Overview

URLproitcteam.com/18202-126877/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer&prom_type=regular&prom_id=194926&pld=26L81sNgpwNGg5&answer=2
IP 23.21.213.51 (United States)
ASN#14618 AMAZON-AES
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-11-11 21:50:03 UTC
StatusLoading report..
IDS alerts0
Blocklist alert43
urlquery alerts No alerts detected
Tags None

Domain Summary (19)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
polyfill.io (1) 102644 2016-02-12T01:04:58Z 2023-03-10T13:52:49Z 457 644 151.101.129.26
ocsp.pki.goog (6) 175 2018-07-01T08:43:07Z 2023-03-10T05:11:10Z 2058 4200 142.250.74.35
use.typekit.net (1) 494 2012-07-05T03:42:39Z 2023-03-10T05:27:57Z 375 4510 23.36.76.122
p.typekit.net (1) 620 2012-05-23T16:28:57Z 2023-03-10T05:27:57Z 858 357 23.36.76.122
stackpath.bootstrapcdn.com (1) 2467 2018-06-15T22:36:43Z 2023-03-10T09:31:27Z 412 903 104.18.11.207
r3.o.lencr.org (5) 344 2020-12-02T09:52:13Z 2023-03-10T05:09:10Z 1690 4434 23.36.76.226
contile.services.mozilla.com (1) 1114 2021-05-27T20:32:35Z 2023-03-10T05:10:00Z 333 229 34.117.237.239
push.services.mozilla.com (1) 2140 2014-10-24T10:27:06Z 2023-03-10T05:10:02Z 606 127 44.237.163.41
via.placeholder.com (1) 26595 2017-06-01T17:41:00Z 2023-03-10T11:53:46Z 393 2584 104.21.33.39
proitcteam.com (25) 0 13129 3778958 23.21.213.51
firefox.settings.services.mozilla.com (2) 867 2020-06-04T22:08:41Z 2023-03-10T05:10:00Z 782 2373 34.102.187.140
ocsp.globalsign.com (1) 2075 2012-07-20T19:46:16Z 2023-03-10T05:11:21Z 368 1920 104.18.21.226
fonts.gstatic.com (1) 0 2014-09-09T02:40:21Z 2023-03-10T14:37:36Z 478 16693 216.58.207.195
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-22T01:36:00Z 2023-03-10T05:10:04Z 3246 52658 34.120.237.76
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03T13:26:46Z 2023-03-10T05:12:35Z 413 5844 34.160.144.191
cdnjs.cloudflare.com (2) 235 2015-04-17T22:46:33Z 2023-03-10T08:04:05Z 783 46607 104.17.24.14
fonts.googleapis.com (8) 8877 2013-06-10T22:14:26Z 2023-03-10T12:25:49Z 3743 44629 142.250.74.10
ocsp.digicert.com (6) 86 2012-05-21T09:02:23Z 2023-03-10T13:49:44Z 2046 4010 93.184.220.29
cdn.jsdelivr.net (1) 439 2012-09-30T02:15:09Z 2023-03-10T11:13:22Z 407 8596 151.101.85.229

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-11 medium proitcteam.com/ckeditor/contents.css?t=M9RE Phishing
2022-11-11 medium proitcteam.com/ckeditor/plugins/formBuilder/styles/formBuilder.css?v=1.3.16 (...) Phishing
2022-11-11 medium proitcteam.com/lib/jq/validator/fb.validation.js Phishing
2022-11-11 medium proitcteam.com/lib/jq/cqParams/fb.cqParams.js Phishing
2022-11-11 medium proitcteam.com/lib/uri/uri.js Phishing
2022-11-11 medium proitcteam.com/lib/jq/fb.utils.js Phishing
2022-11-11 medium proitcteam.com/lib/jq/otherInput/fb.otherInput.js Phishing
2022-11-11 medium proitcteam.com/lib/jq/fb.autoSubmit.js Phishing
2022-11-11 medium proitcteam.com/lpScripts/assetsBehavior.js?v=1 Phishing
2022-11-11 medium proitcteam.com/uploads/uploadedFonts/fontsImport.css?v=1668203391 Phishing
2022-11-11 medium proitcteam.com/lib/jq/validator/localization/jq_validation_localizations.bo (...) Phishing
2022-11-11 medium proitcteam.com/18202-126876-typ/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer Phishing
2022-11-11 medium proitcteam.com/ckeditor/contents.css?t=M9RE Phishing
2022-11-11 medium proitcteam.com/ckeditor/plugins/formBuilder/styles/formBuilder.css?v=1.3.16 (...) Phishing
2022-11-11 medium proitcteam.com/lib/uri/uri.js Phishing
2022-11-11 medium proitcteam.com/lpScripts/assetsBehavior.js?v=1 Phishing
2022-11-11 medium proitcteam.com/uploads/uploadedFonts/fontsImport.css?v=1668203393 Phishing
2022-11-11 medium proitcteam.com/uploads/cl_2472/logotypes/logo.svg Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2022-11-11 medium proitcteam.com Sinkholed
2022-11-11 medium proitcteam.com Sinkholed
2022-11-11 medium proitcteam.com Sinkholed
2022-11-11 medium proitcteam.com Sinkholed
2022-11-11 medium proitcteam.com Sinkholed
2022-11-11 medium proitcteam.com Sinkholed
2022-11-11 medium proitcteam.com Sinkholed
2022-11-11 medium proitcteam.com Sinkholed
2022-11-11 medium proitcteam.com Sinkholed
2022-11-11 medium proitcteam.com Sinkholed
2022-11-11 medium proitcteam.com Sinkholed
2022-11-11 medium proitcteam.com Sinkholed
2022-11-11 medium proitcteam.com Sinkholed
2022-11-11 medium proitcteam.com Sinkholed
2022-11-11 medium proitcteam.com Sinkholed
2022-11-11 medium proitcteam.com Sinkholed
2022-11-11 medium proitcteam.com Sinkholed
2022-11-11 medium proitcteam.com Sinkholed
2022-11-11 medium proitcteam.com Sinkholed
2022-11-11 medium proitcteam.com Sinkholed
2022-11-11 medium proitcteam.com Sinkholed
2022-11-11 medium proitcteam.com Sinkholed
2022-11-11 medium proitcteam.com Sinkholed
2022-11-11 medium proitcteam.com Sinkholed
2022-11-11 medium proitcteam.com Sinkholed


Files

URL proitcteam.com/18202-126876-typ/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQe (...)
IP  23.21.213.51
Magic PDF document, version 1.7, 0 pages\012- data
Size 2033870
MD5 7227097e2f4fc212b456c4ee02ac19d3
SHA1 2ffea6ba53c6c663fb43194ce735fcbf9974b6ce
SHA256 319cbeae7398ba481c0091ede6a01dba1aea15d651f19428699ff2f9fa029cfa
Analyzer Scan Date Verdict Comment
VirusTotal 0/0  VirusTotal Report

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 23.21.213.51
Date UQ / IDS / BL URL IP
2022-09-09 23:23:55 UTC 0 - 0 - 4 networktrenditc.com/16529-115146/unsubscribe/ (...) 23.21.213.51
2022-09-09 22:28:53 UTC 0 - 0 - 4 insightsitcpartners.com/16633-115636/unsubscr (...) 23.21.213.51
2023-01-08 03:54:29 UTC 0 - 0 - 2 netitcinfo.com/ 23.21.213.51
2023-01-07 04:27:21 UTC 0 - 0 - 18 netitcinfo.com/20103-141769/78713?uid=2DB2Rq6 (...) 23.21.213.51
2023-01-04 10:46:20 UTC 0 - 0 - 6 pubtechnologycontentcuration.com/19131-133526 (...) 23.21.213.51


Last 5 reports on ASN: AMAZON-AES
Date UQ / IDS / BL URL IP
2023-06-09 05:19:29 UTC 0 - 4 - 0 7a85bf232baa28.lhr.life/ 3.234.18.192
2023-06-09 05:08:33 UTC 0 - 1 - 0 mail.kb4.io/XTldWWVkySkVRelpuZDJGbWRsTllTekZQ (...) 3.92.106.134
2023-06-09 05:06:28 UTC 0 - 2 - 0 go.veson.com/e/596941/ic-page-contract-first- (...) 34.237.219.119
2023-06-09 05:05:34 UTC 0 - 2 - 0 go.veson.com/e/596941/-topic-page-contract-fi (...) 18.208.125.13
2023-06-09 04:45:18 UTC 0 - 3 - 0 www.qualitygolfstats.com/download/OptimalFlig (...) 44.195.210.193


Last 5 reports on domain: proitcteam.com
Date UQ / IDS / BL URL IP
2023-05-08 14:54:30 UTC 0 - 0 - 6 proitcteam.com/23877-175071/96969?uid=NNxdZtx (...) 3.225.42.166
2023-05-08 14:54:29 UTC 0 - 0 - 1 proitcteam.com/follow-trail 3.225.42.166
2023-03-29 18:43:56 UTC 0 - 0 - 4 proitcteam.com/22420-160799/unsubscribe/gomPy (...) 3.225.42.166
2023-03-29 18:43:51 UTC 0 - 0 - 5 proitcteam.com/22420-160799/89057?uid=gomPypY (...) 3.225.42.166
2022-11-12 05:51:22 UTC 0 - 0 - 44 proitcteam.com/18202-126877/70477?uid=4g5a3Zq (...) 23.21.213.51


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-11-11 22:29:20 UTC 0 - 0 - 15 itcgrouppro.com/18202-126877/70477?uid=5qqmWx (...) 35.169.201.93
2022-11-09 18:09:24 UTC 0 - 0 - 11 curatedtechnologyteam.com/18202-126877/70477? (...) 54.157.54.92
2022-11-11 22:49:21 UTC 0 - 0 - 43 proitcteam.com/18202-126877/70477?uid=4g5a3Zq (...) 23.21.213.51
2022-11-12 05:51:22 UTC 0 - 0 - 44 proitcteam.com/18202-126877/70477?uid=4g5a3Zq (...) 23.21.213.51
2022-12-12 13:19:52 UTC 0 - 0 - 12 curationgrouptechnologycontent.com/18202-1268 (...) 54.224.210.192

JavaScript

Executed Scripts (16)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (71)


Request Response
                                        
                                            GET /18202-126877/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer&prom_type=regular&prom_id=194926&pld=26L81sNgpwNGg5&answer=2 HTTP/1.1 
Host: proitcteam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             23.21.213.51
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                            
Server: nginx/1.22.0
Date: Fri, 11 Nov 2022 21:49:51 GMT
Content-Length: 169
Connection: keep-alive
Location: https://proitcteam.com/18202-126877/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer&prom_type=regular&prom_id=194926&pld=26L81sNgpwNGg5&answer=2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   169
Md5:    b51956ed2a6129f43c5d0ecc011cc5a5
Sha1:   c03157aff80067b6b57903d3843b9fd9e07b33ab
Sha256: 1ac63374d015eee8d9d875502aa63981dbeb9d86a14096de0d504763808e429b

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D3F75D03561D6A47D19370292E821A86E58381466F0C69386A21175DE55882FF"
Last-Modified: Fri, 11 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2326
Expires: Fri, 11 Nov 2022 22:28:37 GMT
Date: Fri, 11 Nov 2022 21:49:51 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "ED5C27510100FFC4481BE474EBCB020D147C645BEB110604D5284EEEB8B97C02"
Last-Modified: Fri, 11 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10528
Expires: Sat, 12 Nov 2022 00:45:19 GMT
Date: Fri, 11 Nov 2022 21:49:51 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 3142
Cache-Control: max-age=135238
Date: Fri, 11 Nov 2022 21:49:51 GMT
Etag: "636e247f-1d7"
Expires: Sun, 13 Nov 2022 11:23:49 GMT
Last-Modified: Fri, 11 Nov 2022 10:31:27 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: WHuVMqb2gHn30B1sb8u4cdDpHNl0ljzWvbbGHbWGSjqJUa/G0jeDYEfm/2p6hy4yEgPiERSJwh0=
x-amz-request-id: F2TR67WF1QG6SESQ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 11 Nov 2022 21:12:43 GMT
age: 2228
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    67d5a988edcda47bc3b3b3f65d32b4b6
Sha1:   d4f0e0da8b3690cc7da925026d3414b68c7d954f
Sha256: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Length, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 11 Nov 2022 21:44:05 GMT
cache-control: public,max-age=3600
age: 346
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    4736bac84ca28f2b1e961159fb4ea098
Sha1:   1319612979f53896fcfeacd4215c2715d4951e4c
Sha256: 5e81213e111ddf68c7f884f72b4e06fc4dc95eb902c3cf0762236b2418840dba
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Fri, 11 Nov 2022 21:49:51 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "202D9EAAD33A4194F073AC09D0CB54C6C59E685154E98E7C3EEB6C08463F9CF4"
Last-Modified: Thu, 10 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21534
Expires: Sat, 12 Nov 2022 03:48:45 GMT
Date: Fri, 11 Nov 2022 21:49:51 GMT
Connection: keep-alive

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Cache-Control, Pragma, Last-Modified, ETag, Alert, Backoff, Content-Type, Retry-After, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 11 Nov 2022 21:24:58 GMT
cache-control: public,max-age=3600
age: 1493
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /18202-126877/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer&prom_type=regular&prom_id=194926&pld=26L81sNgpwNGg5&answer=2 HTTP/1.1 
Host: proitcteam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        
                                             23.21.213.51
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Server: nginx/1.22.0
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.4.16
Cache-Control: max-age=0, must-revalidate, private
Date: Fri, 11 Nov 2022 21:49:51 GMT
Expires: Fri, 11 Nov 2022 21:49:51 GMT
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (15037)
Size:   8040
Md5:    a09e25deec941b15202bd24ccda499e3
Sha1:   5a19e45c4d260318a4e761490d2498f79ed08171
Sha256: 46e90f9e6c9554039923574f3b371458c2f8ea6be01e2b08f8780408ec47bcc0

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.17.24.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Fri, 11 Nov 2022 21:49:51 GMT
content-length: 27958
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb09ed3-15d84"
last-modified: Mon, 04 May 2020 23:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 13647095
expires: Wed, 01 Nov 2023 21:49:51 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8gWTs1VfDAJS%2BkTWnDN%2BGju2yfz8Rcv5Vb5TTtUNtrY65T870srsL9ld1f%2FL4VHM%2BLGqzezISez7pKzgZo95bDQv4aGyIyUjtM6ziPOeVETxmizsBPKZHgFrwnkXjvi8PS4inPHX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 768a3d7f88350b61-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   27958
Md5:    4b5f47439b640180cc3450f7de05d0d8
Sha1:   5a0dc9bcab80ddc409dd35fcb00a88fe6846fee2
Sha256: 1f85e8b327f42c17c025d69849914068536d9aa95412fe473ae90ffb2f4ebd82
                                        
                                            GET /ajax/libs/select2/4.0.13/js/select2.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://proitcteam.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             104.17.24.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Fri, 11 Nov 2022 21:49:51 GMT
content-length: 16456
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5ecc8659-114c3"
last-modified: Tue, 26 May 2020 03:00:41 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 6023764
expires: Wed, 01 Nov 2023 21:49:51 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=36D6Mk5SpCbH4owAwXczzF9FPqhNvYFEA%2BM4KbPRWrIp9iu8K7mfKXGYau9D0ahw2ylSKq8Q%2Bs5e%2BQhu9tXd%2BVAJwx8NR%2F%2BDKmUEmBuJTAcR5XACb8L%2Figw9KkaLrXcTP0GKt3DF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 768a3d7fbb3eb518-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (64131)
Size:   16456
Md5:    e969f2fd683c8d12ccbfa6ec0487dadf
Sha1:   4efb5abd97f96f324fd3bd64902a02e4a8a3d3af
Sha256: 10375c0c9bd1d60f996e3b7eef19ada49ebc3790f78742204cef7026754d2ac2
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 6340
Cache-Control: max-age=133361
Date: Fri, 11 Nov 2022 21:49:51 GMT
Etag: "636e10ac-1d7"
Expires: Sun, 13 Nov 2022 10:52:32 GMT
Last-Modified: Fri, 11 Nov 2022 09:06:52 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /ckeditor/contents.css?t=M9RE HTTP/1.1 
Host: proitcteam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/18202-126877/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer&prom_type=regular&prom_id=194926&pld=26L81sNgpwNGg5&answer=2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             23.21.213.51
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Server: nginx/1.22.0
Date: Fri, 11 Nov 2022 21:49:51 GMT
Content-Length: 2886
Last-Modified: Tue, 08 Nov 2022 19:32:11 GMT
Connection: keep-alive
ETag: "636aaebb-b46"
Expires: Fri, 11 Nov 2022 21:49:51 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   2886
Md5:    ea34863bd1770c4274d7ed7c58449f2a
Sha1:   1aefe351289c27d7b741cd38baaaad3398e306ba
Sha256: 43b78285c786c968e35d8a44aafb06df291e840e106bd01ddf36df96ce84ff5d

Blocklists:
  - fortinet: Phishing
  - quad9: Sinkholed
                                        
                                            GET /npm/jquery-validation@1.19.1/dist/jquery.validate.min.js HTTP/1.1 
Host: cdn.jsdelivr.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.85.229
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 1.19.1
x-jsd-version-type: version
etag: W/"5f38-DaTFNbUL203/o7X64+mZru4TfLU"
content-encoding: gzip
accept-ranges: bytes
date: Fri, 11 Nov 2022 21:49:51 GMT
age: 5173661
x-served-by: cache-fra19121-FRA, cache-bma1632-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 7815
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (24237)
Size:   7815
Md5:    144d2fdbeb2ac0a55e26fd4d3bcb6aa7
Sha1:   7b00473f6a8170bcb0573cec68acea35684250c7
Sha256: 5e9ecf8613ebbaae3c171d1ba18e6af51d41ed136730e2764784f12679fda526
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4165
Cache-Control: max-age=123651
Date: Fri, 11 Nov 2022 21:49:52 GMT
Etag: "636df33e-117"
Expires: Sun, 13 Nov 2022 08:10:43 GMT
Last-Modified: Fri, 11 Nov 2022 07:01:18 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /v3/polyfill.min.js?version=3.52.1&features=URL%2CURLSearchParams%2Ces5%2Ces6%2Ces7 HTTP/1.1 
Host: polyfill.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://proitcteam.com
Connection: keep-alive
Referer: https://proitcteam.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.129.26
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                            
cache-control: public, s-maxage=31536000, max-age=604800, stale-while-revalidate=604800, stale-if-error=604800
last-modified: Mon, 31 Oct 2022 18:45:06 GMT
content-encoding: br
age: 0
accept-ranges: bytes
useragent_normaliser: firefox/105.0.0
date: Fri, 11 Nov 2022 21:49:51 GMT
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
vary: User-Agent, Accept-Encoding
server-timing: cache-bma1677, PASS, fastly;desc="Edge time";dur=14
content-length: 74
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   74
Md5:    bdb6d8e9b581dfbdb87566776ede0cbd
Sha1:   d18cdeacd5c146b34919955e97e51b7db50d0d9b
Sha256: fe35c33df2fa5edeac1dbbe512a6e92c5b1e7fb5c204df818e23ea07b5121add
                                        
                                            POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 21:49:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "17ACA5697B8AD4EE289BB3818665FF38F8826698"
Expires: Sat, 12 Nov 2022 08:00:00 GMT
Last-Modified: Fri, 11 Nov 2022 20:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1841
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 768a3d805c3db518-OSL


--- Additional Info ---
Magic:  data
Size:   1462
Md5:    040eec5ecbb4cb0a682f43dd72e5d597
Sha1:   b130aff92be9b13c3cf49ab62816bc626b2ce642
Sha256: b72547c2ceab0cf5b9ac81b65637f444a884cde7aa4b4fd6783f4ec7ebe1b524
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4165
Cache-Control: max-age=123651
Date: Fri, 11 Nov 2022 21:49:52 GMT
Etag: "636df33e-117"
Expires: Sun, 13 Nov 2022 08:10:43 GMT
Last-Modified: Fri, 11 Nov 2022 07:01:18 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /ckeditor/plugins/formBuilder/styles/formBuilder.css?v=1.3.1667334567956 HTTP/1.1 
Host: proitcteam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/18202-126877/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer&prom_type=regular&prom_id=194926&pld=26L81sNgpwNGg5&answer=2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             23.21.213.51
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Server: nginx/1.22.0
Date: Fri, 11 Nov 2022 21:49:52 GMT
Content-Length: 5201
Last-Modified: Tue, 08 Nov 2022 19:32:11 GMT
Connection: keep-alive
ETag: "636aaebb-1451"
Expires: Fri, 11 Nov 2022 21:49:52 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   5201
Md5:    e741d2aa47efe7dda9dfe0a5014fef0e
Sha1:   30ebfe60d0832bb8114c6ba155f0ddb15c1a527c
Sha256: 68c2e3489d098db2a6e2ddba9f32ff172d1c0ff0983b9b3c3c0b59c8a850cf20

Blocklists:
  - fortinet: Phishing
  - quad9: Sinkholed
                                        
                                            GET /ckeditor/plugins/lpLinkV2/css/styles.css HTTP/1.1 
Host: proitcteam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/18202-126877/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer&prom_type=regular&prom_id=194926&pld=26L81sNgpwNGg5&answer=2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             23.21.213.51
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Server: nginx/1.22.0
Date: Fri, 11 Nov 2022 21:49:52 GMT
Content-Length: 2159
Last-Modified: Tue, 08 Nov 2022 19:32:11 GMT
Connection: keep-alive
ETag: "636aaebb-86f"
Expires: Fri, 11 Nov 2022 21:49:52 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines (2158)
Size:   2159
Md5:    20944bcec784ce7e2b95b62808da9869
Sha1:   29fa6fc754e5f8cda684cfcadad4b996f7404e61
Sha256: 479da2477e3d7631c8cca6c411d1b2afad9d5e66bc6bb7acc8b1bdafadd75499

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 2O7IvalJt6pzOA2G/77fSQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             44.237.163.41
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: AVJJdSKlVmafdluZ6SGE0f4/6P0=

                                        
                                            GET /lib/jq/validator/fb.validation.js HTTP/1.1 
Host: proitcteam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/18202-126877/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer&prom_type=regular&prom_id=194926&pld=26L81sNgpwNGg5&answer=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             23.21.213.51
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx/1.22.0
Date: Fri, 11 Nov 2022 21:49:52 GMT
Content-Length: 2011
Last-Modified: Wed, 09 Jun 2021 11:25:31 GMT
Connection: keep-alive
ETag: "60c0a52b-7db"
Expires: Fri, 11 Nov 2022 21:49:52 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   2011
Md5:    60f78449c35e69490026e3f739d322dc
Sha1:   a0f988cad0941c050d4ecbe1d58f450193c604d2
Sha256: ee75b43f5de847b148b9ed76c06b5db9566ba8da3ac35c726ed43ef9f9b2c3e3

Blocklists:
  - fortinet: Phishing
  - quad9: Sinkholed
                                        
                                            GET /lib/jq/cqParams/fb.cqParams.js HTTP/1.1 
Host: proitcteam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/18202-126877/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer&prom_type=regular&prom_id=194926&pld=26L81sNgpwNGg5&answer=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             23.21.213.51
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx/1.22.0
Date: Fri, 11 Nov 2022 21:49:52 GMT
Content-Length: 2815
Last-Modified: Tue, 14 Sep 2021 10:49:24 GMT
Connection: keep-alive
ETag: "61407e34-aff"
Expires: Fri, 11 Nov 2022 21:49:52 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   2815
Md5:    55159908ed60d22fd3992732aa7e42d3
Sha1:   57976f1953d1da224e9746296eaac849d69dc5f3
Sha256: c6b1e77cd2f103d2fa292bf088a9680848a4f94b6c1ef6ee2017c2ba530a03c5

Blocklists:
  - fortinet: Phishing
  - quad9: Sinkholed
                                        
                                            GET /lib/uri/uri.js HTTP/1.1 
Host: proitcteam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/18202-126877/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer&prom_type=regular&prom_id=194926&pld=26L81sNgpwNGg5&answer=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             23.21.213.51
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx/1.22.0
Date: Fri, 11 Nov 2022 21:49:52 GMT
Content-Length: 76862
Last-Modified: Mon, 12 Apr 2021 20:19:39 GMT
Connection: keep-alive
ETag: "6074ab5b-12c3e"
Expires: Fri, 11 Nov 2022 21:49:52 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (1107)
Size:   76862
Md5:    64437cd33e2fa1a40e6850ee6388639e
Sha1:   809078716153b491c00852f366ca3f8d6e03df22
Sha256: 96361c580499a6dd7afa83f352fb2a27c159a39daf794e2e6813514be8a8fbe9

Blocklists:
  - fortinet: Phishing
  - quad9: Sinkholed
                                        
                                            GET /lib/jq/fb.utils.js HTTP/1.1 
Host: proitcteam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/18202-126877/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer&prom_type=regular&prom_id=194926&pld=26L81sNgpwNGg5&answer=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             23.21.213.51
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx/1.22.0
Date: Fri, 11 Nov 2022 21:49:52 GMT
Content-Length: 17827
Last-Modified: Mon, 12 Sep 2022 09:24:07 GMT
Connection: keep-alive
ETag: "631efab7-45a3"
Expires: Fri, 11 Nov 2022 21:49:52 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Unicode text, UTF-8 text
Size:   17827
Md5:    ae4404875fed763d83013c881e85a0ee
Sha1:   b816ad607b6a4a89b901447ad513abbbf7fd16a9
Sha256: 827810c0c757314f1071132a70efabdf940d7a259cf21bc99f008f96f0859637

Blocklists:
  - fortinet: Phishing
  - quad9: Sinkholed
                                        
                                            GET /lib/jq/otherInput/fb.otherInput.js HTTP/1.1 
Host: proitcteam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/18202-126877/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer&prom_type=regular&prom_id=194926&pld=26L81sNgpwNGg5&answer=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             23.21.213.51
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx/1.22.0
Date: Fri, 11 Nov 2022 21:49:52 GMT
Content-Length: 2332
Last-Modified: Fri, 07 Oct 2022 13:13:57 GMT
Connection: keep-alive
ETag: "63402615-91c"
Expires: Fri, 11 Nov 2022 21:49:52 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   2332
Md5:    98ddf73de28f5fef1378553ea90dc407
Sha1:   9c76c82d52e3512a2fe53c754b135c5a91f1e97c
Sha256: 0bf7b8a2f9d4ebc076ca6ecbfad616bca4bb4d489ab2d021d935c4854585a0d0

Blocklists:
  - fortinet: Phishing
  - quad9: Sinkholed
                                        
                                            GET /lib/jq/fb.autoSubmit.js HTTP/1.1 
Host: proitcteam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/18202-126877/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer&prom_type=regular&prom_id=194926&pld=26L81sNgpwNGg5&answer=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             23.21.213.51
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx/1.22.0
Date: Fri, 11 Nov 2022 21:49:52 GMT
Content-Length: 631
Last-Modified: Mon, 12 Apr 2021 20:19:39 GMT
Connection: keep-alive
ETag: "6074ab5b-277"
Expires: Fri, 11 Nov 2022 21:49:52 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   631
Md5:    d1b0ab11f9d2a041be621b97140bd0de
Sha1:   03eb391c2a4ec2e17385afdb695cb458bddb4dba
Sha256: 348cf9886114edd1ab2df04571fd8e6eeb192d2da111b4ef3200caa25ce0ffae

Blocklists:
  - fortinet: Phishing
  - quad9: Sinkholed
                                        
                                            GET /lpScripts/assetsBehavior.js?v=1 HTTP/1.1 
Host: proitcteam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/18202-126877/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer&prom_type=regular&prom_id=194926&pld=26L81sNgpwNGg5&answer=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             23.21.213.51
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx/1.22.0
Date: Fri, 11 Nov 2022 21:49:52 GMT
Content-Length: 9493
Last-Modified: Fri, 07 Oct 2022 13:13:57 GMT
Connection: keep-alive
ETag: "63402615-2515"
Expires: Fri, 11 Nov 2022 21:49:52 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   9493
Md5:    b3d79c3fb1a09ffcead07bd732d7d81a
Sha1:   d73f923eea8f386c4d441a076e1e77e59f0f7cf4
Sha256: 01f6570da4691ac14aa5f882167414fa699581b41cacfa07f8f7731663392cd4

Blocklists:
  - fortinet: Phishing
  - quad9: Sinkholed
                                        
                                            GET /uploads/uploadedFonts/fontsImport.css?v=1668203391 HTTP/1.1 
Host: proitcteam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/18202-126877/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer&prom_type=regular&prom_id=194926&pld=26L81sNgpwNGg5&answer=2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             23.21.213.51
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Server: nginx/1.22.0
Date: Fri, 11 Nov 2022 21:49:52 GMT
Content-Length: 107812
Last-Modified: Mon, 10 Oct 2022 19:00:14 GMT
Connection: keep-alive
ETag: "63446bbe-1a524"
Expires: Fri, 11 Nov 2022 21:49:52 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines (508)
Size:   107812
Md5:    04c4345fbdec69b31374695998265c93
Sha1:   e27ee9d192e6ce16e33e387efc02db19c1c74ac4
Sha256: d5afaff231f5024edd23393f959e850f752bdd45185d2e4e3113428413d1d615

Blocklists:
  - fortinet: Phishing
  - quad9: Sinkholed
                                        
                                            GET /lib/jq/validator/localization/jq_validation_localizations.boundled.js HTTP/1.1 
Host: proitcteam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/18202-126877/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer&prom_type=regular&prom_id=194926&pld=26L81sNgpwNGg5&answer=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             23.21.213.51
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx/1.22.0
Date: Fri, 11 Nov 2022 21:49:52 GMT
Content-Length: 110384
Last-Modified: Thu, 14 Jul 2022 12:15:02 GMT
Connection: keep-alive
ETag: "62d008c6-1af30"
Expires: Fri, 11 Nov 2022 21:49:52 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Unicode text, UTF-8 text
Size:   110384
Md5:    590cfcdcec421c852434167b135406c7
Sha1:   aa035d2388b6576bbb0657b4347b88ec7d272bd7
Sha256: 90e8f80b16e3b6ee999a5400579399c6207291f3f5476fb3951c5230d75ec3db

Blocklists:
  - fortinet: Phishing
  - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 6106
Cache-Control: max-age=94247
Date: Fri, 11 Nov 2022 21:49:52 GMT
Etag: "636d78cd-116"
Expires: Sun, 13 Nov 2022 00:00:39 GMT
Last-Modified: Thu, 10 Nov 2022 22:18:53 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 278

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 21:49:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 21:49:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 21:49:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 21:49:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 21:49:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /css2?family=Source+Sans+Pro:ital,wght@0,200;0,300;0,400;0,600;0,700;0,900;1,200;1,300;1,400;1,600;1,700;1,900&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 11 Nov 2022 21:49:52 GMT
date: Fri, 11 Nov 2022 21:49:52 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1625
Md5:    48cf040e97e4344566c3510fc57660c5
Sha1:   b4b071a8b0433b74290acfb0608cf6f147ffd145
Sha256: c897030deebe14455b51f5ee79a1a6119eadcd7810ed1a191fc1cf27a2a0c2f1
                                        
                                            GET /1280x320?text=LOGO HTTP/1.1 
Host: via.placeholder.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.21.33.39
HTTP/2 200 OK
content-type: image/png
                                            
date: Fri, 11 Nov 2022 21:49:52 GMT
content-length: 1836
last-modified: Wed, 30 Dec 2020 14:00:06 GMT
etag: "5fec87e6-72c"
expires: Fri, 18 Nov 2022 21:49:42 GMT
cache-control: max-age=604800
x-cache: L1
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Bf3FMWqzerr9om0AgnoCo1h8i3jgD87iy0qxPxo4Nb12KLO9kO6wiUxAS6gFIlsSQDYJ7q6fv%2Bdtb5fftq2r16Q%2BNbuW88Pzyqq0SmdSAN0RTitF8JgLiJiZywrkRTSgLSKc2Xji"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 768a3d836baafac8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1280 x 320, 4-bit colormap, non-interlaced\012- data
Size:   1836
Md5:    c901b21688c204362c755b50dd01661c
Sha1:   21d804d25c253dbbebb24e2ec93c20e513d1aca9
Sha256: cda6d49363c0eb3be56104f772fc8c2c334c132f2829ab30c246ad19f103454a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 6106
Cache-Control: max-age=94247
Date: Fri, 11 Nov 2022 21:49:52 GMT
Etag: "636d78cd-116"
Expires: Sun, 13 Nov 2022 00:00:39 GMT
Last-Modified: Thu, 10 Nov 2022 22:18:53 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 278

                                        
                                            GET /mgr2odi.css HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             23.36.76.122
HTTP/2 200 OK
content-type: text/css;charset=utf-8
                                            
server: nginx
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: private, max-age=600, stale-while-revalidate=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 4083
date: Fri, 11 Nov 2022 21:49:52 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (520)
Size:   4083
Md5:    609b64c6359e37c88bbd245ba638b89f
Sha1:   dd850df3bcab5430f55c233b626cd8f446de3ba2
Sha256: bfee3862850ad498e1f660bd51f135340cd36894b836ea0e4ae04dbdb9abc72b
                                        
                                            GET /p.css?s=1&k=mgr2odi&ht=tk&f=137.138.139.140.169.170.171.172.173.174.175.176.5474.5475.25136.25137.143.144.147.148.156.157.161.162.2003.2004.2005.2006.2007.2008.2009.2010.2011.2012.9938.9939.39002.39004.12046.12047.12048.12049.12050.12051.12053.12054.12055.12056.17398.17399.17400.17401.22618.22619.14032.14033.14034.14035.26425.26426.35617.35620.26435.35615.26438.26439.35630.35633.26448.35628.26893.26894.26897.26898.26909.26910.26913.26914.29382.29383&a=14392602&app=typekit&e=css HTTP/1.1 
Host: p.typekit.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                        
                                             23.36.76.122
HTTP/2 200 OK
content-type: text/css
                                            
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=604800
cross-origin-resource-policy: cross-origin
etag: "613bee4d-5"
last-modified: Fri, 10 Sep 2021 23:46:21 GMT
server: nginx
content-length: 5
unused62: 8096267
date: Fri, 11 Nov 2022 21:49:52 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   5
Md5:    83d24d4b43cc7eef2b61e66c95f3d158
Sha1:   f0cafc285ee23bb6c28c5166f305493c4331c84d
Sha256: 1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 21:49:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://proitcteam.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 09 Nov 2022 19:34:08 GMT
expires: Thu, 09 Nov 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 180944
last-modified: Wed, 11 May 2022 19:24:48 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Size:   15744
Md5:    15d9f621c3bd1599f0169dcf0bd5e63e
Sha1:   7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
Sha256: f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
                                        
                                            GET /css2?family=Open+Sans:ital,wght@0,300;0,400;0,600;0,700;0,800;1,300;1,400;1,600;1,700;1,800&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 11 Nov 2022 21:49:52 GMT
date: Fri, 11 Nov 2022 21:49:52 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1543
Md5:    2e18ab53afb7d4a2ca6fa8c27b89763a
Sha1:   84550c7365cde2913b1893a13e8074c466de930a
Sha256: ec6b82ae966624f2ba918af75faaf996a40cda40918b84e0242ea27e19773a22
                                        
                                            GET /css2?family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 11 Nov 2022 21:49:52 GMT
date: Fri, 11 Nov 2022 21:49:52 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   35493
Md5:    8bd1b69d608032bdf5e4d6d7e1b54ce7
Sha1:   44fe95c6ef1958bd4dce584f379250429431b3b3
Sha256: 6c02a408c2a1db1c96606d1d12061811858162f9719aa0608eeaf55159f324c0
                                        
                                            POST /18202-126877/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer&prom_type=regular&prom_id=194926&pld=26L81sNgpwNGg5&answer=2 HTTP/1.1 
Host: proitcteam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 72
Origin: https://proitcteam.com
Connection: keep-alive
Referer: https://proitcteam.com/18202-126877/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer&prom_type=regular&prom_id=194926&pld=26L81sNgpwNGg5&answer=2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

                                        
                                             23.21.213.51
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Server: nginx/1.22.0
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.4.16
Cache-Control: max-age=0, must-revalidate, private
Date: Fri, 11 Nov 2022 21:49:53 GMT
Expires: Fri, 11 Nov 2022 21:49:53 GMT
Content-Encoding: gzip


--- Additional Info ---
Magic:  data
Size:   20
Md5:    a4745abc5e7fdb89cc6df3069f3c6e69
Sha1:   74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
Sha256: d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /18202-126876-typ/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer HTTP/1.1 
Host: proitcteam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/18202-126877/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer&prom_type=regular&prom_id=194926&pld=26L81sNgpwNGg5&answer=2
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin

                                        
                                             23.21.213.51
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Server: nginx/1.22.0
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.4.16
Cache-Control: no-cache, private
Date: Fri, 11 Nov 2022 21:49:53 GMT
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (739), with CR, LF line terminators
Size:   2295
Md5:    2d389f4c59b9078c772ad8c7da6ec554
Sha1:   24adc47d6212488b6fb8a44052fa51a06c751e85
Sha256: 0a2094316f8496f649f21515b44eec7a2a12fdf76d275409e37ec1c12d73bf3a

Blocklists:
  - fortinet: Phishing
  - quad9: Sinkholed
                                        
                                            GET /ckeditor/contents.css?t=M9RE HTTP/1.1 
Host: proitcteam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/18202-126876-typ/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
If-Modified-Since: Tue, 08 Nov 2022 19:32:11 GMT
If-None-Match: "636aaebb-b46"

                                        
                                             23.21.213.51
HTTP/1.1 304 Not Modified
                                            
Server: nginx/1.22.0
Date: Fri, 11 Nov 2022 21:49:53 GMT
Last-Modified: Tue, 08 Nov 2022 19:32:11 GMT
Connection: keep-alive
ETag: "636aaebb-b46"
Expires: Fri, 11 Nov 2022 21:49:53 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Blocklists:
  - fortinet: Phishing
  - quad9: Sinkholed
                                        
                                            GET /ckeditor/plugins/formBuilder/styles/formBuilder.css?v=1.3.1666964509113 HTTP/1.1 
Host: proitcteam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/18202-126876-typ/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             23.21.213.51
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Server: nginx/1.22.0
Date: Fri, 11 Nov 2022 21:49:53 GMT
Content-Length: 5201
Last-Modified: Tue, 08 Nov 2022 19:32:11 GMT
Connection: keep-alive
ETag: "636aaebb-1451"
Expires: Fri, 11 Nov 2022 21:49:53 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   5201
Md5:    e741d2aa47efe7dda9dfe0a5014fef0e
Sha1:   30ebfe60d0832bb8114c6ba155f0ddb15c1a527c
Sha256: 68c2e3489d098db2a6e2ddba9f32ff172d1c0ff0983b9b3c3c0b59c8a850cf20

Blocklists:
  - fortinet: Phishing
  - quad9: Sinkholed
                                        
                                            GET /lib/uri/uri.js HTTP/1.1 
Host: proitcteam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/18202-126876-typ/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
If-Modified-Since: Mon, 12 Apr 2021 20:19:39 GMT
If-None-Match: "6074ab5b-12c3e"

                                        
                                             23.21.213.51
HTTP/1.1 304 Not Modified
                                            
Server: nginx/1.22.0
Date: Fri, 11 Nov 2022 21:49:53 GMT
Last-Modified: Mon, 12 Apr 2021 20:19:39 GMT
Connection: keep-alive
ETag: "6074ab5b-12c3e"
Expires: Fri, 11 Nov 2022 21:49:53 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Blocklists:
  - fortinet: Phishing
  - quad9: Sinkholed
                                        
                                            GET /lpScripts/assetsBehavior.js?v=1 HTTP/1.1 
Host: proitcteam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/18202-126876-typ/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
If-Modified-Since: Fri, 07 Oct 2022 13:13:57 GMT
If-None-Match: "63402615-2515"

                                        
                                             23.21.213.51
HTTP/1.1 304 Not Modified
                                            
Server: nginx/1.22.0
Date: Fri, 11 Nov 2022 21:49:53 GMT
Last-Modified: Fri, 07 Oct 2022 13:13:57 GMT
Connection: keep-alive
ETag: "63402615-2515"
Expires: Fri, 11 Nov 2022 21:49:53 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Blocklists:
  - fortinet: Phishing
  - quad9: Sinkholed
                                        
                                            GET /ckeditor/plugins/lpLinkV2/css/styles.css HTTP/1.1 
Host: proitcteam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/18202-126876-typ/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
If-Modified-Since: Tue, 08 Nov 2022 19:32:11 GMT
If-None-Match: "636aaebb-86f"

                                        
                                             23.21.213.51
HTTP/1.1 304 Not Modified
                                            
Server: nginx/1.22.0
Date: Fri, 11 Nov 2022 21:49:53 GMT
Last-Modified: Tue, 08 Nov 2022 19:32:11 GMT
Connection: keep-alive
ETag: "636aaebb-86f"
Expires: Fri, 11 Nov 2022 21:49:53 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /uploads/uploadedFonts/fontsImport.css?v=1668203393 HTTP/1.1 
Host: proitcteam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/18202-126876-typ/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             23.21.213.51
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Server: nginx/1.22.0
Date: Fri, 11 Nov 2022 21:49:53 GMT
Content-Length: 107812
Last-Modified: Mon, 10 Oct 2022 19:00:14 GMT
Connection: keep-alive
ETag: "63446bbe-1a524"
Expires: Fri, 11 Nov 2022 21:49:53 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines (508)
Size:   107812
Md5:    04c4345fbdec69b31374695998265c93
Sha1:   e27ee9d192e6ce16e33e387efc02db19c1c74ac4
Sha256: d5afaff231f5024edd23393f959e850f752bdd45185d2e4e3113428413d1d615

Blocklists:
  - fortinet: Phishing
  - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "96D8E39EFB6EEBD1413A4BC0FA6800781F636E70DC0CCADF6A546F26FA022755"
Last-Modified: Thu, 10 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14545
Expires: Sat, 12 Nov 2022 01:52:18 GMT
Date: Fri, 11 Nov 2022 21:49:53 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "96D8E39EFB6EEBD1413A4BC0FA6800781F636E70DC0CCADF6A546F26FA022755"
Last-Modified: Thu, 10 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14545
Expires: Sat, 12 Nov 2022 01:52:18 GMT
Date: Fri, 11 Nov 2022 21:49:53 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50b47142-be82-4ddc-85e8-45dc7102abe9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6696
x-amzn-requestid: 19f91da1-beeb-400a-b4c0-059851ca839f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bNeQ_F3doAMFr6A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63687739-2ef73e121ff2c3cf0e95b450;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 03:10:49 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: GgmLFeCzBEuR8gcEDGr8nBYW4xUUkIKZi0m8_TZ5quDeLmkROXm2_g==
via: 1.1 27f6faf9790b5a2877fb528fa31f7922.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 07:45:28 GMT
age: 50665
etag: "7339ad7b4f37cc37cb712207a7b3a5ac9355d9dc"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6696
Md5:    90a78b0f806c0c5ef5e7128cc37b2edf
Sha1:   7339ad7b4f37cc37cb712207a7b3a5ac9355d9dc
Sha256: 770a2247a0f8d6b44c61cecc8a11e9882e4dd39269e181eef52cf6816407022b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad1abae5-6437-44bf-8428-756b825e5be6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8294
x-amzn-requestid: 5dab4522-fca9-4ada-ad6f-3305c9686315
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bZ4u3H7PoAMF02g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636d6e5e-756c150c40fe6fff3ae7a609;Sampled=0
x-amzn-remapped-date: Thu, 10 Nov 2022 21:34:22 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: FXIS1Gr_-3RUm6WPZCVcjaefD3hehHV-IwO-ieFeUqeoPAE7vajlsg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 21:46:53 GMT
age: 180
etag: "815a4a1eb8c8e2a138fb3d65ba777b0c18fa15d0"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8294
Md5:    88c9931a009690991e73c5b37a1aa085
Sha1:   815a4a1eb8c8e2a138fb3d65ba777b0c18fa15d0
Sha256: 74e70391889e4b46742033b1d5daccfec415ba2ee999e429d1013fd4a1ebc61a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6f7d2f5-4807-4bbd-a3db-7a239962aca5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5583
x-amzn-requestid: e844f42a-e87e-4e61-8c97-137c07c5ae28
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bNeQ9Ho7IAMF5_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63687739-62c44d2f7d23632e74895bd8;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 03:10:49 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: uHlIN1IVGCFUVl5lx5pFSux0YncseT2HQjiwFDL9eaEaBa9CdnCl8g==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 04:18:29 GMT
age: 63084
etag: "691f59b65ca9fde4f59bbf96b37071e07351f190"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5583
Md5:    85c6f450b38f41a2fb924d6d9a9cbff8
Sha1:   691f59b65ca9fde4f59bbf96b37071e07351f190
Sha256: c8f877488a2cf65f0d9829384fd4113847722a1b4df94b6b1d5788699689722c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4094512-9a5a-47aa-9796-9f630fb1c13f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8581
x-amzn-requestid: 385174fe-153f-448f-be5e-9ea3b5757ff9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bZ4u1EYOIAMFncA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636d6e5e-6084a34f58df22037275e676;Sampled=0
x-amzn-remapped-date: Thu, 10 Nov 2022 21:34:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xSnHWpFlXeyf08gYjPn02H88Hta9fhiDjDOukoKtt6PPVBl_gNTfgw==
via: 1.1 dfc972676b24a6d23251d4f298dfa08c.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 21:46:56 GMT
age: 177
etag: "e0d1ebb35a16c686eae3d31eb85ac72278459b05"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8581
Md5:    13f7b6eea163326da8c58ae5c09efccd
Sha1:   e0d1ebb35a16c686eae3d31eb85ac72278459b05
Sha256: 13f2f428acb7806808d957a8167ab2c139a5d0f59798671465717f2b39b914a9
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c9847f2-3b5e-4950-9792-a512af36da58.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6517
x-amzn-requestid: 7884aa37-c94f-49d4-b6a4-c6bd66026d2c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: apxD3EeYIAMFYAA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635a2ee5-337e8e0949f5020713fcab58;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 07:10:29 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: kXRfJbLr7ErTvJIW0rjpcqxHA0zvN6XOPrszlIzXBgaJkJGWzkoyGw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 10 Nov 2022 22:00:02 GMT
age: 85791
etag: "96de8f2627e1103c5e6beb5d64cdbc09f97fce82"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6517
Md5:    f29164fb4dd64d9ce60566fbebd40f0a
Sha1:   96de8f2627e1103c5e6beb5d64cdbc09f97fce82
Sha256: 8eba6095edfed1ee1402c050727f81b8a9942625fd1c9cbb3bac4e51ee178577
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e7dc40a-e47f-44b5-b3b4-87b10cd8669d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 10671
x-amzn-requestid: 1b6053eb-64ac-4c24-a750-c1b8cd69157f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJEh8GxPoAMFhPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366b472-56c6a3bc07ec89ab56d4f3bd;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 19:07:30 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: qJeWGvC4DM_d3k66OHN2V19elou-xoSNkep1BNalBO0NtKyQtAFzNQ==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 03:31:46 GMT
age: 65887
etag: "5fe340bf33ac219f6a3d44810f31d0a8796c83a9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10671
Md5:    e72f32944d6f03e005f7b6f3e87d8c72
Sha1:   5fe340bf33ac219f6a3d44810f31d0a8796c83a9
Sha256: bcdcba30210d276996d0fe749bbfc69d666ae11ddfbfdb57307e4bb4d6e43d1f
                                        
                                            GET /uploads/cl_2472/logotypes/logo.svg HTTP/1.1 
Host: proitcteam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/18202-126876-typ/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             23.21.213.51
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Server: nginx/1.22.0
Date: Fri, 11 Nov 2022 21:49:53 GMT
Content-Length: 9126
Last-Modified: Fri, 28 Oct 2022 13:21:41 GMT
Connection: keep-alive
ETag: "635bd765-23a6"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (1531), with CRLF line terminators
Size:   9126
Md5:    ec2f3f63377c887b518f5a4a33b1ea56
Sha1:   c2ff6b514f9761ba8ff2ac109c9d311f84db301c
Sha256: a32e426aca199c580cf677920033d86b24dd3e8b81766123f8c1d696d3b535a0

Blocklists:
  - fortinet: Phishing
  - quad9: Sinkholed
                                        
                                            GET /uploads/c_18202/logos/white-waves.png HTTP/1.1 
Host: proitcteam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/18202-126876-typ/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             23.21.213.51
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Server: nginx/1.22.0
Date: Fri, 11 Nov 2022 21:49:53 GMT
Content-Length: 1263922
Last-Modified: Fri, 28 Oct 2022 13:32:00 GMT
Connection: keep-alive
ETag: "635bd9d0-134932"
Expires: Fri, 11 Nov 2022 22:49:53 GMT
Cache-Control: max-age=3600
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 1920 x 1071, 8-bit/color RGBA, non-interlaced\012- data
Size:   1263922
Md5:    682f3af0e49e47d67579b4be2678ca92
Sha1:   5a8e115809f0d1f4b1d3d75fc57339c9f08b7617
Sha256: ac7e29b395620bf30b1f185578a74204faa4d10f8437378aa930ffebd62ed5b2

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /18202-126876-typ/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer&mode=file HTTP/1.1 
Host: proitcteam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/18202-126876-typ/70477?uid=4g5a3ZqRyphuBQqRuN8d5HKXeZP9o9ZQer
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin

                                        
                                             23.21.213.51
HTTP/1.1 200 OK
Content-Type: application/force-download
                                            
Server: nginx/1.22.0
Content-Length: 2033870
Connection: keep-alive
X-Powered-By: PHP/7.4.16
Content-transfer-encoding: binary
Content-disposition: attachment; filename="Ebook-How-to-maximize-savings-and-traveler-satisfaction-through-personalized-travel-shopping.pdf"
Cache-Control: no-cache, private
Date: Fri, 11 Nov 2022 21:49:53 GMT


--- Additional Info ---
Magic:  PDF document, version 1.7, 0 pages\012- data
Size:   2033870
Md5:    7227097e2f4fc212b456c4ee02ac19d3
Sha1:   2ffea6ba53c6c663fb43194ce735fcbf9974b6ce
Sha256: 319cbeae7398ba481c0091ede6a01dba1aea15d651f19428699ff2f9fa029cfa

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /css2?family=Lato:ital,wght@0,100;0,300;0,400;0,700;0,900;1,100;1,300;1,400;1,700;1,900&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 11 Nov 2022 21:49:52 GMT
date: Fri, 11 Nov 2022 21:49:52 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 11 Nov 2022 21:49:52 GMT
date: Fri, 11 Nov 2022 21:49:52 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /css2?family=Noto+Sans:ital,wght@0,400;0,700;1,400;1,700&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 11 Nov 2022 21:49:52 GMT
date: Fri, 11 Nov 2022 21:49:52 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /css?family=Muli HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 11 Nov 2022 21:49:52 GMT
date: Fri, 11 Nov 2022 21:49:52 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /bootstrap/4.4.1/css/bootstrap.min.css HTTP/1.1 
Host: stackpath.bootstrapcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.18.11.207
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
date: Fri, 11 Nov 2022 21:49:52 GMT
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:09 GMT
cdn-cachedat: 08/03/2021 15:16:56
cdn-edgestorageid: 601
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-proxyver: 1.0
cdn-status: 200
cdn-requestid: d6b43e13ddbcd4f60dded6d39b2abed5
cdn-cache: HIT
cf-cache-status: HIT
age: 13644380
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 768a3d801aecb506-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /css2?family=Ubuntu:ital,wght@0,300;0,400;0,500;0,700;1,300;1,400;1,500;1,700&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://proitcteam.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 11 Nov 2022 21:49:52 GMT
date: Fri, 11 Nov 2022 21:49:52 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: