foldingillusions.com/
200 OK 24 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (18458)
Hash ab536ce647be483c42f4a7f54ee21cef
7aae2030db00035b310cf994b054d99272781b99
2e47a0274fe6bc90129e2b2985de5c9092cf79b443985b21d377ebf45122946e
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jan 2023 00:40:16 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache
Content-Encoding: gzip
WPO-Cache-Status: cached
Last-Modified: Mon, 16 Jan 2023 22:51:25 GMT
X-Powered-By: PHP/7.3.33, PleskLin
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2258cd6b877a3aca8f4c84074e65ac4b
4e46c70941f8e497e8afc8d078644e7f81761a1c
faac4e0d123f2112b58953c104ea746cd53047fc1ada0ef5d669feecf78ddfff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FAAC4E0D123F2112B58953C104EA746CD53047FC1ADA0EF5D669FEECF78DDFFF"
Last-Modified: Sat, 14 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19307
Expires: Tue, 17 Jan 2023 06:02:03 GMT
Date: Tue, 17 Jan 2023 00:40:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 405f8f149ccdf0005ca0d890c96a9cb4
64de3200cef76133dfad901d6709697d6842405e
3a10790c397a419450ac2c90b941fd20bc49af1dbaeb34678836306de8febfce
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3A10790C397A419450AC2C90B941FD20BC49AF1DBAEB34678836306DE8FEBFCE"
Last-Modified: Mon, 16 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18339
Expires: Tue, 17 Jan 2023 05:45:55 GMT
Date: Tue, 17 Jan 2023 00:40:16 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 16 Jan 2023 23:49:12 GMT
content-type: application/json
age: 3064
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d38f4bb41e1264b8a1e11ff0b1499d20
21c3e36bd908df43e0d49b747e270ec75cb882b0
3ff822eb56d2218ad6244fd013a82e0d27450ae21d47e08f1e3fdf4c82a8aad7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3FF822EB56D2218AD6244FD013A82E0D27450AE21D47E08F1E3FDF4C82A8AAD7"
Last-Modified: Mon, 16 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19223
Expires: Tue, 17 Jan 2023 06:00:39 GMT
Date: Tue, 17 Jan 2023 00:40:16 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: WdqBkhBYMYoVx9S0MMZQHdFPFm9pEQDnbvkDUNE1ubO7EaE/3kDFD8coj6gXfDDpCaDSab0Zrug=
x-amz-request-id: KM692PXX1VNA0D7R
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 16 Jan 2023 23:56:01 GMT
age: 2655
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:16 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6f4934ef37f04950c15313f2cdc6902d
3ed5b8439867115a06edaf046472ee8d271c33ea
3fb58a81be10df91f59e3f6ceed7d607f77409087515cf675ff0d098c482c574
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 00:40:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6f4934ef37f04950c15313f2cdc6902d
3ed5b8439867115a06edaf046472ee8d271c33ea
3fb58a81be10df91f59e3f6ceed7d607f77409087515cf675ff0d098c482c574
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 00:40:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-184503207-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-184503207-1
IP
File type ASCII text, with very long lines (1921)
Hash afc4515993e2a994d1b27a23b88c0dd5
2344bdc06ef662d890918db16c26bfbcf2ef40b6
08f9e379be0f0dcc66d4c847696938bf34b99c872bc5a070752e70caa9c84635
GET /gtag/js?id=UA-184503207-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 17 Jan 2023 00:40:16 GMT
expires: Tue, 17 Jan 2023 00:40:16 GMT
cache-control: private, max-age=900
last-modified: Tue, 17 Jan 2023 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44174
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-MP69GDNWHF
200 OK 77 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-MP69GDNWHF
IP
File type ASCII text, with very long lines (20080)
Hash ed3dea90dfb6bb9606640df860b8afa1
844d2ae15c635f061cae2538b10738d9c5e6bf16
e69660ee1160bcc9f4220c81dd7d39a02c18ec9128d5c0dc64a76313b8c2180c
GET /gtag/js?id=G-MP69GDNWHF HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 17 Jan 2023 00:40:16 GMT
expires: Tue, 17 Jan 2023 00:40:16 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77368
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b5162a1daae832a608a30b7516a3dde3
32e1eabb247ae6bf922880ca655b0d1892ddafb5
22a50a0201ca5757e5955b0a64d7fe7fbd689b18522491ccf6149373000de098
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22A50A0201CA5757E5955B0A64D7FE7FBD689B18522491CCF6149373000DE098"
Last-Modified: Mon, 16 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21560
Expires: Tue, 17 Jan 2023 06:39:36 GMT
Date: Tue, 17 Jan 2023 00:40:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b5162a1daae832a608a30b7516a3dde3
32e1eabb247ae6bf922880ca655b0d1892ddafb5
22a50a0201ca5757e5955b0a64d7fe7fbd689b18522491ccf6149373000de098
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22A50A0201CA5757E5955B0A64D7FE7FBD689B18522491CCF6149373000DE098"
Last-Modified: Mon, 16 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 17 Jan 2023 06:40:16 GMT
Date: Tue, 17 Jan 2023 00:40:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b5162a1daae832a608a30b7516a3dde3
32e1eabb247ae6bf922880ca655b0d1892ddafb5
22a50a0201ca5757e5955b0a64d7fe7fbd689b18522491ccf6149373000de098
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22A50A0201CA5757E5955B0A64D7FE7FBD689B18522491CCF6149373000DE098"
Last-Modified: Mon, 16 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21542
Expires: Tue, 17 Jan 2023 06:39:18 GMT
Date: Tue, 17 Jan 2023 00:40:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b5162a1daae832a608a30b7516a3dde3
32e1eabb247ae6bf922880ca655b0d1892ddafb5
22a50a0201ca5757e5955b0a64d7fe7fbd689b18522491ccf6149373000de098
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22A50A0201CA5757E5955B0A64D7FE7FBD689B18522491CCF6149373000DE098"
Last-Modified: Mon, 16 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 17 Jan 2023 06:40:16 GMT
Date: Tue, 17 Jan 2023 00:40:16 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6f4934ef37f04950c15313f2cdc6902d
3ed5b8439867115a06edaf046472ee8d271c33ea
3fb58a81be10df91f59e3f6ceed7d607f77409087515cf675ff0d098c482c574
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 00:40:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b5162a1daae832a608a30b7516a3dde3
32e1eabb247ae6bf922880ca655b0d1892ddafb5
22a50a0201ca5757e5955b0a64d7fe7fbd689b18522491ccf6149373000de098
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22A50A0201CA5757E5955B0A64D7FE7FBD689B18522491CCF6149373000DE098"
Last-Modified: Mon, 16 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 17 Jan 2023 06:40:16 GMT
Date: Tue, 17 Jan 2023 00:40:16 GMT
Connection: keep-alive
foldingillusions.com/wp-content/uploads/2021/01/logox1-1.png
200 OK 16 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/01/logox1-1.png
IP
File type PNG image data, 150 x 162, 8-bit/color RGBA, non-interlaced\012- data
Hash 3b9698964078bbc1012eb587c0d48583
79b7c92e5527627e823131d632b4c1d6a4512ce2
8dd0c0ef3fb286d10a403bf31d552a9b1c01c3a65178b5e57ec547d477e7e9ec
GET /wp-content/uploads/2021/01/logox1-1.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:17 GMT
content-type: image/png
content-length: 16490
last-modified: Thu, 25 Feb 2021 06:51:07 GMT
etag: "603748db-406a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Expires, Last-Modified, Alert, Content-Type, Content-Length, ETag, Pragma, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 17 Jan 2023 00:33:46 GMT
age: 391
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d03545e1fc5a8876441094039811aac5
99fcc840f3516298625c528e9b408132f7fcbb9c
166fa7c7bb716b2cd02a47884ee00df31030dfb4b2a6fdae7b59b19f87739123
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2145
Cache-Control: max-age=118941
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 00:40:17 GMT
Etag: "63c513ad-1d7"
Expires: Wed, 18 Jan 2023 09:42:38 GMT
Last-Modified: Mon, 16 Jan 2023 09:06:53 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
foldingillusions.com/wp-content/uploads/2021/05/Fotofolio_oriental_portada-2-1.jpg
200 OK 206 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/05/Fotofolio_oriental_portada-2-1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=15, height=3024, bps=0, PhotometricIntepretation=RGB, manufacturer=Apple, model=iPhone 8 Plus, orientation=upper-left, width=4032], baseline, precision 8, 823x751, components 3\012- data
Size 206 kB (205897 bytes)
Hash c1e1ad92e89a6586c8a9403a01ccde39
942f859de60580ab73911771baf55787cfccacd8
ad5fd4531b10a6da8233705bcc96329e490978728a198c51121df3f77862f573
GET /wp-content/uploads/2021/05/Fotofolio_oriental_portada-2-1.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:17 GMT
content-type: image/jpeg
content-length: 205897
last-modified: Sun, 02 May 2021 15:05:00 GMT
etag: "608ebf9c-32449"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/05/Fotofolio_peto-1.jpg
200 OK 174 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/05/Fotofolio_peto-1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=18, height=3024, bps=0, PhotometricIntepretation=RGB, manufacturer=Apple, model=iPhone 8 Plus, orientation=upper-left, width=3553], baseline, precision 8, 823x751, components 3\012- data
Size 174 kB (174477 bytes)
Hash 855d29ef241a0c92eb963f695f33dfcd
e16a8ee02e179953533cd30558167151b1b656a9
326ece4ffb597da49922d3093ca68eaf5e1b59ae30892501a7ad2aa72fb08afa
GET /wp-content/uploads/2021/05/Fotofolio_peto-1.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:17 GMT
content-type: image/jpeg
content-length: 174477
last-modified: Sun, 02 May 2021 15:05:44 GMT
etag: "608ebfc8-2a98d"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/05/Album_mar_portada-1.jpg
200 OK 211 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/05/Album_mar_portada-1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=18, height=3024, bps=0, PhotometricIntepretation=RGB, manufacturer=Apple, model=iPhone 8 Plus, orientation=upper-left, width=4032], baseline, precision 8, 823x751, components 3\012- data
Size 211 kB (210594 bytes)
Hash 0e3e68aa6645540cdd71d42295c54d81
2942181644dc2f78f8b619fd4f71cddfca9c473c
505af017da1fbea687979018f41cc35f4fd531561436b7decf3c1d12afd21e08
GET /wp-content/uploads/2021/05/Album_mar_portada-1.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:17 GMT
content-type: image/jpeg
content-length: 210594
last-modified: Sun, 02 May 2021 15:19:51 GMT
etag: "608ec317-336a2"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/05/Libro_de_firmas_vestido_portada-1.jpg
200 OK 214 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/05/Libro_de_firmas_vestido_portada-1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=18, height=3024, bps=0, PhotometricIntepretation=RGB, manufacturer=Apple, model=iPhone 8 Plus, orientation=upper-left, width=4032], baseline, precision 8, 823x751, components 3\012- data
Size 214 kB (214083 bytes)
Hash 7c935aa7b23d8ee9ae5033eda4cd31f2
148bf7c36154a1e4355f7c8365b8347ec003250a
ae1a779aa2bec65c7d33585e3026739f2aa13cb82415618e6d1c61b13d28a232
GET /wp-content/uploads/2021/05/Libro_de_firmas_vestido_portada-1.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:17 GMT
content-type: image/jpeg
content-length: 214083
last-modified: Sun, 02 May 2021 15:05:22 GMT
etag: "608ebfb2-34443"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-2-1536x1152.png
200 OK 2.4 MB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-2-1536x1152.png
IP
File type PNG image data, 1536 x 1152, 8-bit/color RGB, non-interlaced\012- data
Size 2.4 MB (2449140 bytes)
Hash a98d3e64476fffb4ca562a6bcdc47b20
9ce4b9e57bac080b906b4501c1dd90bcfe15bcfa
e86a90f78954de8492c7053a76e3629a9880a3079d9e92c84aa7df54eca4e0a7
GET /wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-2-1536x1152.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:17 GMT
content-type: image/png
content-length: 2449140
last-modified: Wed, 08 Dec 2021 11:00:11 GMT
etag: "61b0903b-255ef4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/12/ALBUM-OFERTA-1536x1152.png
200 OK 2.2 MB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/ALBUM-OFERTA-1536x1152.png
IP
File type PNG image data, 1536 x 1152, 8-bit/color RGB, non-interlaced\012- data
Size 2.2 MB (2158224 bytes)
Hash efc89b46fdd6bd3124de46860aa2ffed
4b8142f8ac3a1a768fa38f1ba281d748aa7c342d
ba9f21afaedf1bf31c9a8964ae7740597d7d8a08a4e1d1b8d4225bdbecb7fd28
GET /wp-content/uploads/2021/12/ALBUM-OFERTA-1536x1152.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:17 GMT
content-type: image/png
content-length: 2158224
last-modified: Wed, 08 Dec 2021 11:00:47 GMT
etag: "61b0905f-20ee90"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/icomoon.woff
200 OK 21 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/icomoon.woff
IP
File type Web Open Font Format, TrueType, length 20908, version 1.0\012- data
Hash 00491de6282bc94e9cc6a2ccbb4b3ae6
a3f9f4a0e469c3557e64029415698942903f10a4
22c851d5f36813ff8cbb4ab0d16273aa1eb536f84f2c56b53df8d2c7a54479a4
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/icomoon.woff HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:17 GMT
content-type: application/font-woff
content-length: 20908
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-51ac"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2
200 OK 13 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13276, version 331.-31261\012- data
Hash f0f8230116992e521526097a28f54066
0447c6b10bbf73f97b23dcfd6e6a48510822cb6e
8afc6e5e842baab16010c2ce6fcf48ec4ded8e1579a37c1f1bc027e120d04951
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:17 GMT
content-type: font/woff2
content-length: 13276
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-33dc"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/12/andris-romanovskis-267865-unsplash.jpg
200 OK 340 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/andris-romanovskis-267865-unsplash.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 795x1200, components 3\012- data
Size 340 kB (339469 bytes)
Hash f9756e61f4b7cfe28486e39c4fce35cb
9fafd5711f636aaf0013df80ae2a3bbfe3c292cf
f56179d8fa9ec20dedc4c373b196b2aa95de2b1cbcae4b49a4ab9dc6422cd8c6
GET /wp-content/uploads/2021/12/andris-romanovskis-267865-unsplash.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-26c75ab0.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:17 GMT
content-type: image/jpeg
content-length: 339469
last-modified: Wed, 08 Dec 2021 10:43:51 GMT
etag: "61b08c67-52e0d"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
200 OK 78 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261\012- data
Hash e8a427e15cc502bef99cfd722b37ea98
a9922842a120a7f1eaced667480c5e185a106d69
d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:17 GMT
content-type: font/woff2
content-length: 78196
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-13174"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-8de213aa.min.css
200 OK 89 kB URL HTTP/2 foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-8de213aa.min.css
IP
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 3c15f5bf843460163c73067a0ba3214c
3a6a1493131cf9a6e85e737fe1f6cd7e3219963d
b6026a5165a417c071f6b8fdfc4e73d7119691ae242b07d02f757533cdcc3ca1
GET /wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-8de213aa.min.css HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:17 GMT
content-type: text/css
last-modified: Wed, 08 Dec 2021 11:32:50 GMT
etag: W/"61b097e2-182ae"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-3-1536x1152.png
200 OK 2.4 MB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-3-1536x1152.png
IP
File type PNG image data, 1536 x 1152, 8-bit/color RGB, non-interlaced\012- data
Size 2.4 MB (2366980 bytes)
Hash 82314374fd33635cc69d31bb1322a6da
bd7ebe95552fa433dd7fd2953c91fe2b4a117eca
e02fd65faee6e5872789dabd4669a309d430bf79662ea4489be75168c968e8a6
GET /wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-3-1536x1152.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:17 GMT
content-type: image/png
content-length: 2366980
last-modified: Wed, 08 Dec 2021 11:00:28 GMT
etag: "61b0904c-241e04"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-1536x1152.png
200 OK 2.3 MB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-1536x1152.png
IP
File type PNG image data, 1536 x 1152, 8-bit/color RGB, non-interlaced\012- data
Size 2.3 MB (2336875 bytes)
Hash be21752a28f8072770deee3b6e59c3e7
bad177169b0b1202a56f9730fa45d7a46a0d91af
0745896bc307e1f527a6f0d683113286979ae4a02cd347853d911d36bf5ce5b6
GET /wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-1536x1152.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:17 GMT
content-type: image/png
content-length: 2336875
last-modified: Wed, 08 Dec 2021 10:59:34 GMT
etag: "61b09016-23a86b"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: AnQGL8dUwgJCj5sTRhiT9A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ogrR6fMO7xwqgqMyzikd1CtK7+Q=
foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-1-1536x1152.png
200 OK 2.9 MB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-1-1536x1152.png
IP
File type PNG image data, 1536 x 1152, 8-bit/color RGB, non-interlaced\012- data
Size 2.9 MB (2939045 bytes)
Hash 60f102bd7499a98d5fe54367bef9ca6c
56c3eda1573f135fe485d6e1b82061b89481007d
055c1799d889311d9e9eef0c6ea7509fe79b8f6d0484193c1e344297709159cd
GET /wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-1-1536x1152.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:17 GMT
content-type: image/png
content-length: 2939045
last-modified: Wed, 08 Dec 2021 10:59:54 GMT
etag: "61b0902a-2cd8a5"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8b4c80fca9a7bc1b84369cdb60024668
91427b4fd16fa613fb83f053b271f00396b36e90
07bb6c4b267a5f46a15cca9ad9644ca38af67daa1448ad67f583f58e3c8dfcc1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 00:40:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8b4c80fca9a7bc1b84369cdb60024668
91427b4fd16fa613fb83f053b271f00396b36e90
07bb6c4b267a5f46a15cca9ad9644ca38af67daa1448ad67f583f58e3c8dfcc1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 00:40:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
foldingillusions.com/wp-content/uploads/2021/12/ALBUM-OFERTA-1-1536x1152.png
200 OK 2.4 MB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/ALBUM-OFERTA-1-1536x1152.png
IP
File type PNG image data, 1536 x 1152, 8-bit/color RGB, non-interlaced\012- data
Size 2.4 MB (2388731 bytes)
Hash 9b9ec7168693965fb0ce01063bc8e6dc
d7b75128bd937bff5fb933ab5a2caaf94bdd94f8
ed55e6153eb7b0d30fdf15a55c1af91013e7203ea6dc29415e0a90f357786dbe
GET /wp-content/uploads/2021/12/ALBUM-OFERTA-1-1536x1152.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:17 GMT
content-type: image/png
content-length: 2388731
last-modified: Wed, 08 Dec 2021 11:01:16 GMT
etag: "61b0907c-2472fb"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff
200 OK 102 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff
IP
File type Web Open Font Format, TrueType, length 101652, version 331.-31261\012- data
Size 102 kB (101652 bytes)
Hash 9fe5a17c8ab036d20e6c5ba3fd2ac511
52751432ded489dfdf27fb1cf64c570c4c27a1d7
74edc18b67c487e32f181719fdb347e2e77020744651f446e9acd7bd6821e2e7
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:18 GMT
content-type: application/font-woff
content-length: 101652
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-18d14"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8b4c80fca9a7bc1b84369cdb60024668
91427b4fd16fa613fb83f053b271f00396b36e90
07bb6c4b267a5f46a15cca9ad9644ca38af67daa1448ad67f583f58e3c8dfcc1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 00:40:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8b4c80fca9a7bc1b84369cdb60024668
91427b4fd16fa613fb83f053b271f00396b36e90
07bb6c4b267a5f46a15cca9ad9644ca38af67daa1448ad67f583f58e3c8dfcc1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 00:40:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/icomoon.ttf
200 OK 21 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/icomoon.ttf
IP
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon \012- data
Hash b628f37cfeac97148aafb864ca676f6a
71ae0dfae50d4087daa4755a396b914a62213bae
e70b68f603538e3d4d8eb4af3dc2ff84b99af56fb0af22fd5b94167639f30473
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/icomoon.ttf HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:18 GMT
content-type: application/font-sfnt
content-length: 20832
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-5160"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff
200 OK 16 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff
IP
File type Web Open Font Format, TrueType, length 16276, version 331.-31261\012- data
Hash 7124eb50fc8227c78269f2d995637ff5
d33d8b5b15b7bba2cc17190dc685fe0a76d2989e
14c9db4ff87fde08f67b0a69dd594bab6d87174812a0dbd34c59833bfed8cc0e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:18 GMT
content-type: application/font-woff
content-length: 16276
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-3f94"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v18/JTUSjIg1_i6t8kCHKm45xW0.woff
200 OK 68 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v18/JTUSjIg1_i6t8kCHKm45xW0.woff
IP
File type Web Open Font Format, TrueType, length 68308, version 1.1\012- data
Hash f559455a2bb877b795730a2d1167f125
8792d78996b824aa89be7592babd6117a7cee3cc
977cced473e900f9f44d78171db812fc563ded25b7afc2b6e040b267eab566ca
GET /s/montserrat/v18/JTUSjIg1_i6t8kCHKm45xW0.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 68308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 11 Jan 2023 08:11:39 GMT
expires: Thu, 11 Jan 2024 08:11:39 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 10 Aug 2021 00:19:54 GMT
content-type: font/woff
age: 491319
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff
200 OK 90 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff
IP
File type Web Open Font Format, TrueType, length 90060, version 331.-31261\012- data
Hash 099a9556e1a63ece24f8a99859c94c7d
5f8cab91347c553c1eb87f9b527f6bee8a28e40d
aff76e5c986f295d4bc6f8142a78e2a31888b101c2d025db89f79c75f64fd90b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:18 GMT
content-type: application/font-woff
content-length: 90060
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-15fcc"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8b4c80fca9a7bc1b84369cdb60024668
91427b4fd16fa613fb83f053b271f00396b36e90
07bb6c4b267a5f46a15cca9ad9644ca38af67daa1448ad67f583f58e3c8dfcc1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 00:40:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v29/KFOlCnqEu92Fr1MmEU9vAA.woff
200 OK 66 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v29/KFOlCnqEu92Fr1MmEU9vAA.woff
IP
File type Web Open Font Format, TrueType, length 65492, version 1.1\012- data
Hash 08926d7a008503f9c640b1772c225476
6a57df5217d336599bdec757772025beb40c4536
c93f4332daa92f95a2c2446599d6cf9e87b00b20d60db827af63b0e4a3feb22b
GET /s/roboto/v29/KFOlCnqEu92Fr1MmEU9vAA.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 65492
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 16 Jan 2023 16:26:47 GMT
expires: Tue, 16 Jan 2024 16:26:47 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 22 Sep 2021 16:13:30 GMT
content-type: font/woff
age: 29611
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v18/JTURjIg1_i6t8kCHKm45_dJE7g0.woff
200 OK 68 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v18/JTURjIg1_i6t8kCHKm45_dJE7g0.woff
IP
File type Web Open Font Format, TrueType, length 68180, version 1.1\012- data
Hash 3f39d0942bc86b5d8cced884e1b00000
7e5e86e3d1d52935828ed1eec575cecd62da93d5
b97a40f9d7c840a361acec789c38ab643fdf4b3831c05a2a4087977acc202478
GET /s/montserrat/v18/JTURjIg1_i6t8kCHKm45_dJE7g0.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 68180
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 15 Jan 2023 04:48:14 GMT
expires: Mon, 15 Jan 2024 04:48:14 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 10 Aug 2021 00:21:06 GMT
content-type: font/woff
age: 157924
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-5f3dc96a.min.js
200 OK 198 kB URL HTTP/2 foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-5f3dc96a.min.js
IP
File type ASCII text, with very long lines (39976)
Size 198 kB (197843 bytes)
Hash 76f935ddadf930263376a4fcfdce3be3
ccd205f77469d05d00511f2697042740e7bc5b2c
be7b92996dc8e2b726ad33ec7f4f3c9c85be86adce81b5d030734a15d090244e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-5f3dc96a.min.js HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:17 GMT
content-type: application/javascript
last-modified: Tue, 25 Jan 2022 23:22:07 GMT
etag: W/"61f0861f-af323"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/worksans/v13/QGY9z_wNahGAdqQ43Rh_ebrnlwyYfEPxPoGU3ms5pIfeCSXCQOBc.woff
200 OK 22 kB URL HTTP/2 fonts.gstatic.com/s/worksans/v13/QGY9z_wNahGAdqQ43Rh_ebrnlwyYfEPxPoGU3ms5pIfeCSXCQOBc.woff
IP
File type Web Open Font Format, TrueType, length 22308, version 1.1\012- data
Hash 5af9b5690ffb4be30a0c50a8fa2224e9
867410f8b98d0c381d1ca65f50bf36193c911e59
e78898bac6527c2e318556f5cdcec7816785e389fe892bcf29dbf8d051771fee
GET /s/worksans/v13/QGY9z_wNahGAdqQ43Rh_ebrnlwyYfEPxPoGU3ms5pIfeCSXCQOBc.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 11 Jan 2023 14:18:15 GMT
expires: Thu, 11 Jan 2024 14:18:15 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 10 Nov 2021 18:06:30 GMT
content-type: font/woff
age: 469323
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-00440e2f.min.js
200 OK 84 kB URL HTTP/2 foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-00440e2f.min.js
IP
File type ASCII text, with very long lines (36518)
Hash f37bddebb71dff491e6689a45ae00ae9
6f18821a14a3026402cf63ee73bf0cbb23a297d5
738279f22ab2cea308d92f50e61f51a0e7e2a019c2fea6e30bb9c064415d9f73
Analyzer Verdict Alert fortinet Malware
GET /wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-00440e2f.min.js HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:17 GMT
content-type: application/javascript
last-modified: Wed, 08 Dec 2021 11:32:50 GMT
etag: W/"61b097e2-11403"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K0nXBi8JoI3ZKyHqQg.woff
200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K0nXBi8JoI3ZKyHqQg.woff
IP
File type Web Open Font Format, TrueType, length 22980, version 1.1\012- data
Hash f2a7709803facad3132b46b739548369
7ae29ea1cc9e76acc69877d118fa5d4d61465b59
ca71ae7855c81379852da88328a11f97646e1aa1d38683c633c1d9dd28468355
GET /s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K0nXBi8JoI3ZKyHqQg.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: font/woff
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22980
date: Tue, 17 Jan 2023 00:40:18 GMT
expires: Wed, 17 Jan 2024 00:40:18 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 10 Nov 2021 18:06:11 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v29/KFOlCnqEu92Fr1MmWUlvAA.woff
200 OK 65 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v29/KFOlCnqEu92Fr1MmWUlvAA.woff
IP
File type Web Open Font Format, TrueType, length 65292, version 1.1\012- data
Hash 8b2b2aae46819bb8c37c438760dbb4f6
3594876105e2630504fa1fa00de36e774d238528
61e16263ed1227e721bffd26891b13a4d07c5140249fa78f297b51845ee169db
GET /s/roboto/v29/KFOlCnqEu92Fr1MmWUlvAA.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 65292
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 15 Jan 2023 03:42:52 GMT
expires: Mon, 15 Jan 2024 03:42:52 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 22 Sep 2021 16:13:30 GMT
content-type: font/woff
age: 161846
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.ttf
200 OK 203 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.ttf
IP
File type TrueType Font data, 13 tables, 1st "FFTM", 28 names, Macintosh\012- data
Size 203 kB (202744 bytes)
Hash 605ed7926cf39a2ad5ec2d1f9d391d3d
c1b9fae262f42868c075ac865a8ab34920e20a2c
3d06af1f31cd83ace7a265a014b8fb5dee15770ecac8f7a55555190e627e03c2
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.ttf HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:18 GMT
content-type: application/font-sfnt
content-length: 202744
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-317f8"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8b4c80fca9a7bc1b84369cdb60024668
91427b4fd16fa613fb83f053b271f00396b36e90
07bb6c4b267a5f46a15cca9ad9644ca38af67daa1448ad67f583f58e3c8dfcc1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 00:40:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/montserrat/v18/JTURjIg1_i6t8kCHKm45_bZF7g0.woff
200 OK 68 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v18/JTURjIg1_i6t8kCHKm45_bZF7g0.woff
IP
File type Web Open Font Format, TrueType, length 67920, version 1.1\012- data
Hash f5b5ac943a80d7e7aff13b8a651c15df
a9eabaf668d043bdd45c7b01119eff648b46e480
268377e98dea0d350cd21714107d0e0473baade9163f94322e2f97088682af5e
GET /s/montserrat/v18/JTURjIg1_i6t8kCHKm45_bZF7g0.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 67920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 15 Jan 2023 18:32:41 GMT
expires: Mon, 15 Jan 2024 18:32:41 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 10 Aug 2021 00:20:42 GMT
content-type: font/woff
age: 108457
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.ttf
200 OK 34 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.ttf
IP
File type TrueType Font data, 13 tables, 1st "FFTM", 28 names, Macintosh\012- data
Hash 1f77739ca9ff2188b539c36f30ffa2be
7d849a3981a716e2ba4a84634bc57d0b8054a6a3
c651b8a67d3193206f622c3c3b0fbca4a2f2727108c4212b52c1e2a2e84c9b31
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.ttf HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:18 GMT
content-type: application/font-sfnt
content-length: 33736
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-83c8"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v18/JTURjIg1_i6t8kCHKm45_cJD7g0.woff
200 OK 68 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v18/JTURjIg1_i6t8kCHKm45_cJD7g0.woff
IP
File type Web Open Font Format, TrueType, length 67596, version 1.1\012- data
Hash 7e09e547298d02b35fe04c76528b0a05
ab23ecb2265181abb5247feb0097bb16ee1f0f16
031a79b04005ef5553ea2cf39fae33fb4afffb3f7ebeed24c6f17495ac00e87f
GET /s/montserrat/v18/JTURjIg1_i6t8kCHKm45_cJD7g0.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 67596
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 16 Jan 2023 19:37:03 GMT
expires: Tue, 16 Jan 2024 19:37:03 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 10 Aug 2021 00:20:13 GMT
content-type: font/woff
age: 18195
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32KxfXBi8JoI3ZKyHqQg.woff
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32KxfXBi8JoI3ZKyHqQg.woff
IP
File type Web Open Font Format, TrueType, length 23864, version 1.1\012- data
Hash d21e30f88d5335f5408ecbccabc7bba1
fbaad0a8796710505f2b622aa8cf0e8c90df8df1
bd236492f4bb8585df02bec0ffe0e7a88f8800de0aba3245eff81e3149a912a7
GET /s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32KxfXBi8JoI3ZKyHqQg.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23864
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 16 Jan 2023 01:40:01 GMT
expires: Tue, 16 Jan 2024 01:40:01 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 10 Nov 2021 18:06:01 GMT
content-type: font/woff
age: 82817
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.ttf
200 OK 134 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.ttf
IP
File type TrueType Font data, 13 tables, 1st "FFTM", 28 names, Macintosh\012- data
Size 134 kB (134040 bytes)
Hash 3b89dd103490708d19a95adcae52210e
3fa2d67cef22da5c3f3eb5730c6afbd6fecf0372
06f4d00923ea24697df5df0b92984175991d8bd25776a02d531bb401e393ec42
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.ttf HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:18 GMT
content-type: application/font-sfnt
content-length: 134040
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-20b98"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash b31c9a7c1d1923f881c364bcacb8cf13
14a47c38bcfcb1e6ac7babfef5531f070f2d9d73
927499965f59ed09e2c28f2a77a09821a437cbe4e0085b6e6a33df4e449c9915
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3655
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 00:40:18 GMT
Last-Modified: Mon, 16 Jan 2023 23:39:23 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2
200 OK 80 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 80272, version 331.-31458\012- data
Hash 3bb4d4ff63186a8caf433d3d3a022d49
023d6411b150baea1ec6784dcb2888577d95f13e
75f5349190725c85b426fdb66c683beb21b7804792d0770a9e84b28e7ace5d28
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:18 GMT
content-type: font/woff2
content-length: 80272
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-13990"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff2
200 OK 14 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13584, version 331.-31458\012- data
Hash c940f62026ba5a202238ec177cce01a5
62edc86975d56aa66873803baf0582c2ab36cef5
41dc4f99f4101a4ae7956b5c23c2d40e04ffb928c7ebd989658d950b4e2f7c5d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:18 GMT
content-type: font/woff2
content-length: 13584
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-3510"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff2
200 OK 78 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 78532, version 331.-31458\012- data
Hash 79dced08c62eddd969d92c9f58987a33
262c9c0e4848466e73ad4757ddaab6e168eaef81
0a80acfa0f85d8ea233785ca14b0dd030dbe7ed229b00bc754b55dae39c7a106
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:18 GMT
content-type: font/woff2
content-length: 78532
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-132c4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/324390316_889443159238439_1083993348766437900_nfull.jpg
200 OK 35 kB URL HTTP/1.1 foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/324390316_889443159238439_1083993348766437900_nfull.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x362, components 3\012- data
Hash 2bc5264c4670e031e6b3b534d1f22edb
6e67dfed40fa8613ffa7a35760365aef71d820e5
975b6ff44691cb7fb0f65f7e72189040fd51a1de4f6c501bbd6d9ee7ec659921
GET /wp-content/uploads/sb-instagram-feed-images/324390316_889443159238439_1083993348766437900_nfull.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foldingillusions.com/
Cookie: _ga_MP69GDNWHF=GS1.1.1673916018.1.0.1673916018.0.0.0; _ga=GA1.1.1271814773.1673916018
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jan 2023 00:40:18 GMT
Content-Type: image/jpeg
Content-Length: 34972
Last-Modified: Thu, 12 Jan 2023 05:29:05 GMT
Connection: keep-alive
ETag: "63bf9aa1-889c"
X-Powered-By: PleskLin
Accept-Ranges: bytes
foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/324071094_1179580319610949_3586839234338041456_nfull.jpg
200 OK 29 kB URL HTTP/1.1 foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/324071094_1179580319610949_3586839234338041456_nfull.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x362, components 3\012- data
Hash 66949fd0df4377818d6675ec7e6d6859
8dae2d47bd1c8b5ec4425f2829566f2a588f26e6
c687cb0ebaa9036d01a8d3e02f13077b9d3b7e184685455285f594830ceafe9f
GET /wp-content/uploads/sb-instagram-feed-images/324071094_1179580319610949_3586839234338041456_nfull.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foldingillusions.com/
Cookie: _ga_MP69GDNWHF=GS1.1.1673916018.1.0.1673916018.0.0.0; _ga=GA1.1.1271814773.1673916018
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jan 2023 00:40:18 GMT
Content-Type: image/jpeg
Content-Length: 28844
Last-Modified: Tue, 10 Jan 2023 17:43:47 GMT
Connection: keep-alive
ETag: "63bda3d3-70ac"
X-Powered-By: PleskLin
Accept-Ranges: bytes
foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/324889615_918895725948836_8564380093601719521_nfull.jpg
200 OK 27 kB URL HTTP/1.1 foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/324889615_918895725948836_8564380093601719521_nfull.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x363, components 3\012- data
Hash 512997b99748166ed1aae99665d862f1
334762f11fc5652de811cd40998cb465898cf207
51bb9328c6be80957e97d0bc0535b5e3b1b2388e67e021a699f5dad0f76fb402
GET /wp-content/uploads/sb-instagram-feed-images/324889615_918895725948836_8564380093601719521_nfull.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foldingillusions.com/
Cookie: _ga_MP69GDNWHF=GS1.1.1673916018.1.0.1673916018.0.0.0; _ga=GA1.1.1271814773.1673916018
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jan 2023 00:40:18 GMT
Content-Type: image/jpeg
Content-Length: 26808
Last-Modified: Sat, 14 Jan 2023 03:08:53 GMT
Connection: keep-alive
ETag: "63c21cc5-68b8"
X-Powered-By: PleskLin
Accept-Ranges: bytes
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff
200 OK 17 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff
IP
File type Web Open Font Format, TrueType, length 16776, version 331.-31458\012- data
Hash b7995ffca32ee27012b039e79a9dad06
0a5d9e8e13305c8d75b81ab5c3438d9a7e9a6279
8b01a186e17207b605f5f037815f82b62a37fcb4804b2d46eae10e316b78a9c5
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:18 GMT
content-type: application/font-woff
content-length: 16776
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-4188"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff
200 OK 104 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff
IP
File type Web Open Font Format, TrueType, length 104284, version 331.-31458\012- data
Size 104 kB (104284 bytes)
Hash c48d0f239282bb3a0856a4817fa2a5c2
bd4c2e3e55397c69b35b9f1947aa72beedd45651
26701523bfc95c31e4c3a5dbd73943ca1dd4c99a1f2dbc5b48a589943d1afb99
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:18 GMT
content-type: application/font-woff
content-length: 104284
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-1975c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/324725642_6144924888859168_4686354477276849643_n.webpfull.jpg
200 OK 56 kB URL HTTP/1.1 foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/324725642_6144924888859168_4686354477276849643_n.webpfull.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x640, components 3\012- data
Hash 6e20f0acb4a77f33b6ce6d05318b3ff1
8635450f4dd0f736ce5ee754487462ae8b6042c9
6bc702c310f4d88ac66b20bf70faa3641e0151c04438d9eb5ad12c192ef9ac6b
GET /wp-content/uploads/sb-instagram-feed-images/324725642_6144924888859168_4686354477276849643_n.webpfull.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foldingillusions.com/
Cookie: _ga_MP69GDNWHF=GS1.1.1673916018.1.0.1673916018.0.0.0; _ga=GA1.1.1271814773.1673916018
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jan 2023 00:40:18 GMT
Content-Type: image/jpeg
Content-Length: 56188
Last-Modified: Thu, 12 Jan 2023 05:29:04 GMT
Connection: keep-alive
ETag: "63bf9aa0-db7c"
X-Powered-By: PleskLin
Accept-Ranges: bytes
foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/325489019_1239494320336378_2605871661023545185_n.webpfull.jpg
200 OK 83 kB URL HTTP/1.1 foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/325489019_1239494320336378_2605871661023545185_n.webpfull.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x640, components 3\012- data
Hash 854341dc1d67ef425f9267c901c20fd7
7283ef46ac26ab6b0c953ed6554ffa2d322388de
f1b2eb2e8a7837bb172ec9170696259608b4ffe8b16e99b2ce5125e193909b8f
GET /wp-content/uploads/sb-instagram-feed-images/325489019_1239494320336378_2605871661023545185_n.webpfull.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foldingillusions.com/
Cookie: _ga_MP69GDNWHF=GS1.1.1673916018.1.0.1673916018.0.0.0; _ga=GA1.1.1271814773.1673916018
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Jan 2023 00:40:18 GMT
Content-Type: image/jpeg
Content-Length: 82596
Last-Modified: Sun, 15 Jan 2023 00:48:17 GMT
Connection: keep-alive
ETag: "63c34d51-142a4"
X-Powered-By: PleskLin
Accept-Ranges: bytes
foldingillusions.com/wp-content/uploads/2021/10/pexels-cottonbro-6074059-min-scaled.jpg
200 OK 669 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/10/pexels-cottonbro-6074059-min-scaled.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2560x1706, components 3\012- data
Size 669 kB (669045 bytes)
Hash fab1e80275a740da6448d418fdae8cab
ac2d99fb819c76dd102b8d4c8e0b7ecef0d21541
81ae6c7f2b780383177691f80bc5b7bc6837846034085e96e28f269201f7e307
GET /wp-content/uploads/2021/10/pexels-cottonbro-6074059-min-scaled.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:18 GMT
content-type: image/jpeg
content-length: 669045
last-modified: Wed, 06 Oct 2021 11:06:33 GMT
etag: "615d8339-a3575"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/10/pexels-tatiana-3312232-min-scaled.jpg
200 OK 556 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/10/pexels-tatiana-3312232-min-scaled.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2560x1707, components 3\012- data
Size 556 kB (556351 bytes)
Hash 96d97000b6c7d66989ec1fcb3a114eee
d6b32f46aa15a720b10e2c32e37d455caa256e0c
fb1b392a80603d6be6a498277dc2710ef46eb9c23eafa5c525773746f5b863c1
GET /wp-content/uploads/2021/10/pexels-tatiana-3312232-min-scaled.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:18 GMT
content-type: image/jpeg
content-length: 556351
last-modified: Wed, 06 Oct 2021 11:02:12 GMT
etag: "615d8234-87d3f"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff
200 OK 92 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff
IP
File type Web Open Font Format, TrueType, length 92216, version 331.-31458\012- data
Hash a6d5b6e21f0c0ce5d05dd9d2aa644c9f
a2e0949835d3ae7f3c990f8eb6a8f3629a1ddacc
64351d3323461bde0c1eb9b70137cd643892fb72aea6cc5ecd4d4f102eb5f79d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:18 GMT
content-type: application/font-woff
content-length: 92216
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-16838"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.ttf
200 OK 34 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.ttf
IP
File type TrueType Font data, 13 tables, 1st "FFTM", 28 names, Macintosh\012- data
Hash 547429d0f054fe33407e57011ca9ab26
8dcc0c72c424c439b0393ca60bcf08d25db9ae99
e54356ac02b129240597fdbb5452a9bed10b923f2f658cd2f44c4e56270cdb05
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.ttf HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:18 GMT
content-type: application/font-sfnt
content-length: 34052
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-8504"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.ttf
200 OK 204 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.ttf
IP
File type TrueType Font data, 13 tables, 1st "FFTM", 28 names, Macintosh\012- data
Size 204 kB (204528 bytes)
Hash f49b824a2e4784d078b768506e7bf8e7
c93491c279667947a89dc2ec2be5e785d76051dc
107b29791cfd2c528158ff645116823a660290e2b56cf0429a0761bd1d43f9b1
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.ttf HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:18 GMT
content-type: application/font-sfnt
content-length: 204528
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-31ef0"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-MP69GDNWHF>m=2oe1a1&_p=1835778520&gdid=dZTNiMT&cid=1271814773.1673916018&ul=en-us&sr=1280x1024&_s=1&sid=1673916018&sct=1&seg=0&dl=http%3A%2F%2Ffoldingillusions.com%2F&dt=Folding%20Illusions%20I%20%C3%81lbumes%20de%20fotos%20hechos%20a%20mano&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-MP69GDNWHF>m=2oe1a1&_p=1835778520&gdid=dZTNiMT&cid=1271814773.1673916018&ul=en-us&sr=1280x1024&_s=1&sid=1673916018&sct=1&seg=0&dl=http%3A%2F%2Ffoldingillusions.com%2F&dt=Folding%20Illusions%20I%20%C3%81lbumes%20de%20fotos%20hechos%20a%20mano&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-MP69GDNWHF>m=2oe1a1&_p=1835778520&gdid=dZTNiMT&cid=1271814773.1673916018&ul=en-us&sr=1280x1024&_s=1&sid=1673916018&sct=1&seg=0&dl=http%3A%2F%2Ffoldingillusions.com%2F&dt=Folding%20Illusions%20I%20%C3%81lbumes%20de%20fotos%20hechos%20a%20mano&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: http://foldingillusions.com
date: Tue, 17 Jan 2023 00:40:18 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash b31c9a7c1d1923f881c364bcacb8cf13
14a47c38bcfcb1e6ac7babfef5531f070f2d9d73
927499965f59ed09e2c28f2a77a09821a437cbe4e0085b6e6a33df4e449c9915
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3655
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 17 Jan 2023 00:40:18 GMT
Last-Modified: Mon, 16 Jan 2023 23:39:23 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
scontent-ecv1-1.cdninstagram.com/v/t51.29350-15/325191488_5817166964999824_4478873921235307898_n.webp?stp=dst-jpg&_nc_cat=103&ccb=1-7&_nc_sid=8ae9d6&_nc_ohc=mgigG52L-ZQAX9X2mIh&_nc_ht=scontent-ecv1-1.cdninstagram.com&edm=ANo9K5cEAAAA&oh=00_AfChjyajVqype4_WImOS0nJnJWCJIK_5VPH0LmuNX8ZBKA&oe=63CA9E97
200 OK 149 kB URL HTTP/2 scontent-ecv1-1.cdninstagram.com/v/t51.29350-15/325191488_5817166964999824_4478873921235307898_n.webp?stp=dst-jpg&_nc_cat=103&ccb=1-7&_nc_sid=8ae9d6&_nc_ohc=mgigG52L-ZQAX9X2mIh&_nc_ht=scontent-ecv1-1.cdninstagram.com&edm=ANo9K5cEAAAA&oh=00_AfChjyajVqype4_WImOS0nJnJWCJIK_5VPH0LmuNX8ZBKA&oe=63CA9E97
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1080, components 3\012- data
Size 149 kB (149441 bytes)
Hash 5ca1bb3d34e4c655997c16353fa1347a
c19142e817c36581bf4745fef385f816e39d78ee
d0b5e12d5e741e4ac0b562fe384d732380cf0de2902e2df35136834b954b77ad
GET /v/t51.29350-15/325191488_5817166964999824_4478873921235307898_n.webp?stp=dst-jpg&_nc_cat=103&ccb=1-7&_nc_sid=8ae9d6&_nc_ohc=mgigG52L-ZQAX9X2mIh&_nc_ht=scontent-ecv1-1.cdninstagram.com&edm=ANo9K5cEAAAA&oh=00_AfChjyajVqype4_WImOS0nJnJWCJIK_5VPH0LmuNX8ZBKA&oe=63CA9E97 HTTP/1.1
Host: scontent-ecv1-1.cdninstagram.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET
last-modified: Mon, 16 Jan 2023 18:55:30 GMT
x-needle-checksum: 833620592
content-type: image/jpeg
content-length: 149441
content-digest: adler32=144456589
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
accept-ranges: bytes
x-fb-trip-id: 1679558926
date: Tue, 17 Jan 2023 00:40:18 GMT
x-fb-edge-debug: RE_vY0ScMM5Knwhb-Es_SEbPKAIXli3R-KIetF6l5k5LlZKIP3j1VljS0V5maHfbDPlD3vfs_l5D7xIBroVJl3sLvMkvDqxdf2770-LY3h0
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 871ced6cfe919499937981d7534580e9
2e8c0fb97592bd7868be241ade707d1b38e49c34
35a05f202611c548fd0768c5f1b3d749a0dd50ade93e6df29940547480c5ec91
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35A05F202611C548FD0768C5F1B3D749A0DD50ADE93E6DF29940547480C5EC91"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3368
Expires: Tue, 17 Jan 2023 01:36:26 GMT
Date: Tue, 17 Jan 2023 00:40:18 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 871ced6cfe919499937981d7534580e9
2e8c0fb97592bd7868be241ade707d1b38e49c34
35a05f202611c548fd0768c5f1b3d749a0dd50ade93e6df29940547480c5ec91
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35A05F202611C548FD0768C5F1B3D749A0DD50ADE93E6DF29940547480C5EC91"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3368
Expires: Tue, 17 Jan 2023 01:36:26 GMT
Date: Tue, 17 Jan 2023 00:40:18 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 871ced6cfe919499937981d7534580e9
2e8c0fb97592bd7868be241ade707d1b38e49c34
35a05f202611c548fd0768c5f1b3d749a0dd50ade93e6df29940547480c5ec91
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35A05F202611C548FD0768C5F1B3D749A0DD50ADE93E6DF29940547480C5EC91"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3368
Expires: Tue, 17 Jan 2023 01:36:26 GMT
Date: Tue, 17 Jan 2023 00:40:18 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 871ced6cfe919499937981d7534580e9
2e8c0fb97592bd7868be241ade707d1b38e49c34
35a05f202611c548fd0768c5f1b3d749a0dd50ade93e6df29940547480c5ec91
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35A05F202611C548FD0768C5F1B3D749A0DD50ADE93E6DF29940547480C5EC91"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3368
Expires: Tue, 17 Jan 2023 01:36:26 GMT
Date: Tue, 17 Jan 2023 00:40:18 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F385b83d3-24b4-4a2f-b857-c5ad36c6c6f1.jpeg
200 OK 3.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F385b83d3-24b4-4a2f-b857-c5ad36c6c6f1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dcaf94e244d0b492c26d4964836f4913
fde259440056930606a16b88e6d87e2edc420bd6
6cc207b89ceda6a27a0c9905a3284044984af07cdf5eb91a84b93bc56e414806
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F385b83d3-24b4-4a2f-b857-c5ad36c6c6f1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3027
x-amzn-requestid: 9599f603-0ef7-40c7-aa0e-699a82057dc8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e2tr0GvUoAMFfmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c5c318-3d11e6404c85fcb737852aaf;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 21:35:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: w9U7jKrDbganO37QtU-I_g8A9G3XEHtsj-z6s0UF419IdEj_Zw1-uw==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 21:46:15 GMT
etag: "fde259440056930606a16b88e6d87e2edc420bd6"
content-type: image/jpeg
age: 10443
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb4eb179a-8966-491f-9879-9d42b2009706.jpeg
200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb4eb179a-8966-491f-9879-9d42b2009706.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2cfc0e633a95f79ac8db807bfb525d87
4148e7e0aad80e97b0b4215098689f840fe02e81
7472054a95a393028fdda6d4bfab59184df93630cc3e029ab3265b8472ef4912
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb4eb179a-8966-491f-9879-9d42b2009706.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7092
x-amzn-requestid: 670ae65f-a022-4ac0-a912-5482b2f9d4c3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eo557GlnIAMFy1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c03d0c-1dd49029023dcde461e7a460;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 17:02:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tNsjBcLpB0vxLJmFO7qz4EeqRldy0EHiBlDpb7uDED0Bf3ovfc_3OA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 16:10:23 GMT
age: 30595
etag: "4148e7e0aad80e97b0b4215098689f840fe02e81"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4645b901-7a6a-474e-a0e9-8661e378c83d.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4645b901-7a6a-474e-a0e9-8661e378c83d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 304bb1b20c55a224a8aa28c2af0a0d0e
590f9978d35d8bff19b665505b9761f87c66b915
74a5930f8ccc54b5618892ace303d163066656b02c942273e8d6debcf2ab3614
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4645b901-7a6a-474e-a0e9-8661e378c83d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4272
x-amzn-requestid: e53617f5-3c7b-4a81-a9bb-79667a1ef7c3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ej0BwETpIAMFdcw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63be33a4-328c82663ce8bb024b0181d9;Sampled=0
x-amzn-remapped-date: Wed, 11 Jan 2023 03:57:24 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: IrGvuEbwzYF0PIcAiXFsYSOc30EQlSkpX1Fi0WW_S1SYaXP-I67HQw==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 21:52:19 GMT
age: 10079
etag: "590f9978d35d8bff19b665505b9761f87c66b915"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F27144ba0-24e7-4177-b8d9-4121af2315c9.jpeg
200 OK 4.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F27144ba0-24e7-4177-b8d9-4121af2315c9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3d0dd6e84bd1708aec285a9153eafabc
2d2729ca550ecdca29a502eb76c68f4eed623032
3c0492fc05ab9a35cd8d833a031aa907a473f2ff22fed0732fa331a0c2939660
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F27144ba0-24e7-4177-b8d9-4121af2315c9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4085
x-amzn-requestid: 1fb40802-d4c1-4dd7-9b51-157038cfc440
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: euIhZHLgIAMFyEQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c2546f-5485f4c22c8e32797201f6e9;Sampled=0
x-amzn-remapped-date: Sat, 14 Jan 2023 07:06:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: JDQ8cHbOFJ5Yvu57dcwaBrO3fOQiTefKPPVh57CDCjXvCmS0NUoFRA==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 07:25:14 GMT
age: 62104
etag: "2d2729ca550ecdca29a502eb76c68f4eed623032"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a588566-7d22-4b47-96ce-ee6bb56e4898.jpeg
200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a588566-7d22-4b47-96ce-ee6bb56e4898.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 57828b7affae7633b38d0fb6057b894d
db4cd956ba7e1e6b43174c250b7d4f1193277be9
26d83d511af9583a8f0a9ef1bd2ce3deab3ca42fa2c2ae141b61cd123afa9625
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a588566-7d22-4b47-96ce-ee6bb56e4898.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7800
x-amzn-requestid: eac845c9-b10c-4fce-b2ff-01b4111b506e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e2OjhHp_IAMFeyA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c59149-0058376c385a7bf91e07a395;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 18:02:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FtmoLO8c5S2uN0aj1HxWjVMg31vndNF2iKRJoJXmow1Hbb0NIHm9Cw==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 18:16:36 GMT
age: 23022
etag: "db4cd956ba7e1e6b43174c250b7d4f1193277be9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F144b7909-7293-4696-94a6-0afc31d3e351.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F144b7909-7293-4696-94a6-0afc31d3e351.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 05aa269a0f2828ea2db69313f279b38c
f6304901ff8fa128627ca44eaf37072c5f4d5fd8
3f7de0fdee25471f646d0f1ab82729c449e3f05c83eec1b84a42c6b2d69dcce2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F144b7909-7293-4696-94a6-0afc31d3e351.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8868
x-amzn-requestid: deb46f6b-5234-4579-8f20-59906066d836
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eZxKWEZfoAMFbzA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ba2f0e-6890657c300dba5c26a2118e;Sampled=0
x-amzn-remapped-date: Sun, 08 Jan 2023 02:48:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: BK2NuVnKf9BYNXXPCP3qSN7wQAMvuh_KdaRjuAA_OojxpxyY3ksCmA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 04:13:01 GMT
age: 73637
etag: "f6304901ff8fa128627ca44eaf37072c5f4d5fd8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Mon, 16 Jan 2023 22:41:07 GMT
expires: Tue, 17 Jan 2023 00:41:07 GMT
cache-control: public, max-age=7200
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
age: 7152
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/11/cropped-Logo_Folding_Illusions-32x32.png
200 OK 1.2 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/11/cropped-Logo_Folding_Illusions-32x32.png
IP
File type PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced\012- data
Hash d8f72e1d65df907322448fb4e6fdf530
a618d7d998fef24802759ba07ae988956bc3c6b9
d27a3b1c908861c13b7d14808f98017e7faec16cd4a487d6d65875cf7fb2b024
GET /wp-content/uploads/2021/11/cropped-Logo_Folding_Illusions-32x32.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:19 GMT
content-type: image/png
content-length: 1178
last-modified: Tue, 23 Nov 2021 12:53:12 GMT
etag: "619ce438-49a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/11/cropped-Logo_Folding_Illusions-192x192.png
200 OK 8.2 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/11/cropped-Logo_Folding_Illusions-192x192.png
IP
File type PNG image data, 192 x 192, 8-bit colormap, non-interlaced\012- data
Hash 40df24a24d61b60d31cb777c1b63af2e
9afbe17d8b41f6f141a194a4466e4d1a7a270ee9
02d5e0ed2f4a1c1dcc24bee7d424531261d5529b6135904f10e3d5b8a2c04e55
GET /wp-content/uploads/2021/11/cropped-Logo_Folding_Illusions-192x192.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:19 GMT
content-type: image/png
content-length: 8164
last-modified: Tue, 23 Nov 2021 12:53:12 GMT
etag: "619ce438-1fe4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/?wc-ajax=get_refreshed_fragments
301 Moved Permanently 0 B URL HTTP/1.1 foldingillusions.com/?wc-ajax=get_refreshed_fragments
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
POST /?wc-ajax=get_refreshed_fragments HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 18
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: http://foldingillusions.com/
Cookie: _ga_MP69GDNWHF=GS1.1.1673916018.1.0.1673916018.0.0.0; _ga=GA1.1.1271814773.1673916018
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 17 Jan 2023 00:40:19 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
WPO-Cache-Status: not cached
WPO-Cache-Message: The request method was not GET (POST), In the settings, caching is disabled for matches for one of the current request's GET parameters
X-Redirect-By: WordPress
Location: https://foldingillusions.com/?wc-ajax=get_refreshed_fragments
X-Powered-By: PHP/7.3.33, PleskLin
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.ttf
200 OK 131 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.ttf
IP
File type TrueType Font data, 13 tables, 1st "FFTM", 28 names, Macintosh\012- data
Size 131 kB (131107 bytes)
Hash 7ec9a1f1b13e211826f2acd2fe0a2fc0
8580f7c507ca6c8f41c2c7427cea0c882f0d0810
2c7d34cd1f3671cef75af2827c007f76b33ef4e4695b7b601bb1282b10936a18
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.ttf HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:18 GMT
content-type: application/font-sfnt
content-length: 136576
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-21580"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/
200 OK 57 kB IP
Hash a55f7b4bad9fd07e0ce5ec43ca4e131f
d05a288d406758719f061719ee5652c74824f97d
46aae4b92c6b009d443d659813c5c6eccbdef0e18600782b22c05adc0ac1e869
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://foldingillusions.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:20 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache
content-encoding: gzip
wpo-cache-status: cached
last-modified: Mon, 16 Jan 2023 22:51:25 GMT
x-powered-by: PHP/7.3.33, PleskLin
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-27134c07.min.css
200 OK 0 B URL HTTP/2 foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-27134c07.min.css
IP
GET /wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-27134c07.min.css HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:16 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 09:42:42 GMT
etag: W/"63623b92-45893"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
foldingillusions.com/?wc-ajax=get_refreshed_fragments
200 OK 0 B URL HTTP/2 foldingillusions.com/?wc-ajax=get_refreshed_fragments
IP
Analyzer Verdict Alert fortinet Malware
OPTIONS /?wc-ajax=get_refreshed_fragments HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-requested-with
Referer: http://foldingillusions.com/
Origin: http://foldingillusions.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:20 GMT
content-type: text/html; charset=UTF-8
wpo-cache-status: not cached
wpo-cache-message: The request method was not GET (OPTIONS), In the settings, caching is disabled for matches for one of the current request's GET parameters
access-control-allow-origin: http://foldingillusions.com
access-control-allow-credentials: true
x-powered-by: PHP/7.3.33, PleskLin
content-encoding: br
X-Firefox-Spdy: h2
foldingillusions.com/wp-admin/admin-ajax.php
200 OK 0 B URL HTTP/2 foldingillusions.com/wp-admin/admin-ajax.php
IP
Analyzer Verdict Alert fortinet Malware
POST /wp-admin/admin-ajax.php HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 172
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:21 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: http://foldingillusions.com
access-control-allow-credentials: true
x-robots-tag: noindex
x-content-type-options: nosniff
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-powered-by: PHP/7.3.33, PleskLin
content-encoding: br
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/10/pexels-cottonbro-6667305-scaled.jpg
301 Moved Permanently 0 B URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/10/pexels-cottonbro-6667305-scaled.jpg
IP
GET /wp-content/uploads/2021/10/pexels-cottonbro-6667305-scaled.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 17 Jan 2023 00:40:20 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-redirect-by: Rank Math SEO
location: https://foldingillusions.com
x-powered-by: PHP/7.3.33, PleskLin
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-26c75ab0.min.css
200 OK 0 B URL HTTP/2 foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-26c75ab0.min.css
IP
GET /wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-26c75ab0.min.css HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:17 GMT
content-type: text/css
last-modified: Wed, 08 Dec 2021 11:32:49 GMT
etag: W/"61b097e1-182a97"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-56432496.min.js
200 OK 0 B URL HTTP/2 foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-56432496.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-56432496.min.js HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 17 Jan 2023 00:40:17 GMT
content-type: application/javascript
last-modified: Wed, 08 Dec 2021 11:29:14 GMT
etag: W/"61b0970a-5b529"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
82.223.33.49
34.120.237.76
95.101.11.115
93.184.220.29