r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cfec3d7283a9b66d2be426ce54d210f3
808c1feb1ba918951d1928c1f6bfc0c253262774
1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10258
Expires: Mon, 05 Dec 2022 22:38:40 GMT
Date: Mon, 05 Dec 2022 19:47:42 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash ee088fab9b287e174cfd1f2c735a909f
25c3335b514a36ad1a24d00413d60c3d394f5161
494e96358ff12366213d7cc0f9197648c6c62ec14fa0d2c78732a683fa26b192
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5739
Cache-Control: max-age=145156
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 19:47:42 GMT
Etag: "638dc877-1d7"
Expires: Wed, 07 Dec 2022 12:06:58 GMT
Last-Modified: Mon, 05 Dec 2022 10:31:19 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 05 Dec 2022 19:18:30 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1752
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ea206ac3c440825741687351f8c6e4e
2f38dafd8c43dcce2411a0590bc5c02cd6286735
7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9105
Expires: Mon, 05 Dec 2022 22:19:27 GMT
Date: Mon, 05 Dec 2022 19:47:42 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: bZlwbmwXuccBNDSMJgv5wGlbl+7LPeO/nLUcXRBdHPUUb0G4O7vk8TMZv0X1bvOKANZk30GGMj2Kz2+/l1Cdkw==
x-amz-request-id: 3YW9K12E7YVT9DXA
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 05 Dec 2022 19:46:48 GMT
age: 54
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 19:47:42 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 05 Dec 2022 19:08:58 GMT
cache-control: public,max-age=3600
age: 2325
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 2b9d6a686aa3c4ea24568425e43a5221
d53bb4c9579bd1db78a0520619e888aec79f750f
c38734a8dbe51217d73896c0bf7f5c38c107fd79e0dee24b717f130377e9b5f7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5734
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 19:47:43 GMT
Last-Modified: Mon, 05 Dec 2022 18:12:09 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: oe/PumgVFXx2ou7rvRKiuQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: zLUHNYAm3ENGmJUWwYCQba8ETV0=
agies.org/
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET / HTTP/1.1
Host: agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 05 Dec 2022 19:47:42 GMT
Server: Apache
X-Powered-By: PHP/5.6.40
Location: http://www.agies.org/
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10855
Expires: Mon, 05 Dec 2022 22:48:39 GMT
Date: Mon, 05 Dec 2022 19:47:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10855
Expires: Mon, 05 Dec 2022 22:48:39 GMT
Date: Mon, 05 Dec 2022 19:47:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10855
Expires: Mon, 05 Dec 2022 22:48:39 GMT
Date: Mon, 05 Dec 2022 19:47:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10855
Expires: Mon, 05 Dec 2022 22:48:39 GMT
Date: Mon, 05 Dec 2022 19:47:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10855
Expires: Mon, 05 Dec 2022 22:48:39 GMT
Date: Mon, 05 Dec 2022 19:47:44 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 43309032a892c486f9985ef520df696e
36f4682ca6a33ff80ee02129c77e6f27e996ede0
24225ff504f30405d9ec3feb2555c738fcca0d6b265f285aa9c73a64c78a496e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5681
x-amzn-requestid: 8f0d66b8-d532-48d9-9a29-74540cd6ab3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cltXnEotIAMFqkA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc296-27349a376ff819ab63b04a81;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:41:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Uz-wJTZjej3sjP-O68BQ4hB_kkAecG0o7GkeZUan90ZgV87g0Cg_ZA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:49:44 GMT
age: 79080
etag: "36f4682ca6a33ff80ee02129c77e6f27e996ede0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash db1701b7b9d161a0c935bb6e10b17893
22a8c4bd58c729c1abcf794466e8f3231dfb034b
b495524a33e5b1d3ba34cfbe867ada0da956c061370b1fcde06b23a6194a9787
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8315
x-amzn-requestid: f1bcc33b-aad9-4d3b-b1f9-49282f2d4fb9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsAMGVboAMFfxg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc067-13472a097177d4751c8f7a8c;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: JuY0xcLDiERwrVhq33d4PP64liDqFfk9bc9xX1H62o0tOwrt1ek7Pg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:42:39 GMT
age: 79505
etag: "22a8c4bd58c729c1abcf794466e8f3231dfb034b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg
200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c01fe1cccdb3b672bbade6d98217ffe9
a9a529dc9894827f6243a1bf57f81caa4fe88fc2
c43da6212c79a08e22e78e04e99e8f5422e64b4b0a87f30b7907f1b4bc675c71
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4666
x-amzn-requestid: 850d341f-5ccb-453c-8adf-a8194f8fbdad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clr_-GiboAMFwww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc066-766293f2526e637235067aca;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kmki-SBINSx1kbiIkaSGebdCLrnDeHVhYeotAWzE__CevkNDdfzRGg==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:44:05 GMT
age: 79419
etag: "a9a529dc9894827f6243a1bf57f81caa4fe88fc2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F461bc4a6-a90b-41a8-99ce-a502ba9ed21f.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F461bc4a6-a90b-41a8-99ce-a502ba9ed21f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dcb8fe0c4ba323ab2483fa290c291051
6706e02d6b95edc3a33c951f07d04b0fb7415b77
6be68deb3a330955027ec16eaca2cdf4e2776620ffb7cb995922664b24400f02
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F461bc4a6-a90b-41a8-99ce-a502ba9ed21f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8749
x-amzn-requestid: ee03c447-299b-45d5-b8c6-12d4d1dc436d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_spHdBIAMFywQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d131d-0c9805c6112ec9ec6b9d1544;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:37:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: joWP2kLWVD0lEy2rMV4Fjm3mJh3mzsPyTWiHDVZZNMy5s_WPViKtCw==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:48:29 GMT
etag: "6706e02d6b95edc3a33c951f07d04b0fb7415b77"
content-type: image/jpeg
age: 79155
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3af2e495-85ff-410f-8418-e683c7f84bcd.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3af2e495-85ff-410f-8418-e683c7f84bcd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 027480c06cd67621f373c6765dafee4d
9f80bb7ca6f699d88eaec2248dec508c589fe994
f69a0d6bd6e79d8fa7f2f15df11237c0a8b04d45af3cd5870eeef86d18f553bf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3af2e495-85ff-410f-8418-e683c7f84bcd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7728
x-amzn-requestid: 9f37e7a6-1f00-4a81-9b14-962fd0b6cdf4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsAMEJxoAMFchQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc067-4a4cce217327b44525ea1e98;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ztC4S0WeA3ft_9JafrL6fInXo4jwkb0cTWUx4Z8L2uz3EWQS-d6F5A==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 22:09:54 GMT
age: 77870
etag: "9f80bb7ca6f699d88eaec2248dec508c589fe994"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60dcc231-abb7-48f1-8ec5-e25b31bd100b.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60dcc231-abb7-48f1-8ec5-e25b31bd100b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 24c69d7ef356b352956d6dcbc9f5df1d
2cc31dc1c5d2d2a8b3a378dce8a1240a79acfec9
94d068620c34652cb2d24ca8b3cf962febe9606e6d3a33d937fc9d99f176edef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60dcc231-abb7-48f1-8ec5-e25b31bd100b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10396
x-amzn-requestid: b879fd2e-b6cf-4373-b780-2d97481c45f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cioNbH5KoAMFUsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a8722-6add7f8e225878473b20c015;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 23:15:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ir97GJKaFoW6BNXCcmMqp0JSUd5JhCACyUvLh5G-0BWCDVJsqs7XhQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 11:06:22 GMT
age: 31282
etag: "2cc31dc1c5d2d2a8b3a378dce8a1240a79acfec9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.agies.org/
200 OK 45 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5811), with CRLF, LF line terminators
Hash 8bf0bb8dc87a802272e78fa56b6192c8
b177b18998ec32ab568540d2c353a3e46d59c2ba
df057d85be9d73406ab569baf209f35b75d27eb9f6e5129c6e6c1381fde7b3d3
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET / HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:44 GMT
Server: Apache
X-Powered-By: PHP/5.6.40
Link: <https://www.agies.org/wp-json/>; rel="https://api.w.org/", <https://www.agies.org/>; rel=shortlink
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
www.agies.org/wp-content/themes/agies/css/menu.css
200 OK 7.0 kB URL HTTP/1.1 www.agies.org/wp-content/themes/agies/css/menu.css
IP
File type assembler source, ASCII text
Hash 28ea012336e3fdc17e0276a564147865
fabcc9e9d0ff244ac4b3854893532d514c534598
614a7a1bdb14ef435906cd1fbb612b21f168eb19711ca15de573b878f49e49f4
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/themes/agies/css/menu.css HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:46 GMT
Server: Apache
Last-Modified: Tue, 07 Aug 2018 21:41:24 GMT
Accept-Ranges: bytes
Content-Length: 6975
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7dfb548d8f8a99d32050803775fad5d6
8b47999a01db7c2217d76a1cec576809a229cf1b
68dd2a1e5a0002f4d25d3b5884ab55bc6b5a91e38f6dc464c4261b19c6e5887e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 19:47:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7dfb548d8f8a99d32050803775fad5d6
8b47999a01db7c2217d76a1cec576809a229cf1b
68dd2a1e5a0002f4d25d3b5884ab55bc6b5a91e38f6dc464c4261b19c6e5887e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 19:47:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.agies.org/wp-content/themes/agies/js/confirm.min.js
200 OK 28 kB URL HTTP/1.1 www.agies.org/wp-content/themes/agies/js/confirm.min.js
IP
File type ASCII text, with very long lines (27443), with CRLF line terminators
Hash 9951d0d6b225b6a1f03da1c38c2bc886
34faa46c3aa79e72a3cc36d9dc96a8c6775aaa58
cb8f060f26f861b3ef5a9c5df8ecff1203574588679d4df9fe1c1396a3bc94f9
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/themes/agies/js/confirm.min.js HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:46 GMT
Server: Apache
Last-Modified: Wed, 28 Mar 2018 20:49:28 GMT
Accept-Ranges: bytes
Content-Length: 27743
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
www.agies.org/wp-content/themes/agies/slick/slick.css
200 OK 1.8 kB URL HTTP/1.1 www.agies.org/wp-content/themes/agies/slick/slick.css
IP
Hash f38b2db10e01b1572732a3191d538707
a94a059b3178b4adec09e3281ace2819a30095a4
de1e399b07289f3b0a8d35142e363e128124a1185770e214e25e58030dad48e5
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/themes/agies/slick/slick.css HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:46 GMT
Server: Apache
Last-Modified: Tue, 10 Apr 2018 09:49:16 GMT
Accept-Ranges: bytes
Content-Length: 1776
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.agies.org/wp-content/themes/agies/slick/slick-theme.css
200 OK 3.1 kB URL HTTP/1.1 www.agies.org/wp-content/themes/agies/slick/slick-theme.css
IP
Hash 54fff3eab5dd3fb9903dc5cc1eba33b3
2fac9c3ad831f0a50ccbfc2fd4b735c429c8cf54
b98251e221721644ca306a386032b09dad20c22d81b35b12e86dad9517282ceb
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/themes/agies/slick/slick-theme.css HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:46 GMT
Server: Apache
Last-Modified: Tue, 10 Apr 2018 11:22:24 GMT
Accept-Ranges: bytes
Content-Length: 3146
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
maps.googleapis.com/maps/api/js?key=AIzaSyAJTwYmTN_twaZ148QrfZRaynviWX-4eQc
200 OK 54 kB URL HTTP/2 maps.googleapis.com/maps/api/js?key=AIzaSyAJTwYmTN_twaZ148QrfZRaynviWX-4eQc
IP
File type ASCII text, with very long lines (2452)
Hash 9e08ed279d6e23a2a23c7ecbbd1983c7
5ec08ea9e5e4079a649bd7760cf268a4c2848563
491e93b8c59c981c35ccaf874c5957a09151f971a45d286abb08a399c32a8a84
GET /maps/api/js?key=AIzaSyAJTwYmTN_twaZ148QrfZRaynviWX-4eQc HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.agies.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
date: Mon, 05 Dec 2022 19:47:46 GMT
expires: Mon, 05 Dec 2022 20:17:46 GMT
cache-control: public, max-age=1800
vary: Accept-Language
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 53553
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=21
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.agies.org/wp-content/themes/agies/inc/members/members.js
200 OK 1.1 kB URL HTTP/1.1 www.agies.org/wp-content/themes/agies/inc/members/members.js
IP
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash cf5f511371cfd763cb3262f5e77e2553
14077b7becd71959dba04176ca0dd8f012641db5
6e09b062abe92c4142a45afd521fc19f6e66f225d2f724750337de1ab0f7db77
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/themes/agies/inc/members/members.js HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:46 GMT
Server: Apache
Last-Modified: Wed, 28 Mar 2018 21:36:40 GMT
Accept-Ranges: bytes
Content-Length: 1055
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.digicert.com/
200 OK 279 B IP
Hash 83508e2764c69782f1bae91e8b4f62f6
a00ea71e0f3d3be36c287f904ae306e5cb7d32cf
058fcc238e1df7cd76946926f203e4c5cea3f743a259c812199af346c1cbbf43
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5325
Cache-Control: max-age=150483
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 19:47:46 GMT
Etag: "638ddee8-117"
Expires: Wed, 07 Dec 2022 13:35:49 GMT
Last-Modified: Mon, 05 Dec 2022 12:07:04 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 279
www.agies.org/wp-content/themes/agies/slick/slick.min.js
200 OK 43 kB URL HTTP/1.1 www.agies.org/wp-content/themes/agies/slick/slick.min.js
IP
File type ASCII text, with very long lines (42862)
Hash d5a61c749e44e47159af8a6579dda121
3b41b3bc956685015a347a2238e71db29dfa0dbb
0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/themes/agies/slick/slick.min.js HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:46 GMT
Server: Apache
Last-Modified: Tue, 10 Apr 2018 09:49:28 GMT
Accept-Ranges: bytes
Content-Length: 42863
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
www.agies.org/wp-content/themes/agies/js/map.js
200 OK 2.6 kB URL HTTP/1.1 www.agies.org/wp-content/themes/agies/js/map.js
IP
Hash 689d9b3441faf18b923a40490c61a310
b9ae97e9aa51f1c7f22e0614cccb9374d419a3cd
51e8f40ab8b7ed345c984ae25c70109a6610b72f770a2686336e96edbfd133a2
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/themes/agies/js/map.js HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:46 GMT
Server: Apache
Last-Modified: Sun, 18 Feb 2018 01:17:22 GMT
Accept-Ranges: bytes
Content-Length: 2608
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2e388f1ab4ec88104f57cf23944ee684
39178c45ed645709cc388d5790b1b58a3272a62f
e33b88f6f77d90b65a8fed943a45623e51f1efbdae401a1652f24be68408dba0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 19:47:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7dfb548d8f8a99d32050803775fad5d6
8b47999a01db7c2217d76a1cec576809a229cf1b
68dd2a1e5a0002f4d25d3b5884ab55bc6b5a91e38f6dc464c4261b19c6e5887e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 19:47:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7dfb548d8f8a99d32050803775fad5d6
8b47999a01db7c2217d76a1cec576809a229cf1b
68dd2a1e5a0002f4d25d3b5884ab55bc6b5a91e38f6dc464c4261b19c6e5887e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 19:47:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?render=6LcpVM0UAAAAACZlMNUHkkrm6tt6SZTMbuLNZo_o&ver=3.0
200 OK 583 B URL HTTP/2 www.google.com/recaptcha/api.js?render=6LcpVM0UAAAAACZlMNUHkkrm6tt6SZTMbuLNZo_o&ver=3.0
IP
File type ASCII text, with very long lines (884), with no line terminators
Hash 048c4e67cd725b3a8692c7baa43b00c8
e42e3b032857f3c9b193fc4f525d19606227033b
779522487124915bb76276e621b7a998bb613301d03fc78783e7b6682017e1af
GET /recaptcha/api.js?render=6LcpVM0UAAAAACZlMNUHkkrm6tt6SZTMbuLNZo_o&ver=3.0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.agies.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Mon, 05 Dec 2022 19:47:46 GMT
date: Mon, 05 Dec 2022 19:47:46 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 583
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 83508e2764c69782f1bae91e8b4f62f6
a00ea71e0f3d3be36c287f904ae306e5cb7d32cf
058fcc238e1df7cd76946926f203e4c5cea3f743a259c812199af346c1cbbf43
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5325
Cache-Control: max-age=150483
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 19:47:46 GMT
Etag: "638ddee8-117"
Expires: Wed, 07 Dec 2022 13:35:49 GMT
Last-Modified: Mon, 05 Dec 2022 12:07:04 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 279
www.agies.org/wp-content/themes/agies/js/jquery.min.js
200 OK 93 kB URL HTTP/1.1 www.agies.org/wp-content/themes/agies/js/jquery.min.js
IP
File type ASCII text, with very long lines (32089), with CRLF line terminators
Hash 383771ef1692bfcc3f2b6917ca985778
a1ce0bfa507f23cc414a9a7634bd73b994bb3b35
20638e363fcc5152155f24b281303e17da62da62d24ef5dcf863b184d9a25734
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/themes/agies/js/jquery.min.js HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:46 GMT
Server: Apache
Last-Modified: Mon, 09 Apr 2018 06:33:18 GMT
Accept-Ranges: bytes
Content-Length: 92633
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
use.fontawesome.com/releases/v5.0.8/css/all.css
200 OK 8.2 kB URL HTTP/2 use.fontawesome.com/releases/v5.0.8/css/all.css
IP
File type ASCII text, with very long lines (35179)
Hash a49d00b12f91606513e700266ef920b4
77cb30f7a6bce6f519c61b5dd5b5d7bb7d383f1f
11994ed3b37fc879d83daeefd04aa358c548c67d807bca8986e06b71af481b90
GET /releases/v5.0.8/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.agies.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 19:47:46 GMT
content-type: text/css
x-amz-id-2: BcfPrvk6p5yde69wLDQbi7p/IOy6rtMnyl24jWMJGjmbD0CmTSQwyJQFiLLYSvw+0UP4DK4Icgc=
x-amz-request-id: RT57H5PTKZZC7BN7
last-modified: Wed, 30 Jun 2021 15:28:03 GMT
etag: W/"265a36ec650d63e307e611cdf14d9b89"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 51945
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1s%2FZi9LAxeIWl7LeO83S9X%2Ft0zX%2FsW%2FZajW%2FH0JgeR9I4zlJ4B4od3T8QOWb05EvbfYdTNzAIzQXjQEUDwhZzmwD7EA%2BXZu0hV14OGiw4A18H3JjlYuwJIOSGXy%2BfpKJ8rpdh%2FWI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 774f4ba7eb6524db-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.agies.org/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.1.3
200 OK 1.7 kB URL HTTP/1.1 www.agies.org/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.1.3
IP
Hash 5ad1cfa3f5175f627385651790ed0bbd
7a06ac744a748ce4c315c798614d6d0068596cc4
3ad2fcb328295f1199d593adaba909f3eea790f695554ac3c1da7aa009fc0e0d
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.1.3 HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:46 GMT
Server: Apache
Last-Modified: Fri, 21 Jun 2019 03:46:46 GMT
Accept-Ranges: bytes
Content-Length: 1685
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
www.agies.org/wp-content/themes/agies/css/bootstrap.css
200 OK 153 kB URL HTTP/1.1 www.agies.org/wp-content/themes/agies/css/bootstrap.css
IP
File type ASCII text, with very long lines (540), with CRLF line terminators
Size 153 kB (152757 bytes)
Hash 9ecd85f37ad63727efb75954d0a2c65d
8cfbfb71f9b75429304c7c4f53fd55d91d45c14c
3d5a9223fb2710eb2792bf003337964645ae84820c3cce5c0c2b1b2e13f518b3
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/themes/agies/css/bootstrap.css HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:46 GMT
Server: Apache
Last-Modified: Mon, 24 Sep 2018 02:49:02 GMT
Accept-Ranges: bytes
Content-Length: 152757
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.agies.org/wp-content/themes/agies/js/owl.carousel.min.js
200 OK 43 kB URL HTTP/1.1 www.agies.org/wp-content/themes/agies/js/owl.carousel.min.js
IP
File type ASCII text, with very long lines (32000)
Hash b7b9c97cd68ec336d01a79d5be48c58d
1a99890b57c9859a622337ed0b2f989d6e30cc0e
b394d33b2a7ec654a6b037ebfda6618341b3f897a362be624c923c2711b54a43
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/themes/agies/js/owl.carousel.min.js HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:46 GMT
Server: Apache
Last-Modified: Thu, 22 Feb 2018 02:28:44 GMT
Accept-Ranges: bytes
Content-Length: 42766
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
www.agies.org/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=3.4.8
200 OK 62 kB URL HTTP/1.1 www.agies.org/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=3.4.8
IP
File type Unicode text, UTF-8 text, with very long lines (61714), with no line terminators
Hash 5de5cfff6fba2af917363f7eb9e79a94
8a972ba6dcf620fb3d38b435dc3409db5fef1065
90b6883e6e9fe0c1bc6a9bb056f4d5598983b72b53217b187c1229abc8eb63b9
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=3.4.8 HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:46 GMT
Server: Apache
Last-Modified: Thu, 15 Jul 2021 02:23:42 GMT
Accept-Ranges: bytes
Content-Length: 61728
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
www.agies.org/wp-content/themes/agies/js/bootstrap.js
200 OK 72 kB URL HTTP/1.1 www.agies.org/wp-content/themes/agies/js/bootstrap.js
IP
File type ASCII text, with CRLF line terminators
Hash 24276f268f56771dc4141e6b3d93a2aa
474b25cebd06d57a38090c6716d5dfaa5591baad
d5fa375baaa8c2ae0f8a7a42b0ab21695a9ec04c68166ceb44118a6d27405449
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/themes/agies/js/bootstrap.js HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:46 GMT
Server: Apache
Last-Modified: Wed, 08 Feb 2017 19:24:12 GMT
Accept-Ranges: bytes
Content-Length: 72084
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
www.agies.org/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=3.4.8
200 OK 16 kB URL HTTP/1.1 www.agies.org/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=3.4.8
IP
File type ASCII text, with very long lines (16542), with no line terminators
Hash 89656ed6fb2e45c6049482e121fc2d88
907811dd535b9f4ec4371fc23a37d115fe3355e2
e42a7af0f19adf1cf7d67e8fbecad6713ec9cde539f7dc5d134544366679e521
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=3.4.8 HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:46 GMT
Server: Apache
Last-Modified: Thu, 15 Jul 2021 02:23:42 GMT
Accept-Ranges: bytes
Content-Length: 16542
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
www.agies.org/wp-content/plugins/wpfront-scroll-top/css/wpfront-scroll-top.min.css?ver=2.0.2
200 OK 428 B URL HTTP/1.1 www.agies.org/wp-content/plugins/wpfront-scroll-top/css/wpfront-scroll-top.min.css?ver=2.0.2
IP
File type ASCII text, with very long lines (426), with CRLF line terminators
Hash 7dcc9faad37d70797b062d4df70ce1be
a246edf134690eec505c4d651b876284617b84d0
0ec13e314871e8e1fc857c06902b0aceb60061ba6fc13ed43191b480bda707c0
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/wpfront-scroll-top/css/wpfront-scroll-top.min.css?ver=2.0.2 HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:46 GMT
Server: Apache
Last-Modified: Fri, 21 Jun 2019 03:23:08 GMT
Accept-Ranges: bytes
Content-Length: 428
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
www.agies.org/wp-content/plugins/types/vendor/toolset/toolset-common/res/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0
200 OK 31 kB URL HTTP/1.1 www.agies.org/wp-content/plugins/types/vendor/toolset/toolset-common/res/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0
IP
File type ASCII text, with very long lines (30837)
Hash 269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/types/vendor/toolset/toolset-common/res/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:46 GMT
Server: Apache
Last-Modified: Tue, 10 Apr 2018 22:26:02 GMT
Accept-Ranges: bytes
Content-Length: 31000
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
www.agies.org/wp-content/plugins/search-filter-pro/public/assets/css/search-filter.min.css?ver=2.3.4
200 OK 37 kB URL HTTP/1.1 www.agies.org/wp-content/plugins/search-filter-pro/public/assets/css/search-filter.min.css?ver=2.3.4
IP
File type ASCII text, with very long lines (36449)
Hash 855e97336fa634f6feddd3499223764e
98e616fbe936c86c11ca03f1472c42db97f1e746
afc607ee9787a7de37d6afafd4eede1417a0bca1cf17310ebeb716473652c2af
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/search-filter-pro/public/assets/css/search-filter.min.css?ver=2.3.4 HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:46 GMT
Server: Apache
Last-Modified: Fri, 30 Mar 2018 07:52:12 GMT
Accept-Ranges: bytes
Content-Length: 36819
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
www.agies.org/wp-content/themes/agies/css/demo.css?ver=4.9.22
200 OK 6.1 kB URL HTTP/1.1 www.agies.org/wp-content/themes/agies/css/demo.css?ver=4.9.22
IP
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 24878f5d9e1f7e974f6205eedae65265
0915095cda957331884cbfa83a4fca429ff7285f
f104a40a3b211df2b42fb93fd95b8cc5c6fb942192c5938125435fa27a3b6ecc
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/themes/agies/css/demo.css?ver=4.9.22 HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:46 GMT
Server: Apache
Last-Modified: Mon, 24 Sep 2018 02:47:16 GMT
Accept-Ranges: bytes
Content-Length: 6082
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
www.agies.org/wp-content/themes/agies/css/tooltip-classic.css?ver=4.9.22
200 OK 3.4 kB URL HTTP/1.1 www.agies.org/wp-content/themes/agies/css/tooltip-classic.css?ver=4.9.22
IP
Hash b1e8f90eeb1a4e8bbb03f2059b798e24
380c855accce73221d065b52ca1a227c7a2b44c5
e9a57610b7a8e577fee8c0f529027ae284238be6fc2cdcd7b07970b78603a0f1
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/themes/agies/css/tooltip-classic.css?ver=4.9.22 HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:46 GMT
Server: Apache
Last-Modified: Fri, 06 Apr 2018 02:25:28 GMT
Accept-Ranges: bytes
Content-Length: 3414
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
www.agies.org/wp-content/themes/agies/style.css?ver=4.9.22
200 OK 71 kB URL HTTP/1.1 www.agies.org/wp-content/themes/agies/style.css?ver=4.9.22
IP
File type ASCII text, with very long lines (655)
Hash 0d06ae98ada6ebdca77ab1b5315c1d2b
0e298451d9abf0a37524f457fa13f3401374ff64
791208f600fe8e1087354cba3250790759be560f3f19fda246993f3106209e91
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/themes/agies/style.css?ver=4.9.22 HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:46 GMT
Server: Apache
Last-Modified: Thu, 31 Oct 2019 17:00:48 GMT
Accept-Ranges: bytes
Content-Length: 71167
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
www.agies.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
200 OK 10 kB URL HTTP/1.1 www.agies.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
IP
File type ASCII text, with very long lines (9959)
Hash 7121994eec5320fbe6586463bf9651c2
90532aff6d4121954254cdf04994d834f7ec169b
48eb8b500ae6a38617b5738d2b3faec481922a7782246e31d2755c034a45cd5d
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:46 GMT
Server: Apache
Last-Modified: Fri, 20 May 2016 06:11:28 GMT
Accept-Ranges: bytes
Content-Length: 10056
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
fonts.googleapis.com/css?family=Raleway:200,300,400,700
200 OK 572 B URL HTTP/1.1 fonts.googleapis.com/css?family=Raleway:200,300,400,700
IP
Hash 2fa81690e41b4d84141465c6ad385eef
5c9d04e11dc99c2d3e6028f73ff93dad9f337d58
fb4625e08d2005e21d7294dab87bc601e2360ae54f8921470fca000cd5f8ec4f
GET /css?family=Raleway:200,300,400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Mon, 05 Dec 2022 19:47:46 GMT
Date: Mon, 05 Dec 2022 19:47:46 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
www.agies.org/wp-content/plugins/search-filter-pro/public/assets/js/search-filter-build.min.js?ver=2.3.4
200 OK 60 kB URL HTTP/1.1 www.agies.org/wp-content/plugins/search-filter-pro/public/assets/js/search-filter-build.min.js?ver=2.3.4
IP
File type ASCII text, with very long lines (32063)
Hash 3074d2cdf63befd96ed216c4dfe75bf2
cebab4ce67ac507db9c2f58dbde12293d90df2c5
475f9c006f4e23858136dde4dc3623f2b71c2cfcd56740463fdf3cda62c99c12
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/search-filter-pro/public/assets/js/search-filter-build.min.js?ver=2.3.4 HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:46 GMT
Server: Apache
Last-Modified: Fri, 30 Mar 2018 07:52:12 GMT
Accept-Ranges: bytes
Content-Length: 59989
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
www.agies.org/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.3
200 OK 14 kB URL HTTP/1.1 www.agies.org/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.3
IP
Hash 1534f06aa2b1b721a45372f8238e2461
86f7e7b926e1a88209d171b56dadbccc2c96f578
b7e17926b30342edecee8b3a93029ac51462e2b479277d8e077ba57173eb1900
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.3 HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:46 GMT
Server: Apache
Last-Modified: Fri, 21 Jun 2019 03:46:46 GMT
Accept-Ranges: bytes
Content-Length: 14440
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
www.agies.org/wp-content/plugins/search-filter-pro/public/assets/js/chosen.jquery.min.js?ver=2.3.4
200 OK 28 kB URL HTTP/1.1 www.agies.org/wp-content/plugins/search-filter-pro/public/assets/js/chosen.jquery.min.js?ver=2.3.4
IP
File type ASCII text, with very long lines (28335)
Hash 63fec16cd0e784db67058f42d5637241
3e3efe146d09a13491e70236cc03725aa7b66d1a
e0f1ea0baec721fea28e0fca582f3b96275cad8d6269d59eb6edd62f331b63f4
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/search-filter-pro/public/assets/js/chosen.jquery.min.js?ver=2.3.4 HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:46 GMT
Server: Apache
Last-Modified: Fri, 30 Mar 2018 07:52:12 GMT
Accept-Ranges: bytes
Content-Length: 28456
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
www.agies.org/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=3.4.8
200 OK 2.7 kB URL HTTP/1.1 www.agies.org/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=3.4.8
IP
File type HTML document, ASCII text, with very long lines (2650), with no line terminators
Hash 20ead1ca5cc9ad8f31dc2af68f04835c
b5611d930c1631c91a4469b69a2f49dda00d05c9
49881a55bf915d901a93bab525b3ef8ea896c5c1ddee5623bd0a2c9541bec6d0
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=3.4.8 HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:46 GMT
Server: Apache
Last-Modified: Thu, 15 Jul 2021 02:23:42 GMT
Accept-Ranges: bytes
Content-Length: 2650
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
www.agies.org/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70
200 OK 9.6 kB URL HTTP/1.1 www.agies.org/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70
IP
File type ASCII text, with very long lines (9172)
Hash 81b2be18696c4dfe620f7b6d0d75a566
0c3cd7bdf58a65b07e17be39cfe4e386571bb4bd
120aaf6681ca6d34a40c559779f0a0038582a79fce1b868ff901c94d27c89c72
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70 HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:47 GMT
Server: Apache
Last-Modified: Thu, 15 Jul 2021 02:23:42 GMT
Accept-Ranges: bytes
Content-Length: 9566
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
www.agies.org/wp-includes/js/jquery/jquery.js?ver=1.12.4
200 OK 97 kB URL HTTP/1.1 www.agies.org/wp-includes/js/jquery/jquery.js?ver=1.12.4
IP
File type ASCII text, with very long lines (31997)
Hash dc5ba5044fccc0297be7b262ce669a7c
f137ff98ae379e35b0702967d3b6866a0a40e3be
cf34e1b87bbfd9d9b185dec994924a496e279d8dc9387ad8d35bc0110134c4d3
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:46 GMT
Server: Apache
Last-Modified: Wed, 04 Sep 2019 21:45:34 GMT
Accept-Ranges: bytes
Content-Length: 96874
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
www.agies.org/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4
200 OK 1.8 kB URL HTTP/1.1 www.agies.org/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4
IP
File type ASCII text, with very long lines (1680)
Hash 943f6eb962c25bd965e0f0e5a284fcd0
b050a98ebaef01d7597bf8c1acb995c0ef3bcbd9
50de09b0bb8d0ac656aa9b3a1e4ef58a3f2d1abd734cad68b0e12191e9d215ea
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4 HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:47 GMT
Server: Apache
Last-Modified: Thu, 15 Jul 2021 02:23:42 GMT
Accept-Ranges: bytes
Content-Length: 1846
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
www.agies.org/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=3.4.8
200 OK 1.4 kB URL HTTP/1.1 www.agies.org/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=3.4.8
IP
File type ASCII text, with very long lines (1402), with no line terminators
Hash a5a1bfcbe64e5d92a029110590b6cb5d
d6a7dc6fb84a16c5de4878b8d594ddbc924755f7
0a8a1c16ef3ef056a530105e55b0d8d9aec811d68e2b66bf76beba05d263e883
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=3.4.8 HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:47 GMT
Server: Apache
Last-Modified: Thu, 15 Jul 2021 02:23:42 GMT
Accept-Ranges: bytes
Content-Length: 1402
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
www.agies.org/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=3.4.8
200 OK 2.6 kB URL HTTP/1.1 www.agies.org/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=3.4.8
IP
File type ASCII text, with very long lines (2568), with no line terminators
Hash 8939093b911fec2160314e95e5265f4e
b8fdc9e9662352c824c73013136534aec45ff54b
8fad4915319845c1ac13c15ccc2163a680d4c34c61c0f9b6a144718f77cd2b5d
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=3.4.8 HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:47 GMT
Server: Apache
Last-Modified: Thu, 15 Jul 2021 02:23:42 GMT
Accept-Ranges: bytes
Content-Length: 2568
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
www.agies.org/wp-content/plugins/wpfront-scroll-top/js/wpfront-scroll-top.min.js?ver=2.0.2
200 OK 1.9 kB URL HTTP/1.1 www.agies.org/wp-content/plugins/wpfront-scroll-top/js/wpfront-scroll-top.min.js?ver=2.0.2
IP
File type ASCII text, with very long lines (1933), with CRLF line terminators
Hash d1ca0111c58e73bd58113b9b9d6ff087
09bad175e9b16cfe0086d2a2e88fad72eac5d12f
df7a9be04349c4b0a3de7ff08de28b2a53b5431f396ff3ce4b13d179d194b192
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/wpfront-scroll-top/js/wpfront-scroll-top.min.js?ver=2.0.2 HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:47 GMT
Server: Apache
Last-Modified: Fri, 21 Jun 2019 03:23:08 GMT
Accept-Ranges: bytes
Content-Length: 1935
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
www.agies.org/wp-includes/js/jquery/ui/core.min.js?ver=1.11.4
200 OK 3.9 kB URL HTTP/1.1 www.agies.org/wp-includes/js/jquery/ui/core.min.js?ver=1.11.4
IP
File type ASCII text, with very long lines (3704)
Hash e6784d91bf2c668bc4093063c5b15113
687e1d2e957a821280dbd205ae66182f16dfdc30
194ebae85ff853319e8668f23a4c5bf371a7d9f5d550a40980ab53026ddaaa17
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.11.4 HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:47 GMT
Server: Apache
Last-Modified: Fri, 05 Feb 2021 04:07:44 GMT
Accept-Ranges: bytes
Content-Length: 3929
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
www.agies.org/wp-includes/js/jquery/ui/datepicker.min.js?ver=1.11.4
200 OK 36 kB URL HTTP/1.1 www.agies.org/wp-includes/js/jquery/ui/datepicker.min.js?ver=1.11.4
IP
File type ASCII text, with very long lines (35951)
Hash cb1f7699be677def94bc41a5d9da4f82
b1aff76bd04ba59abed8e19a71db339332d9e15d
131c19ca61ef3ab0c3199b1db78997ec2efb8327722cef4df46f09c4892d273d
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-includes/js/jquery/ui/datepicker.min.js?ver=1.11.4 HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:47 GMT
Server: Apache
Last-Modified: Fri, 05 Feb 2021 04:07:44 GMT
Accept-Ranges: bytes
Content-Length: 36176
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
www.agies.org/wp-content/themes/agies/js/navigation.js?ver=20151215
200 OK 3.0 kB URL HTTP/1.1 www.agies.org/wp-content/themes/agies/js/navigation.js?ver=20151215
IP
Hash 49493316c090bb3d7cca5bc09031037c
b77b6525d82691c3d4ca05948e846500ea0cb1d3
fbc199bf7f97061c41664b040e84616a0cb54441a2efc5801d5d401d3a049f3c
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/themes/agies/js/navigation.js?ver=20151215 HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:47 GMT
Server: Apache
Last-Modified: Mon, 05 Feb 2018 09:42:44 GMT
Accept-Ranges: bytes
Content-Length: 2967
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 79c225db327a78b782f5a9512b07eaf0
398a1be3a70264d959146d6670d2ca54cdf4e91a
8539ea44d81775448ae8c6179d54d8a397c559b112291fa78abcf6ac6c480815
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 19:47:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 79c225db327a78b782f5a9512b07eaf0
398a1be3a70264d959146d6670d2ca54cdf4e91a
8539ea44d81775448ae8c6179d54d8a397c559b112291fa78abcf6ac6c480815
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 19:47:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.agies.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 17:11:08 GMT
expires: Wed, 29 Nov 2023 17:11:08 GMT
cache-control: public, max-age=31536000
age: 527799
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Hash de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.agies.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 12:29:22 GMT
expires: Fri, 01 Dec 2023 12:29:22 GMT
cache-control: public, max-age=31536000
age: 371905
last-modified: Tue, 26 Apr 2022 15:56:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.agies.org/wp-content/themes/agies/js/skip-link-focus-fix.js?ver=20151215
200 OK 685 B URL HTTP/1.1 www.agies.org/wp-content/themes/agies/js/skip-link-focus-fix.js?ver=20151215
IP
Hash 93d421fd7576b0ca9c359ffe2fa16113
eacce35258f14fcd79bea2bc23f4140d25874322
14af47320898bd93f367026f7833c9956f14e24856976e4f9e10be31155cdcf2
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/themes/agies/js/skip-link-focus-fix.js?ver=20151215 HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:47 GMT
Server: Apache
Last-Modified: Mon, 05 Feb 2018 09:42:44 GMT
Accept-Ranges: bytes
Content-Length: 685
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
www.agies.org/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=3.4.8
200 OK 6.8 kB URL HTTP/1.1 www.agies.org/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=3.4.8
IP
File type ASCII text, with very long lines (6758), with no line terminators
Hash 98f4e97f86b642bf082c65ae518ad010
e4e05eb15ee57f2cdb00a2a97419c02cfebb2732
5302d7ef47b197c6cc07e5db5152dcce3b6886ac18f727875fe78ba8e8129224
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=3.4.8 HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:47 GMT
Server: Apache
Last-Modified: Thu, 15 Jul 2021 02:23:42 GMT
Accept-Ranges: bytes
Content-Length: 6758
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css
www.agies.org/wp-includes/js/wp-embed.min.js?ver=4.9.22
200 OK 1.4 kB URL HTTP/1.1 www.agies.org/wp-includes/js/wp-embed.min.js?ver=4.9.22
IP
File type ASCII text, with very long lines (1391), with no line terminators
Hash 570ae0f3c201604926ea599d3d1f6c04
2c29243a73660964d4712b969d2a15e27777bc14
5138d39633dc69fcd0ed7f33a5e38dc339123f682fa7f5242066879c2bbc8c9b
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-includes/js/wp-embed.min.js?ver=4.9.22 HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:47 GMT
Server: Apache
Last-Modified: Fri, 05 Feb 2021 04:07:44 GMT
Accept-Ranges: bytes
Content-Length: 1391
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 79c225db327a78b782f5a9512b07eaf0
398a1be3a70264d959146d6670d2ca54cdf4e91a
8539ea44d81775448ae8c6179d54d8a397c559b112291fa78abcf6ac6c480815
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 19:47:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.agies.org/wp-content/themes/agies/js/custom_map.js?ver=20151215
200 OK 50 kB URL HTTP/1.1 www.agies.org/wp-content/themes/agies/js/custom_map.js?ver=20151215
IP
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash b46a01ca2f6607a8fa54710fef11d4f1
e74342d82e71866e2ef984d88246150acf3bbe03
7acc23cfc3658f6641419300b034c7ede2f86e06e032ffd0899d14a50f56c55d
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/themes/agies/js/custom_map.js?ver=20151215 HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:47 GMT
Server: Apache
Last-Modified: Fri, 04 Jun 2021 17:11:06 GMT
Accept-Ranges: bytes
Content-Length: 49642
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
www.agies.org/wp-content/uploads/2021/01/Cementos-Progreso.png
200 OK 15 kB URL HTTP/1.1 www.agies.org/wp-content/uploads/2021/01/Cementos-Progreso.png
IP
File type PNG image data, 300 x 229, 8-bit/color RGBA, non-interlaced\012- data
Hash a0b858e60a1f9f92d591e6219a2c6ac6
83cbef65390b6fc000ffaf8452c9d6cb39590761
64f70e35f7b5d9d2dff8fe37539c3b062506b415eae8ff6c6b6a92ffafc2d308
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2021/01/Cementos-Progreso.png HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.agies.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:47 GMT
Server: Apache
Last-Modified: Thu, 28 Jan 2021 19:07:03 GMT
Accept-Ranges: bytes
Content-Length: 14616
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
www.agies.org/wp-content/themes/agies/slick/ajax-loader.gif
200 OK 4.2 kB URL HTTP/1.1 www.agies.org/wp-content/themes/agies/slick/ajax-loader.gif
IP
File type GIF image data, version 89a, 32 x 32\012- data
Hash c5cd7f5300576ab4c88202b42f6ded62
7a1aa43614396382bb15e5fde574d9cdcd21698f
e7b44c86b050fca766a96ddac2d0932af0126da6f2305280342d909168dcce6b
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/themes/agies/slick/ajax-loader.gif HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/wp-content/themes/agies/slick/slick-theme.css
Cookie: pll_language=es
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:47 GMT
Server: Apache
Last-Modified: Tue, 10 Apr 2018 09:49:16 GMT
Accept-Ranges: bytes
Content-Length: 4178
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/gif
www.agies.org/wp-content/uploads/2022/11/CONRED.png
200 OK 26 kB URL HTTP/1.1 www.agies.org/wp-content/uploads/2022/11/CONRED.png
IP
File type PNG image data, 124 x 124, 8-bit/color RGBA, non-interlaced\012- data
Hash eddd0320faf5f64c25a6022e92ab8e1d
51e64c1aee7bdb79635cfdf32addaf3796005ee4
2b567afcd1f25aeff9910066bfcfc515046138e65f127ab7a859afd953274c16
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/11/CONRED.png HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.agies.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:47 GMT
Server: Apache
Last-Modified: Tue, 22 Nov 2022 18:26:03 GMT
Accept-Ranges: bytes
Content-Length: 26005
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
www.agies.org/wp-content/uploads/2018/04/logo-agies.jpg
200 OK 12 kB URL HTTP/1.1 www.agies.org/wp-content/uploads/2018/04/logo-agies.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x62, components 3\012- data
Hash 1294d3c12dcad9797bc551e2da7c3c23
c54d3b479836d378ac154640c8b81641a8edc2fd
cd9c1795a74a350e441472863252b87b5b09baef57eb1c880bdc0a75d73433c2
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2018/04/logo-agies.jpg HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.agies.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:47 GMT
Server: Apache
Last-Modified: Fri, 13 Apr 2018 08:48:00 GMT
Accept-Ranges: bytes
Content-Length: 12010
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
use.fontawesome.com/releases/v5.0.8/webfonts/fa-brands-400.woff2
200 OK 54 kB URL HTTP/2 use.fontawesome.com/releases/v5.0.8/webfonts/fa-brands-400.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 54488, version 1.0\012- data
Hash e8c322de9658cbeb8a774b6624167c2c
db06af71da4197a4e1bd553d124725a8081c13f0
e7d4d5340bbe57a01d8f7992142e2763d438d5783890c76748306eebfa056a69
GET /releases/v5.0.8/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.agies.org
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 19:47:47 GMT
content-type: font/woff2
content-length: 54488
x-amz-id-2: 9sfg/GRtKP9Z3jtdWizv0U7UE+hqKTDshACaPLcYAoGAtP1HGnQTXRsIo5vJqxD5XZXpqMJCcJs=
x-amz-request-id: 4G5HD7MNXCMKR3KN
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:28:16 GMT
etag: "e8c322de9658cbeb8a774b6624167c2c"
cache-control: max-age=31556926
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GZR9540TqH5LLCRmXyAFzCqSA5Np2IAsxAgelA6d7m5olaGzmOR%2FB1K7nDvBcVXvsaOFPWAWChvwGdgbCTpEyk5r9kFAEHX1kVoGDr1ojdvne9mUZrRw6PdhbDvYwaP0scZxtuBZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774f4bac9f6788bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.agies.org/wp-content/uploads/2022/11/The-World-Bank.png
200 OK 368 kB URL HTTP/1.1 www.agies.org/wp-content/uploads/2022/11/The-World-Bank.png
IP
File type PNG image data, 2048 x 927, 8-bit/color RGBA, non-interlaced\012- data
Size 368 kB (367515 bytes)
Hash 7e1db2d50606a1a62f26d7cf4a0299bd
80c21b2afcbc55b2f57876213cf037dd90145e87
1a23a50b57ccac083b724fac8e4801ce215e9167caa40348549935384dfb6652
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/11/The-World-Bank.png HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.agies.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:47 GMT
Server: Apache
Last-Modified: Tue, 22 Nov 2022 18:25:21 GMT
Accept-Ranges: bytes
Content-Length: 367515
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
www.agies.org/wp-content/uploads/2018/08/normas-de-seguridad-estructural.jpg
200 OK 212 kB URL HTTP/1.1 www.agies.org/wp-content/uploads/2018/08/normas-de-seguridad-estructural.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 830x466, components 3\012- data
Size 212 kB (212281 bytes)
Hash 6d7dfe4184b6f5bb766c9fdd49b161c7
0aa1d8c862049a010e0d9bc61fc4769f905c546d
459144578df489e4298c9da2fb5527fd92f82302146705dbf06eef4c390d27aa
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2018/08/normas-de-seguridad-estructural.jpg HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.agies.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:47 GMT
Server: Apache
Last-Modified: Wed, 22 Aug 2018 03:40:17 GMT
Accept-Ranges: bytes
Content-Length: 212281
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
www.agies.org/wp-content/uploads/2018/04/info-blocks.jpg
200 OK 561 kB URL HTTP/1.1 www.agies.org/wp-content/uploads/2018/04/info-blocks.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1170, components 3\012- data
Size 561 kB (560962 bytes)
Hash 19431be2b642201ea6e1beb91554791d
80407275b51cfcb4406b24f98e9049dc7d78d67a
ef9f7a55bb3ea398a8304b08532743fee00edfe00bc34a29dc0fcb3388d7fa5a
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2018/04/info-blocks.jpg HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.agies.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:47 GMT
Server: Apache
Last-Modified: Sat, 07 Apr 2018 08:28:20 GMT
Accept-Ranges: bytes
Content-Length: 560962
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
www.agies.org/wp-content/uploads/2018/04/manuales-guias-cartillas.jpg
200 OK 85 kB URL HTTP/1.1 www.agies.org/wp-content/uploads/2018/04/manuales-guias-cartillas.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 563x376, components 3\012- data
Hash f4b42bf5c9ee91479e25e31929d404f4
0dbcc1d9b10d9b73a62adbc3a20532aae9d1a161
a09ccb969f10a96e5453c3bbaa8932ae227147cc62b1b73478dbb151b071abfc
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2018/04/manuales-guias-cartillas.jpg HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.agies.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:48 GMT
Server: Apache
Last-Modified: Sat, 07 Apr 2018 08:35:46 GMT
Accept-Ranges: bytes
Content-Length: 85094
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
www.agies.org/wp-content/uploads/2018/08/Our-Associates.jpg
200 OK 53 kB URL HTTP/1.1 www.agies.org/wp-content/uploads/2018/08/Our-Associates.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 480x320, components 3\012- data
Hash fcbfab1a32b867f4bd9109a3457c8f09
0dbe703e4e827821e1359f39c818ce7fa7ac0c26
367a5c98779fd1071e8c0840a3e3c9eb21c7e3d78d3ceb71d79c951059eed413
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2018/08/Our-Associates.jpg HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.agies.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:48 GMT
Server: Apache
Last-Modified: Wed, 22 Aug 2018 14:08:25 GMT
Accept-Ranges: bytes
Content-Length: 52839
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
www.agies.org/wp-content/uploads/2019/10/MIEMBRO-CORPORATIVO-DIAMANTE-1-150x150.png
200 OK 15 kB URL HTTP/1.1 www.agies.org/wp-content/uploads/2019/10/MIEMBRO-CORPORATIVO-DIAMANTE-1-150x150.png
IP
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 87ba28c3365965c690cc24eaf257d703
66e0c3161197c257c5e46a2523f2f71116ea85da
7b481b07506bd70b66c38a4a29719d8dac2fee9094081a460a0f0559c2174d59
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2019/10/MIEMBRO-CORPORATIVO-DIAMANTE-1-150x150.png HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.agies.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:48 GMT
Server: Apache
Last-Modified: Sat, 05 Oct 2019 19:05:07 GMT
Accept-Ranges: bytes
Content-Length: 15336
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
www.agies.org/wp-content/uploads/2018/08/Upcoming-Events.jpg
200 OK 46 kB URL HTTP/1.1 www.agies.org/wp-content/uploads/2018/08/Upcoming-Events.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 480x320, components 3\012- data
Hash d71affc40a9a5257913f59fa8945a4b1
fb274ec5ad96468481714b2a8062109b231704a7
3bf1a3ddab45450b1a87cc087c3c978f2d688d66ad07057e033efea409092423
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2018/08/Upcoming-Events.jpg HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.agies.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:48 GMT
Server: Apache
Last-Modified: Wed, 22 Aug 2018 14:10:30 GMT
Accept-Ranges: bytes
Content-Length: 46422
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/jpeg
www.agies.org/wp-content/uploads/2022/11/TROCAIRE.png
200 OK 47 kB URL HTTP/1.1 www.agies.org/wp-content/uploads/2022/11/TROCAIRE.png
IP
File type PNG image data, 532 x 336, 8-bit/color RGBA, non-interlaced\012- data
Hash 1cf09394c674a8e22f23f340020dc513
663fe20379b1ce3432889199203c1c733ee20e20
e66b7ef0ef206c99a5818d15e08702c4cd7f263f1d1335e5160261b4083c733d
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/11/TROCAIRE.png HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.agies.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:48 GMT
Server: Apache
Last-Modified: Tue, 22 Nov 2022 18:26:26 GMT
Accept-Ranges: bytes
Content-Length: 47339
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
www.agies.org/wp-content/uploads/2018/12/Artboard-1-100.jpg
200 OK 570 kB URL HTTP/1.1 www.agies.org/wp-content/uploads/2018/12/Artboard-1-100.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1920x835, components 3\012- data
Size 570 kB (570510 bytes)
Hash 9e5ed403a0ac4c2418e9b2f5a3e97a3f
34584b4d46bff4e6c78af17581fea0c7e8452dbc
a7ea015bf34406fb22e4c65bb5145ccea416d59f17d930be6a1aa0973f5184a3
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2018/12/Artboard-1-100.jpg HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.agies.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:48 GMT
Server: Apache
Last-Modified: Tue, 01 Sep 2020 02:44:46 GMT
Accept-Ranges: bytes
Content-Length: 570510
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/jpeg
www.agies.org/wp-content/uploads/2022/11/ICCG.jpg
200 OK 261 kB URL HTTP/1.1 www.agies.org/wp-content/uploads/2022/11/ICCG.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 4816x1500, components 3\012- data
Size 261 kB (261304 bytes)
Hash fdf1db4e48bf2692553484ddd9feefc0
355c27a10951da65a39556620386e0a579a3f5b4
121e78ae7781849cbeb3e9671a08ee60a3d515a1b4e856a8599e50ef5e72ebb2
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/11/ICCG.jpg HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.agies.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:48 GMT
Server: Apache
Last-Modified: Tue, 22 Nov 2022 18:24:05 GMT
Accept-Ranges: bytes
Content-Length: 261304
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/jpeg
www.agies.org/wp-content/uploads/2019/09/LOGO-SERMASA.png
200 OK 3.1 kB URL HTTP/1.1 www.agies.org/wp-content/uploads/2019/09/LOGO-SERMASA.png
IP
File type PNG image data, 451 x 114, 8-bit/color RGBA, non-interlaced\012- data
Hash 986b283920a6bc5d5b8458fe210fa9e7
8b43a9c8e78b85f67897b17547e479223bb776b0
9d0dc5229b0fe3d1b626ddc510e4d23aebe88dee2fff07ef997be64390f721d8
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2019/09/LOGO-SERMASA.png HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.agies.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:48 GMT
Server: Apache
Last-Modified: Thu, 26 Sep 2019 02:02:45 GMT
Accept-Ranges: bytes
Content-Length: 3125
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
www.agies.org/wp-content/uploads/2019/10/MIEMBRO-CORPORATIVO-PLATA-1-150x150.png
200 OK 14 kB URL HTTP/1.1 www.agies.org/wp-content/uploads/2019/10/MIEMBRO-CORPORATIVO-PLATA-1-150x150.png
IP
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 8b810b47bc3cafe0ab5339c15726c046
0e953f9c60a914b6805f0a4b7c53b8b672dbd1b2
602fd93a8cadf7bc1431e7e2855874789fa078cec5e5b2b8cb305c470c266fe1
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2019/10/MIEMBRO-CORPORATIVO-PLATA-1-150x150.png HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.agies.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:48 GMT
Server: Apache
Last-Modified: Sat, 05 Oct 2019 19:05:18 GMT
Accept-Ranges: bytes
Content-Length: 13951
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
www.agies.org/wp-content/uploads/2019/10/MIEMBRO-CORPORATIVO-ORO-1-150x150.png
200 OK 16 kB URL HTTP/1.1 www.agies.org/wp-content/uploads/2019/10/MIEMBRO-CORPORATIVO-ORO-1-150x150.png
IP
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 1c851f8615d6a4a8ceac56a775be5b2c
157b27ddbf74f5368933b8e5d62741e20eb4ecc6
f82458a11c453d50be3ee587ae04dfa3da30dd56b42ddecc7c6487c18a655102
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2019/10/MIEMBRO-CORPORATIVO-ORO-1-150x150.png HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.agies.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:48 GMT
Server: Apache
Last-Modified: Sat, 05 Oct 2019 19:05:13 GMT
Accept-Ranges: bytes
Content-Length: 15768
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
www.agies.org/?wc-ajax=get_refreshed_fragments
200 OK 210 B URL HTTP/1.1 www.agies.org/?wc-ajax=get_refreshed_fragments
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0c97a46508dc677362be2a79fd34feea
bce89aaf991907a16c951cc6a9a8121045374e22
3e799d21e1116a135fcd10c071506f34b99cf79d93b5548199e1376f88b62434
Analyzer Verdict Alert quad9 Sinkholed
POST /?wc-ajax=get_refreshed_fragments HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Origin: http://www.agies.org
Connection: keep-alive
Referer: http://www.agies.org/
Cookie: pll_language=es
Content-Length: 0
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:47 GMT
Server: Apache
X-Powered-By: PHP/5.6.40
Access-Control-Allow-Origin: http://www.agies.org
Access-Control-Allow-Credentials: true
X-Robots-Tag: noindex
X-Content-Type-Options: nosniff
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8
www.agies.org/wp-content/uploads/2021/01/Misto-Listo.png
200 OK 15 kB URL HTTP/1.1 www.agies.org/wp-content/uploads/2021/01/Misto-Listo.png
IP
File type PNG image data, 236 x 127, 8-bit/color RGBA, non-interlaced\012- data
Hash 42377f2381a9d4f0cf620ca2169edb1c
7c2f64bf5370d9487347d2484e0a1af98dc355c7
de7c7a192cef1c0290425e57a4fd70bf2cf936309c97df28002f30e06efc1565
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2021/01/Misto-Listo.png HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.agies.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:49 GMT
Server: Apache
Last-Modified: Thu, 28 Jan 2021 19:08:40 GMT
Accept-Ranges: bytes
Content-Length: 15423
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
www.agies.org/wp-content/uploads/2019/10/MIEMBRO-CORPORATIVO-PLATINO-150x150.png
200 OK 16 kB URL HTTP/1.1 www.agies.org/wp-content/uploads/2019/10/MIEMBRO-CORPORATIVO-PLATINO-150x150.png
IP
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash e3402d2dca360faeaaab89fef380e47d
4c953938681dc3507e2698aab27b19eb605b09e8
32eafb8b821ab8e579091a15b825bd1230701e912ce195cbc47729b375b79808
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2019/10/MIEMBRO-CORPORATIVO-PLATINO-150x150.png HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.agies.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:49 GMT
Server: Apache
Last-Modified: Sat, 05 Oct 2019 19:05:25 GMT
Accept-Ranges: bytes
Content-Length: 15918
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
www.agies.org/wp-content/uploads/2018/02/LOGO-FINAL-AG-para-fondo-blanco-002.png
404 Not Found 171 kB URL HTTP/1.1 www.agies.org/wp-content/uploads/2018/02/LOGO-FINAL-AG-para-fondo-blanco-002.png
IP
Size 171 kB (171168 bytes)
Hash 4694f86cca76854d91694ab762f1a835
43626e2691ae0786920d6c6614ee619dce5bec61
59de63a83168fb4a13aa5ae97b18edf5fc3f7d714d3a76b86f188405fd9ec187
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2018/02/LOGO-FINAL-AG-para-fondo-blanco-002.png HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.agies.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 404 Not Found
Date: Mon, 05 Dec 2022 19:47:47 GMT
Server: Apache
X-Powered-By: PHP/5.6.40
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://www.agies.org/wp-json/>; rel="https://api.w.org/"
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
www.agies.org/wp-content/uploads/2018/02/IPPSA.jpg
404 Not Found 8.2 kB URL HTTP/1.1 www.agies.org/wp-content/uploads/2018/02/IPPSA.jpg
IP
Hash bf397b2721c87352e51b5f39f650cdd9
11763c3fe5bb19da40f8aa0d2ebce3958a2e338b
baa4923415bbd6ac15c482afdcb0c8c11c2fbecdc3a6955283ef4e30928c812c
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2018/02/IPPSA.jpg HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.agies.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 404 Not Found
Date: Mon, 05 Dec 2022 19:47:47 GMT
Server: Apache
X-Powered-By: PHP/5.6.40
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://www.agies.org/wp-json/>; rel="https://api.w.org/"
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
www.agies.org/favicon.ico
200 OK 0 B URL HTTP/1.1 www.agies.org/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.agies.org/
Cookie: pll_language=es
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 19:47:50 GMT
Server: Apache
X-Powered-By: PHP/5.6.40
Content-Length: 0
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/vnd.microsoft.icon
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 21:48:03 GMT
expires: Fri, 01 Dec 2023 21:48:03 GMT
cache-control: public, max-age=31536000
age: 338387
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 16:40:43 GMT
expires: Fri, 01 Dec 2023 16:40:43 GMT
cache-control: public, max-age=31536000
age: 356827
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e81e29f-79a8-4af6-b0c7-7f49bfafb17e.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e81e29f-79a8-4af6-b0c7-7f49bfafb17e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f71032604eecccf0a81f323a5f96a400
f8866d4f3185bcf7871581d75339998b34d6cf6d
d053eedc717d7fd86e621ba948680be16538396d1ba9854b6816626d149b1c57
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e81e29f-79a8-4af6-b0c7-7f49bfafb17e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 6886
x-amzn-requestid: d721caf6-2252-4ede-9533-3d3fcd6cce0d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cpsw-FfRoAMFtOQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d5b39-7644a195142f6c420ec7eac6;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 02:45:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Mn_L-TMV_ypQZFmolIRm4r5dyj5PpN12jrtafcP9HEkALUPfSzJ38w==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 02:45:54 GMT
age: 61317
etag: "f8866d4f3185bcf7871581d75339998b34d6cf6d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.agies.org/wp-content/uploads/2018/02/Megaproductos.png
404 Not Found 0 B URL HTTP/1.1 www.agies.org/wp-content/uploads/2018/02/Megaproductos.png
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2018/02/Megaproductos.png HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.agies.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 404 Not Found
Date: Mon, 05 Dec 2022 19:47:47 GMT
Server: Apache
X-Powered-By: PHP/5.6.40
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://www.agies.org/wp-json/>; rel="https://api.w.org/"
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
fonts.googleapis.com/css?family=Lato:300,400,700
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Lato:300,400,700
IP
GET /css?family=Lato:300,400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.agies.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 05 Dec 2022 19:47:46 GMT
date: Mon, 05 Dec 2022 19:47:46 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.agies.org/wp-content/uploads/2018/02/Nabla-1.jpg
404 Not Found 0 B URL HTTP/1.1 www.agies.org/wp-content/uploads/2018/02/Nabla-1.jpg
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2018/02/Nabla-1.jpg HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.agies.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 404 Not Found
Date: Mon, 05 Dec 2022 19:47:48 GMT
Server: Apache
X-Powered-By: PHP/5.6.40
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://www.agies.org/wp-json/>; rel="https://api.w.org/"
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
www.agies.org/wp-content/uploads/2018/02/Rodio-Swissboring.png
404 Not Found 0 B URL HTTP/1.1 www.agies.org/wp-content/uploads/2018/02/Rodio-Swissboring.png
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2018/02/Rodio-Swissboring.png HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.agies.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 404 Not Found
Date: Mon, 05 Dec 2022 19:47:48 GMT
Server: Apache
X-Powered-By: PHP/5.6.40
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://www.agies.org/wp-json/>; rel="https://api.w.org/"
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
www.agies.org/wp-content/uploads/2018/02/Precon.png
404 Not Found 0 B URL HTTP/1.1 www.agies.org/wp-content/uploads/2018/02/Precon.png
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2018/02/Precon.png HTTP/1.1
Host: www.agies.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.agies.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 404 Not Found
Date: Mon, 05 Dec 2022 19:47:48 GMT
Server: Apache
X-Powered-By: PHP/5.6.40
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://www.agies.org/wp-json/>; rel="https://api.w.org/"
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
107.191.100.214
23.33.119.27
93.184.220.29
0.0.0.0