Overview

URL fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
IP50.87.146.64
ASNUNIFIEDLAYER-AS-1
Location United States
Report completed2022-10-04 15:40:47 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-10-04 2 fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip Malware
2022-10-04 2 fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip Malware
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

No files detected



Passive DNS (18)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS stats.wp.com (1) 2711 2017-01-30 05:06:59 UTC 2022-10-04 04:26:46 UTC 192.0.76.3
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-05-27 20:08:30 UTC 2022-10-04 15:06:58 UTC 143.204.55.35
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-10-04 04:29:41 UTC 143.204.55.110
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-10-04 04:16:51 UTC 34.117.237.239
mnemonic passive DNS www.gstatic.com (1) 0 2016-07-26 09:37:06 UTC 2022-10-04 09:46:17 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
mnemonic passive DNS ocsp.pki.goog (8) 175 2017-06-14 07:23:31 UTC 2022-10-04 04:17:09 UTC 142.250.74.3
mnemonic passive DNS fonts.googleapis.com (1) 8877 2013-06-10 20:14:26 UTC 2022-10-04 11:55:48 UTC 142.250.74.10
mnemonic passive DNS img-getpocket.cdn.mozilla.net (5) 1631 2017-09-01 03:40:57 UTC 2022-10-04 04:18:32 UTC 34.120.237.76
mnemonic passive DNS www.googletagmanager.com (1) 75 2012-12-25 14:52:06 UTC 2022-10-04 09:37:43 UTC 142.250.74.168
mnemonic passive DNS www.google.com (1) 7 2016-08-04 12:36:31 UTC 2022-10-04 04:25:35 UTC 142.250.74.164
mnemonic passive DNS fonts.gstatic.com (3) 0 2014-08-29 13:43:22 UTC 2022-10-04 09:46:16 UTC 216.58.207.195 Domain (gstatic.com) ranked at: 540
mnemonic passive DNS stats.g.doubleclick.net (1) 96 2013-06-02 22:47:44 UTC 2022-10-04 05:06:06 UTC 74.125.131.155
mnemonic passive DNS r3.o.lencr.org (5) 344 2020-12-02 08:52:13 UTC 2022-10-04 04:17:22 UTC 23.36.77.32
mnemonic passive DNS fundaciondarydarse.org (69) 0 2020-05-04 04:44:19 UTC 2022-10-04 15:34:43 UTC 50.87.146.64 Unknown ranking
mnemonic passive DNS ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-10-04 15:17:25 UTC 93.184.220.29
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-10-04 04:45:06 UTC 35.155.157.101
mnemonic passive DNS maps.gstatic.com (1) 0 2016-01-11 16:55:17 UTC 2022-10-04 05:38:13 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
mnemonic passive DNS pixel.wp.com (1) 2545 2017-01-30 05:31:40 UTC 2022-10-04 04:26:51 UTC 192.0.76.3


Recent reports on same IP/ASN/Domain/Screenshot

Last 3 reports on IP: 50.87.146.64

Date UQ / IDS / BL URL IP
2022-10-04 17:52:59 +0000
0 - 0 - 2 fundaciondarydarse.org/dora-bayer/williambrow (...) 50.87.146.64
2022-10-04 15:40:47 +0000
0 - 0 - 2 fundaciondarydarse.org/dora-bayer/sisley_gete (...) 50.87.146.64
2022-10-04 15:39:25 +0000
0 - 0 - 2 fundaciondarydarse.org/dora-bayer/priscilla_m (...) 50.87.146.64

Last 5 reports on ASN: UNIFIEDLAYER-AS-1

Date UQ / IDS / BL URL IP
2022-11-30 03:23:21 +0000
0 - 0 - 2 thejoker18.tk/cgin/linkedIn.com/linkedIn.com/ (...) 162.241.69.192
2022-11-30 03:22:20 +0000
0 - 0 - 1 stadiumseatingcharts.net/wp-content/plugins/b (...) 192.185.137.201
2022-11-30 03:19:06 +0000
0 - 0 - 7 batmanwallpapers.com/batman-stands-in-front-o (...) 192.185.137.203
2022-11-30 02:55:36 +0000
0 - 0 - 1 btgpactual.lovethyself.uk/ 69.49.246.103
2022-11-30 02:50:51 +0000
0 - 0 - 3 uknypxl-rqf-8.cf/ 69.49.244.150

Last 3 reports on domain: fundaciondarydarse.org

Date UQ / IDS / BL URL IP
2022-10-04 17:52:59 +0000
0 - 0 - 2 fundaciondarydarse.org/dora-bayer/williambrow (...) 50.87.146.64
2022-10-04 15:40:47 +0000
0 - 0 - 2 fundaciondarydarse.org/dora-bayer/sisley_gete (...) 50.87.146.64
2022-10-04 15:39:25 +0000
0 - 0 - 2 fundaciondarydarse.org/dora-bayer/priscilla_m (...) 50.87.146.64

No other reports with similar screenshot



JavaScript

Executed Scripts (67)


Executed Evals (6)

#1 JavaScript::Eval (size: 24123, repeated: 1) - SHA256: 9427b28bccd70e88ae216329d97b400e65432ac4f65058d19e7f713c9a5007d8

                                        var kc_front = (function($) {
    jQuery.extend(jQuery.easing, {
        easeInOutQuart: function(x, t, b, c, d) {
            if ((t /= d / 2) < 1) return c / 2 * t * t * t * t + b;
            return -c / 2 * ((t -= 2) * t * t * t - 2) + b
        },
    });
    var v = $(window);
    var w = v.height();
    v.resize(function() {
        w = v.height();
        kc_front.row_action(true)
    });
    $.fn.kc_parallax = function() {
        var c = $(this),
            el_top;
        c.each(function() {
            el_top = c.offset().top
        });

        function update() {
            var b = v.scrollTop();
            c.each(function() {
                var a = $(this),
                    top = a.offset().top,
                    height = a.outerHeight(true);
                if (top + height < b || top > b + w || c.data('kc-parallax') !== true) return;
                c.css('backgroundPosition', "50% " + Math.round((el_top - b) * 0.4) + "px")
            })
        }
        v.on('scroll resize', update).trigger('update')
    };
    $.fn.viewportChecker = function(d) {
        var f = {
            classToAdd: 'visible',
            offset: 100,
            callbackFunction: function(a) {}
        };
        $.extend(f, d);
        var g = this,
            w = $(window).height();
        this.checkElements = function() {
            var c = ((navigator.userAgent.toLowerCase().indexOf('webkit') != -1) ? window : 'html'),
                viewportTop = $(c).scrollTop(),
                viewportBottom = (viewportTop + w);
            g.each(function() {
                var a = $(this);
                if (a.hasClass(f.classToAdd) && f.classToAdd != '') {
                    return
                }
                var b = Math.round(a.offset().top) + f.offset,
                    elemBottom = b + (a.height());
                if ((b < viewportBottom) && (elemBottom > viewportTop) && this.done != true) {
                    a.addClass(f.classToAdd);
                    f.callbackFunction(a)
                }
            })
        };
        $(window).scroll(this.checkElements);
        this.checkElements();
        $(window).resize(function(e) {
            w = e.currentTarget.innerHeight
        })
    };
    $(document).ready(function($) {
        kc_front.init($)
    });
    return {
        win_height: 0,
        win_width: 0,
        body: $('body'),
        init: function() {
            $('section[data-kc-parallax="true"]').each(function() {
                $(this).kc_parallax()
            });
            this.accordion();
            this.tabs();
            this.youtube_row_background.init();
            if (window.location.href.indexOf('#') > -1) {
                $('a[href="#' + window.location.href.split('#')[1] + '"]').trigger('click')
            }
            $('.kc_button').add('.kc_tooltip').kcTooltip();
            $('.kc-close-but').on('click', function() {
                $(this).parent().parent().hide('slow', function() {
                    $(this).remove()
                })
            });
            this.google_maps();
            this.blog.masonry();
            this.image_gallery.masonry();
            this.carousel_images();
            this.carousel_post();
            this.countdown_timer();
            this.piechar.init();
            this.progress_bar.run();
            this.ajax_action();
            this.pretty_photo();
            this.tooltips();
            this.image_fade();
            this.smooth_scroll();
            this.animate();
            this.row_action(true)
        },
        refresh: function(b) {
            setTimeout(function(a) {
                kc_front.piechar.update(a);
                kc_front.progress_bar.update(a);
                kc_front.image_gallery.masonry(a);
                if ($('.kc_video_play').length > 0) {
                    kc_video_play.refresh(a)
                }
            }, 100, b)
        },
        viewport: function(a) {
            var d = document;
            if (d.compatMode === 'BackCompat') {
                if (a == 'height') return d.body.clientHeight;
                else return d.body.clientWidth
            } else {
                if (a == 'height') return d.documentElement.clientHeight;
                else return d.documentElement.clientWidth
            }
        },
        row_action: function(c) {
            var d = document;
            [].forEach.call(d.querySelectorAll('section[data-kc-fullwidth]'), function(a) {
                var b = d.querySelectorAll('.kc_clfw')[0],
                    rect;
                if (typeof b === 'undefined') return;
                rect = b.getBoundingClientRect();
                a.style.left = (-rect.left) + 'px';
                if (a.getAttribute('data-kc-fullwidth') == 'row') {
                    a.style.paddingLeft = rect.left + 'px';
                    a.style.paddingRight = (kc_front.viewport('width') - rect.width - rect.left) + 'px';
                    a.style.width = rect.width + 'px'
                } else {
                    a.style.paddingLeft = '0px';
                    a.style.width = kc_front.viewport('width') + 'px'
                }
                if (a.nextElementSibling !== null && a.nextElementSibling.tagName == 'SCRIPT') {
                    if (a.nextElementSibling.innerHTML == 'kc_front.row_action(true);') {
                        a.parentNode.removeChild(a.nextElementSibling)
                    }
                }
            })
        },
        google_maps: function(b) {
            $('.kc_google_maps').each(function() {
                if ($(this).data('loaded') === true) return;
                else $(this).data({
                    'loaded': true
                });
                var a = $(this);
                if (a.data('wheel') == 'disable') {
                    a.click(function() {
                        a.find('iframe').css("pointer-events", "auto")
                    });
                    a.mouseleave(function() {
                        a.find('iframe').css("pointer-events", "none")
                    })
                }
                a.find('.close').on('click', function() {
                    a.find('.map_popup_contact_form').toggleClass("hidden");
                    a.find('.show_contact_form').fadeIn('slow')
                });
                a.find('.show_contact_form').on('click', function() {
                    a.find('.map_popup_contact_form').toggleClass("hidden");
                    a.find('.show_contact_form').fadeOut('slow')
                })
            })
        },
        accordion: function(d) {
            $('.kc_accordion_wrapper').each(function() {
                if ($(this).data('loaded') === true) return;
                else $(this).data({
                    'loaded': true
                });
                var c = $(this).data('tab-active') !== undefined ? ($(this).data('tab-active') - 1) : 0;
                if ($(this).data('closeall') == true) c = '100000';
                $(this).find('>div.kc_accordion_section>h3.kc_accordion_header>a, >div.kc_accordion_section>h3.kc_accordion_header>.ui-accordion-header-icon').off('click').on('click', function(e) {
                    var a = $(this).closest('.kc_accordion_wrapper'),
                        section = $(this).closest('.kc_accordion_section'),
                        allowopenall = (true === a.data('allowopenall')) ? true : false,
                        closeall = (true === a.data('closeall')) ? true : false,
                        changed = section.find('>h3.kc_accordion_header').hasClass('ui-state-active'),
                        clickitself = false;
                    if (allowopenall === false) {
                        if (!section.find('>h3.kc_accordion_header').hasClass('ui-state-active')) {
                            a.find('>.kc_accordion_section>.kc_accordion_content').slideUp();
                            a.find('>.kc_accordion_section>h3.kc_accordion_header').removeClass('ui-state-active');
                            a.find('>.kc_accordion_section.kc-section-active').removeClass('kc-section-active');
                            section.find('>.kc_accordion_content').stop().slideDown('normal', function() {
                                $(this).css({
                                    height: ''
                                })
                            });
                            section.find('>h3.kc_accordion_header').addClass('ui-state-active');
                            section.addClass('kc-section-active')
                        } else {
                            a.find('>.kc_accordion_section>.kc_accordion_content').slideUp();
                            a.find('>.kc_accordion_section>h3.kc_accordion_header').removeClass('ui-state-active');
                            a.find('>.kc_accordion_section>.kc-section-active').removeClass('kc-section-active');
                            section.removeClass('kc-section-active')
                        }
                    } else {
                        if (section.find('>h3.kc_accordion_header').hasClass('ui-state-active')) {
                            section.find('>.kc_accordion_content').stop().slideUp();
                            section.find('>h3.kc_accordion_header').removeClass('ui-state-active');
                            section.removeClass('kc-section-active')
                        } else {
                            section.find('>.kc_accordion_content').stop().slideDown('normal', function() {
                                $(this).css({
                                    height: ''
                                })
                            });
                            section.find('>h3.kc_accordion_header').addClass('ui-state-active');
                            section.addClass('kc-section-active')
                        }
                    }
                    if (changed != section.find('>h3.kc_accordion_header').hasClass('ui-state-active')) kc_front.refresh(section.find('>.kc_accordion_content'));
                    e.preventDefault();
                    var b = $(this).closest('.kc_accordion_section');
                    b = b.parent().find('>.kc_accordion_section').index(b.get(0));
                    $(this).closest('.kc_accordion_wrapper').data({
                        'tab-active': (b + 1)
                    })
                }).eq(c).trigger('click')
            })
        },
        tabs: function(d) {
            $('.kc_tabs > .kc_wrapper').each(function(b) {
                if ($(this).data('loaded') === true) return;
                else $(this).data({
                    'loaded': true
                });
                var c = $(this),
                    tab_group = c.parent('.kc_tabs.group'),
                    tab_event = ('yes' === tab_group.data('open-on-mouseover')) ? 'mouseover' : 'click',
                    effect_option = ('yes' === tab_group.data('effect-option')) ? true : false,
                    active_section = parseInt(tab_group.data('tab-active')) - 1;
                $(this).find('>.ui-tabs-nav>li').off('click').on('click', function(e) {
                    e.preventDefault()
                }).off(tab_event).on(tab_event, function(e) {
                    if ($(this).hasClass('ui-tabs-active')) {
                        e.preventDefault();
                        return
                    }
                    var a = $(this).closest('.kc_tabs_nav,.ui-tabs-nav').find('>li'),
                        b = a.index(this),
                        tab_list = $(this).closest('.kc_wrapper').find('>.kc_tab'),
                        new_panel = tab_list.eq(b);
                    a.removeClass('ui-tabs-active');
                    $(this).addClass('ui-tabs-active');
                    tab_list.removeClass('ui-tabs-body-active').removeClass('kc-section-active');
                    new_panel.addClass('ui-tabs-body-active').addClass('kc-section-active');
                    if (effect_option === true) new_panel.css({
                        'opacity': 0
                    }).animate({
                        opacity: 1
                    });
                    e.preventDefault();
                    $(this).closest('.kc_tabs').data({
                        'tab-active': (b + 1)
                    })
                }).eq(active_section).trigger(tab_event)
            });
            $('.kc_tabs.kc-tabs-slider').each(function() {
                if ($(this).data('loaded') === true) return;
                else $(this).data({
                    'loaded': true
                });
                $(this).find('.kc-tabs-slider-nav li').each(function(a) {
                    if ($(this).data('loaded') === true) return;
                    else $(this).data({
                        'loaded': true
                    });
                    $(this).on('click', a, function(e) {
                        $(this).parent().find('.kc-title-active').removeClass('kc-title-active');
                        $(this).addClass('kc-title-active');
                        console.log(e.data);
                        $(this).closest('.kc-tabs-slider').find('.owl-carousel').trigger('owl.goTo', e.data);
                        e.preventDefault();
                        $(this).closest('.kc_tabs').data({
                            'active': e.data
                        })
                    });
                    if (a === 0) $(this).addClass('kc-title-active')
                })
            });
            kc_front.owl_slider()
        },
        counterup: function() {
            $('.counterup').each(function(a) {
                if ($(this).data('loaded') === true) return;
                else $(this).data({
                    'loaded': true
                });
                $(this).counterUp({
                    delay: 100,
                    time: 2000
                })
            })
        },
        youtube_row_background: {
            init: function() {
                $('.kc_row, .kc_column').each(function() {
                    var a = $(this),
                        youtubeUrl, youtubeId;
                    if (a.data('kc-video-bg')) {
                        youtubeUrl = a.data('kc-video-bg');
                        youtubeId = kc_front.youtube_row_background.getID(youtubeUrl);
                        if (youtubeId) {
                            a.find('.kc_wrap-video-bg').remove();
                            kc_front.youtube_row_background.add(a, youtubeId)
                        }
                    } else {
                        a.find('.kc_wrap-video-bg').remove()
                    }
                })
            },
            getID: function(a) {
                if ('undefined' === typeof(a)) {
                    return false
                }
                var b = a.match(/(?:https?:\/{2})?(?:w{3}\.)?youtu(?:be)?\.(?:com|be)(?:\/watch\?v=|\/)([^\s&]+)/);
                if (null !== b) {
                    return b[1]
                }
                return false
            },
            add: function(c, d, f) {
                if (YT === undefined) return;
                if ('undefined' === typeof(YT.Player)) {
                    f = 'undefined' === typeof(f) ? 0 : f;
                    if (f > 100) {
                        console.warn('Too many attempts to load YouTube api');
                        return
                    }
                    setTimeout(function() {
                        kc_front.youtube_row_background.add(c, d, f++)
                    }, 100);
                    return
                }
                var g, $container = c.prepend('<div class="kc_wrap-video-bg"><div class="ifr_inner"></div></div>').find('.ifr_inner'),
                    options = c.data('kc-video-options'),
                    playerVars = {
                        playlist: d,
                        iv_load_policy: 3,
                        enablejsapi: 1,
                        disablekb: 1,
                        autoplay: 1,
                        controls: 0,
                        showinfo: 0,
                        rel: 0,
                        loop: 1
                    };
                options = options ? JSON.parse('{"' + options.replace(/&/g, '","').replace(/=/g, '":"') + '"}', function(a, b) {
                    return a === "" ? b : decodeURIComponent(b)
                }) : {};
                if (typeof options == 'object') playerVars = $.extend(playerVars, options);
                g = new YT.Player($container[0], {
                    width: '100%',
                    height: '100%',
                    videoId: d,
                    playerVars: playerVars,
                    events: {
                        onReady: function(e) {
                            if (c.data('kc-video-mute') == 'yes') e.target.mute().setLoop(true);
                            e.target.playVideo()
                        }
                    }
                });
                kc_front.youtube_row_background.resize(c);
                $(window).on('resize', function() {
                    kc_front.youtube_row_background.resize(c)
                })
            },
            resize: function(a) {
                var b = 1.77,
                    ifr_w, ifr_h, marginLeft, marginTop, inner_width = a.innerWidth(),
                    inner_height = a.innerHeight();
                if ((inner_width / inner_height) < b) {
                    ifr_w = inner_height * b;
                    ifr_h = inner_height
                } else {
                    ifr_w = inner_width;
                    ifr_h = inner_width * (1 / b)
                }
                marginLeft = -Math.round((ifr_w - inner_width) / 2) + 'px';
                marginTop = -Math.round((ifr_h - inner_height) / 2) + 'px';
                ifr_w += 'px';
                ifr_h += 'px';
                a.find('.kc_wrap-video-bg iframe').css({
                    maxWidth: '1000%',
                    marginLeft: marginLeft,
                    marginTop: marginTop,
                    width: ifr_w,
                    height: ifr_h
                })
            }
        },
        single_img: {
            refresh: function(a) {
                kc_front.pretty_photo()
            }
        },
        blog: {
            masonry: function() {
                $('.kc_blog_masonry').each(function() {
                    if ($(this).data('loaded') === true) return;
                    else $(this).data({
                        'loaded': true
                    });
                    var c = $(this),
                        imgs = c.find('img'),
                        total = imgs.length,
                        ready = 0;
                    if (total > 0) {
                        imgs.each(function(a) {
                            var b = new Image();
                            b.onload = function() {
                                ready++;
                                if (ready == total) {
                                    new Masonry(c.get(0), {
                                        itemSelector: '.post-grid',
                                        columnWidth: '.post-grid',
                                    })
                                }
                            };
                            b.src = $(this).attr('src')
                        })
                    } else {
                        new Masonry(c.get(0), {
                            itemSelector: '.post-grid',
                            columnWidth: '.post-grid',
                        })
                    }
                })
            },
        },
        image_gallery: {
            masonry: function() {
                $('.kc_image_gallery').each(function() {
                    if ($(this).data('loaded') === true) return;
                    else $(this).data({
                        'loaded': true
                    });
                    if (('yes' === $(this).data('image_masonry'))) {
                        var c = $(this).find('img'),
                            total = c.length,
                            ready = 0,
                            el = $(this);
                        $(this).data({
                            'total': total
                        });
                        c.each(function(a) {
                            var b = new Image();
                            b.onload = function() {
                                ready++;
                                if (ready == total) {
                                    new Masonry(el.get(0), {
                                        itemSelector: '.item-grid',
                                        columnWidth: '.item-grid',
                                    })
                                }
                            };
                            b.src = $(this).attr('src')
                        })
                    }
                });
                kc_front.pretty_photo()
            },
        },
        image_fade: function() {
            $('.image_fadein_slider .image_fadein').each(function() {
                if ($(this).data('loaded') !== true) $(this).data({
                    'loaded': true
                });
                else return;
                var a = $(this).data('delay') ? $(this).data('delay') : '3000';
                window.kc_front.image_fade_delay(a, $(this).find('img').first())
            })
        },
        image_fade_delay: function(a, b) {
            if (b === undefined) return;
            b.parent().find('.active').removeClass('active');
            b.addClass('active');
            if (b.next().length > 0) b = b.next();
            else b = b.parent().find('img').first();
            var c = setTimeout(window.kc_front.image_fade_delay, a, a, b)
        },
        carousel_images: function(u) {
            $('.kc-carousel-images').each(function(f) {
                if ($(this).data('loaded') === true) return;
                else $(this).data({
                    'loaded': true
                });
                var g = $(this).data('owl-i-options'),
                    _auto_play = ('yes' === g.autoplay) ? true : false,
                    _delay = (g.delay !== undefined) ? g.delay : 8,
                    _navigation = ('yes' === g.navigation) ? true : false,
                    _pagination = ('yes' === g.pagination) ? true : false,
                    _speed = g.speed,
                    _items = g.items,
                    _auto_height = ('yes' === g.autoheight) ? true : false,
                    _num_thumb = (g.num_thumb !== undefined) ? g.num_thumb : 5,
                    _show_thumb = ('yes' === g.showthumb) ? true : false,
                    _progress_bar = ('yes' === g.progressbar) ? true : false,
                    _singleItem = false,
                    _tablet = false,
                    _mobile = false;
                if (g.tablet > 0) {
                    _tablet = [999, g.tablet]
                }
                if (g.mobile > 0) {
                    _mobile = [479, g.mobile]
                }
                var h = function() {};
                var j = function() {};
                var k = function() {};
                if (true === _auto_height || true === _progress_bar || true === _show_thumb) _singleItem = true;
                if (_auto_play) _auto_play = parseInt(_delay) * 1000;
                if (true === _progress_bar) {
                    var l = _delay;
                    var m, $bar, $elem, isPause, tick, percentTime;
                    h = function(a) {
                        $elem = a;
                        n();
                        o()
                    };
                    var n = function() {
                        m = $("<div>", {
                            class: "progressBar"
                        });
                        $bar = $("<div>", {
                            class: "bar"
                        });
                        m.append($bar).prependTo($elem)
                    };
                    var o = function() {
                        percentTime = 0;
                        isPause = false;
                        tick = setInterval(p, 10)
                    };
                    var p = function() {
                        if (isPause === false) {
                            percentTime += 1 / l;
                            $bar.css({
                                width: percentTime + "%"
                            });
                            if (percentTime >= 100) {
                                $elem.trigger('owl.next')
                            }
                        }
                    };
                    k = function() {
                        isPause = true
                    };
                    j = function() {
                        clearTimeout(tick);
                        o()
                    }
                }
                if (true !== _show_thumb) {
                    $(this).owlCarousel({
                        autoPlay: _auto_play,
                        navigation: _navigation,
                        pagination: _pagination,
                        slideSpeed: _speed,
                        paginationSpeed: _speed,
                        singleItem: _singleItem,
                        autoHeight: _auto_height,
                        items: _items,
                        itemsDesktop: false,
                        itemsDesktopSmall: false,
                        itemsTablet: _tablet,
                        itemsTabletSmall: _tablet,
                        itemsMobile: _mobile,
                        afterInit: h,
                        afterMove: j,
                        startDragging: k
                    })
                } else {
                    var q = $(this);
                    var r = q.next('.kc-sync2');
                    var s = function(a) {
                        var b = this.currentItem;
                        $(r).find(".owl-item").removeClass("synced").eq(b).addClass("synced");
                        if ($(r).data("owlCarousel") !== undefined) {
                            t(b)
                        }
                    };
                    r.on("click", ".owl-item", function(e) {
                        e.preventDefault();
                        var a = $(this).data("owlItem");
                        q.trigger("owl.goTo", a)
                    });
                    var t = function(a) {
                        var b = r.data("owlCarousel").owl.visibleItems;
                        var c = a;
                        var d = false;
                        for (var i in b) {
                            if (c === b[i]) {
                                d = true
                            }
                        }
                        if (d === false) {
                            if (c > b[b.length - 1]) {
                                r.trigger("owl.goTo", c - b.length + 2)
                            } else {
                                if (c - 1 === -1) {
                                    c = 0
                                }
                                r.trigger("owl.goTo", c)
                            }
                        } else if (c === b[b.length - 1]) {
                            r.trigger("owl.goTo", b[1])
                        } else if (c === b[0]) {
                            r.trigger("owl.goTo", c - 1)
                        }
                    };
                    q.owlCarousel({
                        autoPlay: _auto_play,
                        singleItem: _singleItem,
                        slideSpeed: _speed,
                        paginationSpeed: _speed,
                        navigation: _navigation,
                        pagination: _pagination,
                        afterAction: s,
                        responsiveRefreshRate: 200,
                        autoHeight: _auto_height,
                        afterInit: h,
                        afterMove: j,
                        startDragging: k
                    });
                    r.owlCarousel({
                        items: _num_thumb,
                        itemsDesktop: [1199, 15],
                        itemsDesktopSmall: [979, 12],
                        itemsTablet: [768, 6],
                        itemsMobile: [479, 5],
                        pagination: _pagination,
                        responsiveRefreshRate: 100,
                        afterInit: function(a) {
                            a.find(".owl-item").eq(0).addClass("synced")
                        }
                    })
                }
            });
            kc_front.pretty_photo()
        },
        update_option: function(b) {
            $.post(top.kc_ajax_url, {
                'security': top.kc_ajax_nonce,
                'action': 'kc_update_option',
                'options': top.kc.tools.base64.encode(JSON.stringify(b))
            }, function(a) {})
        },
        carousel_post: function(a) {
            kc_front.owl_slider('.kc-owl-post-carousel')
        },
        tooltips: function() {
            $('.kc_tooltip').each(function() {
                if ($(this).data('kc-loaded') !== true) $(this).data({
                    'kc-loaded': true
                });
                else return;
                $(this).kcTooltip()
            })
        },
        countdown_timer: function() {
            $('.kc-countdown-timer').each(function(b) {
                var c = $(this).data('countdown');
                $(this).countdown(c.date, function(a) {
                    $(this).html(a.strftime(c.template))
                })
            })
        },
        piechar: {
            init: function() {
                $('.kc_piechart').each(function(b) {
                    $(this).viewportChecker({
                        callbackFunction: function(a) {
                            kc_front.piechar.load(a)
                        },
                        classToAdd: 'kc-pc-loaded'
                    })
                })
            },
            load: function(d) {
                if (d.parent('div').width() < 10) return 0;
                var e = d.data('size'),
                    _linecap = ('yes' === d.data('linecap')) ? 'round' : 'square',
                    _barColor = d.data('barcolor'),
                    _trackColor = d.data('trackcolor'),
                    _autowidth = d.data('autowidth'),
                    _linewidth = d.data('linewidth');
                if ('yes' === _autowidth) {
                    e = d.parent('div').width();
                    d.data('size', e)
                }
                var f = d.find('.percent').width() + d.find('.percent:after').width();
                var g = d.find('.percent').height();
                d.easyPieChart({
                    barColor: _barColor,
                    trackColor: _trackColor,
                    lineCap: _linecap,
                    easing: 'easeOutBounce',
                    onStep: function(a, b, c) {
                        $(this.el).find('.percent').text(Math.round(c));
                        $(this.el).find('.percent').show();
                        $(this.el).css({
                            'width': e,
                            'height': e
                        })
                    },
                    scaleLength: 0,
                    lineWidth: _linewidth,
                    size: e,
                })
            },
            update: function(a) {
                a.find('.kc_piechart').each(function() {
                    if ($(this).data('loaded') === true) return;
                    else $(this).data({
                        'loaded': true
                    });
                    kc_front.piechar.load($(this))
                })
            }
        },
        progress_bar: {
            run: function() {
                $('.kc_progress_bars').each(function() {
                    $(this).viewportChecker({
                        callbackFunction: function(a) {
                            kc_front.progress_bar.update(a)
                        },
                        classToAdd: 'kc-pb-loaded'
                    })
                })
            },
            update: function(c) {
                $('.kc-progress-bar .kc-ui-progress').each(function() {
                    if ($(this).data('loaded') === true) return;
                    else $(this).data({
                        'loaded': true
                    });
                    $(this).css({
                        width: '5%'
                    }).stop().animate({
                        width: this.getAttribute('data-value') + '%'
                    }, {
                        duration: parseInt(this.getAttribute('data-speed')),
                        easing: 'easeInOutQuart',
                        step: function(a, b) {
                            if (b.now / b.end > 0.3) this.getElementsByClassName('ui-label')[0].style.opacity = b.now / b.end
                        }
                    }).find('.ui-label').css({
                        opacity: 0
                    })
                })
            }
        },
        ajax_action: function() {
            $('.kc_facebook_recent_post').each(function() {
                if (this.getAttribute('data-cfg') === null || this.getAttribute('data-cfg') === undefined || this.getAttribute('data-cfg') === '') return;
                var b = $(this),
                    data_send = {
                        action: 'kc_facebook_recent_post',
                        cfg: $(this).data('cfg')
                    };
                this.removeAttribute('data-cfg');
                $.ajax({
                    url: kc_script_data.ajax_url,
                    method: 'POST',
                    dataType: 'json',
                    data: data_send,
                    success: function(a) {
                        b.find('ul').html(a.html).before(a.header_html)
                    }
                })
            });
            $('.kc_wrap_instagram').each(function(b) {
                if (this.getAttribute('data-cfg') === null || this.getAttribute('data-cfg') === undefined || this.getAttribute('data-cfg') === '') return;
                var c = $(this),
                    data_send = {
                        action: 'kc_instagrams_feed',
                        cfg: $(this).data('cfg')
                    };
                this.removeAttribute('data-cfg');
                $.ajax({
                    url: kc_script_data.ajax_url,
                    method: 'POST',
                    dataType: 'json',
                    data: data_send,
                    success: function(a) {
                        c.find('ul').html(a.html)
                    }
                })
            });
            $('.kc_twitter_feed').each(function(d) {
                if (this.getAttribute('data-cfg') === null || this.getAttribute('data-cfg') === undefined || this.getAttribute('data-cfg') === '') return;
                var e = $(this),
                    atts_data = {
                        action: 'kc_twitter_timeline',
                        cfg: $(this).data('cfg')
                    };
                this.removeAttribute('data-cfg');
                var f = $(this).data('owl_option');
                $.ajax({
                    url: kc_script_data.ajax_url,
                    method: 'POST',
                    dataType: 'json',
                    data: atts_data,
                    success: function(a) {
                        var b = e.data('display_style');
                        e.find('.result_twitter_feed').html(a.html);
                        e.find('.result_twitter_feed').before('<div class="button_follow_wrap">' + a.header_data + '</div>');
                        var c = ('yes' === f.show_navigation) ? true : false,
                            _pagination = ('yes' === f.show_pagination) ? true : false,
                            _autoHeight = ('yes' === f.auto_height) ? true : false;
                        if (2 === b) {
                            e.find('.kc-tweet-owl').owlCarousel({
                                navigation: c,
                                pagination: _pagination,
                                slideSpeed: 300,
                                paginationSpeed: 400,
                                singleItem: true,
                                items: 1,
                                autoHeight: _autoHeight
                            })
                        }
                    }
                })
            })
        },
        owl_slider: function() {
            if (typeof $().owlCarousel != 'function') return;
            $('[data-owl-options]').each(function(a) {
                var b = $(this).data('owl-options');
                if (typeof b !== 'object') return;
                if ($(this).data('loaded') === true) return;
                else $(this).data({
                    'loaded': true
                });
                $(this).attr({
                    'data-owl-options': null
                });
                var c = ('yes' === b.autoplay) ? true : false,
                    _navigation = ('yes' === b.navigation) ? true : false,
                    _pagination = ('yes' === b.pagination) ? true : false,
                    _speed = (b.speed !== undefined) ? b.speed : 450,
                    _items = (b.items !== undefined) ? b.items : 1,
                    _tablet = (b.tablet !== undefined) ? b.tablet : 1,
                    _mobile = (b.mobile !== undefined) ? b.mobile : 1,
                    _autoheight = ('yes' === b.autoheight) ? true : false,
                    _showthumb = ('yes' === b.showthumb) ? true : false,
                    _singleItem = false;
                if (_autoheight === true) {
                    _singleItem = true;
                    _items = 1
                }
                $(this).owlCarousel({
                    autoPlay: c,
                    navigation: _navigation,
                    pagination: _pagination,
                    showthumb: _showthumb,
                    slideSpeed: _speed,
                    paginationSpeed: _speed,
                    singleItem: _singleItem,
                    autoHeight: _autoheight,
                    items: _items,
                    itemsCustom: false,
                    itemsDesktop: [1199, _items],
                    itemsDesktopSmall: [980, _tablet],
                    itemsTablet: [640, _mobile],
                    itemsTabletSmall: false,
                    itemsMobile: [480, _mobile],
                })
            });
            kc_front.pretty_photo()
        },
        pretty_photo: function() {
            if (typeof($.prettyPhoto) == 'object') {
                $("a.kc-pretty-photo:not(.kc-pt-loaded)").addClass('kc-pt-loaded').off('click').prettyPhoto({
                    theme: 'dark_rounded',
                    allow_resize: true,
                    allow_expand: true,
                    opacity: 0.85,
                    animation_speed: 'fast',
                    deeplinking: false,
                    counter_separator_label: ' / ',
                    show_title: true,
                    autoplay: true,
                    horizontal_padding: 0,
                    overlay_gallery: false,
                    markup: '<div class="pp_pic_holder"> 		                <div class="pp_content_container"> 		                  <div class="pp_left"> 		                  <div class="pp_right"> 		                    <div class="pp_content"> 		                      <div class="pp_loaderIcon kc-spinner"></div> 		                      <div class="pp_fade"> 		                        <div class="pp_hoverContainer"> 		                          <a class="pp_next" href="#"><i class="sl-arrow-right"></i></a> 		                          <a class="pp_previous" href="#"><i class="sl-arrow-left"></i></a> 		                        </div> 		                        <div id="pp_full_res"></div> 		                        <div class="pp_details"> 		                         <div class="ppt">&nbsp;</div> 		                          <div class="pp_nav"> 		                            <p class="currentTextHolder">0 / 0</p> 		                          </div> 		                          <p class="pp_description"></p> 		                          <a class="pp_close" href="#"><i class="sl-close"></i></a> 		                        </div> 		                      </div> 		                    </div> 		                  </div> 		                  </div> 		                </div> 		              </div> 		              <div class="pp_overlay"></div>'
                })
            }
        },
        smooth_scroll: function() {
            $('a[href^="#"]').on('click', function(e) {
                if (location.pathname.replace(/^\//, '') == this.pathname.replace(/^\//, '') && location.hostname == this.hostname && this.hash.indexOf('#!') === 0) {
                    var a = $(this.hash.replace('!', ''));
                    if (a.length) {
                        $('html,body').stop().animate({
                            scrollTop: a.offset().top - 80
                        }, 500)
                    }
                }
            })
        },
        animate: function() {
            $('.kc-animated').each(function(f) {
                $(this).viewportChecker({
                    callbackFunction: function(c) {
                        var d = c.get(0).className,
                            delay = 0,
                            speed = '2s',
                            timeout = 0;
                        if (d.indexOf('kc-animate-delay-') > -1) {
                            delay = d.split('kc-animate-delay-')[1].split(' ')[0];
                            c.css({
                                'animation-delay': delay + 'ms'
                            });
                            c.removeClass('kc-animate-delay-' + delay);
                            timeout += parseInt(delay)
                        }
                        if (d.indexOf('kc-animate-speed-') > -1) {
                            speed = d.split('kc-animate-speed-')[1].split(' ')[0];
                            c.css({
                                'animation-duration': speed
                            });
                            c.removeClass('kc-animate-speed-' + speed)
                        }
                        if (d.indexOf('kc-animate-eff-') > -1) {
                            var e = d.split('kc-animate-eff-')[1].split(' ')[0];
                            timeout += parseFloat(speed) * 1000;
                            c.removeClass('kc-animated').addClass('animated ' + e);
                            setTimeout(function(a, b) {
                                a.removeClass('animated kc-animated kc-animate-eff-' + b + ' ' + b);
                                a.css({
                                    'animation-delay': '',
                                    'animation-duration': ''
                                })
                            }, timeout, c, e)
                        }
                    },
                    classToAdd: 'kc-pc-loaded'
                })
            })
        }
    }
}(jQuery));
(function($) {
    $.fn.kcTooltip = function() {
        return this.each(function() {
            var a = this.getBoundingClientRect();
            var b = $(this).data('tooltip'),
                span_w = $(this).find('span').outerWidth(),
                span_h = $(this).find('span').outerHeight(),
                this_w = $(this).outerWidth(),
                this_h = $(this).outerHeight();
            if (typeof(b) == 'undefined') {
                $(this).find('span').css('margin-left', -span_w / 2);
                $(this).hover().find('span').css('bottom', this_h + 10)
            } else {
                var c = $(this).data('position');
                var d = -10;
                if (typeof c == 'undefined') c = 'top';
                $(this).addClass(c);
                $(this).find('span').attr({
                    'style': ''
                });
                switch (c) {
                    case 'right':
                        {
                            var e;
                            e = this_h / 2 - span_h / 2;
                            $(this).find('span').css('left', this_w + 10);
                            $(this).find('span').css('bottom', e);
                            $(this).hover().find('span').css('left', this_w - d);
                            break
                        }
                    case 'bottom':
                        {
                            $(this).find('span').css('margin-left', -span_w / 2);
                            $(this).hover().find('span').css('bottom', -span_h + d);
                            break
                        }
                    case 'left':
                        {
                            var e, ext_left = 5;
                            e = this_h / 2 - span_h / 2;
                            $(this).find('span').css('left', -span_w - ext_left);
                            $(this).find('span').css('bottom', e);
                            break
                        }
                    default:
                        {
                            $(this).find('span').css('margin-left', -span_w / 2);
                            $(this).hover().find('span').css('bottom', this_h - d)
                        }
                }
            }
        })
    }
}(jQuery));
                                    

#2 JavaScript::Eval (size: 15548, repeated: 1) - SHA256: 1bf232e3afa032afeeb821804dac4bdcfae32c16178d33975a668df67e9d0841

                                        /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */
(function() {
    var x = function(U, v) {
            if (!(U = (v = null, A.trustedTypes), U) || !U.createPolicy) return v;
            try {
                v = U.createPolicy("bg", {
                    createHTML: J,
                    createScript: J,
                    createScriptURL: J
                })
            } catch (C) {
                A.console && A.console.error(C.message)
            }
            return v
        },
        A = this || self,
        J = function(U) {
            return U
        };
    (0, eval)(function(U, v) {
        return (v = x()) && 1 === U.eval(v.createScript("1")) ? function(C) {
            return v.createScript(C)
        } : function(C) {
            return "" + C
        }
    }(A)(Array(7824 * Math.random() | 0).join("\n") + '(function(){var vF=function(U,v){if(!(U=(v=null,n.trustedTypes),U)||!U.createPolicy)return v;try{v=U.createPolicy("bg",{createHTML:UK,createScript:UK,createScriptURL:UK})}catch(A){n.console&&n.console.error(A.message)}return v},oh=function(U,v,A,x,e,C){function J(){if(v.P==v){if(v.B){var r=[M,x,U,void 0,e,C,arguments];if(2==A)var N=I(false,false,(L(r,v),v));else if(1==A){var O=!v.u.length;L(r,v),O&&I(false,false,v)}else N=Cw(v,r);return N}e&&C&&e.removeEventListener(C,J,q)}}return J},A4=function(U,v){return U[v]<<24|U[(v|0)+1]<<16|U[(v|0)+2]<<8|U[(v|0)+3]},r0=function(U,v,A,x){return(X(403,A,(xc((x=E(403,A),A.V&&x<A.H?(X(403,A,A.H),J4(v,A)):X(403,A,v),U),A),x)),E)(368,A)},Nn=function(U,v,A,x,e,C,J,r){return(v=[60,32,-94,21,71,(J=U&(r=er,7),74),v,90,56,20],C=V[A.Z](A.Px),C[A.Z]=function(N){J+=6+7*(e=N,U),J&=7},C).concat=function(N){return(e=(N=(N=(N=x%16+1,+v[J+43&7]*x*N-1184*x*e+J+37*e*e+(r()|0)*N)+3*x*x*N-111*x*x*e-N*e-3589*e,v[N]),void 0),v)[(J+21&7)+(U&2)]=N,v[J+(U&2)]=32,N},C},kc=function(U,v,A,x,e){for(e=(x=(U.Px=(U.lG=U[U.Mx=(U.pf=nw,OK),W],lX)(U.Z,{get:function(){return this.concat()}}),U.Hx=V[U.Z](U.Px,{value:{value:{}}}),0),[]);128>x;x++)e[x]=String.fromCharCode(x);I(true,true,(L((L((F(260,function(C,J,r,N,O,l,z,k,a,m,y,f){function u(D,b){for(;l<D;)r|=Q(C)<<l,l+=8;return b=r&(l-=D,(1<<D)-1),r>>=D,b}for(k=((l=(a=S(C),r=0),u(3))|0)+1,O=u(5),J=[],z=m=0;z<O;z++)y=u(1),J.push(y),m+=y?0:1;for(z=(m=((m|0)-1).toString(2).length,N=[],0);z<O;z++)J[z]||(N[z]=u(m));for(m=0;m<O;m++)J[m]&&(N[m]=S(C));for(f=[];k--;)f.push(E(S(C),C));F(a,function(D,b,w,T,t){for(w=(T=[],0),b=[];w<O;w++){if(!J[t=N[w],w]){for(;t>=T.length;)T.push(S(D));t=T[t]}b.push(t)}D.g=mv((D.i=mv(f.slice(),D),b),D)},C)},(U.zk=(X(39,(F(153,function(C,J){J4((J=E(S(C),C),J),C.P)},(F(76,((X(23,U,((F(257,(X(220,(F(203,function(C,J,r,N){J=(r=S(C),N=S(C),S(C)),C.P==C&&(J=E(J,C),N=E(N,C),E(r,C)[N]=J,495==r&&(C.l=void 0,2==N&&(C.v=Z(C,32,false),C.l=void 0)))},(F(77,function(C,J,r,N,O,l,z){for(r=(O=(l=E((N=(z=qn((J=S(C),C)),""),48),C),l.length),0);z--;)r=((r|0)+(qn(C)|0))%O,N+=e[l[r]];X(J,C,N)},(F(197,function(C,J){(J=S(C),C=E(J,C.P),C[0]).removeEventListener(C[1],C[2],q)},(F(145,function(C,J,r,N,O,l){if(!G(C,true,J,true)){if("object"==(r=(l=(r=S((O=S((J=(l=S(C),S(C)),C)),C)),J=E(J,C),E(l,C)),E(r,C)),C=E(O,C),zh(l))){for(N in O=[],l)O.push(N);l=O}for(O=(N=0,C=0<C?C:1,l).length;N<O;N+=C)J(l.slice(N,(N|0)+(C|0)),r)}},(F(204,(X(4,(F(146,(F(319,(F(247,function(C,J,r,N,O){X((J=(O=E((N=E((N=(J=(O=S((r=S(C),C)),S(C)),S(C)),N),C),O),C),E)(J,C),r),C,oh(J,C,N,O))},(X(109,U,((X(368,U,(F(42,(X(217,(F(486,(F(55,(F(226,function(C,J,r,N){!G(C,true,J,false)&&(J=Ih(C),N=J.Bx,r=J.I,C.P==C||r==C.nf&&N==C)&&(X(J.Al,C,r.apply(N,J.S)),C.Y=C.G())},(F(308,(F(436,(U.Y5=(F(483,function(C,J,r,N){if(J=C.a1.pop()){for(N=Q(C);0<N;N--)r=S(C),J[r]=C.B[r];C.B=(J[4]=C.B[J[52]=C.B[52],4],J)}else X(403,C,C.H)},(F(405,function(C){jr(4,C)},(F(475,(X(52,(F(64,function(C,J,r){(r=(r=(J=S(C),S)(C),E)(r,C),0)!=E(J,C)&&X(403,C,r)},(X(491,U,(F(460,(F(131,(X(51,U,(X(((X(403,(((U.H=0,U.V8=(U.o=[],U.B=[],U.g=(U.a1=[],U.O=(U.D=0,false),U.N=void 0,void 0),((U.i=void 0,U).A=(x=window.performance||{},void 0),U).U=(U.X=((U.uG=(U.l=void 0,U.j=false,!(U.R=0,1)),U).h=(U.P=U,U.V=(U.J=(U.W=1,null),[]),U.F=[],0),U.C=void 0,8001),U.K=(U.v=void 0,25),U.Y=0,0),0),U).nf=function(C){this.P=C},U.u=[],U).Gk=x.timeOrigin||(x.timing||{}).navigationStart||0,U),0),X)(105,U,0),208),U,U),[])),function(C,J,r,N){(r=E((N=(J=S((r=(N=S(C),S(C)),C)),E(N,C)),r),C),X)(J,C,N[r])}),U),function(C,J,r,N){r=E((J=S((N=S(C),r=S(C),C)),r),C),N=E(N,C)==r,X(J,C,+N)}),U),R(4))),F(478,function(C,J,r,N){X((r=E((J=E((r=S((J=S(C),C)),N=S(C),J),C),r),C),N),C,J in r|0)},U),U)),U),[]),function(C){Lw(C,4)}),U),U)),U)),0),function(){}),U),function(C,J,r,N,O,l){G(C,true,J,false)||(l=Ih(C.P),N=l.Bx,O=l.I,J=l.Al,l=l.S,r=l.length,N=0==r?new N[O]:1==r?new N[O](l[0]):2==r?new N[O](l[0],l[1]):3==r?new N[O](l[0],l[1],l[2]):4==r?new N[O](l[0],l[1],l[2],l[3]):2(),X(J,C,N))}),U),U)),function(C,J,r,N){X((r=S((N=(J=S(C),Q)(C),C)),r),C,E(J,C)>>>N)}),U),function(C){jr(1,C)}),U),U),[0,0,0]),function(C,J,r,N,O){0!==(J=E((N=(r=E((O=(J=(r=(N=(O=S(C),S(C)),S(C)),S)(C),E(O,C.P)),r),C),E)(N,C),J),C),O)&&(J=oh(J,C,1,r,O,N),O.addEventListener(N,J,q),X(39,C,[O,N,J]))}),U),{})),X)(16,U,n),0)),U)),function(C,J,r,N){r=(J=S(C),N=S(C),S)(C),X(r,C,E(J,C)||E(N,C))}),U),function(C,J,r){X((r=(J=(r=S(C),S(C)),r=E(r,C),zh)(r),J),C,r)}),U),U),2048),function(C,J,r){G(C,true,J,false)||(J=S(C),r=S(C),X(r,C,function(N){return eval(N)}(Mn(E(J,C.P)))))}),U),U)),U)),U)),U)),U),[160,0,0]),function(C){ah(4,C)}),U),F)(366,function(C,J,r){X((r=S(C),J=S(C),J),C,""+E(r,C))},U),426)),F)(395,function(C,J,r,N,O){for(r=(O=qn((J=S(C),C)),N=0,[]);N<O;N++)r.push(Q(C));X(J,C,r)},U),F(341,function(C){ah(3,C)},U),U.dh=0,function(C,J,r,N){r=(J=E((N=(J=S(C),S(C)),J),C),E)(N,C),X(N,C,r+J)}),U),U)),U),0),0),U)),[EK]),U),L([c,v],U),[XV,A]),U),U))},Q=function(U){return U.i?Vg(U.g,U):Z(U,8,true)},lX=function(U,v){return V[U](V.prototype,{call:v,floor:v,length:v,document:v,stack:v,replace:v,console:v,splice:v,prototype:v,pop:v,parent:v,propertyIsEnumerable:v})},R=function(U,v){for(v=[];U--;)v.push(255*Math.random()|0);return v},Cw=function(U,v,A,x,e){if(x=v[0],x==p)U.K=25,U.T(v);else if(x==W){A=v[1];try{e=U.A||U.T(v)}catch(C){K(U,C),e=U.A}A(e)}else if(x==fw)U.T(v);else if(x==c)U.T(v);else if(x==XV){try{for(e=0;e<U.o.length;e++)try{A=U.o[e],A[0][A[1]](A[2])}catch(C){}}catch(C){}(0,v[1])(function(C,J){U.s(C,true,J)},(U.o=[],function(C){L([(C=!U.u.length,D_)],U),C&&I(false,true,U)}))}else{if(x==M)return e=v[2],X(345,U,v[6]),X(368,U,e),U.T(v);x==D_?(U.F=[],U.B=null,U.V=[]):x==EK&&"loading"===n.document.readyState&&(U.J=function(C,J){function r(){J||(J=true,C())}(n.document.addEventListener("DOMContentLoaded",(J=false,r),q),n).addEventListener("load",r,q)})}},jr=function(U,v,A,x){h((A=(x=S(v),S(v)),A),v,H(U,E(x,v)))},I=function(U,v,A,x,e,C){if(A.u.length){A.uG=(A.j=!(A.j&&0(),0),v);try{x=A.G(),A.Y=x,A.N=0,A.U=x,C=yg(A,v),e=A.G()-A.U,A.R+=e,e<(U?0:10)||0>=A.K--||(e=Math.floor(e),A.F.push(254>=e?e:254))}finally{A.j=false}return C}},g,WF=function(U,v,A){if(3==U.length){for(A=0;3>A;A++)v[A]+=U[A];for(A=(U=0,[13,8,13,12,16,5,3,10,15]);9>U;U++)v[3](v,U%3,A[U])}},zh=function(U,v,A){if("object"==(v=typeof U,v))if(U){if(U instanceof Array)return"array";if(U instanceof Object)return v;if("[object Window]"==(A=Object.prototype.toString.call(U),A))return"object";if("[object Array]"==A||"number"==typeof U.length&&"undefined"!=typeof U.splice&&"undefined"!=typeof U.propertyIsEnumerable&&!U.propertyIsEnumerable("splice"))return"array";if("[object Function]"==A||"undefined"!=typeof U.call&&"undefined"!=typeof U.propertyIsEnumerable&&!U.propertyIsEnumerable("call"))return"function"}else return"null";else if("function"==v&&"undefined"==typeof U.call)return"object";return v},Vg=function(U,v){return(U=U.create().shift(),v.i.create()).length||v.g.create().length||(v.g=void 0,v.i=void 0),U},Lw=function(U,v,A,x){for(A=(x=S(U),0);0<v;v--)A=A<<8|Q(U);X(x,U,A)},Y=function(U,v,A){A=this;try{kc(this,U,v)}catch(x){K(this,x),v(function(e){e(A.A)})}},F=function(U,v,A){v[X(U,A,v),EK]=2796},J4=function(U,v){X(403,v,(v.a1.push(v.B.slice()),v.B[403]=void 0,U))},xc=function(U,v,A,x,e,C){if(!v.A){v.h++;try{for(x=(e=0,A=v.H,void 0);--U;)try{if((C=void 0,v).i)x=Vg(v.i,v);else{if(e=E(403,v),e>=A)break;x=(C=(X(105,v,e),S(v)),E)(C,v)}G(v,(x&&x[D_]&2048?x(v,U):d(0,v,[P,21,C]),false),U,false)}catch(J){E(23,v)?d(22,v,J):X(23,v,J)}if(!U){if(v.Zr){xc(335982656583,(v.h--,v));return}d(0,v,[P,33])}}catch(J){try{d(22,v,J)}catch(r){K(v,r)}}v.h--}},G=function(U,v,A,x,e,C,J,r,N){if(U.W+=(U.P=((e=(r=(J=(C=(N=(v||U.N++,0<U.D&&U.j&&U.uG&&1>=U.h&&!U.i&&!U.J&&(!v||1<U.X-A)&&0==document.hidden),4==U.N))||N?U.G():U.Y,J)-U.Y,r>>14),U).v&&(U.v^=e*(r<<2)),e)||U.P,e),C||N)U.Y=J,U.N=0;if(!N||J-U.U<U.D-(x?255:v?5:2))return false;return!(((X(403,(x=E(v?105:403,(U.X=A,U)),U),U.H),U).u.push([fw,x,v?A+1:A]),U).J=FV,0)},Sr=function(U,v,A,x,e){for(v=(e=v[3]|0,v[2]|0),x=0;14>x;x++)U=U>>>8|U<<24,U+=A|0,U^=v+3462,A=A<<3|A>>>29,A^=U,e=e>>>8|e<<24,e+=v|0,e^=x+3462,v=v<<3|v>>>29,v^=e;return[A>>>24&255,A>>>16&255,A>>>8&255,A>>>0&255,U>>>24&255,U>>>16&255,U>>>8&255,U>>>0&255]},Rh=function(U,v,A,x){try{x=U[((v|0)+2)%3],U[v]=(U[v]|0)-(U[((v|0)+1)%3]|0)-(x|0)^(1==v?x<<A:x>>>A)}catch(e){throw e;}},Qg=function(U,v){return U(function(A){A(v)}),[function(){return v}]},K=function(U,v){U.A=((U.A?U.A+"~":"E:")+v.message+":"+v.stack).slice(0,2048)},bX=function(U,v,A,x){function e(){}return x=uX(U,function(C){e&&(v&&FV(v),A=C,e(),e=void 0)},(A=void 0,!!v))[0],{invoke:function(C,J,r,N){function O(){A(function(l){FV(function(){C(l)})},r)}if(!J)return J=x(r),C&&C(J),J;A?O():(N=e,e=function(){(N(),FV)(O)})}}},E=function(U,v){if((v=v.B[U],void 0)===v)throw[P,30,U];if(v.value)return v.create();return v.create(3*U*U+32*U+97),v.prototype},UK=function(U){return U},n=this||self,Ih=function(U,v,A,x,e,C){for(x=(v=(((A=(C=U[Gh]||{},S)(U),C).Al=S(U),C).S=[],U.P)==U?(Q(U)|0)-1:1,S)(U),e=0;e<v;e++)C.S.push(S(U));for(C.Bx=E(x,U);v--;)C.S[v]=E(C.S[v],U);return C.I=E(A,U),C},Z_=function(U,v){((v.push(U[0]<<24|U[1]<<16|U[2]<<8|U[3]),v).push(U[4]<<24|U[5]<<16|U[6]<<8|U[7]),v).push(U[8]<<24|U[9]<<16|U[10]<<8|U[11])},cF=function(U,v,A){return U.s(function(x){A=x},false,v),A},h=function(U,v,A,x,e,C){if(v.P==v)for(e=E(U,v),491==U?(U=function(J,r,N,O){if(e.k5!=(r=(O=e.length,(O|0)-4>>3),r)){r=(r<<(N=[0,0,C[1],(e.k5=r,C[2])],3))-4;try{e.Q8=Sr(A4(e,(r|0)+4),N,A4(e,r))}catch(l){throw l;}}e.push(e.Q8[O&7]^J)},C=E(217,v)):U=function(J){e.push(J)},x&&U(x&255),v=0,x=A.length;v<x;v++)U(A[v])},X=function(U,v,A){if(403==U||105==U)v.B[U]?v.B[U].concat(A):v.B[U]=mv(A,v);else{if(v.O&&495!=U)return;220==U||491==U||51==U||52==U||217==U?v.B[U]||(v.B[U]=Nn(62,A,v,U)):v.B[U]=Nn(97,A,v,U)}495==U&&(v.v=Z(v,32,false),v.l=void 0)},L=function(U,v){v.u.splice(0,0,U)},qn=function(U,v){return(v=Q(U),v)&128&&(v=v&127|Q(U)<<7),v},FV=n.requestIdleCallback?function(U){requestIdleCallback(function(){U()},{timeout:4})}:n.setImmediate?function(U){setImmediate(U)}:function(U){setTimeout(U,0)},yg=function(U,v,A,x){for(;U.u.length;){U.J=null,x=U.u.pop();try{A=Cw(U,x)}catch(e){K(U,e)}if(v&&U.J){(v=U.J,v)(function(){I(true,true,U)});break}}return A},B,ah=function(U,v,A,x,e){h(((A=E((A=S((e=U&4,U&=3,v)),x=S(v),A),v),e&&(A=pw(""+A)),U)&&h(x,v,H(2,A.length)),x),v,A)},d=function(U,v,A,x,e,C){if(!v.O){if((U=(0==(x=E(52,((C=void 0,A)&&A[0]===P&&(U=A[1],C=A[2],A=void 0),v)),x.length)&&(e=E(105,v)>>3,x.push(U,e>>8&255,e&255),void 0!=C&&x.push(C&255)),""),A&&(A.message&&(U+=A.message),A.stack&&(U+=":"+A.stack)),A=E(4,v),3)<A){v.P=(C=(U=(A-=((U=U.slice(0,(A|0)-3),U).length|0)+3,pw)(U),v.P),v);try{h(491,v,H(2,U.length).concat(U),9)}finally{v.P=C}}X(4,v,A)}},H=function(U,v,A,x){for(x=(U|0)-(A=[],1);0<=x;x--)A[(U|0)-1-(x|0)]=v>>8*x&255;return A},S=function(U,v){if(U.i)return Vg(U.g,U);return(v=Z(U,8,true),v&128)&&(v^=128,U=Z(U,2,true),v=(v<<2)+(U|0)),v},q={passive:true,capture:true},uX=function(U,v,A,x){return(x=g[U.substring(0,3)+"_"])?x(U.substring(3),v,A):Qg(v,U)},pw=function(U,v,A,x,e){for(e=(U=U.replace(/\\r\\n/g,"\\n"),A=v=0,[]);A<U.length;A++)x=U.charCodeAt(A),128>x?e[v++]=x:(2048>x?e[v++]=x>>6|192:(55296==(x&64512)&&A+1<U.length&&56320==(U.charCodeAt(A+1)&64512)?(x=65536+((x&1023)<<10)+(U.charCodeAt(++A)&1023),e[v++]=x>>18|240,e[v++]=x>>12&63|128):e[v++]=x>>12|224,e[v++]=x>>6&63|128),e[v++]=x&63|128);return e},mv=function(U,v,A){return((A=V[v.Z](v.Hx),A)[v.Z]=function(){return U},A).concat=function(x){U=x},A},Z=function(U,v,A,x,e,C,J,r,N,O,l,z,k,a){if(N=E(403,U),N>=U.H)throw[P,31];for(l=(z=(r=v,x=U.lG.length,0),N);0<r;)J=l%8,a=8-(J|0),O=l>>3,a=a<r?a:r,k=U.V[O],A&&(e=U,e.l!=l>>6&&(e.l=l>>6,C=E(495,e),e.C=Sr(e.l,[0,0,C[1],C[2]],e.v)),k^=U.C[O&x]),l+=a,z|=(k>>8-(J|0)-(a|0)&(1<<a)-1)<<(r|0)-(a|0),r-=a;return X(403,(A=z,U),(N|0)+(v|0)),A},Gh=String.fromCharCode(105,110,116,101,103,67,104,101,99,107,66,121,112,97,115,115),p=((Y.prototype.mN=void 0,Y.prototype).U3=void 0,Y.prototype.Zr=false,[]),M=(Y.prototype.L="toString",[]),fw=[],P={},XV=[],EK=[],c=[],D_=[],W=[],er=((((((((Z_,function(){})(R),Rh,function(){})(WF),B=Y.prototype,B.vx=function(U,v,A){return U^((v=(v^=v<<13,v^=v>>17,(v^v<<5)&A))||(v=1),v)},B).Tk=function(U,v,A,x,e){for(e=x=0;x<U.length;x++)e+=U.charCodeAt(x),e+=e<<10,e^=e>>6;return(U=(e+=e<<3,e^=e>>11,e+(e<<15))>>>0,x=new Number(U&(1<<v)-1),x)[0]=(U>>>v)%A,x},Y.prototype).Z="create",B.s=function(U,v,A,x,e){if((A="array"===zh(A)?A:[A],this).A)U(this.A);else try{x=[],e=!this.u.length,L([p,x,A],this),L([W,U,x],this),v&&!e||I(true,v,this)}catch(C){K(this,C),U(this.A)}},B).y8=function(){return Math.floor(this.R+(this.G()-this.U))},B).ff=function(U,v,A,x,e,C){for(A=(e=C=0,[]);C<U.length;C++)for(x=x<<v|U[C],e+=v;7<e;)e-=8,A.push(x>>e&255);return A},B).G=(window.performance||{}).now?function(){return this.Gk+window.performance.now()}:function(){return+new Date},void 0),V=P.constructor;(B.gh=function(){return Math.floor(this.G())},Y.prototype).T=function(U,v){return U={},er=function(){return v==U?97:61},v={},function(A,x,e,C,J,r,N,O,l,z,k,a,m,y,f){v=(C=v,U);try{if(f=A[0],f==c){a=A[1];try{for(r=atob((x=[],a)),l=O=0;O<r.length;O++)y=r.charCodeAt(O),255<y&&(x[l++]=y&255,y>>=8),x[l++]=y;X(495,(this.H=(this.V=x,this.V.length<<3),this),[0,0,0])}catch(u){d(17,this,u);return}xc(8001,this)}else if(f==p)A[1].push(E(220,this).length,E(51,this).length,E(4,this),E(491,this).length),X(368,this,A[2]),this.B[458]&&r0(8001,E(458,this),this);else{if(f==W){this.P=(m=H(2,(E(220,(O=A[2],this)).length|0)+2),J=this.P,this);try{N=E(52,this),0<N.length&&h(220,this,H(2,N.length).concat(N),10),h(220,this,H(1,this.W),109),h(220,this,H(1,this[W].length)),r=0,r-=(E(220,this).length|0)+5,r+=E(109,this)&2047,z=E(491,this),4<z.length&&(r-=(z.length|0)+3),0<r&&h(220,this,H(2,r).concat(R(r)),15),4<z.length&&h(220,this,H(2,z.length).concat(z),156)}finally{this.P=J}if(e=(l=R(2).concat(E(220,this)),l[1]=l[0]^6,l[3]=l[1]^m[0],l[4]=l[1]^m[1],this).iG(l))e="!"+e;else for(r=0,e="";r<l.length;r++)k=l[r][this.L](16),1==k.length&&(k="0"+k),e+=k;return E(491,(E((x=e,220),this).length=O.shift(),E(51,this).length=O.shift(),X(4,this,O.shift()),this)).length=O.shift(),x}if(f==fw)r0(A[2],A[1],this);else if(f==M)return r0(8001,A[1],this)}}finally{v=C}}}();var nw,OK=(Y.prototype.hl=(Y.prototype[XV]=[0,0,1,1,0,1,1],Y.prototype.iG=function(U,v,A,x){if(x=window.btoa){for(A=(v=0,"");v<U.length;v+=8192)A+=String.fromCharCode.apply(null,U.slice(v,v+8192));U=x(A).replace(/\\+/g,"-").replace(/\\//g,"_").replace(/=/g,"")}else U=void 0;return U},Y.prototype.Jl=0,0),/./),Kw=c.pop.bind(Y.prototype[p]),Mn=(nw=lX(Y.prototype.Z,{get:(OK[Y.prototype.L]=Kw,Kw)}),Y.prototype.Su=void 0,function(U,v){return(v=vF())&&1===U.eval(v.createScript("1"))?function(A){return v.createScript(A)}:function(A){return""+A}})(n);40<(g=n.botguard||(n.botguard={}),g.m)||(g.m=41,g.bg=bX,g.a=uX),g.qBf_=function(U,v,A){return A=new Y(U,v),[function(x){return cF(A,x)}]};}).call(this);'));
}).call(this);
                                    

#3 JavaScript::Eval (size: 16512, repeated: 1) - SHA256: 890d569c1b858bfb0d84e4225f7a02831747360bf8fb96313e596cba882fec7d

                                        (function() {
    var vF = function(U, v) {
            if (!(U = (v = null, n.trustedTypes), U) || !U.createPolicy) return v;
            try {
                v = U.createPolicy("bg", {
                    createHTML: UK,
                    createScript: UK,
                    createScriptURL: UK
                })
            } catch (A) {
                n.console && n.console.error(A.message)
            }
            return v
        },
        oh = function(U, v, A, x, e, C) {
            function J() {
                if (v.P == v) {
                    if (v.B) {
                        var r = [M, x, U, void 0, e, C, arguments];
                        if (2 == A) var N = I(false, false, (L(r, v), v));
                        else if (1 == A) {
                            var O = !v.u.length;
                            L(r, v), O && I(false, false, v)
                        } else N = Cw(v, r);
                        return N
                    }
                    e && C && e.removeEventListener(C, J, q)
                }
            }
            return J
        },
        A4 = function(U, v) {
            return U[v] << 24 | U[(v | 0) + 1] << 16 | U[(v | 0) + 2] << 8 | U[(v | 0) + 3]
        },
        r0 = function(U, v, A, x) {
            return (X(403, A, (xc((x = E(403, A), A.V && x < A.H ? (X(403, A, A.H), J4(v, A)) : X(403, A, v), U), A), x)), E)(368, A)
        },
        Nn = function(U, v, A, x, e, C, J, r) {
            return (v = [60, 32, -94, 21, 71, (J = U & (r = er, 7), 74), v, 90, 56, 20], C = V[A.Z](A.Px), C[A.Z] = function(N) {
                J += 6 + 7 * (e = N, U), J &= 7
            }, C).concat = function(N) {
                return (e = (N = (N = (N = x % 16 + 1, +v[J + 43 & 7] * x * N - 1184 * x * e + J + 37 * e * e + (r() | 0) * N) + 3 * x * x * N - 111 * x * x * e - N * e - 3589 * e, v[N]), void 0), v)[(J + 21 & 7) + (U & 2)] = N, v[J + (U & 2)] = 32, N
            }, C
        },
        kc = function(U, v, A, x, e) {
            for (e = (x = (U.Px = (U.lG = U[U.Mx = (U.pf = nw, OK), W], lX)(U.Z, {get: function() {
                        return this.concat()
                    }
                }), U.Hx = V[U.Z](U.Px, {
                    value: {
                        value: {}
                    }
                }), 0), []); 128 > x; x++) e[x] = String.fromCharCode(x);
            I(true, true, (L((L((F(260, function(C, J, r, N, O, l, z, k, a, m, y, f) {
                function u(D, b) {
                    for (; l < D;) r |= Q(C) << l, l += 8;
                    return b = r & (l -= D, (1 << D) - 1), r >>= D, b
                }
                for (k = ((l = (a = S(C), r = 0), u(3)) | 0) + 1, O = u(5), J = [], z = m = 0; z < O; z++) y = u(1), J.push(y), m += y ? 0 : 1;
                for (z = (m = ((m | 0) - 1).toString(2).length, N = [], 0); z < O; z++) J[z] || (N[z] = u(m));
                for (m = 0; m < O; m++) J[m] && (N[m] = S(C));
                for (f = []; k--;) f.push(E(S(C), C));
                F(a, function(D, b, w, T, t) {
                    for (w = (T = [], 0), b = []; w < O; w++) {
                        if (!J[t = N[w], w]) {
                            for (; t >= T.length;) T.push(S(D));
                            t = T[t]
                        }
                        b.push(t)
                    }
                    D.g = mv((D.i = mv(f.slice(), D), b), D)
                }, C)
            }, (U.zk = (X(39, (F(153, function(C, J) {
                J4((J = E(S(C), C), J), C.P)
            }, (F(76, ((X(23, U, ((F(257, (X(220, (F(203, function(C, J, r, N) {
                J = (r = S(C), N = S(C), S(C)), C.P == C && (J = E(J, C), N = E(N, C), E(r, C)[N] = J, 495 == r && (C.l = void 0, 2 == N && (C.v = Z(C, 32, false), C.l = void 0)))
            }, (F(77, function(C, J, r, N, O, l, z) {
                for (r = (O = (l = E((N = (z = qn((J = S(C), C)), ""), 48), C), l.length), 0); z--;) r = ((r | 0) + (qn(C) | 0)) % O, N += e[l[r]];
                X(J, C, N)
            }, (F(197, function(C, J) {
                (J = S(C), C = E(J, C.P), C[0]).removeEventListener(C[1], C[2], q)
            }, (F(145, function(C, J, r, N, O, l) {
                if (!G(C, true, J, true)) {
                    if ("object" == (r = (l = (r = S((O = S((J = (l = S(C), S(C)), C)), C)), J = E(J, C), E(l, C)), E(r, C)), C = E(O, C), zh(l))) {
                        for (N in O = [], l) O.push(N);
                        l = O
                    }
                    for (O = (N = 0, C = 0 < C ? C : 1, l).length; N < O; N += C) J(l.slice(N, (N | 0) + (C | 0)), r)
                }
            }, (F(204, (X(4, (F(146, (F(319, (F(247, function(C, J, r, N, O) {
                X((J = (O = E((N = E((N = (J = (O = S((r = S(C), C)), S(C)), S(C)), N), C), O), C), E)(J, C), r), C, oh(J, C, N, O))
            }, (X(109, U, ((X(368, U, (F(42, (X(217, (F(486, (F(55, (F(226, function(C, J, r, N) {
                !G(C, true, J, false) && (J = Ih(C), N = J.Bx, r = J.I, C.P == C || r == C.nf && N == C) && (X(J.Al, C, r.apply(N, J.S)), C.Y = C.G())
            }, (F(308, (F(436, (U.Y5 = (F(483, function(C, J, r, N) {
                if (J = C.a1.pop()) {
                    for (N = Q(C); 0 < N; N--) r = S(C), J[r] = C.B[r];
                    C.B = (J[4] = C.B[J[52] = C.B[52], 4], J)
                } else X(403, C, C.H)
            }, (F(405, function(C) {
                jr(4, C)
            }, (F(475, (X(52, (F(64, function(C, J, r) {
                (r = (r = (J = S(C), S)(C), E)(r, C), 0) != E(J, C) && X(403, C, r)
            }, (X(491, U, (F(460, (F(131, (X(51, U, (X(((X(403, (((U.H = 0, U.V8 = (U.o = [], U.B = [], U.g = (U.a1 = [], U.O = (U.D = 0, false), U.N = void 0, void 0), ((U.i = void 0, U).A = (x = window.performance || {}, void 0), U).U = (U.X = ((U.uG = (U.l = void 0, U.j = false, !(U.R = 0, 1)), U).h = (U.P = U, U.V = (U.J = (U.W = 1, null), []), U.F = [], 0), U.C = void 0, 8001), U.K = (U.v = void 0, 25), U.Y = 0, 0), 0), U).nf = function(C) {
                this.P = C
            }, U.u = [], U).Gk = x.timeOrigin || (x.timing || {}).navigationStart || 0, U), 0), X)(105, U, 0), 208), U, U), [])), function(C, J, r, N) {
                (r = E((N = (J = S((r = (N = S(C), S(C)), C)), E(N, C)), r), C), X)(J, C, N[r])
            }), U), function(C, J, r, N) {
                r = E((J = S((N = S(C), r = S(C), C)), r), C), N = E(N, C) == r, X(J, C, +N)
            }), U), R(4))), F(478, function(C, J, r, N) {
                X((r = E((J = E((r = S((J = S(C), C)), N = S(C), J), C), r), C), N), C, J in r | 0)
            }, U), U)), U), []), function(C) {
                Lw(C, 4)
            }), U), U)), U)), 0), function() {}), U), function(C, J, r, N, O, l) {
                G(C, true, J, false) || (l = Ih(C.P), N = l.Bx, O = l.I, J = l.Al, l = l.S, r = l.length, N = 0 == r ? new N[O] : 1 == r ? new N[O](l[0]) : 2 == r ? new N[O](l[0], l[1]) : 3 == r ? new N[O](l[0], l[1], l[2]) : 4 == r ? new N[O](l[0], l[1], l[2], l[3]) : 2(), X(J, C, N))
            }), U), U)), function(C, J, r, N) {
                X((r = S((N = (J = S(C), Q)(C), C)), r), C, E(J, C) >>> N)
            }), U), function(C) {
                jr(1, C)
            }), U), U), [0, 0, 0]), function(C, J, r, N, O) {
                0 !== (J = E((N = (r = E((O = (J = (r = (N = (O = S(C), S(C)), S(C)), S)(C), E(O, C.P)), r), C), E)(N, C), J), C), O) && (J = oh(J, C, 1, r, O, N), O.addEventListener(N, J, q), X(39, C, [O, N, J]))
            }), U), {})), X)(16, U, n), 0)), U)), function(C, J, r, N) {
                r = (J = S(C), N = S(C), S)(C), X(r, C, E(J, C) || E(N, C))
            }), U), function(C, J, r) {
                X((r = (J = (r = S(C), S(C)), r = E(r, C), zh)(r), J), C, r)
            }), U), U), 2048), function(C, J, r) {
                G(C, true, J, false) || (J = S(C), r = S(C), X(r, C, function(N) {
                    return eval(N)
                }(Mn(E(J, C.P)))))
            }), U), U)), U)), U)), U)), U), [160, 0, 0]), function(C) {
                ah(4, C)
            }), U), F)(366, function(C, J, r) {
                X((r = S(C), J = S(C), J), C, "" + E(r, C))
            }, U), 426)), F)(395, function(C, J, r, N, O) {
                for (r = (O = qn((J = S(C), C)), N = 0, []); N < O; N++) r.push(Q(C));
                X(J, C, r)
            }, U), F(341, function(C) {
                ah(3, C)
            }, U), U.dh = 0, function(C, J, r, N) {
                r = (J = E((N = (J = S(C), S(C)), J), C), E)(N, C), X(N, C, r + J)
            }), U), U)), U), 0), 0), U)), [EK]), U), L([c, v], U), [XV, A]), U), U))
        },
        Q = function(U) {
            return U.i ? Vg(U.g, U) : Z(U, 8, true)
        },
        lX = function(U, v) {
            return V[U](V.prototype, {
                call: v,
                floor: v,
                length: v,
                document: v,
                stack: v,
                replace: v,
                console: v,
                splice: v,
                prototype: v,
                pop: v,
                parent: v,
                propertyIsEnumerable: v
            })
        },
        R = function(U, v) {
            for (v = []; U--;) v.push(255 * Math.random() | 0);
            return v
        },
        Cw = function(U, v, A, x, e) {
            if (x = v[0], x == p) U.K = 25, U.T(v);
            else if (x == W) {
                A = v[1];
                try {
                    e = U.A || U.T(v)
                } catch (C) {
                    K(U, C), e = U.A
                }
                A(e)
            } else if (x == fw) U.T(v);
            else if (x == c) U.T(v);
            else if (x == XV) {
                try {
                    for (e = 0; e < U.o.length; e++) try {
                        A = U.o[e], A[0][A[1]](A[2])
                    } catch (C) {}
                } catch (C) {}(0, v[1])(function(C, J) {
                    U.s(C, true, J)
                }, (U.o = [], function(C) {
                    L([(C = !U.u.length, D_)], U), C && I(false, true, U)
                }))
            } else {
                if (x == M) return e = v[2], X(345, U, v[6]), X(368, U, e), U.T(v);
                x == D_ ? (U.F = [], U.B = null, U.V = []) : x == EK && "loading" === n.document.readyState && (U.J = function(C, J) {
                    function r() {
                        J || (J = true, C())
                    }(n.document.addEventListener("DOMContentLoaded", (J = false, r), q), n).addEventListener("load", r, q)
                })
            }
        },
        jr = function(U, v, A, x) {
            h((A = (x = S(v), S(v)), A), v, H(U, E(x, v)))
        },
        I = function(U, v, A, x, e, C) {
            if (A.u.length) {
                A.uG = (A.j = !(A.j && 0(), 0), v);
                try {
                    x = A.G(), A.Y = x, A.N = 0, A.U = x, C = yg(A, v), e = A.G() - A.U, A.R += e, e < (U ? 0 : 10) || 0 >= A.K-- || (e = Math.floor(e), A.F.push(254 >= e ? e : 254))
                } finally {
                    A.j = false
                }
                return C
            }
        },
        g, WF = function(U, v, A) {
            if (3 == U.length) {
                for (A = 0; 3 > A; A++) v[A] += U[A];
                for (A = (U = 0, [13, 8, 13, 12, 16, 5, 3, 10, 15]); 9 > U; U++) v[3](v, U % 3, A[U])
            }
        },
        zh = function(U, v, A) {
            if ("object" == (v = typeof U, v))
                if (U) {
                    if (U instanceof Array) return "array";
                    if (U instanceof Object) return v;
                    if ("[object Window]" == (A = Object.prototype.toString.call(U), A)) return "object";
                    if ("[object Array]" == A || "number" == typeof U.length && "undefined" != typeof U.splice && "undefined" != typeof U.propertyIsEnumerable && !U.propertyIsEnumerable("splice")) return "array";
                    if ("[object Function]" == A || "undefined" != typeof U.call && "undefined" != typeof U.propertyIsEnumerable && !U.propertyIsEnumerable("call")) return "function"
                } else return "null";
            else if ("function" == v && "undefined" == typeof U.call) return "object";
            return v
        },
        Vg = function(U, v) {
            return (U = U.create().shift(), v.i.create()).length || v.g.create().length || (v.g = void 0, v.i = void 0), U
        },
        Lw = function(U, v, A, x) {
            for (A = (x = S(U), 0); 0 < v; v--) A = A << 8 | Q(U);
            X(x, U, A)
        },
        Y = function(U, v, A) {
            A = this;
            try {
                kc(this, U, v)
            } catch (x) {
                K(this, x), v(function(e) {
                    e(A.A)
                })
            }
        },
        F = function(U, v, A) {
            v[X(U, A, v), EK] = 2796
        },
        J4 = function(U, v) {
            X(403, v, (v.a1.push(v.B.slice()), v.B[403] = void 0, U))
        },
        xc = function(U, v, A, x, e, C) {
            if (!v.A) {
                v.h++;
                try {
                    for (x = (e = 0, A = v.H, void 0); --U;) try {
                        if ((C = void 0, v).i) x = Vg(v.i, v);
                        else {
                            if (e = E(403, v), e >= A) break;
                            x = (C = (X(105, v, e), S(v)), E)(C, v)
                        }
                        G(v, (x && x[D_] & 2048 ? x(v, U) : d(0, v, [P, 21, C]), false), U, false)
                    } catch (J) {
                        E(23, v) ? d(22, v, J) : X(23, v, J)
                    }
                    if (!U) {
                        if (v.Zr) {
                            xc(335982656583, (v.h--, v));
                            return
                        }
                        d(0, v, [P, 33])
                    }
                } catch (J) {
                    try {
                        d(22, v, J)
                    } catch (r) {
                        K(v, r)
                    }
                }
                v.h--
            }
        },
        G = function(U, v, A, x, e, C, J, r, N) {
            if (U.W += (U.P = ((e = (r = (J = (C = (N = (v || U.N++, 0 < U.D && U.j && U.uG && 1 >= U.h && !U.i && !U.J && (!v || 1 < U.X - A) && 0 == document.hidden), 4 == U.N)) || N ? U.G() : U.Y, J) - U.Y, r >> 14), U).v && (U.v ^= e * (r << 2)), e) || U.P, e), C || N) U.Y = J, U.N = 0;
            if (!N || J - U.U < U.D - (x ? 255 : v ? 5 : 2)) return false;
            return !(((X(403, (x = E(v ? 105 : 403, (U.X = A, U)), U), U.H), U).u.push([fw, x, v ? A + 1 : A]), U).J = FV, 0)
        },
        Sr = function(U, v, A, x, e) {
            for (v = (e = v[3] | 0, v[2] | 0), x = 0; 14 > x; x++) U = U >>> 8 | U << 24, U += A | 0, U ^= v + 3462, A = A << 3 | A >>> 29, A ^= U, e = e >>> 8 | e << 24, e += v | 0, e ^= x + 3462, v = v << 3 | v >>> 29, v ^= e;
            return [A >>> 24 & 255, A >>> 16 & 255, A >>> 8 & 255, A >>> 0 & 255, U >>> 24 & 255, U >>> 16 & 255, U >>> 8 & 255, U >>> 0 & 255]
        },
        Rh = function(U, v, A, x) {
            try {
                x = U[((v | 0) + 2) % 3], U[v] = (U[v] | 0) - (U[((v | 0) + 1) % 3] | 0) - (x | 0) ^ (1 == v ? x << A : x >>> A)
            } catch (e) {
                throw e;
            }
        },
        Qg = function(U, v) {
            return U(function(A) {
                A(v)
            }), [function() {
                return v
            }]
        },
        K = function(U, v) {
            U.A = ((U.A ? U.A + "~" : "E:") + v.message + ":" + v.stack).slice(0, 2048)
        },
        bX = function(U, v, A, x) {
            function e() {}
            return x = uX(U, function(C) {
                e && (v && FV(v), A = C, e(), e = void 0)
            }, (A = void 0, !!v))[0], {
                invoke: function(C, J, r, N) {
                    function O() {
                        A(function(l) {
                            FV(function() {
                                C(l)
                            })
                        }, r)
                    }
                    if (!J) return J = x(r), C && C(J), J;
                    A ? O() : (N = e, e = function() {
                        (N(), FV)(O)
                    })
                }
            }
        },
        E = function(U, v) {
            if ((v = v.B[U], void 0) === v) throw [P, 30, U];
            if (v.value) return v.create();
            return v.create(3 * U * U + 32 * U + 97), v.prototype
        },
        UK = function(U) {
            return U
        },
        n = this || self,
        Ih = function(U, v, A, x, e, C) {
            for (x = (v = (((A = (C = U[Gh] || {}, S)(U), C).Al = S(U), C).S = [], U.P) == U ? (Q(U) | 0) - 1 : 1, S)(U), e = 0; e < v; e++) C.S.push(S(U));
            for (C.Bx = E(x, U); v--;) C.S[v] = E(C.S[v], U);
            return C.I = E(A, U), C
        },
        Z_ = function(U, v) {
            ((v.push(U[0] << 24 | U[1] << 16 | U[2] << 8 | U[3]), v).push(U[4] << 24 | U[5] << 16 | U[6] << 8 | U[7]), v).push(U[8] << 24 | U[9] << 16 | U[10] << 8 | U[11])
        },
        cF = function(U, v, A) {
            return U.s(function(x) {
                A = x
            }, false, v), A
        },
        h = function(U, v, A, x, e, C) {
            if (v.P == v)
                for (e = E(U, v), 491 == U ? (U = function(J, r, N, O) {
                        if (e.k5 != (r = (O = e.length, (O | 0) - 4 >> 3), r)) {
                            r = (r << (N = [0, 0, C[1], (e.k5 = r, C[2])], 3)) - 4;
                            try {
                                e.Q8 = Sr(A4(e, (r | 0) + 4), N, A4(e, r))
                            } catch (l) {
                                throw l;
                            }
                        }
                        e.push(e.Q8[O & 7] ^ J)
                    }, C = E(217, v)) : U = function(J) {
                        e.push(J)
                    }, x && U(x & 255), v = 0, x = A.length; v < x; v++) U(A[v])
        },
        X = function(U, v, A) {
            if (403 == U || 105 == U) v.B[U] ? v.B[U].concat(A) : v.B[U] = mv(A, v);
            else {
                if (v.O && 495 != U) return;
                220 == U || 491 == U || 51 == U || 52 == U || 217 == U ? v.B[U] || (v.B[U] = Nn(62, A, v, U)) : v.B[U] = Nn(97, A, v, U)
            }
            495 == U && (v.v = Z(v, 32, false), v.l = void 0)
        },
        L = function(U, v) {
            v.u.splice(0, 0, U)
        },
        qn = function(U, v) {
            return (v = Q(U), v) & 128 && (v = v & 127 | Q(U) << 7), v
        },
        FV = n.requestIdleCallback ? function(U) {
            requestIdleCallback(function() {
                U()
            }, {
                timeout: 4
            })
        } : n.setImmediate ? function(U) {
            setImmediate(U)
        } : function(U) {
            setTimeout(U, 0)
        },
        yg = function(U, v, A, x) {
            for (; U.u.length;) {
                U.J = null, x = U.u.pop();
                try {
                    A = Cw(U, x)
                } catch (e) {
                    K(U, e)
                }
                if (v && U.J) {
                    (v = U.J, v)(function() {
                        I(true, true, U)
                    });
                    break
                }
            }
            return A
        },
        B, ah = function(U, v, A, x, e) {
            h(((A = E((A = S((e = U & 4, U &= 3, v)), x = S(v), A), v), e && (A = pw("" + A)), U) && h(x, v, H(2, A.length)), x), v, A)
        },
        d = function(U, v, A, x, e, C) {
            if (!v.O) {
                if ((U = (0 == (x = E(52, ((C = void 0, A) && A[0] === P && (U = A[1], C = A[2], A = void 0), v)), x.length) && (e = E(105, v) >> 3, x.push(U, e >> 8 & 255, e & 255), void 0 != C && x.push(C & 255)), ""), A && (A.message && (U += A.message), A.stack && (U += ":" + A.stack)), A = E(4, v), 3) < A) {
                    v.P = (C = (U = (A -= ((U = U.slice(0, (A | 0) - 3), U).length | 0) + 3, pw)(U), v.P), v);
                    try {
                        h(491, v, H(2, U.length).concat(U), 9)
                    } finally {
                        v.P = C
                    }
                }
                X(4, v, A)
            }
        },
        H = function(U, v, A, x) {
            for (x = (U | 0) - (A = [], 1); 0 <= x; x--) A[(U | 0) - 1 - (x | 0)] = v >> 8 * x & 255;
            return A
        },
        S = function(U, v) {
            if (U.i) return Vg(U.g, U);
            return (v = Z(U, 8, true), v & 128) && (v ^= 128, U = Z(U, 2, true), v = (v << 2) + (U | 0)), v
        },
        q = {
            passive: true,
            capture: true
        },
        uX = function(U, v, A, x) {
            return (x = g[U.substring(0, 3) + "_"]) ? x(U.substring(3), v, A) : Qg(v, U)
        },
        pw = function(U, v, A, x, e) {
            for (e = (U = U.replace(/\r\n/g, "\n"), A = v = 0, []); A < U.length; A++) x = U.charCodeAt(A), 128 > x ? e[v++] = x : (2048 > x ? e[v++] = x >> 6 | 192 : (55296 == (x & 64512) && A + 1 < U.length && 56320 == (U.charCodeAt(A + 1) & 64512) ? (x = 65536 + ((x & 1023) << 10) + (U.charCodeAt(++A) & 1023), e[v++] = x >> 18 | 240, e[v++] = x >> 12 & 63 | 128) : e[v++] = x >> 12 | 224, e[v++] = x >> 6 & 63 | 128), e[v++] = x & 63 | 128);
            return e
        },
        mv = function(U, v, A) {
            return ((A = V[v.Z](v.Hx), A)[v.Z] = function() {
                return U
            }, A).concat = function(x) {
                U = x
            }, A
        },
        Z = function(U, v, A, x, e, C, J, r, N, O, l, z, k, a) {
            if (N = E(403, U), N >= U.H) throw [P, 31];
            for (l = (z = (r = v, x = U.lG.length, 0), N); 0 < r;) J = l % 8, a = 8 - (J | 0), O = l >> 3, a = a < r ? a : r, k = U.V[O], A && (e = U, e.l != l >> 6 && (e.l = l >> 6, C = E(495, e), e.C = Sr(e.l, [0, 0, C[1], C[2]], e.v)), k ^= U.C[O & x]), l += a, z |= (k >> 8 - (J | 0) - (a | 0) & (1 << a) - 1) << (r | 0) - (a | 0), r -= a;
            return X(403, (A = z, U), (N | 0) + (v | 0)), A
        },
        Gh = String.fromCharCode(105, 110, 116, 101, 103, 67, 104, 101, 99, 107, 66, 121, 112, 97, 115, 115),
        p = ((Y.prototype.mN = void 0, Y.prototype).U3 = void 0, Y.prototype.Zr = false, []),
        M = (Y.prototype.L = "toString", []),
        fw = [],
        P = {},
        XV = [],
        EK = [],
        c = [],
        D_ = [],
        W = [],
        er = ((((((((Z_, function() {})(R), Rh, function() {})(WF), B = Y.prototype, B.vx = function(U, v, A) {
            return U ^ ((v = (v ^= v << 13, v ^= v >> 17, (v ^ v << 5) & A)) || (v = 1), v)
        }, B).Tk = function(U, v, A, x, e) {
            for (e = x = 0; x < U.length; x++) e += U.charCodeAt(x), e += e << 10, e ^= e >> 6;
            return (U = (e += e << 3, e ^= e >> 11, e + (e << 15)) >>> 0, x = new Number(U & (1 << v) - 1), x)[0] = (U >>> v) % A, x
        }, Y.prototype).Z = "create", B.s = function(U, v, A, x, e) {
            if ((A = "array" === zh(A) ? A : [A], this).A) U(this.A);
            else try {
                x = [], e = !this.u.length, L([p, x, A], this), L([W, U, x], this), v && !e || I(true, v, this)
            } catch (C) {
                K(this, C), U(this.A)
            }
        }, B).y8 = function() {
            return Math.floor(this.R + (this.G() - this.U))
        }, B).ff = function(U, v, A, x, e, C) {
            for (A = (e = C = 0, []); C < U.length; C++)
                for (x = x << v | U[C], e += v; 7 < e;) e -= 8, A.push(x >> e & 255);
            return A
        }, B).G = (window.performance || {}).now ? function() {
            return this.Gk + window.performance.now()
        } : function() {
            return +new Date
        }, void 0),
        V = P.constructor;
    (B.gh = function() {
        return Math.floor(this.G())
    }, Y.prototype).T = function(U, v) {
        return U = {}, er = function() {
                return v == U ? 97 : 61
            }, v = {},
            function(A, x, e, C, J, r, N, O, l, z, k, a, m, y, f) {
                v = (C = v, U);
                try {
                    if (f = A[0], f == c) {
                        a = A[1];
                        try {
                            for (r = atob((x = [], a)), l = O = 0; O < r.length; O++) y = r.charCodeAt(O), 255 < y && (x[l++] = y & 255, y >>= 8), x[l++] = y;
                            X(495, (this.H = (this.V = x, this.V.length << 3), this), [0, 0, 0])
                        } catch (u) {
                            d(17, this, u);
                            return
                        }
                        xc(8001, this)
                    } else if (f == p) A[1].push(E(220, this).length, E(51, this).length, E(4, this), E(491, this).length), X(368, this, A[2]), this.B[458] && r0(8001, E(458, this), this);
                    else {
                        if (f == W) {
                            this.P = (m = H(2, (E(220, (O = A[2], this)).length | 0) + 2), J = this.P, this);
                            try {
                                N = E(52, this), 0 < N.length && h(220, this, H(2, N.length).concat(N), 10), h(220, this, H(1, this.W), 109), h(220, this, H(1, this[W].length)), r = 0, r -= (E(220, this).length | 0) + 5, r += E(109, this) & 2047, z = E(491, this), 4 < z.length && (r -= (z.length | 0) + 3), 0 < r && h(220, this, H(2, r).concat(R(r)), 15), 4 < z.length && h(220, this, H(2, z.length).concat(z), 156)
                            } finally {
                                this.P = J
                            }
                            if (e = (l = R(2).concat(E(220, this)), l[1] = l[0] ^ 6, l[3] = l[1] ^ m[0], l[4] = l[1] ^ m[1], this).iG(l)) e = "!" + e;
                            else
                                for (r = 0, e = ""; r < l.length; r++) k = l[r][this.L](16), 1 == k.length && (k = "0" + k), e += k;
                            return E(491, (E((x = e, 220), this).length = O.shift(), E(51, this).length = O.shift(), X(4, this, O.shift()), this)).length = O.shift(), x
                        }
                        if (f == fw) r0(A[2], A[1], this);
                        else if (f == M) return r0(8001, A[1], this)
                    }
                } finally {
                    v = C
                }
            }
    }();
    var nw, OK = (Y.prototype.hl = (Y.prototype[XV] = [0, 0, 1, 1, 0, 1, 1], Y.prototype.iG = function(U, v, A, x) {
            if (x = window.btoa) {
                for (A = (v = 0, ""); v < U.length; v += 8192) A += String.fromCharCode.apply(null, U.slice(v, v + 8192));
                U = x(A).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "")
            } else U = void 0;
            return U
        }, Y.prototype.Jl = 0, 0), /./),
        Kw = c.pop.bind(Y.prototype[p]),
        Mn = (nw = lX(Y.prototype.Z, {get: (OK[Y.prototype.L] = Kw, Kw)
        }), Y.prototype.Su = void 0, function(U, v) {
            return (v = vF()) && 1 === U.eval(v.createScript("1")) ? function(A) {
                return v.createScript(A)
            } : function(A) {
                return "" + A
            }
        })(n);
    40 < (g = n.botguard || (n.botguard = {}), g.m) || (g.m = 41, g.bg = bX, g.a = uX), g.qBf_ = function(U, v, A) {
        return A = new Y(U, v), [function(x) {
            return cF(A, x)
        }]
    };
}).call(this);
                                    

#4 JavaScript::Eval (size: 64, repeated: 1) - SHA256: 87c99b9a88a42ee46bbe6ce447b600a1653142b3ebb7b9ed96bc786f7a99d488

                                        0,
function(C, J, r) {
    X((J = (r = (J = S(C), S)(C), C.B[J]) && E(J, C), r), C, J)
}
                                    

#5 JavaScript::Eval (size: 22, repeated: 1) - SHA256: eb3a140c9b84b3b5c69ed2966cf442240e63fc12aaf1e79d0c35aec5b237d9d7

                                        0,
function(C) {
    Lw(C, 1)
}
                                    

#6 JavaScript::Eval (size: 22, repeated: 1) - SHA256: ba41c5348d38a6ebd3399d0378ae76921f287d04f94ff5d93d6709e7f2a962b7

                                        0,
function(C) {
    Lw(C, 2)
}
                                    

Executed Writes (0)



HTTP Transactions (104)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 04 Oct 2022 14:47:04 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 3AJaSvxuJZivkiLomZafl3XxEObrFuV4GEZwzAliR12UcJMc8ytu-w==
Age: 3212


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    1b3053fa528e28810f8a2cc9284cc921
Sha1:   cca9eb471d941881a6b9a1793aecb6c281908f6a
Sha256: a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1F611155394FAC39439B8EC8217D8CD493D6B588D372D264E0D66C03129C50C6"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5105
Expires: Tue, 04 Oct 2022 17:05:41 GMT
Date: Tue, 04 Oct 2022 15:40:36 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.110
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 04 Oct 2022 05:28:28 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ooSD6emFImlRPkhSp565lHoCzoWavwYuhYTA3ApyRrgjjBy6Um6Slw==
age: 36729
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET /dora-bayer/sisley_geter-94.zip HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         50.87.146.64
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Tue, 04 Oct 2022 15:40:36 GMT
Server: Apache
Location: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Cache-Control: max-age=300
Expires: Tue, 04 Oct 2022 15:45:36 GMT
Content-Length: 269
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   269
Md5:    2e314c848a6439c4155dc015ff24e168
Sha1:   3f1906f6001acb0903d46be9265e2d982e039128
Sha256: 1b4792636359cc85454c6d94b3e1a2e7373efe21a54eddef64d5714f3d5a8b87

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 04 Oct 2022 15:40:36 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A7E00E82C61B3D1A6A63EB61CAC0FFD02486CCACFB807FA6F7D6147EA02BA992"
Last-Modified: Tue, 04 Oct 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21539
Expires: Tue, 04 Oct 2022 21:39:35 GMT
Date: Tue, 04 Oct 2022 15:40:36 GMT
Connection: keep-alive

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Tue, 04 Oct 2022 15:29:33 GMT
Expires: Tue, 04 Oct 2022 16:18:32 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: MzfW7Yujnib5sC9tNgRRmaSCPucSPB47-6A9PEyZehcJ8oZUcCRkdQ==
Age: 663


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3070
Cache-Control: 'max-age=158059'
Date: Tue, 04 Oct 2022 15:40:36 GMT
Last-Modified: Tue, 04 Oct 2022 14:49:26 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: GCIYf80EXXPKV1IU0eOLJA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         35.155.157.101
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: M+m5xSsRW2/xEKZFeod5FwaZD/0=

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:40:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:40:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtag/js?id=UA-167750773-1 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 04 Oct 2022 15:40:37 GMT
expires: Tue, 04 Oct 2022 15:40:37 GMT
cache-control: private, max-age=900
last-modified: Tue, 04 Oct 2022 15:08:24 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42365
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2039)
Size:   42365
Md5:    49fd40d2a4acd7abaea5f315a2ec4483
Sha1:   702b98711561ab879beb450a9b862eb8b7f5180a
Sha256: fa2f9e7455aeb6def27804579f6ff5f256fa53b410dbd5e1395fb0cfc9409d11
                                        
                                            GET /css?family=Oswald%3A400%2C300%7COpen+Sans%3A700%2C400%2C400i%7CRoboto%3A700%2C400&ver=6.0.2 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 04 Oct 2022 15:40:37 GMT
date: Tue, 04 Oct 2022 15:40:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1543
Md5:    c9265a234dc5444a19e58557fa47394e
Sha1:   667a39154890b164e6b65a7ccc29ac60df1d132a
Sha256: b15f1521872ac87f27adccb33c2f688584b95d6d70bddd19a4ddcf618df6fe60
                                        
                                            GET /wp-content/plugins/woo-out-of-stock-products/inc/outofstock.css?ver=6.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Sun, 26 Apr 2020 16:07:55 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 421
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (364), with CRLF line terminators
Size:   421
Md5:    b85872ebc1a17128f0a513e85de4b504
Sha1:   a2ef838a52b0499604f4c423709971d2627dcf10
Sha256: 9c5984e4e0a9229145b396522ed540defef291c3da2056a808f35cd61b553f52
                                        
                                            GET /wp-content/plugins/woo-out-of-stock-products/admin/inc/admin-outofstock.css?ver=6.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Sun, 26 Apr 2020 01:00:54 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 123
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   123
Md5:    8df5ad8a0ae40a17e71597baacf9b180
Sha1:   fa1d318397c905a1d36f88f7420425409be9a8ae
Sha256: b367e0e6756e828d0ef2cd4f77527e8d74784b7cfab12c502bbc132e95207526
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:40:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 11 Feb 2021 15:57:54 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 3239
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11256), with no line terminators
Size:   3239
Md5:    1054d0d53548e8bae51665b11acc6413
Sha1:   2eea6a05fe18db61fff58c431d34a86b3e0b7ade
Sha256: cb8b0f0f3f871d9776da32ee6d9e1af9277a211be61e97a831c7f8c98fbebfae
                                        
                                            GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=5.5.1 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 10 Mar 2022 21:42:13 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1154
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3276), with no line terminators
Size:   1154
Md5:    4b54905974b8a358e51ac1d1807f55bd
Sha1:   2c785074589dda8fe89324c9dd16f8d5694dded0
Sha256: 2d1217b0eec970b6bb388260f840baf654e276b2340ce2f240684fc88582e974
                                        
                                            GET /wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Wed, 08 Jan 2020 20:57:09 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1298
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4186), with no line terminators
Size:   1298
Md5:    91bab39b98d7e5c1632717b9ebe349e4
Sha1:   e639a447d06fc7827be5b5b35d603ff16b5f7bb1
Sha256: 47ff151faeb23a5654f6ec58b404e51193f6714849a69de241c2ee79662f74c6
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:40:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /recaptcha/api.js?render=6LfBB94UAAAAAJsmWr7aJs22tm_JnxB6ZDAwrNC7&ver=3.0 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.164
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
expires: Tue, 04 Oct 2022 15:40:37 GMT
date: Tue, 04 Oct 2022 15:40:37 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 586
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (884), with no line terminators
Size:   586
Md5:    863a79c51303858639841bf08f42de45
Sha1:   4a735ae95a6a6b8c32b0fe1c5067c1cfe0d6bddf
Sha256: 5a299cbb63e627fef65dc036db52e3bfd8e1fc968310b2998154e35b2d847bfc
                                        
                                            GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 01 Aug 2022 13:52:07 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 16594
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (43771)
Size:   16594
Md5:    2a67a4888baa44de739f3fe56203ce07
Sha1:   da175eae57f26b655747d79f055477e3fee1abb9
Sha256: 3a4d7627476a0099ca4bcc101685f27de04cb49dd66ef842d72c6cda270599dd
                                        
                                            GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=5.6.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 10 Mar 2022 21:42:14 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 3138
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (17923), with no line terminators
Size:   3138
Md5:    cb050cf785dc6a3154760c12096a2f5c
Sha1:   797c9ea468aa1f60667926bd35bf6874a3e548ea
Sha256: 97ac5d6189e1cdb1d62b676c0769ec783131500f02155eba5b4eae109fe1fa0f
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:40:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.8 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 27 Jan 2020 02:10:22 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 11979
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (5178)
Size:   11979
Md5:    0934891eb8e76a58d115e0c41015b023
Sha1:   43afb84e3363148a8075e015c074f7317fc5a090
Sha256: 9c53e0485cf755c4236daabea4c457ae80056756a2e0f00970cf39bc449fcabe
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.6.1 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 409 Conflict
content-type: text/html; charset=iso-8859-1
                                        
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
content-length: 83
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   83
Md5:    26267cd8990f15d3bbea71684a6d5995
Sha1:   ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
Sha256: 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
                                        
                                            GET /wp-content/plugins/eventON/assets/css/eventon_dynamic_styles.css?ver=6.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Sat, 07 Mar 2020 21:34:29 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 2265
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  assembler source, ASCII text, with very long lines (2921), with CRLF line terminators
Size:   2265
Md5:    c8a3608d28b620f2efd1f2c86691be80
Sha1:   236f0a935c975236962d62a5309eebcd44d4e0fc
Sha256: a992513e606d3e87bb52685eeb50ac7244620b54fdf46d600c0f088937bccd3d
                                        
                                            GET /wp-content/plugins/eventON/assets/fonts/font-awesome.css?ver=2.7 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Sat, 07 Mar 2020 21:08:12 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 7517
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  troff or preprocessor input, ASCII text, with very long lines (347)
Size:   7517
Md5:    92b827bf163a062725109c0508b0fabe
Sha1:   e611af31aa49b2d9ea5146486657126dd3ba3063
Sha256: 86415a98efa83492835dfd413224429951c0fe565f3940464232f352f9832253
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6.1 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 409 Conflict
content-type: text/html; charset=iso-8859-1
                                        
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
content-length: 83
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   83
Md5:    26267cd8990f15d3bbea71684a6d5995
Sha1:   ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
Sha256: 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
                                        
                                            GET /s-202240.js HTTP/1.1 
Host: stats.wp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         192.0.76.3
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 04 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
etag: W/"6197c5cf-2494"
content-encoding: br
expires: Mon, 02 Oct 2023 15:43:35 GMT
cache-control: max-age=31536000
x-nc: HIT arn
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (9364), with no line terminators
Size:   3902
Md5:    96580c1e1d5a355aaa7aade2c3714fd2
Sha1:   db109cbdcf297dbfd63f8ea33e0ac4ea17a8fec7
Sha256: fdf39ab025a12386d33ead2d9a45ac15516b5773e559d3b49d1de4f404fd2de7
                                        
                                            GET /wp-content/plugins/creame-whatsapp-me/public/css/joinchat-btn.min.css?ver=4.5.9 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 01 Aug 2022 13:46:01 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 2462
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6021), with no line terminators
Size:   2462
Md5:    5970e7598cf1a83c35e762ae20415920
Sha1:   8660ae5456c778a1603ae5a8e07f1497cff5c50c
Sha256: 4ab655357d11e783d63e4ce3d227e7d75bec807e67355a8eaf17954d151cdc5a
                                        
                                            GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 01 Aug 2022 13:52:08 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 8254
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (19138), with no line terminators
Size:   8254
Md5:    e49f0561a452c9d04fb7d1510a23cc8c
Sha1:   9e8fc2e3129da4fe2790eee565a6478b864bea83
Sha256: ab4f9f418b022ab34d617ee2f95d70afff005ed4d4d92e313ce84a56b40bce75
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=5.6.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 10 Mar 2022 21:42:14 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1200
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (3037), with no line terminators
Size:   1200
Md5:    57b5945094a547e06221f8f949e6d335
Sha1:   76fc7361f00684ea29ffbf4b7d46e5429b8c245a
Sha256: f9d0da987075df31cc4cf8aed46bc193467ce7165568d83c8016e6fe904e72c3
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.5.6.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 10 Mar 2022 21:42:14 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1000
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1668)
Size:   1000
Md5:    0bebfb5722cbc8ac04e62aa40698be49
Sha1:   3bc5e4f29cb19a2d80d46dee242dabf7e42c0fd3
Sha256: 70d02eabbadbe176455a2bb53d8d567feca69847c067a5274987a8bdc65e3c05
                                        
                                            GET /wp-content/plugins/kingcomposer/assets/css/animate.css?ver=2.9.6 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 14 Jan 2021 16:58:27 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 3656
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (36512)
Size:   3656
Md5:    e3f6e578fe7ca5362fccbfcce94ce996
Sha1:   b1deba8d80cae941d22051fda096e49d6274af3b
Sha256: eb202c9ec2bc15da2ea3e218313eb25628179671965ed043c49fb711a63dfbfe
                                        
                                            GET /wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=8.7.0 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 01 Aug 2022 13:46:00 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 3861
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1577)
Size:   3861
Md5:    0de3f234bf5adf709c64d6a81701e107
Sha1:   ec76e30709d2ac94c86121529768c54b84943872
Sha256: c67075988b28f06061348cebb275f465c608e141f9a00b50c5e4824f57ed10f3
                                        
                                            GET /wp-content/plugins/eventON/assets/js/jquery.mousewheel.min.js?ver=2.7 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:44:17 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 716
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1020)
Size:   716
Md5:    bb865c2c01892719bfdd390898e7634d
Sha1:   0d69bbe15aa80a0a949b95d730350625dfa6369a
Sha256: b0f210b68a0f064803906cab5dd9d1bdd65e03ffb309f603ca4afe6533819285
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=5.6.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 10 Mar 2022 21:42:14 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 792
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2139), with no line terminators
Size:   792
Md5:    1ca3f41c13e0027acc45f0601f8b640f
Sha1:   cced34af0c6a59e9cee4229faa66ab39c7031506
Sha256: d3bc5eaf4c6be9473dbba690825cce9a1a6f4accb6721dae7875efef54942f41
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=5.6.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 10 Mar 2022 21:42:14 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1093
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2938), with no line terminators
Size:   1093
Md5:    cd0d4a61ea66e2609f7fafca802e10c8
Sha1:   6c2f2a32371a7cb6c34cd0d7abd5ca653058b6e1
Sha256: 21a6739f80cd455c35620bf9869f312c4ff0b7e5d4b6d6cc8401bd5deba54c1a
                                        
                                            GET /wp-content/plugins/eventON/assets/js/eventon_functions.js?ver=2.7 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:41:46 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1021
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1021
Md5:    f7fb8cc8255bd25334fa6d7bc157c280
Sha1:   a6f84408321f7560d0735a842f85eadd55431bb5
Sha256: 1c7446b1f3baaed496b6e798870eed738bb0d05a10938ba4668ee4b7c509ad45
                                        
                                            GET /wp-content/themes/eveprest/css/prettyPhoto.css?ver=6.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 27 Jan 2020 02:00:53 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 4811
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   4811
Md5:    13dcaddec0c181498bd9f6feb5ee1693
Sha1:   40dd2ec323b38247f41502e8bd6d32180c7b73f4
Sha256: cfe47550f7fe5818fb09180a168217bb839197bb61dcb707709770210bfaead2
                                        
                                            GET /wp-content/themes/eveprest/js/functions.js?ver=20150315 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:39:27 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 2179
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   2179
Md5:    3356a040b291b40357e00aafbd148802
Sha1:   7f276bf644063fb6f553da60fc0f4d8fa80e4b7a
Sha256: 7e4a44df807df6d125ae3cb8ed6fc56344a617acfe73068f7115d8341c49979a
                                        
                                            GET /wp-content/themes/eveprest/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 27 Jan 2020 02:00:52 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 7079
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (30629)
Size:   7079
Md5:    934b13b87386616f02d876ba5966833c
Sha1:   318fb4792f877fe9628e37db5fe27f23ab3d8395
Sha256: 53f4c4d51cd69a86d2f92175f97d9e373a644b81d066a1e4ea2e2896f16c775c
                                        
                                            GET /wp-content/themes/eveprest/js/jquery.prettyPhoto.js?ver=6.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:39:11 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 7455
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (21223)
Size:   7455
Md5:    943defc85539a3513d3a76442d5c3307
Sha1:   2633f53e5a6b04544a803961504327fe059f357a
Sha256: 31658dc37ad1feeeee8137866f0476b43894725ff63f62db3c2e0f6b9d4ee2b7
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 25 Aug 2021 19:13:45 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 4618
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11126)
Size:   4618
Md5:    acdb97105af28a7066790c6748ae2e1e
Sha1:   65794d2c5a9d04f747faf370bc8bacd330e69e5a
Sha256: dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
                                        
                                            GET /wp-includes/js/jquery/suggest.min.js?ver=1.1-20110113 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 25 Aug 2021 19:13:45 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1431
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2992)
Size:   1431
Md5:    f75161fdcb9f74f47747e959c8cfc1b7
Sha1:   77a9216b944111011f19ead03d48e7ac2a4de109
Sha256: 94ca799a236dbda6c8198fa181b8bf85744f1b55a2ae14fcd1c480ec7f75c74e
                                        
                                            GET /wp-content/themes/eveprest/js/woocommerce.js?ver=20131022 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:39:11 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 3270
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   3270
Md5:    2c886b74ada8ff85e1a3986a9b64d219
Sha1:   048641e360a268443f2f65431e1cf3d307b94819
Sha256: 85c724b510d03de0227557076405419018902da580534c2f021df73103868547
                                        
                                            GET /wp-content/plugins/creame-whatsapp-me/public/js/joinchat.min.js?ver=4.5.9 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 01 Aug 2022 13:46:01 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 3144
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7996), with no line terminators
Size:   3144
Md5:    d1c9564ba057c67abbf92063047fbd0b
Sha1:   62e211fdb6c7277c0cf8b4c24a96fc986d7f9db5
Sha256: 630854c465b2a91eafc869896e89749a20215a5b99a4cf0eb930ba5c6a7584bc
                                        
                                            GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 01 Aug 2022 13:52:08 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 2675
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6475), with no line terminators
Size:   2675
Md5:    45bd1d6f7fc3a4069fc6fd400b90c961
Sha1:   903c7e28c7141e9fc1bdb4dfc62d043a97a01e2d
Sha256: c638a0057b4be0a61cfb65b1860a855a327397e9871f5dde28fa2f138fb394dc
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.5.6.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 10 Mar 2022 21:42:14 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 3952
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (9151)
Size:   3952
Md5:    338b374df64ac61f520f0dc2c42f84a4
Sha1:   7f5d52c9681f54bd3adbda325dffaac88b48839f
Sha256: c411e1e640b16842b6142a6e4db4b7172abedc8740b0944fc7c510c7f8f85609
                                        
                                            GET /wp-content/plugins/eventON/assets/js/jquery.mobile.min.js?ver=2.7 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:40:38 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 4177
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (13639), with no line terminators
Size:   4177
Md5:    3384dd748de7a3411c5f335665f2c966
Sha1:   89ee515f5819573381ca9bd0dcfdb809b0d5245c
Sha256: 9b4a667c48034e48ed398eebf7d2f97948b205260d191c043568c3f284bf2571
                                        
                                            GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 01 Aug 2022 13:52:08 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 5321
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (15660)
Size:   5321
Md5:    710f8b142ea44c0682dc2c30f318f065
Sha1:   49144e9b3a76d3d383b1d4359cf7a25e947f4233
Sha256: 708bb5819879a2a2c7670abc20a58cca68a415ffd621011cbc4c3c9d82dddc50
                                        
                                            GET /wp-content/plugins/wpopal-themer/assets/js/elevatezoom/elevatezoom-min.js?ver=6.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:46:10 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 7847
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (560)
Size:   7847
Md5:    684f525508c5891f2565719a8f15a9fe
Sha1:   67bb1d05a41a70ae23dd757642bcbe4c5a6fad89
Sha256: 214a8b1edf79077afccf8105c7f59342004018f2d5052fc0c8aa884c92f269b0
                                        
                                            GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=5.6.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 10 Mar 2022 21:42:14 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 13274
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (62789), with no line terminators
Size:   13274
Md5:    82896daaf5244f88f56a2a05ad01f545
Sha1:   d29b7c23ec5d0c5996138a0191fa8e44ebe01e2d
Sha256: 5a9ff1f54c905da4d01e306753da7a9bd10c98e1e84b5bd89d112567dc687da3
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5569
Expires: Tue, 04 Oct 2022 17:13:27 GMT
Date: Tue, 04 Oct 2022 15:40:38 GMT
Connection: keep-alive

                                        
                                            GET /wp-content/plugins/kingcomposer/assets/css/icons.css?ver=2.9.6 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 14 Jan 2021 16:58:27 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 11214
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (35475)
Size:   11214
Md5:    0ee2565319bdc28b2f5edac9826f40ae
Sha1:   79c05f008f3ff3f96fd97b94a1ea13de34b72afa
Sha256: 11457f8c739cb2b78f0a6cfd63e263390b53d8a566489dc1cb15198c0d8299a0
                                        
                                            GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 01 Aug 2022 13:52:08 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 8169
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (8189)
Size:   8169
Md5:    a0a1c8194f131320e1798f90a7b1262a
Sha1:   3346d35be1f2e4886f19e7fcc0cc96ee4753d9ed
Sha256: 7f618ab13cec0933ec2c61fa2b580ad77ca41522028649677494219fa9ce56db
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5569
Expires: Tue, 04 Oct 2022 17:13:27 GMT
Date: Tue, 04 Oct 2022 15:40:38 GMT
Connection: keep-alive

                                        
                                            GET /wp-content/plugins/kingcomposer/assets/frontend/js/kingcomposer.min.js?ver=2.9.6 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:45:14 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 8232
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (17655)
Size:   8232
Md5:    bf1ff96c20bc4bdf23a2abdfb01f3dd1
Sha1:   017cc02e2bf733bde013999e09e3cbde44df1bd5
Sha256: 626aec5edc9fa0edf3ea391ef1b0eb41cfc09fd5970b488db2264f3018032149
                                        
                                            GET /wp-content/themes/eveprest/js/bootstrap.min.js?ver=20130402 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:38:01 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 14302
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32034)
Size:   14302
Md5:    5f6b33d0c3c840a00bb9546255b950fe
Sha1:   8529abb9ada164bd0c06aac91f8772598cb06a83
Sha256: 77ef532197a471284339e911d1ec20c1da285e8e8dba10fec10c1dcde394fb08
                                        
                                            GET /wp-content/themes/eveprest/js/owl-carousel/owl.carousel.js?ver=20150315 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:43:53 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 11998
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   11998
Md5:    752d1936df616908639a921209323a83
Sha1:   119b009420eafb606f5e39544b154f7f2496b845
Sha256: 6e900a35e46ad4b2526372286c43389c764ff16f2fd9a8d7b2e10fa020eb90c3
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fec31ab6c-46f2-4d77-a807-9f14bb5073bc.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11955
x-amzn-requestid: ce6bbe93-95b0-4b6e-a8bc-012796485e67
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zcqb9FUtoAMF0WQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b577f-59dc0a18523f900a059aa5df;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:43:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: tJwzKfs7HnQ7dVcINwnlzxTChXiEi4JPj8jrS8p5KhurRx_o3ZVOZQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 22:10:59 GMT
etag: "e2ea2ef6805e391c497e62e101e76a0bdecfce64"
age: 62979
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11955
Md5:    54b3ef7aa50273b78b59c24511b0c1f9
Sha1:   e2ea2ef6805e391c497e62e101e76a0bdecfce64
Sha256: 296e8954022d5160137b3e02ab5085a15cee7c23cd6d4ca61b36880706062457
                                        
                                            GET /wp-content/plugins/eventON/assets/js/eventon_script.js?ver=2.7 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:44:37 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 14370
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   14370
Md5:    f3ab5f46e7ed4a053ef5ca51a0609bfc
Sha1:   79dfe6de7f243d3370ae7935df21656fcb1320a1
Sha256: d914405f59424ab7d09a98c98ec990f43550e2f5b583c14e77d1bfeeb367e875
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5569
Expires: Tue, 04 Oct 2022 17:13:27 GMT
Date: Tue, 04 Oct 2022 15:40:38 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8641c47a-9aff-4f73-bb07-6770cbbcc8d6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5504
x-amzn-requestid: 37405eb0-5c75-46a9-84c0-e8ed726995d8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpHvHPvoAMF3mg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5564-77fd550b58af612525e74761;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:34:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Ovm2wuk28PygH4EZNEUoPchoHQggWCyXbYHOjMV1tZmfyDrL6PjPZA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 22:29:19 GMT
age: 61879
etag: "20ef861be49c652a938e0145e4ca3a60159367e2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5504
Md5:    6c6882c60d7ca6f918c77104e3ad1d52
Sha1:   20ef861be49c652a938e0145e4ca3a60159367e2
Sha256: 861f5870990fbd2939d151ae18384cf311e87067ca9a50818efe0c2d51b83088
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6315
x-amzn-requestid: 6aa75b16-32e4-48a7-9fb0-9e3d5528c2d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWSdsHUnIAMFXtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338cabd-742d8a436403683e0cd9368f;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 23:18:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5sAzc5Ewv4g6Wqq6JJiLylG3Jyy_nlWrr5Oteeo6ebEgq7Rvss4XaQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 04:42:53 GMT
age: 39465
etag: "58ff0bf8ce7528b303d28bab01a80ad721705569"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6315
Md5:    206fb65e75dbadf119512f71e0b78402
Sha1:   58ff0bf8ce7528b303d28bab01a80ad721705569
Sha256: 56c8d5f3b3060ee54bf81995269b86c070855d8c33bf437161339a45b309703f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6bf68975-a099-4d4b-9abd-6e684653439d.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10878
x-amzn-requestid: a849d918-ec40-47d4-93cb-e938b010bd50
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpJKGAPIAMFSiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b556d-242a8d2208b6574c34063c1f;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:34:37 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 40cLnZvUr45pWmnT6qZgZu13Y1pyeycMEK-m9ALI1LVo2Wpysjt7Vw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:45:04 GMT
age: 64534
etag: "d893d8035379e06e53e365b9f47f5da40bff932b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10878
Md5:    f62719b24a32198c6f462a0a0412ac98
Sha1:   d893d8035379e06e53e365b9f47f5da40bff932b
Sha256: ca863affca1559e92e415a4de2e78e4b4c1ec4cf8e8549693499c6f79bd27975
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a61745f-0c9b-404a-ba22-0a69cf2f0383.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4858
x-amzn-requestid: fb21c414-2994-444a-a838-e643fd05b171
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpvTEfPoAMFfeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5661-593dd8043b0490e7301cac0d;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:38:41 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: MiSh_FjAciKCaOakY2mM_EHBN1Z6GIDYIP8mwS4ikkrToQN3Ktsv2g==
via: 1.1 773ca14e6bd4bf9244988cb69fc9dca8.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:56:46 GMT
age: 63832
etag: "585e7146fd24cdc2496b05baafea04091dc541e2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4858
Md5:    6779181f9c06975f2a662da743893939
Sha1:   585e7146fd24cdc2496b05baafea04091dc541e2
Sha256: 8e9a9f92fd89b7cdce77884ccd76b83ab82d28f125ebfc1cb0d371d4046b7985
                                        
                                            GET /wp-content/uploads/2020/02/payment.png HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Thu, 27 Feb 2020 01:48:39 GMT
accept-ranges: bytes
content-length: 3474
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 255 x 22, 8-bit colormap, non-interlaced\012- data
Size:   3474
Md5:    26ccffda5c7255dc62bfabac1ad0592a
Sha1:   d71af19b8500468b0e27f41f25b386fb4819b58b
Sha256: 68d6fd8051da72645f729d7f3389b60cc55121b4889dc82afc89d90e18ffc57f
                                        
                                            GET /wp-content/uploads/2020/02/cropped-logo-foot2.png HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Wed, 26 Feb 2020 02:58:44 GMT
accept-ranges: bytes
content-length: 9045
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 77 x 75, 8-bit/color RGBA, non-interlaced\012- data
Size:   9045
Md5:    4fc4cf77723f0c2b5f43c4e01ab7c99e
Sha1:   a74745a8947bd0314a7634d4f4b27a3e7474c757
Sha256: c98e05f77ce684f2693d0a0b2753a4e44d7fc092692b6e851e20c53d0eb6ebbd
                                        
                                            GET /wp-content/uploads/2020/02/logo-foot.png HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Sun, 09 Feb 2020 01:05:20 GMT
accept-ranges: bytes
content-length: 26120
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 150 x 135, 8-bit/color RGBA, non-interlaced\012- data
Size:   26120
Md5:    03ead5633efb2d5ca2ccf99a090c8d07
Sha1:   c7364df3435ce6e6dc508e6f908bdd4d87c02128
Sha256: 3eb0131743adf39a4c647d80b392a98024b9fc1ea701416112d59b04f3baa43b
                                        
                                            GET /wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=5.6.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 10 Mar 2022 21:42:14 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:38 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1294
date: Tue, 04 Oct 2022 15:40:38 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7043), with no line terminators
Size:   1294
Md5:    23030da399d26bb36e2effda3c58d488
Sha1:   2480e4b14c65a29b6013515cea8a55a6646aa85a
Sha256: 026d41f0bbec9c4116e05c06d43d3bbae4e9ec0975f84140565760431eaa88d7
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:40:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fundaciondarydarse.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Oct 2022 03:08:55 GMT
expires: Sun, 01 Oct 2023 03:08:55 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
age: 304303
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Size:   44856
Md5:    565ce506190ad3af920b40baf1794cec
Sha1:   ad3cba5d06100e09449a864d3b5e58403b478b3d
Sha256: 8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
                                        
                                            GET /wp-content/plugins/eventON/assets/js/handlebars.js?ver=2.7 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:41:52 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   28125
Md5:    5cb749b0822e658bbff855661eb523a4
Sha1:   74342bdb1f05bca81b4e441b233c3d943d32ace5
Sha256: ec9dade84c423c45ecde4ae5f50fb003c9ac4dc6225704b016e61e028e44cc8c
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6.1 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 409 Conflict
content-type: text/html; charset=iso-8859-1
                                        
date: Tue, 04 Oct 2022 15:40:38 GMT
server: Apache
content-length: 83
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   83
Md5:    26267cd8990f15d3bbea71684a6d5995
Sha1:   ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
Sha256: 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
                                        
                                            GET /wp-content/uploads/2020/04/body-fundation.png HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/wp-content/themes/eveprest/css/style.css?ver=6.0.2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Fri, 17 Apr 2020 03:56:32 GMT
accept-ranges: bytes
content-length: 372950
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:38 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:40:38 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Size:   372950
Md5:    3b5cde15300676b7dc90047be72dc314
Sha1:   8ac399d53197a0d373fa7dc8df9dbdf6302487e4
Sha256: 4b059c8ebf76b5dd854bb067a9ec87e0599e50ee1b30205a59b52bbf1ae55223
                                        
                                            GET /wp-content/themes/eveprest/fonts/proximanovacondensed/ProximaNovaCondensedLight.woff HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://fundaciondarydarse.org/wp-content/themes/eveprest/css/style.css?ver=6.0.2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: font/woff
                                        
last-modified: Mon, 27 Jan 2020 02:01:17 GMT
accept-ranges: bytes
content-length: 55436
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:38 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:40:38 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, CFF, length 55436, version 0.0\012- data
Size:   55436
Md5:    b9b6810f2616d36cec5afcf02eedd171
Sha1:   a0b07a15c7f528994a60d5db23e782a9a310f93c
Sha256: b46fdebcaaced5bf4e6bb91ff195e7611c595c4cb9d5fee4edea59e7b5c66909
                                        
                                            GET /wp-content/plugins/kingcomposer/assets/css/fonts/fa-solid-900.woff2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://fundaciondarydarse.org/wp-content/plugins/kingcomposer/assets/css/icons.css?ver=2.9.6
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: font/woff2
                                        
last-modified: Thu, 14 Jan 2021 16:58:27 GMT
accept-ranges: bytes
content-length: 44068
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:38 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:40:38 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 44068, version 1.0\012- data
Size:   44068
Md5:    84f351b3972185aed620f78489e48b2d
Sha1:   27c88aea3904d48cde4c8cd6fa85a414b547feea
Sha256: cb7aa6b06aa5a8eea3670662c4b0c37104041c14575fc170dc48677a0506a33a
                                        
                                            GET /wp-content/themes/eveprest/fonts/proximanovacondensed/ProximaNovaCondensedRegular.woff HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://fundaciondarydarse.org/wp-content/themes/eveprest/css/style.css?ver=6.0.2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: font/woff
                                        
last-modified: Mon, 27 Jan 2020 02:01:20 GMT
accept-ranges: bytes
content-length: 55804
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:38 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:40:38 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, CFF, length 55804, version 0.0\012- data
Size:   55804
Md5:    78091db94f3527ee01b6f46d4fff2b2c
Sha1:   a091cd76ed4b01cd9b6db59515cc06278c6d98d6
Sha256: ac6ddfe6981739ff58f783db6eb4a0bae2ff06f8f1b5dab856de25524a83c0ab
                                        
                                            GET /wp-content/themes/eveprest/fonts/proximanovacondensed/ProximaNovaCondensedBold.woff HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://fundaciondarydarse.org/wp-content/themes/eveprest/css/style.css?ver=6.0.2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: font/woff
                                        
last-modified: Mon, 27 Jan 2020 02:01:16 GMT
accept-ranges: bytes
content-length: 57564
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:38 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:40:38 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, CFF, length 57564, version 0.0\012- data
Size:   57564
Md5:    6c58651f10f14cff8a059d1287747783
Sha1:   d460c88393d7722c72f6a62838b8347133398051
Sha256: 293ec76211b0bb1e242ef4b56abbd5b667418f9e3c98a891c95fa052bc03ceb1
                                        
                                            GET /wp-content/plugins/kingcomposer/assets/css/fonts/fa-brands-400.woff2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://fundaciondarydarse.org/wp-content/plugins/kingcomposer/assets/css/icons.css?ver=2.9.6
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: font/woff2
                                        
last-modified: Thu, 14 Jan 2021 16:58:27 GMT
accept-ranges: bytes
content-length: 55144
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:38 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:40:38 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 55144, version 1.0\012- data
Size:   55144
Md5:    2ac01f7650b5ab76bfebbc708928929e
Sha1:   8ca7aeb88ef1fefb582f941e9216029328e25f4c
Sha256: e8562087317b34c4b2ac60e28e272b7b33e37523aacd5f2adba7a4f108e415c6
                                        
                                            GET /maps-api-v3/embed/js/50/7a/intl/es_419/init_embed.js HTTP/1.1 
Host: maps.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 69325
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Oct 2022 16:58:02 GMT
expires: Sun, 01 Oct 2023 16:58:02 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 27 Sep 2022 20:34:50 GMT
age: 254557
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2669)
Size:   69325
Md5:    f24d3836affa80a8d17e2720e15d9b13
Sha1:   cc91c7b820f873a197697421984637399ae484ee
Sha256: 3a21d4f024399c1648048acf80e720961ca5e2272051cee41b6fb444474f9dee
                                        
                                            GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.5.6.1 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 409 Conflict
content-type: text/html; charset=iso-8859-1
                                        
date: Tue, 04 Oct 2022 15:40:38 GMT
server: Apache
content-length: 83
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   83
Md5:    26267cd8990f15d3bbea71684a6d5995
Sha1:   ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
Sha256: 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
                                        
                                            GET /wp-content/themes/eveprest/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://fundaciondarydarse.org/wp-content/themes/eveprest/css/font-awesome.min.css?ver=4.7.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: font/woff2
                                        
last-modified: Mon, 27 Jan 2020 02:01:12 GMT
accept-ranges: bytes
content-length: 77160
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:39 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:40:39 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Size:   77160
Md5:    af7ae505a9eed503f8b8e6982036873e
Sha1:   d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
Sha256: 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
                                        
                                            GET /g.gif?v=ext&j=1%3A11.1.2&blog=172023568&post=0&tz=-5&srv=fundaciondarydarse.org&host=fundaciondarydarse.org&ref=&fcp=2838&rand=0.791639806950253 HTTP/1.1 
Host: pixel.wp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         192.0.76.3
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Tue, 04 Oct 2022 15:40:39 GMT
content-length: 50
cache-control: no-cache
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 6 x 5\012- data
Size:   50
Md5:    e4d673a55c5656f19ef81563fb10884c
Sha1:   1f2d8ed221d39329251ad3a6ff1edb20b7219443
Sha256: f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1
                                        
                                            GET /recaptcha/releases/a9s0j4pCVT6gaTEkLiFbtZPH/recaptcha__en.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fundaciondarydarse.org
Connection: keep-alive
Referer: https://fundaciondarydarse.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 158844
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Oct 2022 01:05:31 GMT
expires: Sun, 01 Oct 2023 01:05:31 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 26 Sep 2022 04:02:34 GMT
age: 311708
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (711)
Size:   158844
Md5:    b4ed95d4318e3b78b936c9c0f1ffa96e
Sha1:   b53c9376b1459afb07fb4b5c2e8d8dad776d3a02
Sha256: 3c21880cb7be6bec40f9d40c23ad39c9758999cf950cec07b86c83b21fde175f
                                        
                                            GET /wp-content/uploads/2020/02/favicon.ico HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Cookie: tk_or=%22%22; tk_r3d=%22%22; tk_lr=%22%22
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: image/x-icon
                                        
last-modified: Sun, 09 Feb 2020 03:17:22 GMT
accept-ranges: bytes
content-length: 1150
cache-control: max-age=31536000
expires: Wed, 04 Oct 2023 15:40:39 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:40:39 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size:   1150
Md5:    2de14e3e5b90dd75c1f25e178db7de10
Sha1:   a0fcffe4e795780b3dd2b5e443a4fb49406fdc05
Sha256: 3a1ed2228dee991066ded374a1c94d0667f41f8c23f7ba459a522bd5a4722b5e
                                        
                                            GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.8 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:44:55 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   47932
Md5:    5f5526a498701ffb42440a96534c6d30
Sha1:   7409077623e71c31dc0a3a91cb20cb2d322998cd
Sha256: 7c583bf8f02bf130293da3372cc8986fa65604c937d5c08ff823d35d694deef9
                                        
                                            GET /wp-content/plugins/kingcomposer/assets/frontend/css/kingcomposer.min.css?ver=2.9.6 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 14 Jan 2021 16:58:27 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   25647
Md5:    de7d72d5e9208faa15ebf2282c2dea45
Sha1:   263eab41ccdfdb2cfde06cc281216c3ff70e96f8
Sha256: 2d152695c23249bfa534fe49137de512bc2d12da13e6343f7e34b9c7c93e1ac1
                                        
                                            GET /dora-bayer/sisley_geter-94.zip HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         50.87.146.64
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                        
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://fundaciondarydarse.org/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:40:36 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   24781
Md5:    ca27a738dc3556628b135d6a86b056f6
Sha1:   6894b5d33689307d5ad1dff92c2349e3b5da110b
Sha256: 07adffd60a4c2def5b22997309dd6c5ffdd85973d5b316c74f7f3af436c7ab45

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Oct 2022 12:31:58 GMT
expires: Sun, 01 Oct 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 270521
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Size:   15344
Md5:    5d4aeb4e5f5ef754e307d7ffaef688bd
Sha1:   06db651cdf354c64a7383ea9c77024ef4fb4cef8
Sha256: 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
                                        
                                            GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 30 Sep 2022 00:48:31 GMT
expires: Sat, 30 Sep 2023 00:48:31 GMT
cache-control: public, max-age=31536000
age: 399128
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Size:   15552
Md5:    285467176f7fe6bb6a9c6873b3dad2cc
Sha1:   ea04e4ff5142ddd69307c183def721a160e0a64e
Sha256: 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:40:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-167750773-1&cid=1609710036.1664898039&jid=1879645279&gjid=1084510347&_gid=1307104375.1664898039&_u=aGBAAUIgAAAAACAAI~&z=1094961765 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://fundaciondarydarse.org
Connection: keep-alive
Referer: https://fundaciondarydarse.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         74.125.131.155
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: https://fundaciondarydarse.org
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 04 Oct 2022 15:40:39 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  very short file (no magic)
Size:   1
Md5:    c4ca4238a0b923820dcc509a6f75849b
Sha1:   356a192b7913b04c54574d18c28d46e6395428ab
Sha256: 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:40:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /?wc-ajax=get_refreshed_fragments HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 18
Origin: https://fundaciondarydarse.org
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Cookie: tk_or=%22%22; tk_r3d=%22%22; tk_lr=%22%22; _ga=GA1.2.1609710036.1664898039; _gid=GA1.2.1307104375.1664898039; _gat_gtag_UA_167750773_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
                                        
access-control-allow-origin: https://fundaciondarydarse.org
access-control-allow-credentials: true
x-content-type-options: nosniff
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-robots-tag: noindex
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 265
date: Tue, 04 Oct 2022 15:40:39 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- exported SGML document, ASCII text, with very long lines (487), with no line terminators
Size:   265
Md5:    5bae85ed249cf46084fcb41e04e458ba
Sha1:   202577166706fb0a208ee8c44896ff5f10883ed0
Sha256: aa33a9c276c8d5417a8ed50a8f9f0605bb21152ebab0fed237e11d533f2ca8fb
                                        
                                            GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=5.5.1 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 10 Mar 2022 21:42:14 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.8 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:45:35 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/plugins/eventON/assets/css/eventon_styles.css?ver=2.7 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Sat, 07 Mar 2020 21:08:08 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 25 Aug 2021 19:13:45 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/plugins/jetpack/css/jetpack.css?ver=11.1.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 01 Aug 2022 13:54:10 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/themes/eveprest/css/woocommerce.css?ver=1.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Sun, 24 May 2020 18:18:41 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/themes/eveprest/css/style.css?ver=6.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/sisley_geter-94.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Sun, 26 Apr 2020 01:43:43 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:40:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:40:37 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---