r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 81dd5c5cc5b3278876cb44dcb520a60f
c0511a59e9eccdcdda98717b87c89c5d59974808
41736c303afdb3d31e48724b107dcb22883cae02f3562308eb52d9164001a2de
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "41736C303AFDB3D31E48724B107DCB22883CAE02F3562308EB52D9164001A2DE"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3462
Expires: Sat, 28 Jan 2023 07:51:16 GMT
Date: Sat, 28 Jan 2023 06:53:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a2104f935c638b4767ca5ae0d738ef23
85c6af15af749be0ceeae6de17c36925b750f166
5d4789a3696bd7faa9916768cb627bbc89bf70a756d80e53860cbac13c2bc8b1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D4789A3696BD7FAA9916768CB627BBC89BF70A756D80E53860CBAC13C2BC8B1"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16520
Expires: Sat, 28 Jan 2023 11:28:54 GMT
Date: Sat, 28 Jan 2023 06:53:34 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 28 Jan 2023 06:35:29 GMT
content-type: application/json
age: 1085
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 69f73ac59327cd9ad7d99816ccfcc03e
c54844f82dbee0d5ee4c8ce344eb0139373e6c6b
e81c685b2d8f0e31b89e5cfc911a2c5a99a556646830ac5a8468d991b5e871a3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E81C685B2D8F0E31B89E5CFC911A2C5A99A556646830AC5A8468D991B5E871A3"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2690
Expires: Sat, 28 Jan 2023 07:38:24 GMT
Date: Sat, 28 Jan 2023 06:53:34 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: xJqpI8WYpak5tHi98R2+D3kuL8tr9SViYfZMtxrD0YwxnKt1lx/N285e/18O/GYrKjaVj6uRmy/6UYHHhV46Tw==
x-amz-request-id: 15C155TF721JKNB4
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 28 Jan 2023 06:49:45 GMT
age: 229
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 06:53:34 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
tipsprints.com.au/nd/login.php
200 OK 14 kB URL HTTP/1.1 tipsprints.com.au/nd/login.php
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8047)
Hash 5940dbcdcdb3a4a8e5b0ccbc611d16ce
f383b385e5afea64150574fb43ea9f9d3fe8f7b7
677cd1858fb7536f459f031fbd4a7df076e968befff87d388e3fd08de3e03812
Analyzer Verdict Alert fortinet Malware
GET /nd/login.php HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:34 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 13684
Keep-Alive: timeout=5, max=75
Content-Type: text/html; charset=UTF-8
tipsprints.com.au/wp-content/plugins/essential-grid/public/assets/css/settings.css?ver=3.0.13
200 OK 13 kB URL HTTP/1.1 tipsprints.com.au/wp-content/plugins/essential-grid/public/assets/css/settings.css?ver=3.0.13
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 3eb6b7f2cb123b721a8a8e95c3a2962e
aed449f2fec9da6518c370878db1370a5fbf4d2c
a4baa05e3e645a66c64fc325b0389a0178bb7644c36a15b307d50b795cddbd9d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/essential-grid/public/assets/css/settings.css?ver=3.0.13 HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:34 GMT
Server: Apache
Last-Modified: Tue, 03 May 2022 12:33:14 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 12786
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Last-Modified, ETag, Expires, Backoff, Content-Length, Cache-Control, Alert, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 28 Jan 2023 06:41:40 GMT
age: 715
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
tipsprints.com.au/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
200 OK 17 kB URL HTTP/1.1 tipsprints.com.au/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (43771)
Hash 2a67a4888baa44de739f3fe56203ce07
da175eae57f26b655747d79f055477e3fee1abb9
3a4d7627476a0099ca4bcc101685f27de04cb49dd66ef842d72c6cda270599dd
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.2 HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:34 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 06 Sep 2022 01:15:25 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 16594
Keep-Alive: timeout=5, max=75
Content-Type: text/css
tipsprints.com.au/wp-content/plugins/essential-grid/public/assets/font/fontello/css/fontello.css?ver=3.0.13
200 OK 2.4 kB URL HTTP/1.1 tipsprints.com.au/wp-content/plugins/essential-grid/public/assets/font/fontello/css/fontello.css?ver=3.0.13
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash c4793d4c5f37223118865b6a8b93d546
ac6045f732cd75b8218df26ee33bd099aa2fd3bb
c4d3046b4ee1e66a3363225cb0ffb5d7d4400c19f15d39d8b2f41c12555c5dc4
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/essential-grid/public/assets/font/fontello/css/fontello.css?ver=3.0.13 HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 03 May 2022 12:33:14 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2441
Keep-Alive: timeout=5, max=75
Content-Type: text/css
tipsprints.com.au/wp-content/plugins/trx_addons/js/magnific/magnific-popup.css
200 OK 2.2 kB URL HTTP/1.1 tipsprints.com.au/wp-content/plugins/trx_addons/js/magnific/magnific-popup.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 5691b07253c4a30382130c2da4be8343
4c12d34016c7061965c996599c4086683958e0f1
095326e797678e4aa4be8217bf991180f7b79cdcce552897123ffa68981a0747
GET /wp-content/plugins/trx_addons/js/magnific/magnific-popup.css HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 03 May 2022 12:33:12 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2190
Keep-Alive: timeout=5, max=75
Content-Type: text/css
tipsprints.com.au/wp-content/plugins/trx_addons/js/swiper/swiper.css
200 OK 4.2 kB URL HTTP/1.1 tipsprints.com.au/wp-content/plugins/trx_addons/js/swiper/swiper.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1468)
Hash 3e6a70854c4cffcc0ef987101acc5336
ccf43e24fce0de3e38a97e708c65ccf1fdae893f
191771e9654eb29957521322d600a27343bb50fe692d73e3e5305330474e5d88
GET /wp-content/plugins/trx_addons/js/swiper/swiper.css HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 03 May 2022 12:33:12 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4171
Keep-Alive: timeout=5, max=75
Content-Type: text/css
tipsprints.com.au/wp-content/plugins/trx_addons/css/trx_addons.animation.css?ver=6.0.2
200 OK 8.6 kB URL HTTP/1.1 tipsprints.com.au/wp-content/plugins/trx_addons/css/trx_addons.animation.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 152fe73001cd637222e9f6e944e19d88
23d0d888a09a52ac554278beeff0d1d6e33ce3f6
9d1829a2e181037bf2548fa0197c0afef8a3759a72239b1d4cd91410193e97d0
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/trx_addons/css/trx_addons.animation.css?ver=6.0.2 HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Last-Modified: Tue, 03 May 2022 12:33:12 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8648
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
tipsprints.com.au/wp-content/plugins/trx_addons/css/trx_addons.css
200 OK 44 kB URL HTTP/1.1 tipsprints.com.au/wp-content/plugins/trx_addons/css/trx_addons.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65389)
Hash 5e009b106da446016e10aa4ca4505811
d1047d99988d0821b9b3fdceb3b490adf0b7588f
384a032fa2eae16517e0c589fba0ad46fb0aec38284255f0faddba7ad44f7e36
GET /wp-content/plugins/trx_addons/css/trx_addons.css HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Last-Modified: Tue, 03 May 2022 12:33:12 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css
tipsprints.com.au/wp-content/themes/copypress/css/font-face/Montserrat/stylesheet.css?ver=6.0.2
200 OK 343 B URL HTTP/1.1 tipsprints.com.au/wp-content/themes/copypress/css/font-face/Montserrat/stylesheet.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 7be4630fe3496ad3c557a9773d9f09ff
363d205ede770e897549379c7f659c4105806d0d
9c3965a3fd7a3a96bc2439a0482e3b9921f8db1c15b9b686bc4e96c7085a39f5
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/copypress/css/font-face/Montserrat/stylesheet.css?ver=6.0.2 HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Last-Modified: Tue, 03 May 2022 12:29:00 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 343
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
tipsprints.com.au/wp-content/themes/copypress/css/font-face/Gilroy/stylesheet.css?ver=6.0.2
200 OK 601 B URL HTTP/1.1 tipsprints.com.au/wp-content/themes/copypress/css/font-face/Gilroy/stylesheet.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 1db0e517a3ef6fa1621d8f1ba999f349
61768264c06afb1ef7519ee7d8ab715debaf7c3e
e94751bf7f2f520e610ec10076bb1ca2e03958eaeb5fe4720338c98a8d0c47ea
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/copypress/css/font-face/Gilroy/stylesheet.css?ver=6.0.2 HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Last-Modified: Tue, 03 May 2022 12:29:00 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 601
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
tipsprints.com.au/wp-content/themes/copypress/css/font-face/Sofia-Pro-Light/stylesheet.css?ver=6.0.2
200 OK 555 B URL HTTP/1.1 tipsprints.com.au/wp-content/themes/copypress/css/font-face/Sofia-Pro-Light/stylesheet.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash f84c6b1bd2318a67401953158d29d27c
3400afb27e05bb92680570cb8f6a58ce417a2c78
dc058158c66d0142e859c3396b4d909ccb03a96879f80699b9eb69375a849d0e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/copypress/css/font-face/Sofia-Pro-Light/stylesheet.css?ver=6.0.2 HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Last-Modified: Tue, 03 May 2022 12:29:00 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 555
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 16a7b6a7128312e2f985d30df18c4487
6017bff79ffb525d9c7f9f32b999b74b5dc69602
663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17371
Expires: Sat, 28 Jan 2023 11:43:06 GMT
Date: Sat, 28 Jan 2023 06:53:35 GMT
Connection: keep-alive
tipsprints.com.au/wp-content/themes/copypress/css/font-face/PermanentMarker/stylesheet.css?ver=6.0.2
200 OK 124 B URL HTTP/1.1 tipsprints.com.au/wp-content/themes/copypress/css/font-face/PermanentMarker/stylesheet.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 8c5d06d1626d4adac07a061a83061068
a84df90692939d4006f174af0979a18b3a4b04e1
f9e878214c7e9d44d6b6c6b7c504fd47cf98f2a4bfdd24063c2a1dfc48949ff5
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/copypress/css/font-face/PermanentMarker/stylesheet.css?ver=6.0.2 HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Last-Modified: Tue, 03 May 2022 12:29:00 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 124
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/css
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 17bf597a406b0030c261c321a0224206
227a5cab745daee7d30df4706e66444c9f9bb0dc
1947475f86772c876082d609aca4c8c9743ea177eec20612b9dae2f5ce7d3374
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1947475F86772C876082D609ACA4C8C9743EA177EEC20612B9DAE2F5CE7D3374"
Last-Modified: Thu, 26 Jan 2023 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21516
Expires: Sat, 28 Jan 2023 12:52:11 GMT
Date: Sat, 28 Jan 2023 06:53:35 GMT
Connection: keep-alive
tipsprints.com.au/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16
200 OK 3.2 kB URL HTTP/1.1 tipsprints.com.au/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (11256), with no line terminators
Hash 1054d0d53548e8bae51665b11acc6413
2eea6a05fe18db61fff58c431d34a86b3e0b7ade
cb8b0f0f3f871d9776da32ee6d9e1af9277a211be61e97a831c7f8c98fbebfae
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16 HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Last-Modified: Thu, 06 May 2021 02:42:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3239
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: text/css
tipsprints.com.au/wp-content/plugins/trx_addons/css/font-icons/css/trx_addons_icons-embedded.css?ver=6.0.2
200 OK 102 kB URL HTTP/1.1 tipsprints.com.au/wp-content/plugins/trx_addons/css/font-icons/css/trx_addons_icons-embedded.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65163)
Size 102 kB (101869 bytes)
Hash 1450516722bb7d14ff955f02c82c65ae
346af27c9ef54e2a5aacc079d30a6cee9e996ef0
7af99db3d6e3628b9b828ebf65410b3e2837f1da49708ea2354de75f026f821d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/trx_addons/css/font-icons/css/trx_addons_icons-embedded.css?ver=6.0.2 HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 03 May 2022 12:33:12 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked
Content-Type: text/css
tipsprints.com.au/wp-content/themes/copypress/style.css
200 OK 33 kB URL HTTP/1.1 tipsprints.com.au/wp-content/themes/copypress/style.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash a2b2281a7f1afcbfbfab1c03f8094ec5
36e833cd952f22d2bbf31d2ab4a632610d36759c
25ca67ebc9b5c6948ddfa236fad2bd4188029ce3c189c4c2abd81801fddeb87f
GET /wp-content/themes/copypress/style.css HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Last-Modified: Tue, 03 May 2022 12:29:00 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css
tipsprints.com.au/wp-content/themes/copypress/css/__colors.css?ver=6.0.2
200 OK 34 kB URL HTTP/1.1 tipsprints.com.au/wp-content/themes/copypress/css/__colors.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65384)
Hash 39d3d21783d47c46e0513dc25cf13932
a65046f5d37487b9ede7e60cb70116af131a9ae7
41f31d799dd4a5219dea5f0c303bdd643e36abc01abc1645d1d0d670573add6d
GET /wp-content/themes/copypress/css/__colors.css?ver=6.0.2 HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Last-Modified: Tue, 03 May 2022 12:42:26 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css
tipsprints.com.au/wp-content/themes/copypress/css/__styles.css?ver=6.0.2
200 OK 25 kB URL HTTP/1.1 tipsprints.com.au/wp-content/themes/copypress/css/__styles.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65384)
Hash e11c7f0448a9c17ef65d95048b2b7a73
a53751ea4559e1d508a90650b163a14c3674441f
32c44ec620c4d10e3d8af36d84611b91d5d94befb79290d22b8792231f5381ec
GET /wp-content/themes/copypress/css/__styles.css?ver=6.0.2 HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Last-Modified: Tue, 03 May 2022 12:42:26 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css
tipsprints.com.au/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.0.2
200 OK 1.3 kB URL HTTP/1.1 tipsprints.com.au/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (4186), with no line terminators
Hash 91bab39b98d7e5c1632717b9ebe349e4
e639a447d06fc7827be5b5b35d603ff16b5f7bb1
47ff151faeb23a5654f6ec58b404e51193f6714849a69de241c2ee79662f74c6
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.0.2 HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Last-Modified: Fri, 01 May 2020 15:34:07 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1298
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: text/css
tipsprints.com.au/wp-content/uploads/2020/05/tips_prints_sydney.png
200 OK 22 kB URL HTTP/2 tipsprints.com.au/wp-content/uploads/2020/05/tips_prints_sydney.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 233 x 70, 8-bit/color RGBA, non-interlaced\012- data
Hash d5f0b287a34a48db98ad42ef7deae77c
d4949ff4d204241264bf0f7dd7a744f9db779215
7b6e7752579231ee8e9f0c8ae0e384a8f789b28281d1660fa129a61d77123943
GET /wp-content/uploads/2020/05/tips_prints_sydney.png HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://tipsprints.com.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 01 May 2020 15:34:03 GMT
accept-ranges: bytes
content-length: 22195
content-type: image/png
date: Sat, 28 Jan 2023 06:53:35 GMT
server: Apache
X-Firefox-Spdy: h2
tipsprints.com.au/wp-content/themes/copypress/css/fontello/css/fontello-embedded.css?ver=6.0.2
200 OK 180 kB URL HTTP/1.1 tipsprints.com.au/wp-content/themes/copypress/css/fontello/css/fontello-embedded.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65217)
Size 180 kB (179615 bytes)
Hash c24d265fb352c7963f2b76af7636e615
6350e7b915dd3c8532cd6c582b80dedb80ddf8fb
a748b65d933dd09905f63a5fa4fd9f0dbadf3d7876c728bfac42f06d7cc6d57c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/copypress/css/fontello/css/fontello-embedded.css?ver=6.0.2 HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Last-Modified: Tue, 03 May 2022 12:29:00 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css
tipsprints.com.au/wp-content/themes/copypress/css/responsive.css?ver=6.0.2
200 OK 29 kB URL HTTP/1.1 tipsprints.com.au/wp-content/themes/copypress/css/responsive.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 4e5c8848fb457e2e4214271ad6684bcb
f1188a3e5c67db5df5b991893b452bd28e7678b1
2fe7687cbed151bb94886b829ec2f0215e0825e32ec6029127ce230f7e768489
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/copypress/css/responsive.css?ver=6.0.2 HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Last-Modified: Tue, 03 May 2022 12:29:00 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css
tipsprints.com.au/wp-content/themes/copypress/css/custom-responsive.css?ver=6.0.2
200 OK 248 B URL HTTP/1.1 tipsprints.com.au/wp-content/themes/copypress/css/custom-responsive.css?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 045e5f24a7ae14151b5d3b39f28fef52
41e04023d696e5e92fc4b4024f03172d32aba537
49b0212afd2719366cb686c40fd9b285e7423d461929fa04aa773185c07a1da6
GET /wp-content/themes/copypress/css/custom-responsive.css?ver=6.0.2 HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Last-Modified: Tue, 03 May 2022 12:29:00 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 248
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: text/css
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: aZtZqip4NA1jjgbpIE3GPQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: dNTlf91dT4QKKqx1BGsaws6PXM8=
tipsprints.com.au/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.6 kB URL HTTP/1.1 tipsprints.com.au/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (11126)
Hash acdb97105af28a7066790c6748ae2e1e
65794d2c5a9d04f747faf370bc8bacd330e69e5a
dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Last-Modified: Thu, 06 May 2021 02:42:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4618
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: application/javascript
tipsprints.com.au/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 39 kB URL HTTP/1.1 tipsprints.com.au/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65447)
Hash feb933ceca72e1d76b471ed9db278b0d
6179e8f9c9876a6c4df5e3138e9f8ee2ac25bcd1
9a525fa92f98fd5ac754d60ea6f3676bcaa3870dd9bf057c8c668399922c9bd0
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Last-Modified: Fri, 26 Nov 2021 02:30:17 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
tipsprints.com.au/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/font-awesome.min.css?ver=6.0.5
200 OK 7.0 kB URL HTTP/1.1 tipsprints.com.au/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/font-awesome.min.css?ver=6.0.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (30449)
Hash 61fc673259be88dcedc1a85c0614511c
7967199fc67d6434075da8a02add9c3e69d5d5a0
d62aff2326cc8b721afc3c9f511026d3d20a4bff9696fed7ad9d4cfd818ed443
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/font-awesome.min.css?ver=6.0.5 HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Last-Modified: Fri, 01 May 2020 15:33:42 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7022
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: text/css
tipsprints.com.au/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.14
200 OK 16 kB URL HTTP/1.1 tipsprints.com.au/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.14
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (12602)
Hash ef1f75a7e3a95466dbb541342d218497
aee4425ad15662a4a27ba4806773aee46be6b259
337aa9ca7c55b6580203aa0cfef8be8e42deb5441faacb9be21c0107347d3388
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.14 HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Last-Modified: Tue, 03 May 2022 12:33:16 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 16398
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/css
tipsprints.com.au/wp-content/plugins/trx_addons/js/swiper/swiper.jquery.min.js
200 OK 23 kB URL HTTP/1.1 tipsprints.com.au/wp-content/plugins/trx_addons/js/swiper/swiper.jquery.min.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (32072)
Hash 5bcfde9e147836a2f7ed19c8ee215c86
7e8e13d3eaf1ac6bdfb8fbdc327ff96ca65b761a
803a2bf12d43f649ff242adb94c12592576d5fe38369886a97e6d2214e0c344b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/trx_addons/js/swiper/swiper.jquery.min.js HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Last-Modified: Tue, 03 May 2022 12:33:12 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
tipsprints.com.au/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.0.5
200 OK 62 kB URL HTTP/1.1 tipsprints.com.au/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.0.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65358)
Hash 38749cdfb581250dab1d7876ea2cd524
3201444f7f0ebb03de14678e5299f3790f1e535e
c26b5222095fa200d9bc5723cae5a776248c6559c76ee7040faaefbf8002c049
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.0.5 HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Last-Modified: Fri, 01 May 2020 15:33:40 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css
tipsprints.com.au/wp-content/plugins/trx_addons/js/magnific/jquery.magnific-popup.min.js
200 OK 9.2 kB URL HTTP/1.1 tipsprints.com.au/wp-content/plugins/trx_addons/js/magnific/jquery.magnific-popup.min.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (20087)
Hash 7a10ae63b238729dc4da7f7bd8986219
654c47168dca0ec7080f6c57e8c4482b57f879d4
b782185399b361358f7c409d6f23f22d45f695dcbb63876c35752c7b1de72db3
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/trx_addons/js/magnific/jquery.magnific-popup.min.js HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Last-Modified: Tue, 03 May 2022 12:33:12 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 9204
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: application/javascript
tipsprints.com.au/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.14
200 OK 59 kB URL HTTP/1.1 tipsprints.com.au/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.14
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (45108)
Hash 41330b2074e42d731bb7590633510cc3
a87a478fb6cd5fd330fa2c74cd716674747b23da
a29e9fc8787d304e15afe256171a0bf91e0e8f09fb5339350cdd181b8c0c135f
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.14 HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Last-Modified: Tue, 03 May 2022 12:33:16 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
tipsprints.com.au/wp-content/plugins/trx_addons/js/trx_addons.js
200 OK 31 kB URL HTTP/1.1 tipsprints.com.au/wp-content/plugins/trx_addons/js/trx_addons.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65389)
Hash 12274803927ba1a3f4d3119e66ac69f7
a22ffd42c4e0736eb30b8b5ca04bf332ca4ac083
af0550c28089c543f822d49c2cf6a56c064633ca2f70f6aaa130c953cc4091fa
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/trx_addons/js/trx_addons.js HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Last-Modified: Tue, 03 May 2022 12:33:12 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
tipsprints.com.au/wp-content/themes/copypress/js/superfish.js
200 OK 2.6 kB URL HTTP/1.1 tipsprints.com.au/wp-content/themes/copypress/js/superfish.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash b07e6f6fdd77a48622533af144119c68
c9e2e449c55fd4801753edb7d896339f2af3235a
c31eb7460dea1a6330be309c26503d074d652425590c23fb445337638d8a9cc3
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/copypress/js/superfish.js HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Last-Modified: Tue, 03 May 2022 12:29:00 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2576
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: application/javascript
tipsprints.com.au/wp-content/themes/copypress/js/__scripts.js
200 OK 25 kB URL HTTP/1.1 tipsprints.com.au/wp-content/themes/copypress/js/__scripts.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65384)
Hash f5b91254aa142df3f7862aae186b1d7d
882a8b3ae8c90ec479d8822377e7034b2b28b656
4f1cff2d110d7cc92c3e09cf3c3f878237d53b5e9f26d3101df6d5a5dcdad5e7
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/copypress/js/__scripts.js HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Last-Modified: Tue, 03 May 2022 12:42:26 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
tipsprints.com.au/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
200 OK 5.3 kB URL HTTP/1.1 tipsprints.com.au/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (15660)
Hash 710f8b142ea44c0682dc2c30f318f065
49144e9b3a76d3d383b1d4359cf7a25e947f4233
708bb5819879a2a2c7670abc20a58cca68a415ffd621011cbc4c3c9d82dddc50
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Last-Modified: Tue, 06 Sep 2022 01:15:25 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5321
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: application/javascript
tipsprints.com.au/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.14
200 OK 133 kB URL HTTP/1.1 tipsprints.com.au/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.14
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (64288)
Size 133 kB (132914 bytes)
Hash 50265a35a2316644f4976db10a0da4af
bee99763d29e8fd4c8d5e76a8fafd6e720e9bb52
3093462593a9358dabbbe081b14e1a34ef7b74dcea2caf07a99a21a6859e32bc
GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.14 HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Last-Modified: Tue, 03 May 2022 12:33:16 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
tipsprints.com.au/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.0.2
200 OK 540 B URL HTTP/1.1 tipsprints.com.au/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1191), with no line terminators
Hash cea5e0013ee4b14895dc0f6c424a03e8
b21c776891ff57c003b385a1aa62ba613b292a21
1cfe89d6aa36aea0e986e379590ab23877257e8416764d18105d1176dfcd64d9
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.0.2 HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Last-Modified: Tue, 06 Sep 2022 01:15:25 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 540
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: application/javascript
tipsprints.com.au/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.16
200 OK 57 kB URL HTTP/1.1 tipsprints.com.au/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.16
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65266)
Hash 048a0543b6f137a0eaf5f1c3ef6ddef8
395dc7a9242c35b6c5bcd1195aa7c7e1082e618c
1492d5f6e88039d07890f5e21f0c0801dfd2545039ee63a061bb527e8d2deca2
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.16 HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:35 GMT
Server: Apache
Last-Modified: Thu, 06 May 2021 02:42:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
tipsprints.com.au/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.0.2
200 OK 483 B URL HTTP/1.1 tipsprints.com.au/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with very long lines (906), with no line terminators
Hash 961b384bf5b28ac673051be024563f79
606ebba9fa8aec74cf413098b084500c8b16b85c
a9c17b0e5a9c12428c6ed8d0c4622ddbae112a9ac19bccf451f125972cd91935
GET /wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.0.2 HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:36 GMT
Server: Apache
Last-Modified: Thu, 06 May 2021 02:42:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 483
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: application/javascript
tipsprints.com.au/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.0.5
200 OK 7.3 kB URL HTTP/1.1 tipsprints.com.au/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.0.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (20382)
Hash d651163f7e58f2c6f8b5fcb41b4561f2
8abf58d69736ac0263abcb20d86779fae64ba646
744329a781dc063d373b72398025665e48805a2fa3299ebc2aea8686f6df7334
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.0.5 HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tipsprints.com.au/nd/login.php
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:36 GMT
Server: Apache
Last-Modified: Fri, 01 May 2020 15:33:41 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7284
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: application/javascript
tipsprints.com.au/wp-content/themes/copypress/css/font-face/Sofia-Pro-Light/sofiapro-light-webfont.woff2
200 OK 26 kB URL HTTP/1.1 tipsprints.com.au/wp-content/themes/copypress/css/font-face/Sofia-Pro-Light/sofiapro-light-webfont.woff2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 25832, version 3.0\012- data
Hash 59a7bc9c95b28863be26aa397518f3fd
102905d0b19706499d86afd3686709390adba43a
ed4fd80b7584c958f57a5236dba36c89cc022671a793db83c6f8b3d40bc08f90
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/copypress/css/font-face/Sofia-Pro-Light/sofiapro-light-webfont.woff2 HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://tipsprints.com.au/wp-content/themes/copypress/css/font-face/Sofia-Pro-Light/stylesheet.css?ver=6.0.2
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:36 GMT
Server: Apache
Last-Modified: Tue, 03 May 2022 12:29:00 GMT
Accept-Ranges: bytes
Content-Length: 25832
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: font/woff2
tipsprints.com.au/wp-content/themes/copypress/css/font-face/Gilroy/gilroy-extrabold-webfont.woff2
200 OK 21 kB URL HTTP/1.1 tipsprints.com.au/wp-content/themes/copypress/css/font-face/Gilroy/gilroy-extrabold-webfont.woff2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 21104, version 1.0\012- data
Hash 483c71cccb1a7a7eb1ec9d13baeb04e5
7def7fb8051f60138d3d96a4dffc135bcfcfe8e3
9beb9d67c5ca5e759fd11f0a3809f6d3ae81332be9046085f968bfbd226aa46d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/copypress/css/font-face/Gilroy/gilroy-extrabold-webfont.woff2 HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://tipsprints.com.au/wp-content/themes/copypress/css/font-face/Gilroy/stylesheet.css?ver=6.0.2
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:53:36 GMT
Server: Apache
Last-Modified: Tue, 03 May 2022 12:29:00 GMT
Accept-Ranges: bytes
Content-Length: 21104
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: font/woff2
tipsprints.com.au/wp-content/uploads/2020/05/cropped-icon2-192x192.png
200 OK 24 kB URL HTTP/2 tipsprints.com.au/wp-content/uploads/2020/05/cropped-icon2-192x192.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash d00e07ba2accb309eb834b1bd5af3a94
5082ef192ef5a0e06189a58c8caec18677da23d1
301a303dd4012d954d3b1e9e18bd5369787633da4324d7feb65d5d5c5dfa87b1
GET /wp-content/uploads/2020/05/cropped-icon2-192x192.png HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://tipsprints.com.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 01 May 2020 15:34:02 GMT
accept-ranges: bytes
content-length: 24058
content-type: image/png
date: Sat, 28 Jan 2023 06:53:36 GMT
server: Apache
X-Firefox-Spdy: h2
tipsprints.com.au/wp-content/uploads/2020/05/cropped-icon2-32x32.png
200 OK 1.9 kB URL HTTP/2 tipsprints.com.au/wp-content/uploads/2020/05/cropped-icon2-32x32.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash e15b28591bc1947243548c9377f509d6
5a6a723c176b03b839ad8827de50361a93af55c3
3e9e94624847d75a63a09b5fa4d440a8380cc3e8c5d54998d7f993ff6ed7f316
GET /wp-content/uploads/2020/05/cropped-icon2-32x32.png HTTP/1.1
Host: tipsprints.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://tipsprints.com.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 01 May 2020 15:34:02 GMT
accept-ranges: bytes
content-length: 1941
content-type: image/png
date: Sat, 28 Jan 2023 06:53:36 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13078
Expires: Sat, 28 Jan 2023 10:31:34 GMT
Date: Sat, 28 Jan 2023 06:53:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13078
Expires: Sat, 28 Jan 2023 10:31:34 GMT
Date: Sat, 28 Jan 2023 06:53:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13078
Expires: Sat, 28 Jan 2023 10:31:34 GMT
Date: Sat, 28 Jan 2023 06:53:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13078
Expires: Sat, 28 Jan 2023 10:31:34 GMT
Date: Sat, 28 Jan 2023 06:53:36 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b7aa725-5968-4227-af9b-77dd57d6a123.jpeg
200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b7aa725-5968-4227-af9b-77dd57d6a123.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0856916fa7de25bdb308c04d0ae58180
72abe5101dc03c35399e6e5aab02328c206f480a
9b8c3380c842aa6de358def0d56263bafec61e37bc951a06c06e6953419e2804
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b7aa725-5968-4227-af9b-77dd57d6a123.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6733
x-amzn-requestid: cd0cc842-d109-42b4-9104-0cb48a964794
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_vkGupoAMF3Pw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d44663-14b754495bb33b0f5f0cd805;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:47:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Q599noZ2W5oOkldsXrti4Fbu8JlpfKHbLCURsarLwPQP7GlcZSKI-A==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 22:16:26 GMT
age: 31030
etag: "72abe5101dc03c35399e6e5aab02328c206f480a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7df68b7-44d9-4227-aedc-8e03fd23edd9.jpeg
200 OK 4.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7df68b7-44d9-4227-aedc-8e03fd23edd9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 01d78e0bafdf4cbe227afc503124bc55
e2d21a694342773ccbace4742c4b047e7ce92e1c
3e9027f35134d811a50144a9b70c6de2dc97cbade941a5364717b403bcaf3eb1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7df68b7-44d9-4227-aedc-8e03fd23edd9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4641
x-amzn-requestid: b2e2ba60-21e7-4304-a354-2b49b8162cf2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_T5FJGoAMFwlA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445b2-4b292f801433239340edab33;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:44:18 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: irkZKPRcil7YVMxVJXNkIn18zBSt2JWyxo9ZFMfz6aZer4_lnqG8oA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:56:38 GMT
age: 32218
etag: "e2d21a694342773ccbace4742c4b047e7ce92e1c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ea24bcba583bd8bd139559448a343e68
b9d37c2b14f890d41983a59f352e8f7caa9c94bb
e5ef5975eec964ae1684deb424f00833f2d217bdc7e6c385320ed3adeb6bc1c4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7585
x-amzn-requestid: bfb52acb-e0d7-482d-8be9-be5db1c16cac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_vkE5roAMF0Hw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d44663-2d38d314177e0ac40d4c8240;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:47:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 1WE1zQwrCGVy8HLT9_BFkAr6rQE_ROyttMOByR32KeT0w2Hd_ylvYQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 22:16:00 GMT
age: 31056
etag: "b9d37c2b14f890d41983a59f352e8f7caa9c94bb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0cadb8fa-5527-46cd-92dd-6316ac84a7d5.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0cadb8fa-5527-46cd-92dd-6316ac84a7d5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 57b73886cbbb719eda5f733c018eedfb
b84ed40973f8a0d3c10529e34f9466746cfdaf0c
4ba11c23e0bbd2aed53b04ad0b3d22161af1971ddcfb75ae55734de9a49af207
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0cadb8fa-5527-46cd-92dd-6316ac84a7d5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7028
x-amzn-requestid: c1743fed-205a-431b-8648-474facde6d09
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa-CwFtboAMF9rg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d443ab-5b94864c707c42fc36fbc63a;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 35sWCIsACAhQvXkJvBn0LGf2m9OTklgDprONw5CDUoXD97TUpJ9j5Q==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:55:35 GMT
age: 32281
etag: "b84ed40973f8a0d3c10529e34f9466746cfdaf0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 131eb343c5abd61939457d69bd371348
ffb2035cf64fc83f01db5c6f26ffa264b6aac95b
8486eb9dc6325018f8721bc6f37408f260b6e652b145280f2d778d860d3ec2d5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7538
x-amzn-requestid: 113924cc-a196-4dbd-91d9-68c213265afe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e3fobF-ZoAMFjjA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c61302-6b24941a642b22cf21e47dc0;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 03:16:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2P09wOtKPDHjxxAuzcLFMQJwmGN1zNJcH9LA6IJpeaGiaPVRF4y-TA==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 05:20:03 GMT
age: 5613
etag: "ffb2035cf64fc83f01db5c6f26ffa264b6aac95b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33ce0741-fcf6-4205-8b3a-016953553eaf.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33ce0741-fcf6-4205-8b3a-016953553eaf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 195316042e7f798eeeb7993fecb3a383
4aeca24ad4702f87feaf9674ea0c1ff6d71826a3
b7e0a61060455241fce844d2c91eca500d409804361063ddb61053cbc9c7b1c1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33ce0741-fcf6-4205-8b3a-016953553eaf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13376
x-amzn-requestid: 64d0092e-1f1a-4183-a4a6-805e0bf37d32
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa-DvHIyoAMF6fA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d443b1-6387770232ddca74531bce91;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Jqb6G21QeTDiI0HWT9Fd87D-HkAOiesyfN9vr7vMxrOUADBxV-_Fug==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:55:42 GMT
age: 32274
etag: "4aeca24ad4702f87feaf9674ea0c1ff6d71826a3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
192.185.35.29
23.36.77.32