junk-bros.com/about/
173.236.150.148301 Moved Permanently 236 B IP 173.236.150.148:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 42037238c74506a0541b7333ee25f90b
c46c0b0b6195441f2dab40bd722ae921e95248dd
ce42affa2cd4b268a4c09b1bc8f72895a2dfb76a7d416bb3c796df3382cbb94f
Analyzer Verdict Alert fortinet Malware
GET /about/ HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Fri, 09 Sep 2022 19:59:55 GMT
Server: Apache
Location: https://junk-bros.com/about/
Content-Length: 236
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash f55e483f32b3fd50b1a2414aaada9b61
9d6b22edb98866e002e3b1ace44dfb0f8d00935f
4b09e1d2b887ded061e4ec5f82ec70ce699eeed428acc6b4fd3ef10ed9233c89
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4B09E1D2B887DED061E4EC5F82EC70CE699EEED428ACC6B4FD3EF10ED9233C89"
Last-Modified: Thu, 08 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14760
Expires: Sat, 10 Sep 2022 00:05:55 GMT
Date: Fri, 09 Sep 2022 19:59:55 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
143.204.55.115200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.115:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 09 Sep 2022 19:05:55 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fcG34gsBNigaOFL5vXoh_1fK06QydAWYhJw6nllZzV9hs5JQcnE94A==
Age: 3240
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.25200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP 143.204.55.25:0
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 09 Sep 2022 03:46:35 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: IbsLJFDl2V9Q8ybmp6SyEThQY9yzBcanvegQhtpRC_fjiKLssP29Pg==
age: 58401
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Sep 2022 19:59:55 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
junk-bros.com/about/
173.236.150.148200 OK 11 kB IP 173.236.150.148:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (7921), with CRLF, LF line terminators
Hash 1c380eb40d76b5f688c719e77aea510e
74cc747037bea1712694ac101994f633706cc980
cec7603c9f64383a7f955708cf2b37d557e3082f828f569f1568f451a5331290
Analyzer Verdict Alert fortinet Malware
GET /about/ HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:55 GMT
server: Apache
vary: Accept-Encoding,Cookie,User-Agent
content-encoding: gzip
content-length: 11373
last-modified: Fri, 09 Sep 2022 19:59:52 GMT
cache-control: max-age=3, must-revalidate, max-age=600
expires: Fri, 09 Sep 2022 20:09:55 GMT
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.115200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.115:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Fri, 09 Sep 2022 19:56:07 GMT
Expires: Fri, 09 Sep 2022 20:52:54 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ROL6ZzHME8tnAVPIqmsL7E0xx3HgSJS8sY-eObTHi2WS1c_O_OP6rg==
Age: 228
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 54f9e2ed11c19f565afc5d45d2f1e499
5c933cf89e4be594a152d7b1aa7bed6ab42169df
1deae88857366dba09c5e498d9067529377741b3c51b711b4adb88d861f58718
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 19:59:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
junk-bros.com/wp-content/cache/fvm/min/1660842507-css10f481269bfe889e867593daece4fa366afc67d4d023b0917a3cae7c607a8.css
173.236.150.148200 OK 1.0 kB URL HTTP/2 junk-bros.com/wp-content/cache/fvm/min/1660842507-css10f481269bfe889e867593daece4fa366afc67d4d023b0917a3cae7c607a8.css
IP 173.236.150.148:0
File type ASCII text, with very long lines (3920)
Hash b3cb52233a5162b36a5f07567273dd97
746a7b193589387a327fe44e4de1dd4fad62859a
7576364063bba54851aac8700a78081f250951de0ad68ddbbd4e80357ca34f9f
GET /wp-content/cache/fvm/min/1660842507-css10f481269bfe889e867593daece4fa366afc67d4d023b0917a3cae7c607a8.css HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:55 GMT
server: Apache
last-modified: Thu, 18 Aug 2022 17:09:35 GMT
etag: "fb4-5e6870bba5035-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 09 Oct 2022 19:59:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
timing-allow-origin: *
content-length: 1044
content-type: text/css
X-Firefox-Spdy: h2
junk-bros.com/wp-content/cache/fvm/min/1660842507-cssd8a6b9638db82a182e2c74aa6f744a6c393a538b5b90388e0a0c7e1232200.css
173.236.150.148200 OK 862 B URL HTTP/2 junk-bros.com/wp-content/cache/fvm/min/1660842507-cssd8a6b9638db82a182e2c74aa6f744a6c393a538b5b90388e0a0c7e1232200.css
IP 173.236.150.148:0
File type ASCII text, with very long lines (3032)
Hash 0fe17ebdd82187f46ebc0f8c1c3ee2a7
f580fbde44426e049c5bd96a7c323d15025ae873
411a37700d1fef97f8dee55e85b02cdf90a2483df47f35e7feb8d1d194817249
GET /wp-content/cache/fvm/min/1660842507-cssd8a6b9638db82a182e2c74aa6f744a6c393a538b5b90388e0a0c7e1232200.css HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:55 GMT
server: Apache
last-modified: Thu, 18 Aug 2022 17:09:35 GMT
etag: "c3e-5e6870bbd2e93-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 09 Oct 2022 19:59:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
timing-allow-origin: *
content-length: 862
content-type: text/css
X-Firefox-Spdy: h2
junk-bros.com/wp-content/cache/fvm/min/1660842507-cssb75b02eb111a45ac00e74dc0c1bff95ef2575d96931398aab3f2e0ccadac5.css
173.236.150.148200 OK 728 B URL HTTP/2 junk-bros.com/wp-content/cache/fvm/min/1660842507-cssb75b02eb111a45ac00e74dc0c1bff95ef2575d96931398aab3f2e0ccadac5.css
IP 173.236.150.148:0
File type ASCII text, with very long lines (1917)
Hash d3f46ce096844a303418a78995c78545
a0f287d4ad3793ed1cf1bc039099601a84b8832a
b39c19dc26206b4e1cd35b4ed41682eb09331ac60ac6af8c22245fdf2650fbb6
GET /wp-content/cache/fvm/min/1660842507-cssb75b02eb111a45ac00e74dc0c1bff95ef2575d96931398aab3f2e0ccadac5.css HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:55 GMT
server: Apache
last-modified: Thu, 18 Aug 2022 17:09:35 GMT
etag: "7e4-5e6870bbd4dd3-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 09 Oct 2022 19:59:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
timing-allow-origin: *
content-length: 728
content-type: text/css
X-Firefox-Spdy: h2
junk-bros.com/wp-content/cache/fvm/min/1660842507-css2413ac3e54699117d5b545d8db6e2fe794bd46c8beb73f4acef15a00e7950.css
173.236.150.148200 OK 976 B URL HTTP/2 junk-bros.com/wp-content/cache/fvm/min/1660842507-css2413ac3e54699117d5b545d8db6e2fe794bd46c8beb73f4acef15a00e7950.css
IP 173.236.150.148:0
File type ASCII text, with very long lines (1948)
Hash 852681973542600c9936b5b7b232a960
447bf4f622d13f98c8e6a7a9f863aa62f841eadd
ac249b0c37e2c9b1c3cf0e3ee548ea4ebdf33c69236d658fd5a0eecc85a89e83
GET /wp-content/cache/fvm/min/1660842507-css2413ac3e54699117d5b545d8db6e2fe794bd46c8beb73f4acef15a00e7950.css HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:55 GMT
server: Apache
last-modified: Thu, 18 Aug 2022 17:09:35 GMT
etag: "842-5e6870bbe47d2-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 09 Oct 2022 19:59:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
timing-allow-origin: *
content-length: 976
content-type: text/css
X-Firefox-Spdy: h2
junk-bros.com/wp-content/cache/fvm/min/1660842507-css147d74af5d0af96e17a91cba4e74f2418125f6a8ab07f49dd1dac8a8e161f.css
173.236.150.148200 OK 3.4 kB URL HTTP/2 junk-bros.com/wp-content/cache/fvm/min/1660842507-css147d74af5d0af96e17a91cba4e74f2418125f6a8ab07f49dd1dac8a8e161f.css
IP 173.236.150.148:0
File type ASCII text, with very long lines (17182)
Hash 87892d2473c86fa52455b988278f774e
60aaa22eaaa8dd7756b2a6aa51a53d072b516e1b
56deb5c191cf20383df1a45058374d3f44be8ce9e8aad7c1a19898f4302a2957
GET /wp-content/cache/fvm/min/1660842507-css147d74af5d0af96e17a91cba4e74f2418125f6a8ab07f49dd1dac8a8e161f.css HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:55 GMT
server: Apache
last-modified: Thu, 18 Aug 2022 17:09:37 GMT
etag: "438b-5e6870bd71f1e-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 09 Oct 2022 19:59:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
timing-allow-origin: *
content-length: 3427
content-type: text/css
X-Firefox-Spdy: h2
junk-bros.com/wp-content/cache/fvm/min/1660842507-cssf4317f78e6e1756f20476b127675715aad9cc6f9d877532c8f60f67d1954c.css
173.236.150.148200 OK 3.6 kB URL HTTP/2 junk-bros.com/wp-content/cache/fvm/min/1660842507-cssf4317f78e6e1756f20476b127675715aad9cc6f9d877532c8f60f67d1954c.css
IP 173.236.150.148:0
File type ASCII text, with very long lines (24539)
Hash 12d8bb40b4f429ae90f4462c8a2651cc
8473a6c9fe762f5c9e88b816c3d14224008cc8e9
45377fbbb00c8bb266f2f06e43ee20cd1b227016a1e4e5740c427cce1f357859
GET /wp-content/cache/fvm/min/1660842507-cssf4317f78e6e1756f20476b127675715aad9cc6f9d877532c8f60f67d1954c.css HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:55 GMT
server: Apache
last-modified: Thu, 18 Aug 2022 17:09:35 GMT
etag: "603a-5e6870bbaec75-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 09 Oct 2022 19:59:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
timing-allow-origin: *
content-length: 3595
content-type: text/css
X-Firefox-Spdy: h2
junk-bros.com/wp-content/cache/fvm/min/1660842507-csse686b8e1a9dfafd33bb9a147741c995157e9ead1a58c7efe9996e2bc89085.css
173.236.150.148200 OK 12 kB URL HTTP/2 junk-bros.com/wp-content/cache/fvm/min/1660842507-csse686b8e1a9dfafd33bb9a147741c995157e9ead1a58c7efe9996e2bc89085.css
IP 173.236.150.148:0
File type ASCII text, with very long lines (65449)
Hash da52302b562825c1f5dcfe09263c905c
931976d2cbc5d9ba90bfc59f68604e780d9aac8a
edfd60b961b953b795a58dc3e94bd47435b5e154a9dcb67175ea5fb369ef4ef1
GET /wp-content/cache/fvm/min/1660842507-csse686b8e1a9dfafd33bb9a147741c995157e9ead1a58c7efe9996e2bc89085.css HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:55 GMT
server: Apache
last-modified: Thu, 18 Aug 2022 17:09:35 GMT
etag: "15b8e-5e6870bbcf013-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 09 Oct 2022 19:59:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
timing-allow-origin: *
content-length: 12189
content-type: text/css
X-Firefox-Spdy: h2
junk-bros.com/wp-content/cache/fvm/min/1660842507-css02ab914b709d252256d30ebb20c82813e2498b8d4f943328efd4247d13dd7.css
173.236.150.148200 OK 2.5 kB URL HTTP/2 junk-bros.com/wp-content/cache/fvm/min/1660842507-css02ab914b709d252256d30ebb20c82813e2498b8d4f943328efd4247d13dd7.css
IP 173.236.150.148:0
File type ASCII text, with very long lines (25948)
Hash c1897ee7bb29655b745a5da803ee14c6
693c47b576ef6b7e0821c3f31b6921bb1a0cb39f
9639da2840f07de5173bc12dca0a826121d672b2974797d43d84384dc23d9e1c
GET /wp-content/cache/fvm/min/1660842507-css02ab914b709d252256d30ebb20c82813e2498b8d4f943328efd4247d13dd7.css HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:55 GMT
server: Apache
last-modified: Thu, 18 Aug 2022 17:09:37 GMT
etag: "65af-5e6870bd7bb5d-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 09 Oct 2022 19:59:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
timing-allow-origin: *
content-length: 2477
content-type: text/css
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash b616d694cbea5f04ef281c5e84181d0e
0df5317bdcf488c8e9f6a2ddcbe488af99ed6d3a
e8a821508fa64931ec57f41a95fa59c327461b71f83b6a83348ed0aa2d8b59fb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1578
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 19:59:55 GMT
Last-Modified: Fri, 09 Sep 2022 19:33:37 GMT
Server: ECS (amb/6B8B)
X-Cache: HIT
Content-Length: 471
www.googletagmanager.com/gtag/js?id=AW-926168428
142.250.74.72200 OK 59 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=AW-926168428
IP 142.250.74.72:0
File type ASCII text, with very long lines (1825)
Hash 84e685df7b0fa4578378bdb066f65a29
ce7202739874d795a1229e703d194219eecbbab9
a6b182107e0a6341efc55c1afb68f2af6b80495eb6fbeb76781089a718b6f457
GET /gtag/js?id=AW-926168428 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 09 Sep 2022 19:59:55 GMT
expires: Fri, 09 Sep 2022 19:59:55 GMT
cache-control: private, max-age=900
last-modified: Fri, 09 Sep 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 58588
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash a4ae55dbf8e22a357ee36e37fafa37af
18d33f606a8bc692802cfaa3a22ceb4a5eedca8c
8343a46c0a87b15be71cab0ae84912ed07d3104d4b621c55e3cd69367f58ebb6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 19:59:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
junk-bros.com/wp-content/cache/fvm/min/1660842507-css759d890e3e92d0c5b9c7f88822a76f8dcd0070708e2c9480bfe375e1c7b15.css
173.236.150.148200 OK 345 B URL HTTP/2 junk-bros.com/wp-content/cache/fvm/min/1660842507-css759d890e3e92d0c5b9c7f88822a76f8dcd0070708e2c9480bfe375e1c7b15.css
IP 173.236.150.148:0
File type ASCII text, with very long lines (954)
Hash 9b2e68ea370d0b422632b18922d6789a
5510f99732f570b9b52584b28146aa4f18f3f89d
b5c0e8908a33216e8eb5e5cfe14b0449e7179761847f4119e2c2bfd2f8574947
GET /wp-content/cache/fvm/min/1660842507-css759d890e3e92d0c5b9c7f88822a76f8dcd0070708e2c9480bfe375e1c7b15.css HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:55 GMT
server: Apache
last-modified: Thu, 18 Aug 2022 17:09:38 GMT
etag: "420-5e6870be6bf11-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 09 Oct 2022 19:59:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
timing-allow-origin: *
content-length: 345
content-type: text/css
X-Firefox-Spdy: h2
junk-bros.com/wp-content/cache/fvm/min/1660842507-css7401d5d87213ae13d6cff703f6e4600cc5aedba854a73a561e8a7e8de690c.css
173.236.150.148200 OK 198 B URL HTTP/2 junk-bros.com/wp-content/cache/fvm/min/1660842507-css7401d5d87213ae13d6cff703f6e4600cc5aedba854a73a561e8a7e8de690c.css
IP 173.236.150.148:0
Hash acb3746c41ee6d028b03db9e254b8778
4b6d47e1d882a0e79af0e088b01f5c39a21ac7f3
caef720b542e74534c2954bac4fdc5ab516c61ef57527c0d521170588d53672c
GET /wp-content/cache/fvm/min/1660842507-css7401d5d87213ae13d6cff703f6e4600cc5aedba854a73a561e8a7e8de690c.css HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:55 GMT
server: Apache
last-modified: Thu, 18 Aug 2022 17:09:38 GMT
etag: "ec-5e6870be5a5d2-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 09 Oct 2022 19:59:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
timing-allow-origin: *
content-length: 198
content-type: text/css
X-Firefox-Spdy: h2
junk-bros.com/wp-content/cache/fvm/min/1660842507-css1da2226170d5a24ecc32045929a79b9c126f5e276732d1cd23db7428ce01e.css
173.236.150.148200 OK 404 B URL HTTP/2 junk-bros.com/wp-content/cache/fvm/min/1660842507-css1da2226170d5a24ecc32045929a79b9c126f5e276732d1cd23db7428ce01e.css
IP 173.236.150.148:0
File type ASCII text, with very long lines (1408)
Hash aae6abe83f6edc3ef9dc9656738bb352
b96a5951a5d3b4c9a9400dd3ac906b280099e2f7
05d6b46b1e9cdff2f42fc0f49adc1671a69bf7acbe8996e89823962785c4931c
GET /wp-content/cache/fvm/min/1660842507-css1da2226170d5a24ecc32045929a79b9c126f5e276732d1cd23db7428ce01e.css HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:55 GMT
server: Apache
last-modified: Thu, 18 Aug 2022 17:09:38 GMT
etag: "62e-5e6870be48c93-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 09 Oct 2022 19:59:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
timing-allow-origin: *
content-length: 404
content-type: text/css
X-Firefox-Spdy: h2
junk-bros.com/wp-content/cache/fvm/min/1660842507-css9129fed1f5b1be8ecd4e2bd28596c86d11a875bc6151dabac9ecbdbcbfb58.css
173.236.150.148200 OK 7.0 kB URL HTTP/2 junk-bros.com/wp-content/cache/fvm/min/1660842507-css9129fed1f5b1be8ecd4e2bd28596c86d11a875bc6151dabac9ecbdbcbfb58.css
IP 173.236.150.148:0
File type ASCII text, with very long lines (30534)
Hash ef8bad6db93dfa7cc8e1888daa724b6b
e36184319bb234578ca6aaeae81d570a166379ec
fcf73fe8b24cecfd26603768744bd71816cf0d8ee2794241d264d6208112efa6
GET /wp-content/cache/fvm/min/1660842507-css9129fed1f5b1be8ecd4e2bd28596c86d11a875bc6151dabac9ecbdbcbfb58.css HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:55 GMT
server: Apache
last-modified: Thu, 18 Aug 2022 17:09:37 GMT
etag: "7854-5e6870bd8867d-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 09 Oct 2022 19:59:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
timing-allow-origin: *
content-length: 7048
content-type: text/css
X-Firefox-Spdy: h2
junk-bros.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
173.236.150.148200 OK 4.2 kB URL HTTP/2 junk-bros.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP 173.236.150.148:0
File type ASCII text, with very long lines (11126)
Hash a65d5500f76589b8c41c6d1e8895c456
fc9b5b82c4a5c6973efcbca5f6ca01a5eb252a59
9cb0e5695834af1b05fa4e3699dc7be10857e491c8c511edb63ed7f337083d1d
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:55 GMT
server: Apache
last-modified: Wed, 20 Jan 2021 00:31:01 GMT
etag: "2bd8-5b94a11ce3b40-gzip"
accept-ranges: bytes
cache-control: max-age=604800
expires: Fri, 16 Sep 2022 19:59:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
timing-allow-origin: *
content-length: 4204
content-type: application/javascript
X-Firefox-Spdy: h2
junk-bros.com/wp-content/cache/fvm/min/1660842507-cssaa07045b6edb2aef8ebbe59dd86affe0d4dae6374ab01c32738e597388e75.css
173.236.150.148200 OK 12 kB URL HTTP/2 junk-bros.com/wp-content/cache/fvm/min/1660842507-cssaa07045b6edb2aef8ebbe59dd86affe0d4dae6374ab01c32738e597388e75.css
IP 173.236.150.148:0
File type Unicode text, UTF-8 text, with very long lines (63889)
Hash c5d7c9e2f88954218aa891baf040e18e
98b2776bc2ccd8904deac74da824f63f1b35cd51
b8cb2617f4335d4ed17b732ce3ecac2658c61a1ff2b5a08148f3c7b20ff95fea
GET /wp-content/cache/fvm/min/1660842507-cssaa07045b6edb2aef8ebbe59dd86affe0d4dae6374ab01c32738e597388e75.css HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:55 GMT
server: Apache
last-modified: Thu, 18 Aug 2022 17:09:37 GMT
etag: "fc0f-5e6870bdac89b-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 09 Oct 2022 19:59:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
timing-allow-origin: *
content-length: 11539
content-type: text/css
X-Firefox-Spdy: h2
junk-bros.com/wp-content/cache/fvm/min/1660842507-css5d30b7aaebc1eb70b7abc8e4f3549a0f95a76e7199f1f7653d688612440a6.css
173.236.150.148200 OK 1.1 kB URL HTTP/2 junk-bros.com/wp-content/cache/fvm/min/1660842507-css5d30b7aaebc1eb70b7abc8e4f3549a0f95a76e7199f1f7653d688612440a6.css
IP 173.236.150.148:0
File type ASCII text, with very long lines (3342)
Hash cef4775dcf45433a6eaba538359f0a57
44532aa3364a7c108c58e8402fdb9eb44a7de11b
3c9ce7064e35cc4dee82d3c6cb9aa58de9416739fc419fb358ce89b116f7545c
GET /wp-content/cache/fvm/min/1660842507-css5d30b7aaebc1eb70b7abc8e4f3549a0f95a76e7199f1f7653d688612440a6.css HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:55 GMT
server: Apache
last-modified: Thu, 18 Aug 2022 17:09:37 GMT
etag: "d69-5e6870bdaf77b-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 09 Oct 2022 19:59:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
timing-allow-origin: *
content-length: 1074
content-type: text/css
X-Firefox-Spdy: h2
junk-bros.com/wp-content/plugins/jquery-colorbox/js/jquery.colorbox-min.js?ver=1.4.33
173.236.150.148200 OK 4.7 kB URL HTTP/2 junk-bros.com/wp-content/plugins/jquery-colorbox/js/jquery.colorbox-min.js?ver=1.4.33
IP 173.236.150.148:0
File type ASCII text, with very long lines (10897)
Hash 55fc263e144398f9ffa28b40c22c2d8f
2a347aa1cff5d31bb282bcca320bd174262dd652
f4ae0c6ee817d21f51a6ca9bd779eb584f8ab4cb6e4f46bb737b0f34fa530af5
GET /wp-content/plugins/jquery-colorbox/js/jquery.colorbox-min.js?ver=1.4.33 HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:55 GMT
server: Apache
last-modified: Fri, 12 Jan 2018 18:37:17 GMT
etag: "2b57-562988dcb1140-gzip"
accept-ranges: bytes
cache-control: max-age=604800
expires: Fri, 16 Sep 2022 19:59:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
timing-allow-origin: *
content-length: 4666
content-type: application/javascript
X-Firefox-Spdy: h2
junk-bros.com/wp-content/plugins/jquery-colorbox/js/jquery-colorbox-wrapper-min.js?ver=4.6.2
173.236.150.148200 OK 2.3 kB URL HTTP/2 junk-bros.com/wp-content/plugins/jquery-colorbox/js/jquery-colorbox-wrapper-min.js?ver=4.6.2
IP 173.236.150.148:0
File type ASCII text, with very long lines (9090), with no line terminators
Hash e45fd67f88c919043830fabe90ef490f
58557359ecc870dbc2229804701101b18e1756e6
5b6166ca76738ecfd9b4360b5dd735a88714433bd60ee9e4db6a3c37bc0b60a9
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/jquery-colorbox/js/jquery-colorbox-wrapper-min.js?ver=4.6.2 HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:55 GMT
server: Apache
last-modified: Fri, 12 Jan 2018 18:37:17 GMT
etag: "2382-562988dcb1140-gzip"
accept-ranges: bytes
cache-control: max-age=604800
expires: Fri, 16 Sep 2022 19:59:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
timing-allow-origin: *
content-length: 2287
content-type: application/javascript
X-Firefox-Spdy: h2
junk-bros.com/wp-content/themes/kdw-framework4/foundation/flex/js/vendor/what-input.js?ver=1
173.236.150.148200 OK 2.7 kB URL HTTP/2 junk-bros.com/wp-content/themes/kdw-framework4/foundation/flex/js/vendor/what-input.js?ver=1
IP 173.236.150.148:0
Hash 59d9fdb1c1d71d0053af4e6c198ec002
23e7c6710dc03b7a2f34a797336b2c3ec0b76601
ce02d2fbd16b468505d511e75599113bed31300456db0c6a01ca53f0f54c696e
GET /wp-content/themes/kdw-framework4/foundation/flex/js/vendor/what-input.js?ver=1 HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:55 GMT
server: Apache
last-modified: Wed, 18 Jul 2018 03:31:42 GMT
etag: "21d7-5713db37fe380-gzip"
accept-ranges: bytes
cache-control: max-age=604800
expires: Fri, 16 Sep 2022 19:59:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
timing-allow-origin: *
content-length: 2698
content-type: application/javascript
X-Firefox-Spdy: h2
junk-bros.com/wp-content/themes/kdw-framework4/js/jQuery.headroom.js?ver=20160415
173.236.150.148200 OK 358 B URL HTTP/2 junk-bros.com/wp-content/themes/kdw-framework4/js/jQuery.headroom.js?ver=20160415
IP 173.236.150.148:0
Hash 1923ecc14434f98935b4527db2d2b6a8
464e71886249a4ff9a7fae7a6512b25666f71085
00e24903cf3a6681a6abe3acab68c36269f6446b28d596d5bc308460f640d75b
GET /wp-content/themes/kdw-framework4/js/jQuery.headroom.js?ver=20160415 HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:55 GMT
server: Apache
last-modified: Mon, 15 Oct 2018 18:50:23 GMT
etag: "353-57848e8d7f9c0-gzip"
accept-ranges: bytes
cache-control: max-age=604800
expires: Fri, 16 Sep 2022 19:59:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
timing-allow-origin: *
content-length: 358
content-type: application/javascript
X-Firefox-Spdy: h2
junk-bros.com/wp-content/themes/kdw-framework4/js/skip-link-focus-fix.js?ver=20130115
173.236.150.148200 OK 379 B URL HTTP/2 junk-bros.com/wp-content/themes/kdw-framework4/js/skip-link-focus-fix.js?ver=20130115
IP 173.236.150.148:0
Hash b1f6fbeb350edd1c0abe2caa7940fa93
a5e1adadf006f39bc28e401d2f2317d9c8ca9217
df972baac69f7bb098b9e79ae1c183643d9bc71733c650b9be434bc8788f0de8
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/kdw-framework4/js/skip-link-focus-fix.js?ver=20130115 HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:55 GMT
server: Apache
last-modified: Wed, 18 Jul 2018 03:25:21 GMT
etag: "2ef-5713d9cca4a40-gzip"
accept-ranges: bytes
cache-control: max-age=604800
expires: Fri, 16 Sep 2022 19:59:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
timing-allow-origin: *
content-length: 379
content-type: application/javascript
X-Firefox-Spdy: h2
junk-bros.com/wp-content/themes/kdw-framework4/js/navigation.js?ver=20120206
173.236.150.148200 OK 869 B URL HTTP/2 junk-bros.com/wp-content/themes/kdw-framework4/js/navigation.js?ver=20120206
IP 173.236.150.148:0
Hash ac8aa9c0d079920f5b3f851138fe3eb8
f9339b6b0bd7084b94089edc419507559379c172
7f54db7dd8c794a005d49c390e0cb71ce7ef3a857e541082a537d72fa05863be
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/kdw-framework4/js/navigation.js?ver=20120206 HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:55 GMT
server: Apache
last-modified: Wed, 18 Jul 2018 03:25:21 GMT
etag: "8e7-5713d9cca4a40-gzip"
accept-ranges: bytes
cache-control: max-age=604800
expires: Fri, 16 Sep 2022 19:59:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
timing-allow-origin: *
content-length: 869
content-type: application/javascript
X-Firefox-Spdy: h2
junk-bros.com/wp-content/plugins/bxslider-kdw/jquery.bxslider/jquery.bxslider.js?ver=1
173.236.150.148200 OK 12 kB URL HTTP/2 junk-bros.com/wp-content/plugins/bxslider-kdw/jquery.bxslider/jquery.bxslider.js?ver=1
IP 173.236.150.148:0
Hash fb0a58b09a537f9a6058fcd50524413c
5637e81683a77c7b201a3cdd7be5e58b5cf760c4
1ac5589a6db032439d0d25802f759276eac10a3509265a00e33755cb5b4c641e
GET /wp-content/plugins/bxslider-kdw/jquery.bxslider/jquery.bxslider.js?ver=1 HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:55 GMT
server: Apache
last-modified: Tue, 20 Oct 2015 16:39:48 GMT
etag: "c58d-5228be8f93d00-gzip"
accept-ranges: bytes
cache-control: max-age=604800
expires: Fri, 16 Sep 2022 19:59:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
timing-allow-origin: *
content-length: 12256
content-type: application/javascript
X-Firefox-Spdy: h2
junk-bros.com/wp-content/themes/kdw-framework4/js/headroom.min.js?ver=20160415
173.236.150.148200 OK 1.7 kB URL HTTP/2 junk-bros.com/wp-content/themes/kdw-framework4/js/headroom.min.js?ver=20160415
IP 173.236.150.148:0
File type ASCII text, with very long lines (5172)
Hash 155b6edb33290bd30b20c506f6473d22
a644ece35cfeba88e8d2117ac5f7ff3a7d7075a8
d19ab90bd006596f003fa10c540321794320d4eb2ab88ef258464a8161e1d6f0
GET /wp-content/themes/kdw-framework4/js/headroom.min.js?ver=20160415 HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:55 GMT
server: Apache
last-modified: Mon, 15 Oct 2018 18:50:17 GMT
etag: "14ef-57848e87c6c40-gzip"
accept-ranges: bytes
cache-control: max-age=604800
expires: Fri, 16 Sep 2022 19:59:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
timing-allow-origin: *
content-length: 1691
content-type: application/javascript
X-Firefox-Spdy: h2
junk-bros.com/wp-content/themes/kdw-framework4/aos/aos.js?ver=1
173.236.150.148200 OK 4.3 kB URL HTTP/2 junk-bros.com/wp-content/themes/kdw-framework4/aos/aos.js?ver=1
IP 173.236.150.148:0
File type ASCII text, with very long lines (12414)
Hash 48ef30ee4640112f1ecb074b006dfa15
e82ea36787a899e2dd8fe0771a73059274abcc23
6c72fd254490fc3dc1f4383e31c3b14b065498298f200c853a9715a8a98dab68
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/kdw-framework4/aos/aos.js?ver=1 HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:55 GMT
server: Apache
last-modified: Wed, 18 Jul 2018 03:25:57 GMT
etag: "309e-5713d9eef9b40-gzip"
accept-ranges: bytes
cache-control: max-age=604800
expires: Fri, 16 Sep 2022 19:59:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
timing-allow-origin: *
content-length: 4295
content-type: application/javascript
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash d0c56e0b2955a5dd7f37ba4bbf5727b4
f435bd1f6fb8ec931f1817fe4b91e6b86a7cb14b
99f7da9dca677db8e9cec5491c0d6d8a86b9c5e907907c2fdd30973c747f4282
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6456
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 19:59:56 GMT
Last-Modified: Fri, 09 Sep 2022 18:12:20 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
junk-bros.com/wp-content/uploads/2018/10/Junk-Bros-as-kids.jpg
173.236.150.148200 OK 91 kB URL HTTP/2 junk-bros.com/wp-content/uploads/2018/10/Junk-Bros-as-kids.jpg
IP 173.236.150.148:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1000x667, components 3\012- data
Hash 3706113e046393c83a55f84a86464809
167b82cae2dbfcb9a6d840b9ef6e647addc3970b
a26ae8237e097a6f656127d5af4e18571f50a8c00ae5a22478e97781700a1aae
GET /wp-content/uploads/2018/10/Junk-Bros-as-kids.jpg HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:55 GMT
server: Apache
last-modified: Fri, 19 Oct 2018 01:25:11 GMT
etag: "16483-5788ac6484bc0"
accept-ranges: bytes
content-length: 91267
cache-control: max-age=31536000
expires: Sat, 09 Sep 2023 19:59:55 GMT
vary: User-Agent
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/jpeg
X-Firefox-Spdy: h2
junk-bros.com/wp-content/uploads/2018/10/Meet-Junk-Bros.jpg
173.236.150.148200 OK 156 kB URL HTTP/2 junk-bros.com/wp-content/uploads/2018/10/Meet-Junk-Bros.jpg
IP 173.236.150.148:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=II*], baseline, precision 8, 1000x667, components 3\012- data
Size 156 kB (156267 bytes)
Hash 3d6db782dbd2f4e778e5f0af140ac4f3
2334d74b840fd5708c586e85126e05883f14cc15
75c683682e9c6144f9229ffb6fc0abcbe48c8febbbbd5dc8c7d1a30720e20fab
GET /wp-content/uploads/2018/10/Meet-Junk-Bros.jpg HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:55 GMT
server: Apache
last-modified: Fri, 19 Oct 2018 01:16:13 GMT
etag: "2626b-5788aa6371140"
accept-ranges: bytes
content-length: 156267
cache-control: max-age=31536000
expires: Sat, 09 Sep 2023 19:59:55 GMT
vary: User-Agent
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/jpeg
X-Firefox-Spdy: h2
use.typekit.net/af/a3a591/00000000000000003b9adf16/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
23.36.76.186200 OK 17 kB URL HTTP/2 use.typekit.net/af/a3a591/00000000000000003b9adf16/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
IP 23.36.76.186:0
ASN #20940 Akamai International B.V.
File type Web Open Font Format, CFF, length 17176, version 0.0\012- data
Hash 00fca575b82d2e358aedcd3e44d6d616
1a1f5f7d636340db271a2a2341d1936c22b6064c
56691811b88eee34115e1d1a1105136d3625b41eeac5050b3d9e3cb9c1b9570c
GET /af/a3a591/00000000000000003b9adf16/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://junk-bros.com
Connection: keep-alive
Referer: https://junk-bros.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff
content-length: 17176
etag: "a18552f270e3b80114dd8355601232244c134f52"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Fri, 09 Sep 2022 19:59:56 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/7b2ae2/00000000000000003b9adf10/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n3&v=3
23.36.76.186200 OK 17 kB URL HTTP/2 use.typekit.net/af/7b2ae2/00000000000000003b9adf10/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n3&v=3
IP 23.36.76.186:0
ASN #20940 Akamai International B.V.
File type Web Open Font Format, CFF, length 16836, version 0.0\012- data
Hash c0e78e44783eede671c13a22615202f8
c7b11fb559a39b5f2b1f7070bb2f158b7cc66455
43139669ddef5770f1027b140210f4020bf2df88163323f96d573887aea10c70
GET /af/7b2ae2/00000000000000003b9adf10/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n3&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://junk-bros.com
Connection: keep-alive
Referer: https://junk-bros.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff
content-length: 16836
etag: "c2a8c865ef54ceb38fedb7bba87945da630a487c"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Fri, 09 Sep 2022 19:59:56 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/c7fc58/00000000000000003b9adf25/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3
23.36.76.186200 OK 17 kB URL HTTP/2 use.typekit.net/af/c7fc58/00000000000000003b9adf25/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3
IP 23.36.76.186:0
ASN #20940 Akamai International B.V.
File type Web Open Font Format, CFF, length 17016, version 0.0\012- data
Hash 08a825326f10c7f0cee5bf4860bfceed
ecf80af7ee9f59c44617382bbf7fbe8fb68e454e
a45448cc19027985fd87cabf11e1ee52843066c747e16f4cad6be5741cdd3015
GET /af/c7fc58/00000000000000003b9adf25/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://junk-bros.com
Connection: keep-alive
Referer: https://junk-bros.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff
content-length: 17016
etag: "5843c189326c0176e191dcb934c22235dc4b22b2"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Fri, 09 Sep 2022 19:59:56 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 61961ee76ab6c28f6e17eb7a1df4a3ea
ab4e8c9c284a0eed6b2fab77c9df432839158b3a
9e3bec23cc8ea49ab4e3a3a244a428c59e6c48c80359c473155584807ba0de41
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 19:59:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
use.typekit.net/af/8e69e7/00000000000000003b9adf24/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=i7&v=3
23.36.76.186200 OK 18 kB URL HTTP/2 use.typekit.net/af/8e69e7/00000000000000003b9adf24/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=i7&v=3
IP 23.36.76.186:0
ASN #20940 Akamai International B.V.
File type Web Open Font Format, CFF, length 18288, version 0.0\012- data
Hash b6aae327c14cf6a230b97dd684b19335
451ed085674fcc9965f50ebfc045399eaad45571
f4399c24fc19951bb4bb5083f279d6178a05a60c4cb8a0a776014900ab24eaea
GET /af/8e69e7/00000000000000003b9adf24/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=i7&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://junk-bros.com
Connection: keep-alive
Referer: https://junk-bros.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff
content-length: 18288
etag: "dffa49c5ac64063a94efc50106234b59f23a889e"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Fri, 09 Sep 2022 19:59:56 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 61961ee76ab6c28f6e17eb7a1df4a3ea
ab4e8c9c284a0eed6b2fab77c9df432839158b3a
9e3bec23cc8ea49ab4e3a3a244a428c59e6c48c80359c473155584807ba0de41
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 19:59:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVQ.woff
142.250.74.163200 OK 21 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVQ.woff
IP 142.250.74.163:0
File type Web Open Font Format, TrueType, length 20712, version 1.1\012- data
Hash 600270a4cedf2a102a1d49e5148e6622
a5e4c1b17ab38d08e408937a5e5699d65c5a9f2b
22459e1de13b29a9997c47434287b7b07bcd58013dc71c6fa14637b0d46d469c
GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVQ.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://junk-bros.com
Connection: keep-alive
Referer: https://junk-bros.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20712
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Sep 2022 19:14:38 GMT
expires: Tue, 05 Sep 2023 19:14:38 GMT
cache-control: public, max-age=31536000
age: 348318
last-modified: Mon, 15 Aug 2022 18:14:42 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4gaVQ.woff
142.250.74.163200 OK 20 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4gaVQ.woff
IP 142.250.74.163:0
File type Web Open Font Format, TrueType, length 20172, version 1.1\012- data
Hash dce81ef083f18473a89ab8626b4916cc
18dcf01a99d6491ee75ace209701edf6bdc881a5
c1582b13eb162368dd0dcad97e027ffb1ebfa8bcd67cf2801c43c94b4a1bfeae
GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4gaVQ.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://junk-bros.com
Connection: keep-alive
Referer: https://junk-bros.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20172
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Sep 2022 19:29:59 GMT
expires: Tue, 05 Sep 2023 19:29:59 GMT
cache-control: public, max-age=31536000
age: 347397
last-modified: Mon, 15 Aug 2022 18:14:43 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
chatbot.workiz.com/prod/iframe.js?ac=cfc0cc9eacda4052f4ba65e1b4b8d81b0406f76ed6d992dc41982507dfaf06f3&2
35.241.58.164200 OK 16 kB URL HTTP/2 chatbot.workiz.com/prod/iframe.js?ac=cfc0cc9eacda4052f4ba65e1b4b8d81b0406f76ed6d992dc41982507dfaf06f3&2
IP 35.241.58.164:0
File type ASCII text, with very long lines (3289)
Hash dbc02b209ddd94d9f882f78d91158559
c1a9cab91efa4de4c0f551eb36a80d373df4b5f0
a0238b8ed6d9e2cfd02b3f5d38a0f66b245d9337a1da86cf059e1bafef6a0204
GET /prod/iframe.js?ac=cfc0cc9eacda4052f4ba65e1b4b8d81b0406f76ed6d992dc41982507dfaf06f3&2 HTTP/1.1
Host: chatbot.workiz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdt9NNvT04bFKAAqdJqYI3mlgYac0fxn1ANXP4hA1hq1F4SK3JyXgXxsOg9FwPV5_plg51Q07Zr7JpSjSUdd5NcbXy0XWs57
date: Fri, 09 Sep 2022 19:59:55 GMT
cache-control: public, max-age=300
expires: Fri, 09 Sep 2022 20:04:55 GMT
last-modified: Thu, 10 Mar 2022 07:41:16 GMT
etag: "dbc02b209ddd94d9f882f78d91158559"
x-goog-generation: 1646898076747380
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 15884
content-type: application/javascript
content-language: en
x-goog-hash: crc32c=cqXduQ==, md5=28ArIJ3dlNn4gveNkRWFWQ==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 15884
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAexg.woff
142.250.74.163200 OK 22 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAexg.woff
IP 142.250.74.163:0
File type Web Open Font Format, TrueType, length 21856, version 1.1\012- data
Hash f1e23d3623fc049c4fa0d92d65c290d1
a841c22ed105c29669514e3b498a8fa15e5ee3fd
449a0794aba7211f9d615e10d47cf23a74d0ad7f0052150c88c6d1730353354a
GET /s/opensans/v34/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAexg.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://junk-bros.com
Connection: keep-alive
Referer: https://junk-bros.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Sep 2022 21:38:30 GMT
expires: Tue, 05 Sep 2023 21:38:30 GMT
cache-control: public, max-age=31536000
age: 339686
last-modified: Mon, 15 Aug 2022 18:13:13 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
junk-bros.com/wp-content/themes/kdw-framework4/images/kdw-footer.png
173.236.150.148200 OK 2.2 kB URL HTTP/2 junk-bros.com/wp-content/themes/kdw-framework4/images/kdw-footer.png
IP 173.236.150.148:0
File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash 3145aeaaaeb1c8e89a358f4ce647083d
8c6b6868cb0ce07420e85d1429744761f2b86cc2
fba5eba659a41c6a801656f1a6cfd352e112e508b4a4c8646c59937341f29d08
GET /wp-content/themes/kdw-framework4/images/kdw-footer.png HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/wp-content/cache/fvm/min/1660842507-cssaa07045b6edb2aef8ebbe59dd86affe0d4dae6374ab01c32738e597388e75.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:56 GMT
server: Apache
last-modified: Wed, 18 Jul 2018 03:25:15 GMT
etag: "86d-5713d9c6ebcc0"
accept-ranges: bytes
content-length: 2157
cache-control: max-age=31536000
expires: Sat, 09 Sep 2023 19:59:56 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash ebc205cf750164c31d1fce2318d1636b
9309949107d69193b1c5156d45fbcc91e20a0fe4
4ab7f53d17c5d642e17a3e78aa93dc133c4713e44ccccb849f04fdcca62be8b6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 19:59:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash b616d694cbea5f04ef281c5e84181d0e
0df5317bdcf488c8e9f6a2ddcbe488af99ed6d3a
e8a821508fa64931ec57f41a95fa59c327461b71f83b6a83348ed0aa2d8b59fb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1579
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 19:59:56 GMT
Last-Modified: Fri, 09 Sep 2022 19:33:37 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
junk-bros.com/wp-content/themes/kdw-framework4/font-awsome/fonts/fontawesome-webfont.woff
173.236.150.148200 OK 98 kB URL HTTP/2 junk-bros.com/wp-content/themes/kdw-framework4/font-awsome/fonts/fontawesome-webfont.woff
IP 173.236.150.148:0
File type Web Open Font Format, TrueType, length 98024, version 4.7\012- data
Hash fee66e712a8a08eef5805a46892932ad
28b782240b3e76db824e12c02754a9731a167527
ba0c59deb5450f5cb41b3f93609ee2d0d995415877ddfa223e8a8a7533474f07
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/kdw-framework4/font-awsome/fonts/fontawesome-webfont.woff HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://junk-bros.com/wp-content/cache/fvm/min/1660842507-css9129fed1f5b1be8ecd4e2bd28596c86d11a875bc6151dabac9ecbdbcbfb58.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:56 GMT
server: Apache
last-modified: Wed, 18 Jul 2018 03:26:24 GMT
etag: "17ee8-5713da08b9800"
accept-ranges: bytes
content-length: 98024
cache-control: max-age=2592000
expires: Sun, 09 Oct 2022 19:59:56 GMT
vary: User-Agent
access-control-allow-origin: *
timing-allow-origin: *
content-type: application/x-font-woff
X-Firefox-Spdy: h2
junk-bros.com/wp-content/themes/kdw-framework4/foundation-icons/foundation-icons.woff
173.236.150.148200 OK 32 kB URL HTTP/2 junk-bros.com/wp-content/themes/kdw-framework4/foundation-icons/foundation-icons.woff
IP 173.236.150.148:0
File type Web Open Font Format, TrueType, length 32020, version 0.0\012- data
Hash a188c2f768ce5033d3f5d47be7280e25
112fb0e498037f2fea036adb8105e47638159eaa
8c44c3feedae5331a281278ea3ba91d2255928a2f3010d316d6fbb9052e0c2ec
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/kdw-framework4/foundation-icons/foundation-icons.woff HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://junk-bros.com/wp-content/cache/fvm/min/1660842507-css147d74af5d0af96e17a91cba4e74f2418125f6a8ab07f49dd1dac8a8e161f.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:56 GMT
server: Apache
last-modified: Wed, 18 Jul 2018 03:25:33 GMT
etag: "7d14-5713d9d816540"
accept-ranges: bytes
content-length: 32020
cache-control: max-age=2592000
expires: Sun, 09 Oct 2022 19:59:56 GMT
vary: User-Agent
access-control-allow-origin: *
timing-allow-origin: *
content-type: application/x-font-woff
X-Firefox-Spdy: h2
junk-bros.com/wp-content/uploads/2018/10/Customer-Service-150x150.jpg
173.236.150.148200 OK 7.7 kB URL HTTP/2 junk-bros.com/wp-content/uploads/2018/10/Customer-Service-150x150.jpg
IP 173.236.150.148:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, copyright=II*], baseline, precision 8, 150x150, components 3\012- data
Hash 17f6f69fea002f1b3a93480b4c4a9676
4ca4510057063f141bb4168659a35c9ae079df69
47a013c27ddb51807d8c00fa3e822a940adb0654cae5855cb00bb8130c83fb88
GET /wp-content/uploads/2018/10/Customer-Service-150x150.jpg HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:56 GMT
server: Apache
last-modified: Fri, 19 Oct 2018 01:27:10 GMT
etag: "1e21-5788acd601780"
accept-ranges: bytes
content-length: 7713
cache-control: max-age=31536000
expires: Sat, 09 Sep 2023 19:59:56 GMT
vary: User-Agent
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/jpeg
X-Firefox-Spdy: h2
junk-bros.com/wp-content/uploads/2018/10/Junk-Hauling-Boise-150x150.jpg
173.236.150.148200 OK 11 kB URL HTTP/2 junk-bros.com/wp-content/uploads/2018/10/Junk-Hauling-Boise-150x150.jpg
IP 173.236.150.148:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 150x150, components 3\012- data
Hash 2919a71fdce24873a1f7bdb7c33c80ee
66c51b1217d54e72d269617dc3fc1d925d8a4b7b
ffc236698c59c40c3690682b2029a1dbd73578490642f8adfac98ac50e7dc970
GET /wp-content/uploads/2018/10/Junk-Hauling-Boise-150x150.jpg HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:56 GMT
server: Apache
last-modified: Fri, 19 Oct 2018 01:27:28 GMT
etag: "2945-5788ace72c000"
accept-ranges: bytes
content-length: 10565
cache-control: max-age=31536000
expires: Sat, 09 Sep 2023 19:59:56 GMT
vary: User-Agent
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/jpeg
X-Firefox-Spdy: h2
junk-bros.com/wp-content/uploads/2018/10/Junk-Clearing-Boise-150x150.jpg
173.236.150.148200 OK 10 kB URL HTTP/2 junk-bros.com/wp-content/uploads/2018/10/Junk-Clearing-Boise-150x150.jpg
IP 173.236.150.148:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 150x150, components 3\012- data
Hash f42f4a46d550aafdeb1b0bf31eb9f6ea
71629158b9737006e53c98dbe04e88297ceddcd1
32e9d6762fc818099c22233d7330bba972d009b00fd25652961924141ea4daa3
GET /wp-content/uploads/2018/10/Junk-Clearing-Boise-150x150.jpg HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:56 GMT
server: Apache
last-modified: Fri, 19 Oct 2018 01:27:45 GMT
etag: "2779-5788acf762640"
accept-ranges: bytes
content-length: 10105
cache-control: max-age=31536000
expires: Sat, 09 Sep 2023 19:59:56 GMT
vary: User-Agent
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/jpeg
X-Firefox-Spdy: h2
ssl.google-analytics.com/ga.js
142.250.74.104200 OK 17 kB URL HTTP/2 ssl.google-analytics.com/ga.js
IP 142.250.74.104:0
File type ASCII text, with very long lines (1305)
Hash 01d5892e6e243b52998310c2925b9f3a
58180151b6a6ee4af73583a214b68efb9e8844d4
7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
GET /ga.js HTTP/1.1
Host: ssl.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 17168
date: Fri, 09 Sep 2022 18:17:11 GMT
expires: Fri, 09 Sep 2022 20:17:11 GMT
cache-control: public, max-age=7200
age: 6165
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 86354a78c1da4ea13a932216048b2abf
ade657780508cffa8655f7cab6492dc25a79f0d2
458dbf1fcc4ef14e78b991b2f906704b4d27a985d2feb500bb5e5f832232887b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 19:59:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/conversion_async.js
142.250.74.164200 OK 16 kB URL HTTP/2 www.google.com/pagead/conversion_async.js
IP 142.250.74.164:0
File type ASCII text, with very long lines (1623)
Hash 4738d969770682feba80f04bf171d65b
be0e0ceb91bf5ed0c64b0f3f2cc2c99c6d4cd6b7
1daca97cf9e8078299f94c50346e45fead45bf908ca97ded912f26986c1c4e9a
GET /pagead/conversion_async.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Fri, 09 Sep 2022 19:59:56 GMT
expires: Fri, 09 Sep 2022 19:59:56 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 15579141248118922429
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 15687
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
junk-bros.com/wp-content/uploads/2018/10/cropped-Junk-Bros-icon-192x192.png
173.236.150.148200 OK 9.6 kB URL HTTP/2 junk-bros.com/wp-content/uploads/2018/10/cropped-Junk-Bros-icon-192x192.png
IP 173.236.150.148:0
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash cb97e823548677f49b89377572d8cbeb
a2bd6846f881f3894143e7e011bcbbf1ce6492ac
5749c0805a86ed5f7c5bd34f3e5f9b0cd64fb6bae4f8257786d37e97d41d1152
GET /wp-content/uploads/2018/10/cropped-Junk-Bros-icon-192x192.png HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:56 GMT
server: Apache
last-modified: Fri, 19 Oct 2018 17:31:00 GMT
etag: "2593-57898444fdd00"
accept-ranges: bytes
content-length: 9619
cache-control: max-age=31536000
expires: Sat, 09 Sep 2023 19:59:56 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
X-Firefox-Spdy: h2
push.services.mozilla.com/
34.218.164.174101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.218.164.174:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Pbhhn6fayHBbi2YnAu4GjA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: z8J9/lNqwYrcglFv9rf94Zm4D4w=
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash ede92f781233f857c299e00d2090aeba
b7296da3b0981e9c1937bf8ebc73d5138c5fa19a
16a97da8a523d4cb06430ff26d026d14377c888e5e80a78937afba38fded3122
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 19:59:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
junk-bros.com/wp-content/uploads/2018/10/Junk-Bros-Junk-Removal-logo.png
173.236.150.148200 OK 16 kB URL HTTP/2 junk-bros.com/wp-content/uploads/2018/10/Junk-Bros-Junk-Removal-logo.png
IP 173.236.150.148:0
File type PNG image data, 302 x 73, 8-bit/color RGBA, non-interlaced\012- data
Hash 5f9b1f00db397a9c6df40ced661f9c4e
f092900abcc6ec971f2727d95ab4432714e9941d
af39f9f7fc79b97b889d3242390feb705e30c269ed41b27e12dc989ff5903241
GET /wp-content/uploads/2018/10/Junk-Bros-Junk-Removal-logo.png HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Cookie: _gcl_au=1.1.586450723.1662753587; __utma=167616421.357918390.1662753587.1662753587.1662753587.1; __utmb=167616421.1.10.1662753587; __utmc=167616421; __utmz=167616421.1662753587.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:56 GMT
server: Apache
last-modified: Mon, 15 Oct 2018 17:23:08 GMT
etag: "3c63-57847b0d03700"
accept-ranges: bytes
content-length: 15459
cache-control: max-age=31536000
expires: Sat, 09 Sep 2023 19:59:56 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
X-Firefox-Spdy: h2
junk-bros.com/wp-content/uploads/2018/10/Boise-bg.jpg
173.236.150.148200 OK 88 kB URL HTTP/2 junk-bros.com/wp-content/uploads/2018/10/Boise-bg.jpg
IP 173.236.150.148:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=\302\251knowlesgallery - stock.adobe.com], baseline, precision 8, 1440x509, components 3\012- data
Hash f0059ae62654065bb288912d82cb3b05
6d35f2258a13b6bea672c04b3cb66c27cc6f3ed1
12e7f0f08fbbf1485fbd43c2a5338e37adf92ceb43f0dfdbf34c115f7acfddae
GET /wp-content/uploads/2018/10/Boise-bg.jpg HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Cookie: _gcl_au=1.1.586450723.1662753587; __utma=167616421.357918390.1662753587.1662753587.1662753587.1; __utmb=167616421.1.10.1662753587; __utmc=167616421; __utmz=167616421.1662753587.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:56 GMT
server: Apache
last-modified: Fri, 19 Oct 2018 01:32:11 GMT
etag: "1590a-5788adf50fcc0"
accept-ranges: bytes
content-length: 88330
cache-control: max-age=31536000
expires: Sat, 09 Sep 2023 19:59:56 GMT
vary: User-Agent
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/jpeg
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 97e5566c275b9fe27464690811145846
fa8973c8004db59d9a8fd46e9743fb6c9a8d3efd
e77cd1a4510c736e628aa10719f7694d7c7fef15adf1a449d800f90cde76fb88
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 19:59:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash dad8f08be4d6d5166c7f54004cb37c64
949b5738d5c880445510774f1da0e0af667308b3
398205f8248c3e00126eb21e6cb1d4e21a981a1b46d59ff4993e6023f33c6b9f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 19:59:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 97e5566c275b9fe27464690811145846
fa8973c8004db59d9a8fd46e9743fb6c9a8d3efd
e77cd1a4510c736e628aa10719f7694d7c7fef15adf1a449d800f90cde76fb88
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 19:59:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/926168428/?random=1662753587441&cv=9&fst=1662753587441&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fjunk-bros.com%2Fabout%2F&tiba=Boise%20Junk%20Removal%20%7C%20Hauling%20Service%20%7C%20Junk%20Haulers&auid=586450723.1662753587&hn=www.google.com&async=1&rfmt=3&fmt=4
142.250.74.66200 OK 1.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/926168428/?random=1662753587441&cv=9&fst=1662753587441&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fjunk-bros.com%2Fabout%2F&tiba=Boise%20Junk%20Removal%20%7C%20Hauling%20Service%20%7C%20Junk%20Haulers&auid=586450723.1662753587&hn=www.google.com&async=1&rfmt=3&fmt=4
IP 142.250.74.66:0
File type ASCII text, with very long lines (2348), with no line terminators
Hash 3506fa02ec76651f323b14db9ca220a0
77f8edf0ad901972dc552e344e3fc5c4c6f7692b
82eb8282dd7ca2808f1e979d3c78fc60255d1e5bed261be867541b0df9055c08
GET /pagead/viewthroughconversion/926168428/?random=1662753587441&cv=9&fst=1662753587441&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fjunk-bros.com%2Fabout%2F&tiba=Boise%20Junk%20Removal%20%7C%20Hauling%20Service%20%7C%20Junk%20Haulers&auid=586450723.1662753587&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 19:59:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1063
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 09-Sep-2022 20:14:56 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 629977ef3e811313c3398e85eab258c4
69022414f3775ed783dd6d65254988b52eecf3bd
e01f6c335c13dacce6d6a8fb67f165f6c786bbffca33976484ce03922cc04237
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 19:59:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/926168428/?random=1662753587443&cv=9&fst=1662753587443&num=1&fmt=3&label=AkoMCMLZ3dsBEOzq0LkD&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa970&sendb=1&ig=0&data=event%3Dconversion&frm=0&url=https%3A%2F%2Fjunk-bros.com%2Fabout%2F&tiba=Boise%20Junk%20Removal%20%7C%20Hauling%20Service%20%7C%20Junk%20Haulers&auid=586450723.1662753587>m_ee=1&hn=www.google.com&gcp=1&ct_cookie_present=1&async=1
142.250.74.66200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/926168428/?random=1662753587443&cv=9&fst=1662753587443&num=1&fmt=3&label=AkoMCMLZ3dsBEOzq0LkD&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa970&sendb=1&ig=0&data=event%3Dconversion&frm=0&url=https%3A%2F%2Fjunk-bros.com%2Fabout%2F&tiba=Boise%20Junk%20Removal%20%7C%20Hauling%20Service%20%7C%20Junk%20Haulers&auid=586450723.1662753587>m_ee=1&hn=www.google.com&gcp=1&ct_cookie_present=1&async=1
IP 142.250.74.66:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/926168428/?random=1662753587443&cv=9&fst=1662753587443&num=1&fmt=3&label=AkoMCMLZ3dsBEOzq0LkD&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa970&sendb=1&ig=0&data=event%3Dconversion&frm=0&url=https%3A%2F%2Fjunk-bros.com%2Fabout%2F&tiba=Boise%20Junk%20Removal%20%7C%20Hauling%20Service%20%7C%20Junk%20Haulers&auid=586450723.1662753587>m_ee=1&hn=www.google.com&gcp=1&ct_cookie_present=1&async=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 19:59:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 09-Sep-2022 20:14:56 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-130866985-1&cid=357918390.1662753587&jid=207992262&_v=5.7.2&z=1001320079
142.251.1.154302 Found 368 B URL HTTP/2 stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-130866985-1&cid=357918390.1662753587&jid=207992262&_v=5.7.2&z=1001320079
IP 142.251.1.154:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 0c28ab876dc6b03081dc122ffcebae18
69ea0c29d13e09c4326ef01e2fe4e2e2e2951345
531117b4e795d5102c6a42f783738b394fb2d05a8473818edee8cddfeb71cf7a
GET /r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-130866985-1&cid=357918390.1662753587&jid=207992262&_v=5.7.2&z=1001320079 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://junk-bros.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.google.com/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-130866985-1&cid=357918390.1662753587&jid=207992262&_v=5.7.2&z=1001320079
access-control-allow-origin: *
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 09 Sep 2022 19:59:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: Golfe2
content-length: 368
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-conversion/926168428/?random=1662753587443&cv=9&fst=1662753587443&num=1&label=AkoMCMLZ3dsBEOzq0LkD&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa970&sendb=1&ig=0&data=event%3Dconversion&frm=0&url=https%3A%2F%2Fjunk-bros.com%2Fabout%2F&tiba=Boise%20Junk%20Removal%20%7C%20Hauling%20Service%20%7C%20Junk%20Haulers&auid=586450723.1662753587>m_ee=1&hn=www.google.com&gcp=1&sscte=1&ct_cookie_present=1&async=1&rfmt=3&fmt=4&ipr=y&prhg=0
142.250.74.3200 OK 63 B URL HTTP/2 www.google.no/pagead/1p-conversion/926168428/?random=1662753587443&cv=9&fst=1662753587443&num=1&label=AkoMCMLZ3dsBEOzq0LkD&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa970&sendb=1&ig=0&data=event%3Dconversion&frm=0&url=https%3A%2F%2Fjunk-bros.com%2Fabout%2F&tiba=Boise%20Junk%20Removal%20%7C%20Hauling%20Service%20%7C%20Junk%20Haulers&auid=586450723.1662753587>m_ee=1&hn=www.google.com&gcp=1&sscte=1&ct_cookie_present=1&async=1&rfmt=3&fmt=4&ipr=y&prhg=0
IP 142.250.74.3:0
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/926168428/?random=1662753587443&cv=9&fst=1662753587443&num=1&label=AkoMCMLZ3dsBEOzq0LkD&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa970&sendb=1&ig=0&data=event%3Dconversion&frm=0&url=https%3A%2F%2Fjunk-bros.com%2Fabout%2F&tiba=Boise%20Junk%20Removal%20%7C%20Hauling%20Service%20%7C%20Junk%20Haulers&auid=586450723.1662753587>m_ee=1&hn=www.google.com&gcp=1&sscte=1&ct_cookie_present=1&async=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://junk-bros.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 19:59:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/926168428/?random=1662753587441&cv=9&fst=1662750000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fjunk-bros.com%2Fabout%2F&tiba=Boise%20Junk%20Removal%20%7C%20Hauling%20Service%20%7C%20Junk%20Haulers&async=1&fmt=3&is_vtc=1&random=476952650&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/926168428/?random=1662753587441&cv=9&fst=1662750000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fjunk-bros.com%2Fabout%2F&tiba=Boise%20Junk%20Removal%20%7C%20Hauling%20Service%20%7C%20Junk%20Haulers&async=1&fmt=3&is_vtc=1&random=476952650&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/926168428/?random=1662753587441&cv=9&fst=1662750000000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fjunk-bros.com%2Fabout%2F&tiba=Boise%20Junk%20Removal%20%7C%20Hauling%20Service%20%7C%20Junk%20Haulers&async=1&fmt=3&is_vtc=1&random=476952650&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 19:59:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 97e5566c275b9fe27464690811145846
fa8973c8004db59d9a8fd46e9743fb6c9a8d3efd
e77cd1a4510c736e628aa10719f7694d7c7fef15adf1a449d800f90cde76fb88
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 19:59:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-130866985-1&cid=357918390.1662753587&jid=207992262&_v=5.7.2&z=1001320079&slf_rd=1&random=2985643373
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-130866985-1&cid=357918390.1662753587&jid=207992262&_v=5.7.2&z=1001320079&slf_rd=1&random=2985643373
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-130866985-1&cid=357918390.1662753587&jid=207992262&_v=5.7.2&z=1001320079&slf_rd=1&random=2985643373 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://junk-bros.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 19:59:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 629977ef3e811313c3398e85eab258c4
69022414f3775ed783dd6d65254988b52eecf3bd
e01f6c335c13dacce6d6a8fb67f165f6c786bbffca33976484ce03922cc04237
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 19:59:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 6ae2303506383495effbfc546c9fa703
2c38601690cfd8d210677221bbe32dd2ff279465
a05090d551b6e4051deeb26197c9abedb0e452e881b832bc9cd90630388c0be1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A05090D551B6E4051DEEB26197C9ABEDB0E452E881B832BC9CD90630388C0BE1"
Last-Modified: Fri, 09 Sep 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16879
Expires: Sat, 10 Sep 2022 00:41:16 GMT
Date: Fri, 09 Sep 2022 19:59:57 GMT
Connection: keep-alive
o120871.ingest.sentry.io/api/5202181/store/?sentry_key=bfff00bf210640c38c803a2cae2180b5&sentry_version=7
34.120.195.249200 OK 41 B URL HTTP/2 o120871.ingest.sentry.io/api/5202181/store/?sentry_key=bfff00bf210640c38c803a2cae2180b5&sentry_version=7
IP 34.120.195.249:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 6149ccf0f66c43e8e16644b4aa97b453
d89f93495d8d3417e91a9e107383a5ab93b9e2b7
37b50cbd8d92991a01145688367ec5c2621ce95a38617be040633c84ffce4642
POST /api/5202181/store/?sentry_key=bfff00bf210640c38c803a2cae2180b5&sentry_version=7 HTTP/1.1
Host: o120871.ingest.sentry.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chatbot.workiz.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://chatbot.workiz.com
Content-Length: 970
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Sep 2022 19:59:57 GMT
content-type: application/json
content-length: 41
access-control-allow-origin: https://chatbot.workiz.com
access-control-expose-headers: retry-after, x-sentry-error, x-sentry-rate-limits
vary: Origin
x-envoy-upstream-service-time: 0
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 6ae2303506383495effbfc546c9fa703
2c38601690cfd8d210677221bbe32dd2ff279465
a05090d551b6e4051deeb26197c9abedb0e452e881b832bc9cd90630388c0be1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A05090D551B6E4051DEEB26197C9ABEDB0E452E881B832BC9CD90630388C0BE1"
Last-Modified: Fri, 09 Sep 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16879
Expires: Sat, 10 Sep 2022 00:41:16 GMT
Date: Fri, 09 Sep 2022 19:59:57 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10076
Expires: Fri, 09 Sep 2022 22:47:53 GMT
Date: Fri, 09 Sep 2022 19:59:57 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10076
Expires: Fri, 09 Sep 2022 22:47:53 GMT
Date: Fri, 09 Sep 2022 19:59:57 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10076
Expires: Fri, 09 Sep 2022 22:47:53 GMT
Date: Fri, 09 Sep 2022 19:59:57 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10076
Expires: Fri, 09 Sep 2022 22:47:53 GMT
Date: Fri, 09 Sep 2022 19:59:57 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F498f96cc-d02c-4ca3-a7e2-0be324253465.jpeg
34.120.237.76200 OK 3.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F498f96cc-d02c-4ca3-a7e2-0be324253465.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0078c7a407144a1ede33aef6f734eecf
113393e0dbabb3aff949d19ab6517ba1082b622d
42afcaf15e45dfa9aff14f59f69d60a3de127005e35783d2d35a4cfa652b57b3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F498f96cc-d02c-4ca3-a7e2-0be324253465.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3125
x-amzn-requestid: 5820e798-6469-40f9-8d70-ee71f1a163b9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YLM5GGQAoAMF8eQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631ac1d3-3a0e9db848ea7ab145f1cffa;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 04:32:19 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: eZaKpjBYe3Qn7vs3zF52Cxob-xu3LMFs8esQAu6Lp6bzM0aOEHoXVg==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 1352c0a623ff0601dd16439f3f225f70.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 04:32:20 GMT
etag: "113393e0dbabb3aff949d19ab6517ba1082b622d"
content-type: image/jpeg
age: 55657
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9258cc3-ebbf-4d4c-85d1-6bc185623583.jpeg
34.120.237.76200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9258cc3-ebbf-4d4c-85d1-6bc185623583.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7afe346e3b24ea4388913b449d1ffc42
f5348ba99fb8966dded580409108316f4e4e1237
1d1cafc3e99c20b23212679838567d4d5fc98c45cf902188e44b25ff2982c8ad
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9258cc3-ebbf-4d4c-85d1-6bc185623583.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8354
x-amzn-requestid: 55971de2-bf63-4300-9007-1bc234962d0e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YKRKXFGTIAMFp3A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631a6242-23914ec672a0a898498bbed6;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 21:44:34 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: lxqcvxSdM4FBQBZTNnhCrpl02fsnInyii7Yaw7fs4STzEd2fZIuuXA==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 a8e5d5aeee6eacca5c379e5059b1f68c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 21:45:36 GMT
etag: "f5348ba99fb8966dded580409108316f4e4e1237"
content-type: image/jpeg
age: 80061
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc632269f-fb89-42dc-acc4-f733f3d7beb7.jpeg
34.120.237.76200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc632269f-fb89-42dc-acc4-f733f3d7beb7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a5fdeb374d4e3669ce5d9ff2cd22cd19
70ede5692526afd351d134a391383461dafdc64f
10c5d8e41aae1a36525a45375966b5067333f0c7edc176a540fd6527ebe1ad8c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc632269f-fb89-42dc-acc4-f733f3d7beb7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4532
x-amzn-requestid: e5694699-7f38-4542-8808-54bda7ee7d86
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YIMmGGUmIAMF2cw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63198e26-1aa6788e24fcfdf0008bee21;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 06:39:34 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zdVUahmbPQ7sQMlg14M89JOwjN2PEM03GNLYEwxPjcaioRpyqb8isA==
via: 1.1 ef6538ee7be7b17c84d06edb0f4c0a1a.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 22:26:32 GMT
age: 77605
etag: "70ede5692526afd351d134a391383461dafdc64f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9009587-828b-4a7a-8b84-f28d4b93cdef.jpeg
34.120.237.76200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9009587-828b-4a7a-8b84-f28d4b93cdef.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 60fa03262bb3728f24a4c7a8177ec788
09dcbdc6043f01dd56920cca3ce3920d0d07b795
e7448f186933f9848f1d55f0e8dba593918846d02fb9cc3a7cd86d69b96a7fde
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9009587-828b-4a7a-8b84-f28d4b93cdef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7515
x-amzn-requestid: eaf81b32-3b53-4e89-a9d0-943bc9f9982f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X0j0QFhxoAMF-Mw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6311b34e-114287d30092033a2b54ec01;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 07:39:58 GMT
x-amz-cf-pop: SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: _mlXN3nJ7ZPcUDWIqqiv2CB6dkSJ2Y-AZIXNs4xOj18ZX6DYMdhXAA==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 ece5d4a731ece5ff46c564ab2b946ede.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 21:46:19 GMT
age: 80018
etag: "09dcbdc6043f01dd56920cca3ce3920d0d07b795"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
chatbotservice.workiz.com/socket.io/?EIO=3&transport=websocket
34.107.214.182101 Switching Protocols 0 B URL HTTP/1.1 chatbotservice.workiz.com/socket.io/?EIO=3&transport=websocket
IP 34.107.214.182:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?EIO=3&transport=websocket HTTP/1.1
Host: chatbotservice.workiz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://chatbot.workiz.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: iD1YARvunXLdxXAzsVbDkw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Upgrade: websocket
Connection: Upgrade
Sec-WebSocket-Accept: ew5fjlELuJKzq7MOz/X1TNX+WhM=
Sec-WebSocket-Extensions: permessage-deflate
Date: Fri, 09 Sep 2022 19:59:57 GMT
Via: 1.1 google
Set-Cookie: GCLB=COrdio7WitTqpgE; path=/; HttpOnly; expires=Sat, 10-Sep-2022 19:59:57 GMT
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5f31e9e-7d20-466c-a9b3-ce9e9c5475e8.jpeg
34.120.237.76200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5f31e9e-7d20-466c-a9b3-ce9e9c5475e8.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ba8d1b764c2d18807caecb5ee1e046c0
c0e3d10ce67f77a92b54954410e30621af7ee87c
f558c4827c2edf896588b6e3f0b4f295269e95f86143b40729a7a2a5e1adbbb6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5f31e9e-7d20-466c-a9b3-ce9e9c5475e8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9011
x-amzn-requestid: cf861da4-5f3b-43b8-931a-5285839c6301
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YKQgHFbOoAMFYVQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631a6133-4cf2e37f5e762a557b081446;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 21:40:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: wqcl8zkszPZhWjJ7mr_p82IRaNzU2vMV3wtipUYgRaL7Vj3ntmYYqQ==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 95785220a566cd050f3ad80928463374.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 21:47:07 GMT
age: 79970
etag: "c0e3d10ce67f77a92b54954410e30621af7ee87c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F793f20c6-757e-47e5-8ab6-4d73ceae75af.jpeg
34.120.237.76200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F793f20c6-757e-47e5-8ab6-4d73ceae75af.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c9590b525c8b07a297c8784f02b161a1
cec8428d159a5bde29e89c64cfb04146f759d52b
d309772ce79d36f7b1df0a3ea85a01f8278db2909c860721d105b772efed82ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F793f20c6-757e-47e5-8ab6-4d73ceae75af.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4002
x-amzn-requestid: ea2f5309-e220-4b7e-b718-9339b9444cc2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YKQ6hHM8IAMFeJQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631a61dc-7d45fd9253b7b7fa732b6f8d;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 21:42:52 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: VD7SlrM2RwFk5cfQvul2bTJA__GPYd5_UPY0D0_5NGLHoBj3yur7PA==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 5abfab33f248090bb0f31ca137ce9464.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 22:15:21 GMT
age: 78276
etag: "cec8428d159a5bde29e89c64cfb04146f759d52b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/PW22NnYBELM
142.250.74.3200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/PW22NnYBELM
IP 142.250.74.3:0
Hash d6cdfb298b462cdf85752d0c7a17fd6e
4a4e380b00e16ba9c2a994a1ad5172ec1b259655
9e63423bb50789ff56980b2298ba93efc4c38343265bf07e4fa879208cf8ed00
POST /s/gts1d4/PW22NnYBELM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 19:59:57 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
st.sendajob.com/uploads/my/52146/png/2021/02/18/ee021b05cc3454798154a411e3baaaad-51146_1613689607.png
35.190.21.87200 OK 31 kB URL HTTP/2 st.sendajob.com/uploads/my/52146/png/2021/02/18/ee021b05cc3454798154a411e3baaaad-51146_1613689607.png
IP 35.190.21.87:0
File type PNG image data, 285 x 240, 8-bit/color RGBA, non-interlaced\012- data
Hash 2181128ac5758141dcc18795943d8620
a3923838057a3d4979308a1ca6f137a5bb58094f
3c3f40e6622abd4114e286385d7b6fbaa6bde72c55f6df257873edc3948b676a
GET /uploads/my/52146/png/2021/02/18/ee021b05cc3454798154a411e3baaaad-51146_1613689607.png HTTP/1.1
Host: st.sendajob.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://chatbot.workiz.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvF_O3QGU78XG029X2uToYr3ZmyNtLYPhxo5kl9mA0H4FHXMMI62S3wdzpwIgGEn1DYb7ewidt2c3V4bP54_EpVvgOYr1Om
expires: Fri, 09 Sep 2022 20:59:57 GMT
date: Fri, 09 Sep 2022 19:59:57 GMT
cache-control: public, max-age=3600
last-modified: Thu, 18 Feb 2021 23:06:47 GMT
etag: "2181128ac5758141dcc18795943d8620"
x-goog-generation: 1613689607660747
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 31253
content-type: image/png
x-goog-hash: crc32c=eSbQRw==, md5=IYESisV1gUHcwYeVlD2GIA==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 31253
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/PW22NnYBELM
142.250.74.3200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/PW22NnYBELM
IP 142.250.74.3:0
Hash d6cdfb298b462cdf85752d0c7a17fd6e
4a4e380b00e16ba9c2a994a1ad5172ec1b259655
9e63423bb50789ff56980b2298ba93efc4c38343265bf07e4fa879208cf8ed00
POST /s/gts1d4/PW22NnYBELM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 19:59:58 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
142.250.74.174200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://chatbot.workiz.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Fri, 09 Sep 2022 18:41:12 GMT
expires: Fri, 09 Sep 2022 20:41:12 GMT
cache-control: public, max-age=7200
age: 4729
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
junk-bros.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
173.236.150.148200 OK 0 B URL HTTP/2 junk-bros.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP 173.236.150.148:0
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:55 GMT
server: Apache
last-modified: Thu, 18 Aug 2022 17:07:37 GMT
etag: "15db1-5e68704b74aa3-gzip"
accept-ranges: bytes
cache-control: max-age=604800
expires: Fri, 16 Sep 2022 19:59:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
timing-allow-origin: *
content-type: application/javascript
X-Firefox-Spdy: h2
junk-bros.com/wp-content/cache/fvm/min/1660842507-css5268d4aa426b3bcd4c645bc263c4eebbc507fed573c5dca685510f443d965.css
173.236.150.148200 OK 0 B URL HTTP/2 junk-bros.com/wp-content/cache/fvm/min/1660842507-css5268d4aa426b3bcd4c645bc263c4eebbc507fed573c5dca685510f443d965.css
IP 173.236.150.148:0
GET /wp-content/cache/fvm/min/1660842507-css5268d4aa426b3bcd4c645bc263c4eebbc507fed573c5dca685510f443d965.css HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:55 GMT
server: Apache
last-modified: Thu, 18 Aug 2022 17:09:37 GMT
etag: "1438e-5e6870bd6a21e-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 09 Oct 2022 19:59:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/css
X-Firefox-Spdy: h2
junk-bros.com/wp-content/themes/kdw-framework4/foundation/flex/js/vendor/foundation.min.js?ver=1
173.236.150.148200 OK 0 B URL HTTP/2 junk-bros.com/wp-content/themes/kdw-framework4/foundation/flex/js/vendor/foundation.min.js?ver=1
IP 173.236.150.148:0
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/kdw-framework4/foundation/flex/js/vendor/foundation.min.js?ver=1 HTTP/1.1
Host: junk-bros.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://junk-bros.com/about/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 19:59:55 GMT
server: Apache
last-modified: Wed, 18 Jul 2018 03:31:41 GMT
etag: "1e276-5713db370a140-gzip"
accept-ranges: bytes
cache-control: max-age=604800
expires: Fri, 16 Sep 2022 19:59:55 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
timing-allow-origin: *
content-type: application/javascript
X-Firefox-Spdy: h2