firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 26 Sep 2022 07:15:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: k4IXXfb9-7Dfy9VZo5iD6WWXfCl6v93RfVaD466REGNg0irrnF_IPQ==
Age: 2754
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d2560f62890e75b8de444fed96c22f52
334ce0c48e606ee029f31eeb1463af87b1024bb9
4397e6b45b5822fbab9b83abe0b96ee70efba7cd2160b51936159865ede5fdb1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4397E6B45B5822FBAB9B83ABE0B96EE70EFBA7CD2160B51936159865EDE5FDB1"
Last-Modified: Sun, 25 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13562
Expires: Mon, 26 Sep 2022 11:47:14 GMT
Date: Mon, 26 Sep 2022 08:01:12 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Sep 2022 04:35:16 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7rbQsqTyknhb2GtNci9kjB3AtNprqkRVoAknywraMF6pVWCiwE3DEA==
age: 12357
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 08:01:12 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Mon, 26 Sep 2022 07:10:46 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Mon, 26 Sep 2022 07:18:01 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: NPHSY4D-l1FBzvcC5YPwcYqoMwP_pyam_SsQ3laUJUt8O6rS0yfWBw==
Age: 3027
ocsp.digicert.com/
200 OK 471 B IP
Hash fd3b36dc2b620b48de491a8d9ba00fc0
be67ba7db5215dcb7c9225876e35a5e0a5005c9e
28205ee62c77b1caad6cc24c1ce98ddb92d26f67d41270f7d5278208a907c62f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1412
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 08:01:13 GMT
Last-Modified: Mon, 26 Sep 2022 07:37:41 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: HsVR3VW/AKKICI9yISvi8w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: kjtNxMgSmeDgY5brIt0Zz8jdNKs=
emc.org.au/wp-includes/jss/secure/navyfederal.orgnfoaa_authlogin.jsp/error.php
301 Moved Permanently 0 B URL HTTP/1.1 emc.org.au/wp-includes/jss/secure/navyfederal.orgnfoaa_authlogin.jsp/error.php
IP
ASN #38719 Dreamscape Networks Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/jss/secure/navyfederal.orgnfoaa_authlogin.jsp/error.php HTTP/1.1
Host: emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 26 Sep 2022 08:01:12 GMT
Server: Apache
X-Powered-By: PHP/7.4.30
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Location: http://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgnfoaa_authlogin.jsp/error.php
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16838
Expires: Mon, 26 Sep 2022 12:41:52 GMT
Date: Mon, 26 Sep 2022 08:01:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16838
Expires: Mon, 26 Sep 2022 12:41:52 GMT
Date: Mon, 26 Sep 2022 08:01:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16838
Expires: Mon, 26 Sep 2022 12:41:52 GMT
Date: Mon, 26 Sep 2022 08:01:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16838
Expires: Mon, 26 Sep 2022 12:41:52 GMT
Date: Mon, 26 Sep 2022 08:01:14 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff3689ec8-63b4-42ae-b7d5-a9b4b63af788.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff3689ec8-63b4-42ae-b7d5-a9b4b63af788.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ef17205adb2b478d3bff54b048208d22
12aac1bd22e675f09a220de08b4656e801c2e647
620fe39cf421ed3a21e968570f7e863d69224113be867ec2457ed3850ea113f6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff3689ec8-63b4-42ae-b7d5-a9b4b63af788.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5980
x-amzn-requestid: fbf0c390-da24-49e2-8492-43e29e5d4bb3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCTHCGJVoAMFgxA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cbc6-1f9b1b7d63467c58702e6d7e;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:44:38 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Iy0oyFx_T6CEuOQckEzvUQOUo307Jm_OgJzomWlMz9BhgD3eOaysdA==
via: 1.1 ec2a2c75c16156e4d43504606c118b90.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:48:52 GMT
age: 36742
etag: "12aac1bd22e675f09a220de08b4656e801c2e647"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbad0bb4-9ab3-47a9-80fd-6567993349dd.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbad0bb4-9ab3-47a9-80fd-6567993349dd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 65e3b72afc2f13978ee80cc87dc289f1
78a82653eb0e5aa4f1355c13b665da44a3412024
9f3a89f268fca25f5a6c7319b1f8412a193cd73bc9c8f4c5a9d294582df3a57b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbad0bb4-9ab3-47a9-80fd-6567993349dd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9352
x-amzn-requestid: efae9f72-8dce-4899-9dc8-c6cc9b4b2540
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSvwFwWoAMFmig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cb31-744ade88393a83467fea2b97;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:42:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: X-QkNjlO1cM_l47V8WZZryrWmovli2JVzLx4ZiRj7GGegpAM3ye8pg==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:48:52 GMT
age: 36742
etag: "78a82653eb0e5aa4f1355c13b665da44a3412024"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18a9d6ea-6c08-48b5-b74a-f5bf5a018b80.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18a9d6ea-6c08-48b5-b74a-f5bf5a018b80.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c1ce3e1066be88e2c4eae317c55136f5
9f4dd2376e00073510cbd4e36d10a5a3f1746e35
a7ae3c3b24666cb35db7a95bd98840e96e306d6e2fdbb05c68c98ff7deaa5459
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18a9d6ea-6c08-48b5-b74a-f5bf5a018b80.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6797
x-amzn-requestid: 2caf2fb8-650f-4f19-806b-3252a0ba360a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSlhG0FIAMFgSQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330caef-0b5beafd57d22f245df61815;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:41:04 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: nhtcKQJlI8biPpgjMg2s6wgZNkarsBB2Rnxj69_5Y361Pw9FR4frrg==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:11:07 GMT
etag: "9f4dd2376e00073510cbd4e36d10a5a3f1746e35"
content-type: image/jpeg
age: 35407
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3 DIY-Thermocam raw data\012- (Lepton 2.x), scale 3-257, spot sensor temperature 0.000000, unit celsius, color scheme 0, show scale bar, calibration: offset 0.000000, slope 241253891388563521536.000000\012- data
Hash b3a72e81317074689a71dac7059e4b6a
b6d56333d7f1ea7ddc8838d84de498ff913c5464
e665a8821b5e7b2e78787647a08d629bf70cbf4cbfee2057c8601cf0565154a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12826
x-amzn-requestid: f075cf62-acfc-4bc1-be14-7c3dafb7aaed
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YfVRNFP-oAMFgrA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322cf3a-184b678042d64ac9266b1128;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 07:07:38 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: rN_8rm10Pxb0AUKW6ECfNulcYxBaS7FgGD15gT14dX-FlsGJfqahxA==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:37:35 GMT
age: 37419
etag: "b6d56333d7f1ea7ddc8838d84de498ff913c5464"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20fede81-e065-476d-b8c9-466c4d80f419.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20fede81-e065-476d-b8c9-466c4d80f419.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 27d324b1fb661c318aced98468501b3c
5c4ee294c98e8fc9312a7d481b6ec165494cf852
937296b5da48df0495ebd0cb3509b7c00059725c00c5b97f475ba2382a0e5437
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20fede81-e065-476d-b8c9-466c4d80f419.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7998
x-amzn-requestid: beedf4d8-29c0-43c6-92d0-40af6b9ee9f9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCTibE5LoAMFXLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cc75-1be97f2a525b9a5e3146d4be;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:47:33 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: i8BwIohBNqfEavPXBqSWshg7G-WF9UkBBScnDcyH4qEYV9TzreLXWA==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:03:29 GMT
age: 35865
etag: "5c4ee294c98e8fc9312a7d481b6ec165494cf852"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feddf5115-4c67-4a03-b497-8b149b3c332c.png
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feddf5115-4c67-4a03-b497-8b149b3c332c.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2c11e6fef1be62b971bd9daf378bfc95
ef9d756cbcda72cf7ef5029b7d384cd1fbaed633
b8369f83d6dddcd2355b81d8eb200791788165e56881ce21e1a1e9c8bb1bb2ef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feddf5115-4c67-4a03-b497-8b149b3c332c.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13584
x-amzn-requestid: 198bd2b4-d4ae-4f19-a500-463aee52b890
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCTHgFdNoAMFwEw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cbc9-19a1f7d2102820da4b21f18b;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:44:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: yl8BCwdlIePsc4gIX4IYH0L6NHipn_5fBsa9nyYy14w0m49jPUYXBw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:57:51 GMT
age: 36203
etag: "ef9d756cbcda72cf7ef5029b7d384cd1fbaed633"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.emc.org.au/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
200 OK 19 kB URL HTTP/1.1 www.emc.org.au/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
IP
ASN #38719 Dreamscape Networks Limited
File type ASCII text, with very long lines (15660)
Hash 32beb68a374e3aeac00abdf9e12b84ea
b5d18aa625e8696dd9d07cd0869337717b211ae0
5aad5fbd4238981a9ff5e2772ff1353dfe1a801fb49542fe157418c1438f7782
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgnfoaa_authlogin.jsp/error.php
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 08:01:16 GMT
Server: Apache
Last-Modified: Wed, 25 May 2022 05:36:34 GMT
Accept-Ranges: bytes
Content-Length: 18617
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
www.emc.org.au/wp-includes/jss/secure/navyfederal.orgnfoaa_authlogin.jsp/error.php
404 Not Found 85 kB URL HTTP/1.1 www.emc.org.au/wp-includes/jss/secure/navyfederal.orgnfoaa_authlogin.jsp/error.php
IP
ASN #38719 Dreamscape Networks Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (8047), with CRLF, LF line terminators
Hash 750dc94a21f465ed90b6bb92c995b782
b5cd0c35fcd7ad43b57e8078f4feed65f24e87d8
7ceac9c01522be0a421480b665d654e262af17949dccf4b76faa5baea8eb39bb
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/jss/secure/navyfederal.orgnfoaa_authlogin.jsp/error.php HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 404 Not Found
Date: Mon, 26 Sep 2022 08:01:15 GMT
Server: Apache
X-Powered-By: PHP/7.4.30
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://www.emc.org.au/wp-json/>; rel="https://api.w.org/"
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
www.emc.org.au/wp-content/themes/agama-blue/style.css?ver=1.1.5
200 OK 3.4 kB URL HTTP/1.1 www.emc.org.au/wp-content/themes/agama-blue/style.css?ver=1.1.5
IP
ASN #38719 Dreamscape Networks Limited
File type HTML document, ASCII text, with very long lines (456)
Hash 16b433c6e1d181e77f93cfbafb51af65
d6ee663d6851f21cf27fea7082938be14027ff2e
37384bb07adc9dbf67cdc13ce85bc46c1d9173dc079411aaad2f28cb758f735d
GET /wp-content/themes/agama-blue/style.css?ver=1.1.5 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgnfoaa_authlogin.jsp/error.php
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 08:01:17 GMT
Server: Apache
Last-Modified: Sat, 05 Feb 2022 05:24:12 GMT
Accept-Ranges: bytes
Content-Length: 3416
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.emc.org.au/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.7.4
200 OK 14 kB URL HTTP/1.1 www.emc.org.au/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.7.4
IP
ASN #38719 Dreamscape Networks Limited
File type ASCII text, with very long lines (13766)
Hash 5d8196e24934606121af1009061580d0
d2a14c123f5b0826b363e5f14df7452c9d60daaf
b73cf9b935f15def37f494f77797e5c41cedbcbe46f4530bac39391ecb44e948
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.7.4 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgnfoaa_authlogin.jsp/error.php
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 08:01:17 GMT
Server: Apache
Last-Modified: Sun, 11 Sep 2022 23:40:54 GMT
Accept-Ranges: bytes
Content-Length: 13805
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.emc.org.au/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-lazy-images/dist/intersection-observer.js?minify=false&ver=83ec8aa758f883d6da14
200 OK 9.0 kB URL HTTP/1.1 www.emc.org.au/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-lazy-images/dist/intersection-observer.js?minify=false&ver=83ec8aa758f883d6da14
IP
ASN #38719 Dreamscape Networks Limited
File type ASCII text, with very long lines (8983), with no line terminators
Hash ed3b4417df0895e4cf8465d32b69adc6
a63d0bad2dcb235c62a843eb3e8506e8931cede0
9900b23f9f49af5f34387eb63a8673a563ab131c1e171cfaf14cf8b67a466b9d
GET /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-lazy-images/dist/intersection-observer.js?minify=false&ver=83ec8aa758f883d6da14 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgnfoaa_authlogin.jsp/error.php
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 08:01:17 GMT
Server: Apache
Last-Modified: Sun, 11 Sep 2022 23:41:47 GMT
Accept-Ranges: bytes
Content-Length: 8983
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
www.emc.org.au/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-lazy-images/dist/lazy-images.js?minify=false&ver=54eb31dc971b63b49278
200 OK 2.4 kB URL HTTP/1.1 www.emc.org.au/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-lazy-images/dist/lazy-images.js?minify=false&ver=54eb31dc971b63b49278
IP
ASN #38719 Dreamscape Networks Limited
File type ASCII text, with very long lines (2361), with no line terminators
Hash 168b9e73ae0afd819b60016837864cec
8805fb8532fa15f031ec3ed727ddf72e5d6955cc
9e65fb5b0032593b7b8fb12b27a01c3c2cefe7e0e231816ee2c8dda3a4355dd8
GET /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-lazy-images/dist/lazy-images.js?minify=false&ver=54eb31dc971b63b49278 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgnfoaa_authlogin.jsp/error.php
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 08:01:17 GMT
Server: Apache
Last-Modified: Sun, 11 Sep 2022 23:41:47 GMT
Accept-Ranges: bytes
Content-Length: 2361
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
c0.wp.com/c/6.0.2/wp-includes/css/dist/block-library/style.min.css
200 OK 42 kB URL HTTP/2 c0.wp.com/c/6.0.2/wp-includes/css/dist/block-library/style.min.css
IP
File type ASCII text, with very long lines (43771)
Hash aa7d3343628d08e09f2f45582bb70187
b0a0608d0104a9a064f6dea296d5acfa5c6fb97f
e235acfa3353440009d578249acb46e1fceed8c96a03dd8828e171f1b850da9a
GET /c/6.0.2/wp-includes/css/dist/block-library/style.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.emc.org.au/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 08:01:16 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Mon, 04 Jul 2022 12:10:37 GMT
content-encoding: br
expires: Tue, 26 Sep 2023 08:01:16 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.emc.org.au/wp-content/themes/agama/assets/js/functions.js?ver=1.1.5
200 OK 23 kB URL HTTP/1.1 www.emc.org.au/wp-content/themes/agama/assets/js/functions.js?ver=1.1.5
IP
ASN #38719 Dreamscape Networks Limited
Hash eded0d68a6e540434c17b78175996f21
a1177527111d3cf149e17ebd62a471030bfc6e9b
7d8a206313792ee612f515b883798d75f6ce75ce4d9cac76672a39c5e1870a18
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/agama/assets/js/functions.js?ver=1.1.5 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgnfoaa_authlogin.jsp/error.php
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 08:01:17 GMT
Server: Apache
Last-Modified: Tue, 19 Apr 2022 00:20:44 GMT
Accept-Ranges: bytes
Content-Length: 23019
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
www.emc.org.au/wp-content/themes/agama/assets/css/animate.min.css?ver=3.5.1
200 OK 56 kB URL HTTP/1.1 www.emc.org.au/wp-content/themes/agama/assets/css/animate.min.css?ver=3.5.1
IP
ASN #38719 Dreamscape Networks Limited
File type ASCII text, with very long lines (55728)
Hash bbd481acc4688db3b0d7e4b6592e47b3
889fbad8a6bc9ce7e6b8f464961c29e13656305c
01eb82dd42f331969d90e15b87fb84e27b99878c34797425c44ab1dce61a51b7
GET /wp-content/themes/agama/assets/css/animate.min.css?ver=3.5.1 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgnfoaa_authlogin.jsp/error.php
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 08:01:17 GMT
Server: Apache
Last-Modified: Tue, 19 Apr 2022 00:20:44 GMT
Accept-Ranges: bytes
Content-Length: 55918
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
www.emc.org.au/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.2.4
200 OK 3.4 kB URL HTTP/1.1 www.emc.org.au/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.2.4
IP
ASN #38719 Dreamscape Networks Limited
File type ASCII text, with very long lines (3432)
Hash 9a9ecfe405e38be1cf08b752d3afbda9
8f55bc1619b42231d464bf965c67cfddf6b29df9
b9b869f479a2181cbc0c5d8b6e5bb8bb9cbf81d59a18d056681d8b3de448b1d4
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.2.4 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgnfoaa_authlogin.jsp/error.php
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 08:01:18 GMT
Server: Apache
Last-Modified: Sun, 11 Sep 2022 23:41:17 GMT
Accept-Ranges: bytes
Content-Length: 3433
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
www.emc.org.au/wp-content/themes/agama-blue/assets/js/agama-blue.js?ver=1.1.5
200 OK 495 B URL HTTP/1.1 www.emc.org.au/wp-content/themes/agama-blue/assets/js/agama-blue.js?ver=1.1.5
IP
ASN #38719 Dreamscape Networks Limited
Hash 01943cb646298fb614578e8c17c07775
e92e3ae6a318bd8540e2a2d14308751a2e7eac59
5a0eb79e65aefc14e80b360f89c053d10c69f2f837693c838b7c154545720f6a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/agama-blue/assets/js/agama-blue.js?ver=1.1.5 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgnfoaa_authlogin.jsp/error.php
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 08:01:18 GMT
Server: Apache
Last-Modified: Sat, 05 Feb 2022 05:24:12 GMT
Accept-Ranges: bytes
Content-Length: 495
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
www.emc.org.au/wp-content/themes/agama/style.css?ver=1.1.5
200 OK 92 kB URL HTTP/1.1 www.emc.org.au/wp-content/themes/agama/style.css?ver=1.1.5
IP
ASN #38719 Dreamscape Networks Limited
File type Unicode text, UTF-8 text, with very long lines (524)
Hash 1acf9bf5f2449e34efeb881794ae6da4
a4fd41d9bb6451c80ff266752a0913ec8e057ea0
7b400cd9d661279f39aba0c347c742210a3221ee1f12c25803c049314407334e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/agama/style.css?ver=1.1.5 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgnfoaa_authlogin.jsp/error.php
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 08:01:17 GMT
Server: Apache
Last-Modified: Tue, 19 Apr 2022 00:20:52 GMT
Accept-Ranges: bytes
Content-Length: 92169
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.emc.org.au/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.2.4
200 OK 8.0 kB URL HTTP/1.1 www.emc.org.au/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.2.4
IP
ASN #38719 Dreamscape Networks Limited
File type ASCII text, with very long lines (8016), with no line terminators
Hash a889ab4fcd44175db4bf271c83c50d37
dd57bf2e29b28491b610fcb758d8ab53f3c6649d
d2f2fe7e10c8a8cf933afea3f0fb4a89cf74262405024cd908e7d59f5f03c16c
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.2.4 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgnfoaa_authlogin.jsp/error.php
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 08:01:18 GMT
Server: Apache
Last-Modified: Sun, 11 Sep 2022 23:41:20 GMT
Accept-Ranges: bytes
Content-Length: 8016
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
c0.wp.com/c/6.0.2/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css
200 OK 169 kB URL HTTP/2 c0.wp.com/c/6.0.2/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css
IP
File type ASCII text, with very long lines (11256), with no line terminators
Size 169 kB (168643 bytes)
Hash a737d0726928296a4bdabc07d43601e0
2a5510f61a7a34d0ab33a1b10602e42770eac0f0
283d1971baa49f45dada718a1748eb0d116179931a2e535ead7635ee8cd6f95b
GET /c/6.0.2/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.emc.org.au/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 08:01:16 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Tue, 29 Sep 2020 15:53:06 GMT
content-encoding: br
expires: Tue, 26 Sep 2023 08:01:16 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.emc.org.au/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.7.4
200 OK 166 kB URL HTTP/1.1 www.emc.org.au/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.7.4
IP
ASN #38719 Dreamscape Networks Limited
File type ASCII text, with very long lines (65497)
Size 166 kB (165666 bytes)
Hash cffd0c4fc98043244b65e9c11714f230
b84c66438caad779dcb90d40c8e2929145631751
1b827fe08f827b904a103fd1c4c2f2c9db0d1878ad09a7c00b197e890fd8100c
GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.7.4 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgnfoaa_authlogin.jsp/error.php
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 08:01:17 GMT
Server: Apache
Last-Modified: Sun, 11 Sep 2022 23:40:54 GMT
Accept-Ranges: bytes
Content-Length: 165666
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
www.emc.org.au/wp-content/themes/agama/assets/js/plugins.js?ver=1.1.5
200 OK 203 kB URL HTTP/1.1 www.emc.org.au/wp-content/themes/agama/assets/js/plugins.js?ver=1.1.5
IP
ASN #38719 Dreamscape Networks Limited
File type Unicode text, UTF-8 text, with very long lines (25283)
Size 203 kB (203443 bytes)
Hash 770c1f92eab684ce336946f216ca9f7b
53ec8b1eaf109e13b1cee6c135a279eda28bab74
fe74ea41fde41bc4d2c8c4d805c1f14977dd30c981a448532fc9d04c90022682
GET /wp-content/themes/agama/assets/js/plugins.js?ver=1.1.5 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgnfoaa_authlogin.jsp/error.php
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 08:01:18 GMT
Server: Apache
Last-Modified: Tue, 19 Apr 2022 00:20:44 GMT
Accept-Ranges: bytes
Content-Length: 203443
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
pixel.wp.com/g.gif?v=ext&j=1%3A11.3.1&blog=151720117&post=0&tz=10&srv=www.emc.org.au&host=www.emc.org.au&ref=&fcp=0&rand=0.4949635674502598
200 OK 50 B URL HTTP/1.1 pixel.wp.com/g.gif?v=ext&j=1%3A11.3.1&blog=151720117&post=0&tz=10&srv=www.emc.org.au&host=www.emc.org.au&ref=&fcp=0&rand=0.4949635674502598
IP
File type GIF image data, version 89a, 6 x 5\012- data
Hash e4d673a55c5656f19ef81563fb10884c
1f2d8ed221d39329251ad3a6ff1edb20b7219443
f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1
GET /g.gif?v=ext&j=1%3A11.3.1&blog=151720117&post=0&tz=10&srv=www.emc.org.au&host=www.emc.org.au&ref=&fcp=0&rand=0.4949635674502598 HTTP/1.1
Host: pixel.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.emc.org.au/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 26 Sep 2022 08:01:19 GMT
Content-Type: image/gif
Content-Length: 50
Connection: keep-alive
Cache-Control: no-cache
Access-Control-Allow-Origin: *
www.emc.org.au/wp-content/fonts/nunito/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshdTQ3iazbXWjQeQ.woff
200 OK 18 kB URL HTTP/1.1 www.emc.org.au/wp-content/fonts/nunito/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshdTQ3iazbXWjQeQ.woff
IP
ASN #38719 Dreamscape Networks Limited
File type Web Open Font Format, TrueType, length 17652, version 1.1\012- data
Hash 73b0684efc210f64a5d5b8654ea75e15
8d8d529a928f84b31c4ecd5407823ed205cf00cf
a83a13e096c461cdd51be50e77eaab24c6c76c88e9a7a6bf29af6882f146623d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/fonts/nunito/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshdTQ3iazbXWjQeQ.woff HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgnfoaa_authlogin.jsp/error.php
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 08:01:19 GMT
Server: Apache
Last-Modified: Tue, 26 Jul 2022 06:31:48 GMT
Accept-Ranges: bytes
Content-Length: 17652
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: font/woff
www.emc.org.au/wp-content/fonts/raleway/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrcVIT9d4cw.woff
200 OK 21 kB URL HTTP/1.1 www.emc.org.au/wp-content/fonts/raleway/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrcVIT9d4cw.woff
IP
ASN #38719 Dreamscape Networks Limited
File type Web Open Font Format, TrueType, length 20972, version 1.1\012- data
Hash a326c47c3038ee95e834af4137354081
328ed7688bb9083e97c264b52d3068a6cf320a53
7b39693e5b25e6747c407920eaf32ace22b70c5753dc45b33e9a2885d297cfb9
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/fonts/raleway/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrcVIT9d4cw.woff HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgnfoaa_authlogin.jsp/error.php
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 08:01:19 GMT
Server: Apache
Last-Modified: Tue, 26 Jul 2022 06:31:51 GMT
Accept-Ranges: bytes
Content-Length: 20972
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: font/woff
www.emc.org.au/wp-content/fonts/nunito/XRXI3I6Li01BKofiOc5wtlZ2di8HDFwmdTQ3iazbXWjQeQ.woff
200 OK 17 kB URL HTTP/1.1 www.emc.org.au/wp-content/fonts/nunito/XRXI3I6Li01BKofiOc5wtlZ2di8HDFwmdTQ3iazbXWjQeQ.woff
IP
ASN #38719 Dreamscape Networks Limited
File type Web Open Font Format, TrueType, length 17380, version 1.1\012- data
Hash 731b44a918030a3b627e19ee3c5d8a5d
193baee3e73ed5ea1de0cadf2528e66175a2a4b4
90d58b0b54efd8f906bb4e65aaf304600803d4119a6b809393bcc9c7d6ed7007
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/fonts/nunito/XRXI3I6Li01BKofiOc5wtlZ2di8HDFwmdTQ3iazbXWjQeQ.woff HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgnfoaa_authlogin.jsp/error.php
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 08:01:19 GMT
Server: Apache
Last-Modified: Tue, 26 Jul 2022 06:31:49 GMT
Accept-Ranges: bytes
Content-Length: 17380
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: font/woff
i0.wp.com/www.emc.org.au/wp-content/uploads/2019/07/cropped-The-Early-Morning-Centre-site-icon.png?fit=32%2C32&ssl=1
200 OK 354 B URL HTTP/2 i0.wp.com/www.emc.org.au/wp-content/uploads/2019/07/cropped-The-Early-Morning-Centre-site-icon.png?fit=32%2C32&ssl=1
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 47b97c0c93aded02dd6825dfbde1976c
7f273111938183812320747de2bff04a184e766c
b98433372953caa963f32d453eb7b93772d6786e42056981b859481e8ac40836
GET /www.emc.org.au/wp-content/uploads/2019/07/cropped-The-Early-Morning-Centre-site-icon.png?fit=32%2C32&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.emc.org.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 08:01:20 GMT
content-type: image/webp
content-length: 354
last-modified: Thu, 22 Sep 2022 01:45:23 GMT
expires: Sat, 21 Sep 2024 13:45:23 GMT
cache-control: public, max-age=63115200
link: <https://www.emc.org.au/wp-content/uploads/2019/07/cropped-The-Early-Morning-Centre-site-icon.png>; rel="canonical"
x-content-type-options: nosniff
etag: "ee519b09d0c841e8"
vary: Accept
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
c0.wp.com/p/jetpack/11.3.1/css/jetpack.css
200 OK 90 kB URL HTTP/2 c0.wp.com/p/jetpack/11.3.1/css/jetpack.css
IP
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 64dc4a69de4941662bcaf66e18f52a7e
43ff5b09943f7f6cdfff15cb140e2ed7fc06b0ee
5fd04932d06f2d1cc1e4d7f5224984069e2b4d2c6b04ab418db35124651987eb
GET /p/jetpack/11.3.1/css/jetpack.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.emc.org.au/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 08:01:16 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Tue, 19 Jul 2022 17:25:16 GMT
content-encoding: br
expires: Tue, 26 Sep 2023 08:01:16 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.emc.org.au/wp-content/uploads/2019/07/The-Early-Morning-Centre-UnitingCare-Canberra-City.png
200 OK 74 kB URL HTTP/1.1 www.emc.org.au/wp-content/uploads/2019/07/The-Early-Morning-Centre-UnitingCare-Canberra-City.png
IP
ASN #38719 Dreamscape Networks Limited
File type PNG image data, 1334 x 863, 8-bit/color RGBA, interlaced\012- data
Hash 262a0bfcf96e933f4cc5488445aa3164
cf389a71ba47c2ae4593d487356d0b58e8b13c8c
dc82652918f396b126abdf2f6afbf7e7e1392dd6c260b3f0454925a90d5761dd
GET /wp-content/uploads/2019/07/The-Early-Morning-Centre-UnitingCare-Canberra-City.png HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.emc.org.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 08:01:19 GMT
Server: Apache
Last-Modified: Fri, 26 Jul 2019 03:11:07 GMT
Accept-Ranges: bytes
Content-Length: 73945
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
i0.wp.com/www.emc.org.au/wp-content/uploads/2019/07/cropped-The-Early-Morning-Centre-site-icon.png?fit=192%2C192&ssl=1
200 OK 2.1 kB URL HTTP/2 i0.wp.com/www.emc.org.au/wp-content/uploads/2019/07/cropped-The-Early-Morning-Centre-site-icon.png?fit=192%2C192&ssl=1
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash a79d46f640f8e2a917917bda9d2d598e
288f091ae1525cbb3abcc22744801b611a284001
e53f4150230b85206a70cf5de2b8c7eb063b5c5f52e390910ac3e4a91e8ae260
GET /www.emc.org.au/wp-content/uploads/2019/07/cropped-The-Early-Morning-Centre-site-icon.png?fit=192%2C192&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.emc.org.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 08:01:20 GMT
content-type: image/webp
content-length: 2066
last-modified: Mon, 26 Sep 2022 08:01:20 GMT
expires: Wed, 25 Sep 2024 20:01:20 GMT
cache-control: public, max-age=63115200
link: <https://www.emc.org.au/wp-content/uploads/2019/07/cropped-The-Early-Morning-Centre-site-icon.png>; rel="canonical"
x-content-type-options: nosniff
etag: "90d01c3710cd80ee"
vary: Accept
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
www.emc.org.au/wp-content/themes/agama/assets/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL HTTP/1.1 www.emc.org.au/wp-content/themes/agama/assets/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
ASN #38719 Dreamscape Networks Limited
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /wp-content/themes/agama/assets/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.emc.org.au/wp-content/themes/agama/assets/css/font-awesome.min.css?ver=4.7.0
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 08:01:19 GMT
Server: Apache
Last-Modified: Tue, 19 Apr 2022 00:20:44 GMT
Accept-Ranges: bytes
Content-Length: 77160
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: font/woff2
www.emc.org.au/wp-content/uploads/2018/09/image-from-rawpixel-id-430300-jpeg.jpg
200 OK 499 kB URL HTTP/1.1 www.emc.org.au/wp-content/uploads/2018/09/image-from-rawpixel-id-430300-jpeg.jpg
IP
ASN #38719 Dreamscape Networks Limited
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=2333, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=3500], baseline, precision 8, 2200x535, components 3\012- data
Size 499 kB (498865 bytes)
Hash 9dcb4cd3e7cd8d13d45c1fe7ce8501e7
f5470c0dbb7864652ce63838670ad26241576ff3
9041e0c88c9fb32fdea6f27340fa91850dd5899275e0c1131bd89e9976b76c33
GET /wp-content/uploads/2018/09/image-from-rawpixel-id-430300-jpeg.jpg HTTP/1.1
Host: www.emc.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.emc.org.au/wp-includes/jss/secure/navyfederal.orgnfoaa_authlogin.jsp/error.php
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 08:01:19 GMT
Server: Apache
Last-Modified: Fri, 28 Sep 2018 03:37:00 GMT
Accept-Ranges: bytes
Content-Length: 498865
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/jpeg
c0.wp.com/c/6.0.2/wp-includes/js/mediaelement/wp-mediaelement.min.css
200 OK 0 B URL HTTP/2 c0.wp.com/c/6.0.2/wp-includes/js/mediaelement/wp-mediaelement.min.css
IP
GET /c/6.0.2/wp-includes/js/mediaelement/wp-mediaelement.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.emc.org.au/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 08:01:16 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 07 Jun 2019 20:45:02 GMT
content-encoding: br
expires: Tue, 26 Sep 2023 08:01:16 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
c0.wp.com/c/6.0.2/wp-includes/js/jquery/jquery.min.js
200 OK 0 B URL HTTP/2 c0.wp.com/c/6.0.2/wp-includes/js/jquery/jquery.min.js
IP
GET /c/6.0.2/wp-includes/js/jquery/jquery.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.emc.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 08:01:16 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 10 Mar 2021 15:07:24 GMT
content-encoding: br
expires: Tue, 26 Sep 2023 08:01:16 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
c0.wp.com/c/6.0.2/wp-includes/js/jquery/jquery-migrate.min.js
200 OK 0 B URL HTTP/2 c0.wp.com/c/6.0.2/wp-includes/js/jquery/jquery-migrate.min.js
IP
GET /c/6.0.2/wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.emc.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 08:01:16 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 18 Nov 2020 09:06:06 GMT
content-encoding: br
expires: Tue, 26 Sep 2023 08:01:16 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
stats.wp.com/e-202239.js
200 OK 0 B IP
GET /e-202239.js HTTP/1.1
Host: stats.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.emc.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 08:01:17 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"6197c5cf-3508"
content-encoding: br
expires: Sun, 17 Sep 2023 22:04:35 GMT
cache-control: max-age=31536000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn
X-Firefox-Spdy: h2
116.0.20.85
34.212.13.96
93.184.220.29
23.36.76.226
0.0.0.0