046abcdfb49063d0207d571b361f221f467907
GET /css/old/fancybox.css?1632434510 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1218
Server: nginx
Content-Type: text/css
Last-Modified: Tue, 15 Nov 2022 18:35:43 GMT
ETag: "6373dbff-f47"
Expires: Wed, 30 Nov 2022 13:51:42 GMT
Cache-Control: max-age=1209600
X-Host: blu84.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sat, 19 Nov 2022 06:06:18 GMT
Age: 231276
X-Served-By: cache-sjc10056-SJC, cache-bma1665-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 37, 1
X-Timer: S1668837978.000386,VS0,VE1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/css/sites.css?buildTime=1632434510
200 OK 30 kB URL HTTP/1.1 cdn2.editmysite.com/css/sites.css?buildTime=1632434510
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash d10158b22b553f723d99dc78eaee6390
80f2d6670cfb0d01cd20c471cf8e3e6465ddd3f6
939c7a8e1ad74a44e0c847e38533e69e36454b6805d25acf3fb0cb5c472d245e
GET /css/sites.css?buildTime=1632434510 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 29746
Server: nginx
Content-Type: text/css
Last-Modified: Fri, 11 Nov 2022 17:05:10 GMT
ETag: W/"636e80c6-347ac"
Expires: Mon, 28 Nov 2022 12:58:53 GMT
Cache-Control: max-age=1209600
X-Host: grn67.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sat, 19 Nov 2022 06:06:18 GMT
Age: 407244
X-Served-By: cache-sjc10055-SJC, cache-bma1622-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 36, 1
X-Timer: S1668837978.999808,VS0,VE1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/js/site/main.js?buildTime=1632434510
200 OK 146 kB URL HTTP/1.1 cdn2.editmysite.com/js/site/main.js?buildTime=1632434510
IP
File type ASCII text, with very long lines (32147)
Size 146 kB (146400 bytes)
Hash 81b8673c5d3aa3ab8c0574f2a8f0e3b4
2e0661bc7907d9e2703b3347c3fec579f0aef5d6
0e981f4de6287406ce261fddea24aa05ded4b6a8c4c07283c363c1502071cf40
GET /js/site/main.js?buildTime=1632434510 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 146400
Server: nginx
Content-Type: application/javascript
Last-Modified: Tue, 08 Nov 2022 23:00:10 GMT
ETag: "636adf7a-74804"
Expires: Wed, 23 Nov 2022 10:07:44 GMT
Cache-Control: max-age=1209600
X-Host: blu140.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sat, 19 Nov 2022 06:06:18 GMT
Age: 849513
X-Served-By: cache-sjc10053-SJC, cache-bma1633-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 145, 1
X-Timer: S1668837978.999350,VS0,VE1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1632434510
200 OK 159 kB URL HTTP/1.1 cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1632434510
IP
File type ASCII text, with very long lines (32007)
Size 159 kB (158975 bytes)
Hash c29a5e4fd4ee0d3b7cd0597f2b9b602b
bb134ed641467954f4a724167dc7ea56a03e7fa8
bf9850a7e6dd269898b78ecf07a34438bc300cad0bbb2d280e10ccadf81646b2
GET /js/site/main-customer-accounts-site.js?buildTime=1632434510 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 158975
Server: nginx
Content-Type: application/javascript
Last-Modified: Fri, 18 Nov 2022 01:33:58 GMT
ETag: "6376e106-8250f"
Expires: Fri, 02 Dec 2022 11:06:45 GMT
Cache-Control: max-age=1209600
X-Host: blu63.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sat, 19 Nov 2022 06:06:18 GMT
Age: 68372
X-Served-By: cache-sjc10076-SJC, cache-bma1658-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 41, 1
X-Timer: S1668837978.039251,VS0,VE1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 07caf241d63e15426cd26434ef88e9dd
ec289ab860ffccd49ce9a62d2c47c59dc181fbd5
d1f4bc6604b8a399049b5943d23dbfb842d9a100bf6f5c71e91a27cd3588cecb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 06:06:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.nancyskitchencatering.com/files/main_style.css?1632439494
200 OK 2.6 kB URL HTTP/1.1 www.nancyskitchencatering.com/files/main_style.css?1632439494
IP
Hash 7b65e32e07b6487df66ae9b2df6f7ad5
36dfb87fa67cd4f0c3fcaa4ce20d307c2e8f5f66
6234fd2a3ce034123b6520a45728e1626e7e89f76e16e1cf9f9268c76f6b7949
GET /files/main_style.css?1632439494 HTTP/1.1
Host: www.nancyskitchencatering.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/
Cookie: is_mobile=0; language=en
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 19 Nov 2022 06:06:18 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: blu68.sf2p.intern.weebly.net
Content-Encoding: gzip
cdn2.editmysite.com/images/site/footer/footer-toast-published-image-1.png
200 OK 9.7 kB URL HTTP/1.1 cdn2.editmysite.com/images/site/footer/footer-toast-published-image-1.png
IP
File type PNG image data, 199 x 97, 8-bit colormap, non-interlaced\012- data
Hash 6e0f7ad31bf187e0d88fc5787573ba71
14e8b85cc32a01c8901e4ac0160582d29a45e9e6
580ef6409e067a4ec4a427400c7d6216184869e2da53343df20753cc1f8a46cd
GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 9677
X-GUploader-UploadID: ADPycdujQNpHaXULXK5hWOudOsrFbrCOJBmkXkf6lNHnzHxB1q3PphW4yFVZQbxms7rfGEwEu0IdDaAyLbpAPqDN6NvCrqCgiKDD
Cache-Control: public, max-age=86400, s-maxage=259200
Expires: Thu, 06 Oct 2022 22:59:09 GMT
Last-Modified: Tue, 12 Feb 2019 18:19:08 GMT
ETag: "6e0f7ad31bf187e0d88fc5787573ba71"
x-goog-generation: 1549995548326466
x-goog-metageneration: 3
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 9677
Content-Type: image/png
x-goog-hash: crc32c=QhrKCw==, md5=bg960xvxh+DYj8V4dXO6cQ==
x-goog-storage-class: STANDARD
Server: UploadServer
Accept-Ranges: bytes
Date: Sat, 19 Nov 2022 06:06:18 GMT
Via: 1.1 varnish
Age: 111938
X-Served-By: cache-bma1658-BMA
X-Cache: HIT
X-Cache-Hits: 304
X-Timer: S1668837978.138439,VS0,VE0
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 07caf241d63e15426cd26434ef88e9dd
ec289ab860ffccd49ce9a62d2c47c59dc181fbd5
d1f4bc6604b8a399049b5943d23dbfb842d9a100bf6f5c71e91a27cd3588cecb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 06:06:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: WTKq2k3sl6/umv5rMO5b5w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: hHMsjyL3TdvUj3BOv0nbvQbLfkg=
cdn2.editmysite.com/js/wsnbn/snowday262.js
200 OK 26 kB URL HTTP/1.1 cdn2.editmysite.com/js/wsnbn/snowday262.js
IP
File type ASCII text, with very long lines (2512)
Hash 234327230add9a5a5d61a48829ea4565
7966cc0e4bd76f88ff193c8a99a067de804b7129
bb696c58d9ae5fa635b3ff22efdf60de9ac2f8ef9df5e2f2d58dd5f8dc99df75
GET /js/wsnbn/snowday262.js HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 25752
Server: nginx
Content-Type: application/javascript
Last-Modified: Wed, 09 Nov 2022 00:31:12 GMT
ETag: "636af4d0-124fe"
Expires: Thu, 24 Nov 2022 08:38:41 GMT
Cache-Control: max-age=1209600
X-Host: grn91.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sat, 19 Nov 2022 06:06:18 GMT
Age: 768456
X-Served-By: cache-sjc10061-SJC, cache-bma1658-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 49, 8572
X-Timer: S1668837978.293705,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
fonts.gstatic.com/s/gentiumbookbasic/v16/pe0zMJCbPYBVokB1LHA9bbyaQb8ZGjc4ULF6.woff2
200 OK 23 kB URL HTTP/1.1 fonts.gstatic.com/s/gentiumbookbasic/v16/pe0zMJCbPYBVokB1LHA9bbyaQb8ZGjc4ULF6.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22856, version 1.0\012- data
Hash 7443b3d0f00efac22eece2a967fa671f
1d444dfc311fb0f30deed25143215bb54b7015ca
072acc019b46c9d290a7c1497a4ce04a10036b5a421b0c8d4bcad8548811d2ce
GET /s/gentiumbookbasic/v16/pe0zMJCbPYBVokB1LHA9bbyaQb8ZGjc4ULF6.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.nancyskitchencatering.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 22856
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 16 Nov 2022 10:10:08 GMT
Expires: Thu, 16 Nov 2023 10:10:08 GMT
Cache-Control: public, max-age=31536000
Age: 244570
Last-Modified: Thu, 21 Apr 2022 16:41:57 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/actor/v17/wEOzEBbCkc5cO0ejVSk.woff2
200 OK 22 kB URL HTTP/1.1 fonts.gstatic.com/s/actor/v17/wEOzEBbCkc5cO0ejVSk.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 21976, version 1.0\012- data
Hash 7ee7f470152787952958d6adfa07b2ac
14a09075b2cbec9ff65302de9d634f9011f70e53
b31aaefa522d67846638fa4181bbb22375bd0cb1beb37d514609c3821953161a
GET /s/actor/v17/wEOzEBbCkc5cO0ejVSk.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.nancyskitchencatering.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 21976
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 18 Nov 2022 08:15:46 GMT
Expires: Sat, 18 Nov 2023 08:15:46 GMT
Cache-Control: public, max-age=31536000
Age: 78632
Last-Modified: Tue, 19 Apr 2022 19:22:29 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/gentiumbookbasic/v16/pe0wMJCbPYBVokB1LHA9bbyaQb8ZGjcw65RvzIfZ.woff2
200 OK 23 kB URL HTTP/1.1 fonts.gstatic.com/s/gentiumbookbasic/v16/pe0wMJCbPYBVokB1LHA9bbyaQb8ZGjcw65RvzIfZ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22820, version 1.0\012- data
Hash eae9ae3905823851d35a8e30bc70e363
c636a6ce57db35fcb830262ebb988f193f29d123
99f89dd94eec60aff4b7aaa87fa127776454a56760c6b5276b0d71e74a84c9f1
GET /s/gentiumbookbasic/v16/pe0wMJCbPYBVokB1LHA9bbyaQb8ZGjcw65RvzIfZ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.nancyskitchencatering.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 22820
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 18 Nov 2022 02:08:41 GMT
Expires: Sat, 18 Nov 2023 02:08:41 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 21 Apr 2022 16:41:56 GMT
Content-Type: font/woff2
Age: 100657
fonts.gstatic.com/s/amaranth/v18/KtkuALODe433f0j1zMnFHdA.woff2
200 OK 26 kB URL HTTP/1.1 fonts.gstatic.com/s/amaranth/v18/KtkuALODe433f0j1zMnFHdA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 26272, version 1.0\012- data
Hash acd820577f3bb34ce8625c9483bb1b91
ad95db0c1e705f0f602117a8dd669b4009b17e41
aae85c7c0ef572290bd44015db5d748cddbf34a5e53a14fb72f37e0a90243fd6
GET /s/amaranth/v18/KtkuALODe433f0j1zMnFHdA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.nancyskitchencatering.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 26272
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 19 Nov 2022 01:42:21 GMT
Expires: Sun, 19 Nov 2023 01:42:21 GMT
Cache-Control: public, max-age=31536000
Age: 15837
Last-Modified: Tue, 19 Apr 2022 19:39:04 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/amaranth/v18/KtkpALODe433f0j1zMF-OMWl42E.woff2
200 OK 23 kB URL HTTP/1.1 fonts.gstatic.com/s/amaranth/v18/KtkpALODe433f0j1zMF-OMWl42E.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23216, version 1.0\012- data
Hash 98d83277bd117abc8b651a5320211950
2eea1631e144c34362405cbcbca53ebc8cb6a4cf
a0dc04140461fa731240dad9796d0156e28691f33853a622223e98f77f525e0d
GET /s/amaranth/v18/KtkpALODe433f0j1zMF-OMWl42E.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.nancyskitchencatering.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 23216
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 19 Nov 2022 05:28:33 GMT
Expires: Sun, 19 Nov 2023 05:28:33 GMT
Cache-Control: public, max-age=31536000
Age: 2265
Last-Modified: Tue, 19 Apr 2022 19:19:23 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/gentiumbookbasic/v16/pe0xMJCbPYBVokB1LHA9bbyaQb8ZGjc4VYF466I.woff2
200 OK 24 kB URL HTTP/1.1 fonts.gstatic.com/s/gentiumbookbasic/v16/pe0xMJCbPYBVokB1LHA9bbyaQb8ZGjc4VYF466I.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23680, version 1.0\012- data
Hash f2cb123f268eb6d7317c9a2bf76f1ca0
3db85265cf3bed6677ad5474ad1101a77c742712
8ee5526373d124648968d54b9a5c44510ad001b14e9be0dc4c8a2a46c6b6842f
GET /s/gentiumbookbasic/v16/pe0xMJCbPYBVokB1LHA9bbyaQb8ZGjc4VYF466I.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.nancyskitchencatering.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 23680
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 15 Nov 2022 18:03:17 GMT
Expires: Wed, 15 Nov 2023 18:03:17 GMT
Cache-Control: public, max-age=31536000
Age: 302581
Last-Modified: Thu, 21 Apr 2022 16:51:22 GMT
Content-Type: font/woff2
cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1668819672
200 OK 886 B URL HTTP/1.1 cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1668819672
IP
File type ASCII text, with very long lines (2632)
Hash 5c465ace654da8d0e367f91e7751ae62
f218f483eccbba5be90abf97eff819569329f8b7
0c91c8e311bc809644913a2ff023585ba587ecfc834ba3cd152544e75d422bd9
GET /css/free-footer-v3.css?buildtime=1668819672 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 886
Server: nginx
Content-Type: text/css
Last-Modified: Fri, 18 Nov 2022 22:54:11 GMT
ETag: "63780d13-a49"
Expires: Sat, 03 Dec 2022 01:02:43 GMT
Cache-Control: max-age=1209600
X-Host: grn153.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sat, 19 Nov 2022 06:06:18 GMT
Age: 18215
X-Served-By: cache-sjc10068-SJC, cache-bma1658-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 67, 11
X-Timer: S1668837978.379488,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/sprites/site/forms-s3786257308.png
200 OK 341 B URL HTTP/1.1 cdn2.editmysite.com/sprites/site/forms-s3786257308.png
IP
File type PNG image data, 13 x 26, 8-bit gray+alpha, non-interlaced\012- data
Hash 8bebedaad333db9b949dab050728d9be
9c58d43d230d8b5e6befc2198999840ff555934c
6928442dcdfd67ab71262fb35b80fdddb13277f7fceb3744d417b2d22bcaeecb
GET /sprites/site/forms-s3786257308.png HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cdn2.editmysite.com/css/sites.css?buildTime=1632434510
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 341
Server: nginx
Content-Type: image/png
Last-Modified: Thu, 17 Nov 2022 13:30:34 GMT
ETag: "6376377a-155"
Expires: Fri, 02 Dec 2022 09:04:13 GMT
Cache-Control: max-age=1209600
X-Host: blu102.sf2p.intern.weebly.net
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sat, 19 Nov 2022 06:06:18 GMT
Age: 75724
X-Served-By: cache-sjc10072-SJC, cache-bma1633-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 15, 1
X-Timer: S1668837978.387783,VS0,VE1
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/images/old/slideshow/control_icons.gif
200 OK 187 B URL HTTP/1.1 cdn2.editmysite.com/images/old/slideshow/control_icons.gif
IP
File type GIF image data, version 89a, 25 x 13\012- data
Hash 88041de02e278ceedcd7de52bcdb8156
775bf1f3464e006b3f644512e52477ecc9385222
00bd643d7b1cd928b72aa4b6d69df8d5838a8f07e26294fda69ab365fa454c3f
GET /images/old/slideshow/control_icons.gif HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cdn2.editmysite.com/css/old/slideshow/slideshow.css?1632434510
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 187
X-GUploader-UploadID: ADPycdszrKqZVlGm8g_bucHInabmug1Yu_TBTqFaNwSf6uyBStUDyJUr8SBTCkbnIXBO_T3CzsjhkyieYRCCSuogJTkdZg
Cache-Control: public, max-age=86400, s-maxage=259200
Expires: Fri, 14 Oct 2022 00:49:31 GMT
Last-Modified: Thu, 25 May 2017 18:53:05 GMT
ETag: "88041de02e278ceedcd7de52bcdb8156"
x-goog-generation: 1495738385881388
x-goog-metageneration: 6
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 187
Content-Type: image/gif
x-goog-hash: crc32c=P9yuOw==, md5=iAQd4C4njO7c195SvNuBVg==
x-goog-storage-class: STANDARD
Server: UploadServer
Accept-Ranges: bytes
Date: Sat, 19 Nov 2022 06:06:18 GMT
Via: 1.1 varnish
Age: 18157
X-Served-By: cache-bma1658-BMA
X-Cache: HIT
X-Cache-Hits: 2
X-Timer: S1668837978.395090,VS0,VE0
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5e884c53db72411f06e2209d005f7586
6e1049a7fc26d6a3259a97bfca9dc6ba7b0dd5af
2965603dd297987ffa36ffd33c133f2c6a67fa6df1551554160b65ce804b0198
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 06:06:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?_=1668837976300
200 OK 553 B URL HTTP/2 www.google.com/recaptcha/api.js?_=1668837976300
IP
File type ASCII text, with very long lines (850), with no line terminators
Hash 1309ff133720d219cc98090d66a051ed
b96fc5a893e42be16d687d7abdecdb13d348a019
358683c66634ea5ee3021c93111d8621d583880bcbbfadf3ec2ff87a15ea1038
GET /recaptcha/api.js?_=1668837976300 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Sat, 19 Nov 2022 06:06:18 GMT
date: Sat, 19 Nov 2022 06:06:18 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 553
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn2.editmysite.com/images/landing-pages/global/logotype.svg
200 OK 1.5 kB URL HTTP/1.1 cdn2.editmysite.com/images/landing-pages/global/logotype.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2858)
Hash 0d1c9fb7005532e7b245cfdf1280d805
2466421992f1fb0e44829833aaee7afc0e5ac7cc
8691b92eed1360903b2182d81e491c80141d0cd051366ce3e8c4f359538eb1ff
GET /images/landing-pages/global/logotype.svg HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1668819672
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1488
X-GUploader-UploadID: ADPycdv0nua7AZ1FNM2Dqt_OC_ZAh2x5sQNCm4iEGHEpqpMa25arXkBGqugURSlB-_UmYI69v9Cv9b2XFF4cWh0HnvBlJA
x-goog-generation: 1539207420450301
x-goog-metageneration: 3
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 3507
x-goog-hash: crc32c=vgUlyw==, md5=vGHctDGhTFCAde7/T3RSOg==
x-goog-storage-class: STANDARD
Server: UploadServer
Expires: Fri, 14 Oct 2022 02:20:02 GMT
Cache-Control: public, max-age=86400, s-maxage=259200
Last-Modified: Wed, 10 Oct 2018 21:37:00 GMT
ETag: "bc61dcb431a14c508075eeff4f74523a"
Content-Type: image/svg+xml
Content-Encoding: gzip
Accept-Ranges: bytes
Date: Sat, 19 Nov 2022 06:06:18 GMT
Via: 1.1 varnish
Age: 13101
X-Served-By: cache-bma1658-BMA
X-Cache: HIT
X-Cache-Hits: 9
X-Timer: S1668837978.455703,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/fonts/SQ_Market/sqmarket-medium.woff2
200 OK 31 kB URL HTTP/1.1 cdn2.editmysite.com/fonts/SQ_Market/sqmarket-medium.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 30768, version 1.393\012- data
Hash 2344124773c71bf4fa4ad407e7c3a467
3394a43ab1efab8a22a1f07222f7f02a9e12cbb8
bd4d2e29f503390e4951af9232fc43780b43d349647188d8f3f600835f16afb7
GET /fonts/SQ_Market/sqmarket-medium.woff2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.nancyskitchencatering.com
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 30768
Server: nginx
Content-Type: font/woff2
Last-Modified: Wed, 02 Nov 2022 21:12:12 GMT
ETag: "6362dd2c-7830"
Expires: Tue, 22 Nov 2022 09:22:38 GMT
Cache-Control: max-age=1209600
X-Host: grn132.sf2p.intern.weebly.net
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sat, 19 Nov 2022 06:06:18 GMT
Age: 938621
X-Served-By: cache-sjc10054-SJC, cache-bma1624-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 38, 2762
X-Timer: S1668837978.475237,VS0,VE0
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a00fff9dd1711061b285e2136c973d13
66548ac11fc58024c6994539ab81804add41d2f2
4b87c5468c15817686a8497324c2a06d18fd5574141aa0476bf98aa3b8395a8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 06:06:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.nancyskitchencatering.com/files/theme/nav-link-bg.png?1632439494
200 OK 1.0 kB URL HTTP/1.1 www.nancyskitchencatering.com/files/theme/nav-link-bg.png?1632439494
IP
File type PNG image data, 66 x 3, 8-bit/color RGBA, non-interlaced\012- data
Hash 02d2a2684803bb66a9bc4a0c9e9d4f5b
5a6d595be3c4f5b46d35923831370bd13b46fff9
a116c42e9cca4622828b3cc07efc111888e2018354e2507fcd69e00fcd307d01
Analyzer Verdict Alert fortinet Malware
GET /files/theme/nav-link-bg.png?1632439494 HTTP/1.1
Host: www.nancyskitchencatering.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/files/main_style.css?1632439494
Cookie: is_mobile=0; language=en
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 19 Nov 2022 06:06:18 GMT
Content-Type: image/png; charset=binary
Content-Length: 1004
Connection: keep-alive
Last-Modified: Wed, 15 Apr 2020 11:51:17 GMT
ETag: "02d2a2684803bb66a9bc4a0c9e9d4f5b"
x-amz-request-id: tx000000000000028278bae-005f20bc7c-1317a98-las
X-Storage-Bucket: za116
X-Storage-Object: a116c42e9cca4622828b3cc07efc111888e2018354e2507fcd69e00fcd307d01
X-Host: grn33.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.nancyskitchencatering.com/files/theme/social-beige.png?1632439494
200 OK 8.6 kB URL HTTP/1.1 www.nancyskitchencatering.com/files/theme/social-beige.png?1632439494
IP
File type PNG image data, 275 x 75, 8-bit/color RGBA, non-interlaced\012- data
Hash c2d72fefdd4ddda1977b53febcb17a5b
5b91ca1031043a1263cc21eb8cad01dc243e2a2b
3b64896e590dfc5e987206aed74c58a25d4f676fdd6035f628e0aa94c5322cb1
Analyzer Verdict Alert fortinet Malware
GET /files/theme/social-beige.png?1632439494 HTTP/1.1
Host: www.nancyskitchencatering.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/files/main_style.css?1632439494
Cookie: is_mobile=0; language=en
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 19 Nov 2022 06:06:18 GMT
Content-Type: image/png; charset=binary
Content-Length: 8553
Connection: keep-alive
Last-Modified: Wed, 15 Apr 2020 11:51:18 GMT
x-rgw-object-type: Normal
ETag: "c2d72fefdd4ddda1977b53febcb17a5b"
x-amz-request-id: tx00000000000003468b450-006376cba1-c699baa-sfo1
X-Storage-Bucket: z3b64
X-Storage-Object: 3b64896e590dfc5e987206aed74c58a25d4f676fdd6035f628e0aa94c5322cb1
X-Host: blu135.sf2p.intern.weebly.net
Accept-Ranges: bytes
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 0 B URL HTTP/1.1 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://www.nancyskitchencatering.com/
Origin: http://www.nancyskitchencatering.com
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 19 Nov 2022 06:06:18 GMT
Content-Length: 0
Connection: keep-alive
Server: nginx
Access-Control-Allow-Origin: http://www.nancyskitchencatering.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type, SP-Anonymous
Access-Control-Max-Age: 600
www.nancyskitchencatering.com/files/theme/nav-bg.png?1632439494
200 OK 20 kB URL HTTP/1.1 www.nancyskitchencatering.com/files/theme/nav-bg.png?1632439494
IP
File type PNG image data, 966 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 62c533e4321e86d04626532ff44b4a3d
abb3b6a93f4a7d5dd36231348581df8267142a76
77133f3dbdacd4a94c9464643675ec8e8d36627161b1e41a260918c094f603c8
Analyzer Verdict Alert fortinet Malware
GET /files/theme/nav-bg.png?1632439494 HTTP/1.1
Host: www.nancyskitchencatering.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/files/main_style.css?1632439494
Cookie: is_mobile=0; language=en
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 19 Nov 2022 06:06:18 GMT
Content-Type: image/png; charset=binary
Content-Length: 19614
Connection: keep-alive
Last-Modified: Wed, 06 May 2020 17:18:22 GMT
x-rgw-object-type: Normal
ETag: "62c533e4321e86d04626532ff44b4a3d"
x-amz-request-id: tx00000000000001846df9c-0062e7261b-c03521c-sfo1
X-Storage-Bucket: z7713
X-Storage-Object: 77133f3dbdacd4a94c9464643675ec8e8d36627161b1e41a260918c094f603c8
X-Host: grn82.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.nancyskitchencatering.com/files/theme/content-bg.png?1632439494
200 OK 35 kB URL HTTP/1.1 www.nancyskitchencatering.com/files/theme/content-bg.png?1632439494
IP
File type PNG image data, 976 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 720c43530df33186f3fe67be15ee6e45
fb76e8e38b8e7bc3e8c8a39b2f636260ec7ad309
85c2c609e4368d50e8142b7c9af3c03b336eec315a69506a6e9d196814e49b2d
GET /files/theme/content-bg.png?1632439494 HTTP/1.1
Host: www.nancyskitchencatering.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/files/main_style.css?1632439494
Cookie: is_mobile=0; language=en
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 19 Nov 2022 06:06:18 GMT
Content-Type: image/png; charset=binary
Content-Length: 34989
Connection: keep-alive
Last-Modified: Wed, 15 Apr 2020 11:51:18 GMT
x-rgw-object-type: Normal
ETag: "720c43530df33186f3fe67be15ee6e45"
x-amz-request-id: tx00000000000003d4b515c-006320097d-c03521c-sfo1
X-Storage-Bucket: z85c2
X-Storage-Object: 85c2c609e4368d50e8142b7c9af3c03b336eec315a69506a6e9d196814e49b2d
X-Host: blu137.sf2p.intern.weebly.net
Accept-Ranges: bytes
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/1.1 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json; charset=UTF-8
Content-Length: 1782
Origin: http://www.nancyskitchencatering.com
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/
HTTP/1.1 200 OK
Date: Sat, 19 Nov 2022 06:06:18 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 2
Connection: keep-alive
Server: nginx
Set-Cookie: sp=5c7296d0-a32a-4512-86d7-2f7aa60d4b47; Expires=Sun, 19 Nov 2023 06:06:18 GMT; Domain=; Path=/; Secure; SameSite=None
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
Access-Control-Allow-Origin: http://www.nancyskitchencatering.com
Access-Control-Allow-Credentials: true
www.nancyskitchencatering.com/files/theme/divider.png?1632439494
200 OK 5.7 kB URL HTTP/1.1 www.nancyskitchencatering.com/files/theme/divider.png?1632439494
IP
File type PNG image data, 964 x 34, 8-bit/color RGBA, non-interlaced\012- data
Hash 2deedf9bdb8e23b47d47cce2a6eb838f
a04590a64d9dc81835bb357134b0dbc1cf5a1eaf
207adda513cad1348fe5563fd5d81d1c4978fd237cad7fe81d0a6f4ddcb45afa
GET /files/theme/divider.png?1632439494 HTTP/1.1
Host: www.nancyskitchencatering.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/files/main_style.css?1632439494
Cookie: is_mobile=0; language=en
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 19 Nov 2022 06:06:18 GMT
Content-Type: image/png; charset=binary
Content-Length: 5706
Connection: keep-alive
Last-Modified: Wed, 15 Apr 2020 11:51:15 GMT
x-rgw-object-type: Normal
ETag: "2deedf9bdb8e23b47d47cce2a6eb838f"
x-amz-request-id: tx00000000000000a25f143-006331edd7-c6aed46-sfo1
X-Storage-Bucket: z207a
X-Storage-Object: 207adda513cad1348fe5563fd5d81d1c4978fd237cad7fe81d0a6f4ddcb45afa
X-Host: grn134.sf2p.intern.weebly.net
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f7c5da16d7c4384a4c2454d6b0d84710
69fd80fdf2f1ce27b25617589c867cd1c6e5d2ab
a80d1b813523e44d2e59d7c2edd6919c0354873637bb15bccc88f66f5c24e05d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2309
Expires: Sat, 19 Nov 2022 06:44:48 GMT
Date: Sat, 19 Nov 2022 06:06:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f7c5da16d7c4384a4c2454d6b0d84710
69fd80fdf2f1ce27b25617589c867cd1c6e5d2ab
a80d1b813523e44d2e59d7c2edd6919c0354873637bb15bccc88f66f5c24e05d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2309
Expires: Sat, 19 Nov 2022 06:44:48 GMT
Date: Sat, 19 Nov 2022 06:06:19 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F141ee43e-4742-4784-a9a2-359cfa7ac9a3.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F141ee43e-4742-4784-a9a2-359cfa7ac9a3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 859348e84041e7934b7f959f087a3679
583310946175391015cb46fcfa476cca96ebb9a9
7fba6813b2d8f06a6098b2c628580190b094c79e300744506344a3febc5f06de
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F141ee43e-4742-4784-a9a2-359cfa7ac9a3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9681
x-amzn-requestid: c786a64b-40d2-4de1-adee-3a6ee4d791ef
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brlnQGuWoAMF_Wg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637482fb-02471a5a3d5f299d33f7b026;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 06:28:11 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Vaw_JJDie7z-IE1-40wBV8wW2dlZi8TKXbf3I0ZWw4NrtWZkHT2yCg==
via: 1.1 7d01bcfcfe27ce0b8979cf621dd081de.cloudfront.net (CloudFront), 1.1 b4085435efbe95a420f374958bd145be.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 16:42:12 GMT
age: 48247
etag: "583310946175391015cb46fcfa476cca96ebb9a9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47c537d4-e03f-4ec6-8922-6dce72c72ab9.jpeg
200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47c537d4-e03f-4ec6-8922-6dce72c72ab9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 459df915ce91b32b2dcc4850516d68a0
d7a5473d367e7965a4af55acbf4675ed7088fab2
a03e26ebee79ad9b9dda1bf680e0d2467ae6d5e582589ada9fe6ddfa437c483c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47c537d4-e03f-4ec6-8922-6dce72c72ab9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4851
x-amzn-requestid: 8c868655-d0eb-428d-9fc0-a7449f770bd4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brtDFF9HoAMFV9w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63748ee0-4f7daf8f7451dc5e0840f620;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 07:18:56 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: xirMw5z5GPbmx9Sii_I4iNeh1GS5k9lGmaaJvUGAPWoVyP0Tldhf1w==
via: 1.1 e9ba0a9a729ff2960a04323bf1833df8.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Sat, 19 Nov 2022 03:31:06 GMT
age: 9313
etag: "d7a5473d367e7965a4af55acbf4675ed7088fab2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8e1d1acd-0ae6-485d-9dd4-2c0c8271a9d3.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8e1d1acd-0ae6-485d-9dd4-2c0c8271a9d3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 11bb9d337001b4d155c63b05a0dd9945
14de1c48a2fe80b5947945c9ffa9630f03c5447a
8ee6d3a2f6dec36c49361ef855edeb170e92fbeff29d2ed77c7fd0cf44cfecf5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8e1d1acd-0ae6-485d-9dd4-2c0c8271a9d3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9146
x-amzn-requestid: e42f040e-a2f9-4538-bbaf-f1e64719f424
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brsmpGr5oAMFsmA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63748e2a-15b03190049271db549b1770;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 07:15:54 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: OjQm2RW65ZJDsUNay0untDwlufnFhXHwbpfAnCwEK3seEDiPIKrnfQ==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 09:25:03 GMT
age: 74476
etag: "14de1c48a2fe80b5947945c9ffa9630f03c5447a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6865a9f2-7103-433d-8ba8-2a1cca0f76d1.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6865a9f2-7103-433d-8ba8-2a1cca0f76d1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b834de670098398062ac06865cfa82a4
6b50f4fdc7d7dcbb11d8739b71e8e1eecec047b4
9eefe7101330de28d8d0fdb3f17a5453f3368324fbacb9f3a36826f76b7c9bde
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6865a9f2-7103-433d-8ba8-2a1cca0f76d1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5226
x-amzn-requestid: c0655cd4-83f6-4c7c-97b6-2847f38df126
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0QRwFPwoAMFV5Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377fa71-5f7eca026395cbe72daed116;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:41 GMT
x-amz-cf-pop: SEA19-C3, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: DnS0k9AYl9sm2A8iuri5RESUPmtYPV5x2lwFZkAv--qTtx7R62Z9hw==
via: 1.1 2c6b5dd77f1abe60653ce0454f344b64.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:48:43 GMT
etag: "6b50f4fdc7d7dcbb11d8739b71e8e1eecec047b4"
content-type: image/jpeg
age: 29856
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa85a710b-15b8-4e56-ab1e-15b8ca200023.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa85a710b-15b8-4e56-ab1e-15b8ca200023.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8870858ed5cc8a6dc3571374c83495cc
253ef3291eee18d2b2bf6f9becea014aaf5331dc
3f5d637a77e1a430a3b3a06303814c9a28de0db8e79e3a6c5f6c650c43799ffc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa85a710b-15b8-4e56-ab1e-15b8ca200023.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12117
x-amzn-requestid: fae8f201-318f-4e78-b1fa-bfab0764cceb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brkPuHTPIAMFxKQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637480ca-1e1e132b392d22892553f653;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 06:18:50 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: wk5LMr7_Sff89IGJ96it3GI0mwi3VwWavFj4Saja9L-lUzQ1Mewvxg==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 fec77e486350d1bd33f526a760d8b5a4.cloudfront.net (CloudFront), 1.1 google
date: Sat, 19 Nov 2022 03:28:25 GMT
age: 9474
etag: "253ef3291eee18d2b2bf6f9becea014aaf5331dc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c8f6118fc03f31862ff68fef8a2b9a7f
318c5d7acd0d36c816b09fcf1b7dc4bfb5ec7e73
cdd4d44f05cc524d7f2b1d6d792ecd8a9a933e52ecb7685a7d7ea786a510ef39
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8089
x-amzn-requestid: f3c55266-9b03-4b7f-b076-fdf56704318e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0QQyECioAMFzdQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377fa6b-3e10cef6117a10a4115cfce7;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:35 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: l3euSue3hLTcBU1OSLRCDuBDeXXM2mAIz0LhADeJV-30r-dW_TFV0w==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:48:36 GMT
etag: "318c5d7acd0d36c816b09fcf1b7dc4bfb5ec7e73"
content-type: image/jpeg
age: 29863
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.nancyskitchencatering.com/uploads/5/1/4/3/51431065/background-images/742280982.jpg
200 OK 165 kB URL HTTP/1.1 www.nancyskitchencatering.com/uploads/5/1/4/3/51431065/background-images/742280982.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, copyright=Mario Habenbacher], baseline, precision 8, 2280x1667, components 3\012- data
Size 165 kB (165148 bytes)
Hash 0c5c05484dc05003370531acea6eaf24
f2d1bb301be0d20caea79bcf130f85b48bda46da
53e1b90d6b7604d367dfa2a1697236fd57e3a0e38f2b9226f40621942684f875
GET /uploads/5/1/4/3/51431065/background-images/742280982.jpg HTTP/1.1
Host: www.nancyskitchencatering.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/
Cookie: is_mobile=0; language=en
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 19 Nov 2022 06:06:18 GMT
Content-Type: image/jpeg
Content-Length: 165148
Connection: keep-alive
Last-Modified: Thu, 24 Jan 2019 21:16:22 GMT
x-rgw-object-type: Normal
ETag: "0c5c05484dc05003370531acea6eaf24"
x-amz-request-id: tx0000000000000354f618f-006378725a-c669cc6-sfo1
X-Storage-Bucket: z53e1
X-Storage-Object: 53e1b90d6b7604d367dfa2a1697236fd57e3a0e38f2b9226f40621942684f875
X-Host: blu152.sf2p.intern.weebly.net
Accept-Ranges: bytes, bytes
www.nancyskitchencatering.com/files/theme/content-bg-top.png?1632439494
200 OK 121 kB URL HTTP/1.1 www.nancyskitchencatering.com/files/theme/content-bg-top.png?1632439494
IP
File type PNG image data, 976 x 346, 8-bit/color RGBA, non-interlaced\012- data
Size 121 kB (120703 bytes)
Hash 45ce3401d2a479564b85240943947051
04b504877f86a6f8a07aa31277c26f805c98369f
f6b1ceedc319bc50041ffec454177a0982c546cc78d71a1f9fc80d65ed29933b
Analyzer Verdict Alert fortinet Malware
GET /files/theme/content-bg-top.png?1632439494 HTTP/1.1
Host: www.nancyskitchencatering.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/files/main_style.css?1632439494
Cookie: is_mobile=0; language=en
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 19 Nov 2022 06:06:18 GMT
Content-Type: image/png; charset=binary
Content-Length: 120703
Connection: keep-alive
Last-Modified: Wed, 15 Apr 2020 11:51:18 GMT
x-rgw-object-type: Normal
ETag: "45ce3401d2a479564b85240943947051"
x-amz-request-id: tx000000000000033886d04-006376cba1-c67eadd-sfo1
X-Storage-Bucket: zf6b1
X-Storage-Object: f6b1ceedc319bc50041ffec454177a0982c546cc78d71a1f9fc80d65ed29933b
X-Host: blu135.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.nancyskitchencatering.com/files/theme/button.png?1632439494
200 OK 49 kB URL HTTP/1.1 www.nancyskitchencatering.com/files/theme/button.png?1632439494
IP
File type PNG image data, 400 x 264, 8-bit/color RGBA, non-interlaced\012- data
Hash 01757cd4aebd52b88ea2634cfe2f0b32
4adff5311b4a92b28ee25d2eb931ed552466ab46
2869ac61cd919441263096ef01013ab6862654d5751f1b3fd530cf19d1cb24fa
Analyzer Verdict Alert fortinet Malware
GET /files/theme/button.png?1632439494 HTTP/1.1
Host: www.nancyskitchencatering.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/files/main_style.css?1632439494
Cookie: is_mobile=0; language=en
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 19 Nov 2022 06:06:18 GMT
Content-Type: image/png; charset=binary
Content-Length: 49190
Connection: keep-alive
Last-Modified: Wed, 15 Apr 2020 11:51:18 GMT
x-rgw-object-type: Normal
ETag: "01757cd4aebd52b88ea2634cfe2f0b32"
x-amz-request-id: tx000000000000001de7438-0061a7ef7f-a9f1ce7-sfo1
X-Storage-Bucket: z2869
X-Storage-Object: 2869ac61cd919441263096ef01013ab6862654d5751f1b3fd530cf19d1cb24fa
X-Host: blu68.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.nancyskitchencatering.com/uploads/5/1/4/3/51431065/9719994_orig.jpg
200 OK 140 kB URL HTTP/1.1 www.nancyskitchencatering.com/uploads/5/1/4/3/51431065/9719994_orig.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 546x800, components 3\012- data
Size 140 kB (140493 bytes)
Hash d8dea7711d533bb3c9810ad5645e117c
fbc0987710f61ac6d5fafd2a5b7b3e1f8739f6d2
c7fab8250ed109564b2014ca9889c95daac62bd70fe8d23383b4e21b68d40fb0
GET /uploads/5/1/4/3/51431065/9719994_orig.jpg HTTP/1.1
Host: www.nancyskitchencatering.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/
Cookie: is_mobile=0; language=en
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 19 Nov 2022 06:06:19 GMT
Content-Type: image/jpeg
Content-Length: 140493
Connection: keep-alive
Last-Modified: Fri, 22 Nov 2019 17:39:17 GMT
x-rgw-object-type: Normal
ETag: "d8dea7711d533bb3c9810ad5645e117c"
x-amz-request-id: tx000000000000035889b08-006378725b-c695612-sfo1
X-Storage-Bucket: zc7fa
X-Storage-Object: c7fab8250ed109564b2014ca9889c95daac62bd70fe8d23383b4e21b68d40fb0
X-Host: grn40.sf2p.intern.weebly.net
Accept-Ranges: bytes, bytes
www.nancyskitchencatering.com/uploads/5/1/4/3/51431065/1434913214.png
200 OK 425 kB URL HTTP/1.1 www.nancyskitchencatering.com/uploads/5/1/4/3/51431065/1434913214.png
IP
File type PNG image data, 911 x 232, 8-bit/color RGBA, non-interlaced\012- data
Size 425 kB (424568 bytes)
Hash f14b342aa601fbf5e57a65547569a9b1
6b45dfb7353b142d3b9e09ef416a1484b12a67aa
b4e1e809fc63a4813839b2a62d3d70dc2192092c4e6a8e3cc5bb2472bbea62e8
GET /uploads/5/1/4/3/51431065/1434913214.png HTTP/1.1
Host: www.nancyskitchencatering.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/
Cookie: is_mobile=0; language=en
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 19 Nov 2022 06:06:18 GMT
Content-Type: image/png
Content-Length: 424568
Connection: keep-alive
Last-Modified: Fri, 22 Nov 2019 17:39:10 GMT
x-rgw-object-type: Normal
ETag: "f14b342aa601fbf5e57a65547569a9b1"
x-amz-request-id: tx0000000000000352fb13e-006378725a-c696eea-sfo1
X-Storage-Bucket: zb4e1
X-Storage-Object: b4e1e809fc63a4813839b2a62d3d70dc2192092c4e6a8e3cc5bb2472bbea62e8
X-Host: grn33.sf2p.intern.weebly.net
Accept-Ranges: bytes, bytes
www.nancyskitchencatering.com/files/theme/content-bg-bottom.png?1632439494
200 OK 123 kB URL HTTP/1.1 www.nancyskitchencatering.com/files/theme/content-bg-bottom.png?1632439494
IP
File type PNG image data, 976 x 353, 8-bit/color RGBA, non-interlaced\012- data
Size 123 kB (122688 bytes)
Hash 6d395762f5182db9948a05fb1f63ce86
c121168640a17acee81bb078b6fcf70b032fcb91
64235cf998fbf2b04fba79127d885aa788612b11fb3baccd1ac01f9766bd0799
Analyzer Verdict Alert fortinet Malware
GET /files/theme/content-bg-bottom.png?1632439494 HTTP/1.1
Host: www.nancyskitchencatering.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/files/main_style.css?1632439494
Cookie: is_mobile=0; language=en
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 19 Nov 2022 06:06:18 GMT
Content-Type: image/png; charset=binary
Content-Length: 122688
Connection: keep-alive
Last-Modified: Wed, 06 May 2020 17:18:22 GMT
x-rgw-object-type: Normal
ETag: "6d395762f5182db9948a05fb1f63ce86"
x-amz-request-id: tx000000000000058dd3354-00623b62ea-a9f41e7-sfo1
X-Storage-Bucket: z6423
X-Storage-Object: 64235cf998fbf2b04fba79127d885aa788612b11fb3baccd1ac01f9766bd0799
X-Host: blu70.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.google-analytics.com/ga.js
200 OK 17 kB URL HTTP/1.1 www.google-analytics.com/ga.js
IP
File type ASCII text, with very long lines (1305)
Hash 01d5892e6e243b52998310c2925b9f3a
58180151b6a6ee4af73583a214b68efb9e8844d4
7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
GET /ga.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/
HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 17168
Date: Sat, 19 Nov 2022 05:05:53 GMT
Expires: Sat, 19 Nov 2022 07:05:53 GMT
Cache-Control: public, max-age=7200
Age: 3626
Last-Modified: Tue, 27 Sep 2022 22:01:05 GMT
Content-Type: text/javascript
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c58de690a701dea26333a42815dc3003
91d9e60c285f6578b5d814901a90f52cafbb8790
179d035993138ec5fdb0b2bf1987888f751903e959af09e335ada210be842ca6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 06:06:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
200 OK 163 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
IP
File type ASCII text, with very long lines (730)
Size 163 kB (162976 bytes)
Hash 79d18cf4265108d7cecca1bf4ada6109
e51d0285a545381d4c39e9e0292a650ffeeecbb9
59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.nancyskitchencatering.com
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Nov 2022 15:30:33 GMT
expires: Fri, 17 Nov 2023 15:30:33 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 138946
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c58de690a701dea26333a42815dc3003
91d9e60c285f6578b5d814901a90f52cafbb8790
179d035993138ec5fdb0b2bf1987888f751903e959af09e335ada210be842ca6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 06:06:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.nancyskitchencatering.com/favicon.ico
200 OK 4.3 kB URL HTTP/1.1 www.nancyskitchencatering.com/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash 4d27526198ac873ccec96935198e0fb9
b98d8b73ad6a0f7477c3397561b4aab37bf262aa
40a2146151863bcf46c786d596e81a308d1b0d26d74635be441e92656f29b1b4
GET /favicon.ico HTTP/1.1
Host: www.nancyskitchencatering.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/
Cookie: is_mobile=0; language=en; _snow_ses.144a=*; _snow_id.144a=65bca91d-2ef2-4104-9cbc-cc567374e9b2.1668837976.1.1668837976.1668837976.f218a725-6fac-4d11-a2da-18f108d725f2
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 19 Nov 2022 06:06:19 GMT
Content-Type: image/x-icon
Content-Length: 4286
Connection: keep-alive
Last-Modified: Fri, 24 Sep 2021 21:48:12 GMT
x-rgw-object-type: Normal
ETag: "4d27526198ac873ccec96935198e0fb9"
x-amz-request-id: tx000000000000000044693-006258b622-4d5d368-las
X-Storage-Bucket: z40a2
X-Storage-Object: 40a2146151863bcf46c786d596e81a308d1b0d26d74635be441e92656f29b1b4
X-Host: grn34.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.nancyskitchencatering.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]
200 OK 348 B URL HTTP/1.1 www.nancyskitchencatering.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]
IP
File type JSON data\012- , ASCII text, with very long lines (348), with no line terminators
Hash a944dd688c99d2901d6719be713271c0
4f5454d5d434829baf46671638610791758725d9
adb97e1bc686c58b4286f1208d2bd969687c6cf3e2fc468697dfd956d260de49
Analyzer Verdict Alert fortinet Malware
POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1
Host: www.nancyskitchencatering.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 83
Origin: http://www.nancyskitchencatering.com
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/
Cookie: is_mobile=0; language=en; _snow_ses.144a=*; _snow_id.144a=65bca91d-2ef2-4104-9cbc-cc567374e9b2.1668837976.1.1668837976.1668837976.f218a725-6fac-4d11-a2da-18f108d725f2
HTTP/1.1 200 OK
Date: Sat, 19 Nov 2022 06:06:19 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: blu43.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 348
Keep-Alive: timeout=10, max=58
Connection: Keep-Alive
Content-Type: application/json
cdn2.editmysite.com/images/old/loading.gif
200 OK 3.0 kB URL HTTP/1.1 cdn2.editmysite.com/images/old/loading.gif
IP
File type GIF image data, version 89a, 30 x 30\012- data
Hash 0b0212ec4e07451700c88a335ebba854
e62e40bbd31145dc64c0a555991a5dc5696d1943
37f5bf015ade9651005d72bcfdbb48838014c1c357f848585df731bc7eaff120
GET /images/old/loading.gif HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cdn2.editmysite.com/css/old/slideshow/slideshow.css?1632434510
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 2964
X-GUploader-UploadID: ADPycducMdWWPXXJMiNEYpt6yoeOvosCD6SmTTxRFSW9bghqzZJxsoV6UapBMYHrhV8AVkS_PAytcl1uIushc6lvZ8Xmbg
Cache-Control: public, max-age=86400, s-maxage=259200
Expires: Fri, 11 Nov 2022 01:42:41 GMT
Last-Modified: Thu, 25 May 2017 18:45:50 GMT
ETag: "0b0212ec4e07451700c88a335ebba854"
x-goog-generation: 1495737950396999
x-goog-metageneration: 6
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 2964
Content-Type: image/gif
x-goog-hash: crc32c=F+8alw==, md5=CwIS7E4HRRcAyIozXruoVA==
x-goog-storage-class: STANDARD
Server: UploadServer
Accept-Ranges: bytes
Date: Sat, 19 Nov 2022 06:06:24 GMT
Via: 1.1 varnish
Age: 188146
X-Served-By: cache-bma1658-BMA
X-Cache: HIT
X-Cache-Hits: 303
X-Timer: S1668837985.517910,VS0,VE0
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
www.nancyskitchencatering.com/uploads/5/1/4/3/51431065/9968733_orig.jpg
200 OK 53 kB URL HTTP/1.1 www.nancyskitchencatering.com/uploads/5/1/4/3/51431065/9968733_orig.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 417x500, components 3\012- data
Hash 9bdee2e0872ff0782005f8fe64840618
82e08784eafdc180989c06503beb7aff116055f1
cc0df1ea12ac03b2f4eb94b397c22e4cc48ed57d5508510db34549aa41638cfe
GET /uploads/5/1/4/3/51431065/9968733_orig.jpg HTTP/1.1
Host: www.nancyskitchencatering.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/
Cookie: is_mobile=0; language=en; _snow_ses.144a=*; _snow_id.144a=65bca91d-2ef2-4104-9cbc-cc567374e9b2.1668837976.1.1668837976.1668837976.f218a725-6fac-4d11-a2da-18f108d725f2
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 19 Nov 2022 06:06:24 GMT
Content-Type: image/jpeg
Content-Length: 52869
Connection: keep-alive
Last-Modified: Fri, 22 Nov 2019 17:39:16 GMT
x-rgw-object-type: Normal
ETag: "9bdee2e0872ff0782005f8fe64840618"
x-amz-request-id: tx0000000000000352fb32d-0063787260-c696eea-sfo1
X-Storage-Bucket: zcc0d
X-Storage-Object: cc0df1ea12ac03b2f4eb94b397c22e4cc48ed57d5508510db34549aa41638cfe
X-Host: grn67.sf2p.intern.weebly.net
Accept-Ranges: bytes, bytes
www.nancyskitchencatering.com/uploads/5/1/4/3/51431065/5063606_orig.jpg
200 OK 181 kB URL HTTP/1.1 www.nancyskitchencatering.com/uploads/5/1/4/3/51431065/5063606_orig.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 560x800, components 3\012- data
Size 181 kB (181411 bytes)
Hash c83ecd164579733d970ac6eaa551c0b9
3068819f26b062da968c45f7dcd0a71ec1b0cfc6
40cee3374eb9d75710d4217997ce11b32c915f61693cc860eaa8f6dca11f0738
GET /uploads/5/1/4/3/51431065/5063606_orig.jpg HTTP/1.1
Host: www.nancyskitchencatering.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/
Cookie: is_mobile=0; language=en; _snow_ses.144a=*; _snow_id.144a=65bca91d-2ef2-4104-9cbc-cc567374e9b2.1668837976.1.1668837976.1668837976.f218a725-6fac-4d11-a2da-18f108d725f2
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 19 Nov 2022 06:06:24 GMT
Content-Type: image/jpeg
Content-Length: 181411
Connection: keep-alive
Last-Modified: Fri, 22 Nov 2019 17:39:18 GMT
x-rgw-object-type: Normal
ETag: "c83ecd164579733d970ac6eaa551c0b9"
x-amz-request-id: tx000000000000034484138-0063787260-c6aed46-sfo1
X-Storage-Bucket: z40ce
X-Storage-Object: 40cee3374eb9d75710d4217997ce11b32c915f61693cc860eaa8f6dca11f0738
X-Host: grn73.sf2p.intern.weebly.net
Accept-Ranges: bytes, bytes
www.nancyskitchencatering.com/uploads/5/1/4/3/51431065/6881088_orig.jpg
200 OK 165 kB URL HTTP/1.1 www.nancyskitchencatering.com/uploads/5/1/4/3/51431065/6881088_orig.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 640x800, components 3\012- data
Size 165 kB (165184 bytes)
Hash 02c1669c5d845e59911e76294139ad8f
7f26dee049514068098433e46c4a3af6ce3810f0
3e8c32bb8670ba857188194f09ffd8337aa5cc765e061ecded0d837053047adc
GET /uploads/5/1/4/3/51431065/6881088_orig.jpg HTTP/1.1
Host: www.nancyskitchencatering.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nancyskitchencatering.com/
Cookie: is_mobile=0; language=en; _snow_ses.144a=*; _snow_id.144a=65bca91d-2ef2-4104-9cbc-cc567374e9b2.1668837976.1.1668837976.1668837976.f218a725-6fac-4d11-a2da-18f108d725f2
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 19 Nov 2022 06:06:24 GMT
Content-Type: image/jpeg
Content-Length: 165184
Connection: keep-alive
Last-Modified: Fri, 22 Nov 2019 17:39:12 GMT
x-rgw-object-type: Normal
ETag: "02c1669c5d845e59911e76294139ad8f"
x-amz-request-id: tx000000000000035889ce1-0063787260-c695612-sfo1
X-Storage-Bucket: z3e8c
X-Storage-Object: 3e8c32bb8670ba857188194f09ffd8337aa5cc765e061ecded0d837053047adc
X-Host: grn22.sf2p.intern.weebly.net
Accept-Ranges: bytes, bytes
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53a83e17-462d-4d4f-8f42-f44460fc79a2.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53a83e17-462d-4d4f-8f42-f44460fc79a2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 50a8727077dd86072a07bd2077c252a8
0e2df523714ca147a69465f3ad4867a33314acb2
9fd12b1e80aa231ffd709c05edda762a4c63d0c70010fb62efdf21c73e657459
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53a83e17-462d-4d4f-8f42-f44460fc79a2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7445
x-amzn-requestid: 10c0e6f1-9264-49a0-93b1-16f291edb643
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bu9_nGVwIAMFlKQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6375dd30-42e9fc0207225de072a699c6;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 07:05:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Z7UqLro_YPrsSZEMfCuHtkHSv_JSUjySa_uzw0SDRq3XbR412AxFQg==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 07:17:48 GMT
age: 82117
etag: "0e2df523714ca147a69465f3ad4867a33314acb2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
199.34.228.50
151.101.85.46
93.184.220.29
23.36.76.226
0.0.0.0