| firefox.settings.services.mozilla.com/v1/ | 143.204.55.115 | 200 OK | 939 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/ IP143.204.55.115:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash91dd975a7b17b2922dd23c0e49314e40 57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2 09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 09 Sep 2022 21:06:00 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: YNyx5PSCkL0JcHK_m2qSoS23v2H7lnCA37eqs1h2dMseccwOcmekMA==
Age: 362
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashf55e483f32b3fd50b1a2414aaada9b61 9d6b22edb98866e002e3b1ace44dfb0f8d00935f 4b09e1d2b887ded061e4ec5f82ec70ce699eeed428acc6b4fd3ef10ed9233c89
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4B09E1D2B887DED061E4EC5F82EC70CE699EEED428ACC6B4FD3EF10ED9233C89"
Last-Modified: Thu, 08 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10433
Expires: Sat, 10 Sep 2022 00:05:55 GMT
Date: Fri, 09 Sep 2022 21:12:02 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain | 143.204.55.49 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain IP143.204.55.49:0
File typePEM certificate\012- , ASCII text Hash742edb4038f38bc533514982f3d2e861 cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1 b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 09 Sep 2022 03:46:35 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: TaElW9qSJfhFZGNzYF-5yHhr77agJqdiRdIQ3Oh3M4tgH7QvXRebRA==
age: 62728
X-Firefox-Spdy: h2
|
|
| www.vitus.com/ | 104.21.87.120 | 301 Moved Permanently | 162 B |
IP104.21.87.120:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
Analyzer | Verdict | Alert | fortinet | Malware | |
GET / HTTP/1.1
Host: www.vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Fri, 09 Sep 2022 21:12:02 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://www.vitus.com/
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ay48B%2Fhu%2Fu1oS2S8XVJhDTidAFihv1JyiXbKN%2Bz2mg6uSZTzLS2tVivr%2Flnp%2FnwQrRN1X12s7pzJJuABoc6vEZ4dtRt1t%2FmromKI3opZvQ9iGRSaoo1Hvi5Ybr6w6P0L"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7482eb77aa83b518-OSL
alt-svc: h2=":443"; ma=60
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Sep 2022 21:12:02 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 143.204.55.115 | 200 OK | 329 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP143.204.55.115:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Fri, 09 Sep 2022 20:56:07 GMT
Cache-Control: max-age=3600
Expires: Fri, 09 Sep 2022 21:39:29 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: GnzitkURWGCElz-fsoCJJb_58xqfXIZSn6x2lL-CxZPAKlcAl7Er-w==
Age: 956
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashd0c56e0b2955a5dd7f37ba4bbf5727b4 f435bd1f6fb8ec931f1817fe4b91e6b86a7cb14b 99f7da9dca677db8e9cec5491c0d6d8a86b9c5e907907c2fdd30973c747f4282
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6031
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 21:12:03 GMT
Last-Modified: Fri, 09 Sep 2022 19:31:32 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashf1fa8224847ea7d9b4dc8e598fae4142 cb703a2944e58d97dd48a7e56ee9f4510ced78b4 920094aad2886535e2ba9e38d4731f63fbde93038d92b38f0030b0a0f47c2ac8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 21:12:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashf1fa8224847ea7d9b4dc8e598fae4142 cb703a2944e58d97dd48a7e56ee9f4510ced78b4 920094aad2886535e2ba9e38d4731f63fbde93038d92b38f0030b0a0f47c2ac8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 21:12:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashf1fa8224847ea7d9b4dc8e598fae4142 cb703a2944e58d97dd48a7e56ee9f4510ced78b4 920094aad2886535e2ba9e38d4731f63fbde93038d92b38f0030b0a0f47c2ac8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 21:12:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| push.services.mozilla.com/ | 34.212.166.60 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP34.212.166.60:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: q1zC/13D06CKWfTsJuJ2xw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: dCemwHcW5yQqSAFk9VXJCnL5M+E=
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 727 B |
IP93.184.220.29:0
Hash80fc8c848fd2a77fac487510b037d10b 724e27acfbc22db895cd90bd1cc9eb3c733f4b6f 7ca432f5839421608c3db07c558df6e53290566925eada62272f08e4fc2980f5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6130
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 21:12:03 GMT
Last-Modified: Fri, 09 Sep 2022 19:29:53 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 727
|
|
| vitus.com/wp-content/plugins/a3-lazy-load/assets/js/jquery.lazyloadxt.extend.js?ver=2.6.0 | 104.21.87.120 | 200 OK | 836 B |
URL HTTP/2vitus.com/wp-content/plugins/a3-lazy-load/assets/js/jquery.lazyloadxt.extend.js?ver=2.6.0 IP104.21.87.120:0
Hash765f5fa0a9e5a2db32b521faa3ac3282 89db28c4cfd42ca7b7c3c98d88913d16ee505ae4 509a2c0b21273fb97b2bf63814a57fd1a3e8a0f92ff49d9591ed95a1e826df93
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/plugins/a3-lazy-load/assets/js/jquery.lazyloadxt.extend.js?ver=2.6.0 HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:03 GMT
content-type: application/javascript
last-modified: Thu, 18 Aug 2022 18:19:54 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"62fe82ca-415"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zmX%2B3B4cATpoEkHmgd%2BbD7%2FYtLIysCQ6pYlyzHbkGqkgjmqrJdxJmYrjIKNrd2RVAA7UzuPjMlnmo8NAIVmaRVKnpMKEhfpUBZMEHbrA2j2EpIzPdnQitASWKYc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb7d5b03b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashebc205cf750164c31d1fce2318d1636b 9309949107d69193b1c5156d45fbcc91e20a0fe4 4ab7f53d17c5d642e17a3e78aa93dc133c4713e44ccccb849f04fdcca62be8b6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 21:12:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashebc205cf750164c31d1fce2318d1636b 9309949107d69193b1c5156d45fbcc91e20a0fe4 4ab7f53d17c5d642e17a3e78aa93dc133c4713e44ccccb849f04fdcca62be8b6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 21:12:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| vitus.com/wp-content/plugins/a3-lazy-load/assets/js/jquery.lazyloadxt.srcset.min.js?ver=2.6.0 | 104.21.87.120 | 200 OK | 47 kB |
URL HTTP/2vitus.com/wp-content/plugins/a3-lazy-load/assets/js/jquery.lazyloadxt.srcset.min.js?ver=2.6.0 IP104.21.87.120:0
File typeASCII text, with very long lines (1533) Hash0ea99819bbb5f8c7802ed608fdff0b2c 90a9ebe13bb96d458e75b0a3af9e979ea21e278d 9a56caf3c0eadec6d6880ae10eca90d484d0bac260f48f6f66fbf5396f8a2077
GET /wp-content/plugins/a3-lazy-load/assets/js/jquery.lazyloadxt.srcset.min.js?ver=2.6.0 HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:03 GMT
content-type: application/javascript
last-modified: Thu, 18 Aug 2022 18:19:54 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"62fe82ca-625"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6bmbB96R2dg1nbiYH2lOocPDPkwcOIY9D5NFIkIQt04XlpHUknjHMUpPTqk7HqbGTfVIF%2BGK6eFUnYJOuWLvx4AcmreQHYY%2Bo7pdWYlPG%2B%2B6ftF8CkGdxrkWwj0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb7d5b02b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/heebo/v21/NGS6v5_NC0k9P9H2TbE.woff2 | 142.250.74.163 | 200 OK | 27 kB |
URL HTTP/2fonts.gstatic.com/s/heebo/v21/NGS6v5_NC0k9P9H2TbE.woff2 IP142.250.74.163:0
File typeWeb Open Font Format (Version 2), TrueType, length 27116, version 1.0\012- data Hash13c1ac7fc8f934e169620e81471a3a54 d111242b230c54204e9ec061537869f8ce20cb53 b38977ea35fde92fe200fa14ac7cc55e2edce54b998ce9a08734ba1dd9053fed
GET /s/heebo/v21/NGS6v5_NC0k9P9H2TbE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://vitus.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 27116
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Sep 2022 02:50:06 GMT
expires: Tue, 05 Sep 2023 02:50:06 GMT
cache-control: public, max-age=31536000
age: 411717
last-modified: Mon, 11 Jul 2022 20:35:20 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashebc205cf750164c31d1fce2318d1636b 9309949107d69193b1c5156d45fbcc91e20a0fe4 4ab7f53d17c5d642e17a3e78aa93dc133c4713e44ccccb849f04fdcca62be8b6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 21:12:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| vitus.com/wp-content/plugins/a3-lazy-load/assets/css/loading.gif | 104.21.87.120 | 200 OK | 1.7 kB |
URL HTTP/2vitus.com/wp-content/plugins/a3-lazy-load/assets/css/loading.gif IP104.21.87.120:0
File typeGIF image data, version 89a, 32 x 32\012- data Hash265808cc54404f22de9785c713e0cb7e bf3d1b71957caee1c6273061ad00c99c5d785a0f b6e4dff920e21e3f436a014140d01d43c97177e007556ede69f772f08cb7a7ec
GET /wp-content/plugins/a3-lazy-load/assets/css/loading.gif HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/wp-content/plugins/a3-lazy-load/assets/css/jquery.lazyloadxt.spinner.css?ver=6.0.1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:04 GMT
content-type: image/gif
content-length: 1690
last-modified: Thu, 18 Aug 2022 18:19:54 GMT
etag: "62fe82ca-69a"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TI2idvyA6Zf%2BuAswedZQ5lFkyNQqy8AD6hKStz7uwS0CzaOL%2FJnv6twb1J1lGfZpEf62P7AfohgsXz%2FEmcAzLARPISUOZbfAOYJlwI%2FVmAcS6SjNE47x8ff9WIE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb804ef9b527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashebc205cf750164c31d1fce2318d1636b 9309949107d69193b1c5156d45fbcc91e20a0fe4 4ab7f53d17c5d642e17a3e78aa93dc133c4713e44ccccb849f04fdcca62be8b6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 21:12:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| vitus.com/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.0.1 | 104.21.87.120 | 200 OK | 24 kB |
URL HTTP/2vitus.com/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.0.1 IP104.21.87.120:0
File typeASCII text, with very long lines (1191), with no line terminators Hashbe0ad76a3db491f3d697f761d40e9a31 bb688e3104d6a9fbab4fc5416fcf1185d4423622 0c0404234048553e23a91ade73069499bca68219caf05989046eaab8cd0a6e6a
GET /wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.0.1 HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:03 GMT
content-type: application/javascript
last-modified: Fri, 08 Apr 2022 20:07:18 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"625095f6-4a7"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d03yQM9Hcf8mIkAWLl7G%2Fww%2BgwUfDCEhFXnmIBbRAaQnpPUKQ%2FB1bVCxorpol2bfIChIs1JBGcQYZLGpjGzkywfPyEuPhV5%2Fo%2F1OCNj%2FnSJhsRi5Y0cZpZrWkl8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb7d5b09b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| vitus.com/wp-content/plugins/the-grid/frontend/assets/js/the-grid.min.js?ver=2.7.1 | 104.21.87.120 | 200 OK | 53 kB |
URL HTTP/2vitus.com/wp-content/plugins/the-grid/frontend/assets/js/the-grid.min.js?ver=2.7.1 IP104.21.87.120:0
File typeUnicode text, UTF-8 text, with very long lines (65388), with CRLF line terminators Hashacf8296c68f3662f9c3118592d622773 24bfaa4e703164eb9aa526f7badc249da0e2995a 5d7a8a02909dbd6de0bc383deea31d23745cfd35a5267ffb2ec12da62e600165
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/plugins/the-grid/frontend/assets/js/the-grid.min.js?ver=2.7.1 HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:03 GMT
content-type: application/javascript
last-modified: Fri, 03 May 2019 21:32:08 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"5cccb358-17cb5"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uivxZ6gKvkWqdkDOoi3SGEzyX81CeL6R%2BXDYQ4o6I2f3AfjbUEBwgDtDdRsazSfPGvxNQuj3rUi7hssD0Q96XZZ99aoP1If2Gj8OuGinIrDzVKV1fTC4q4%2Bgw98%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb7d5b0ab527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashe0fbe5627b19e9ad7ad4d40c96514ae9 d9d361271987c5947d96ddacc67efb3f3a32bbd3 48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5749
Expires: Fri, 09 Sep 2022 22:47:53 GMT
Date: Fri, 09 Sep 2022 21:12:04 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashe0fbe5627b19e9ad7ad4d40c96514ae9 d9d361271987c5947d96ddacc67efb3f3a32bbd3 48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5749
Expires: Fri, 09 Sep 2022 22:47:53 GMT
Date: Fri, 09 Sep 2022 21:12:04 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashe0fbe5627b19e9ad7ad4d40c96514ae9 d9d361271987c5947d96ddacc67efb3f3a32bbd3 48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5749
Expires: Fri, 09 Sep 2022 22:47:53 GMT
Date: Fri, 09 Sep 2022 21:12:04 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashe0fbe5627b19e9ad7ad4d40c96514ae9 d9d361271987c5947d96ddacc67efb3f3a32bbd3 48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5749
Expires: Fri, 09 Sep 2022 22:47:53 GMT
Date: Fri, 09 Sep 2022 21:12:04 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F498f96cc-d02c-4ca3-a7e2-0be324253465.jpeg | 34.120.237.76 | 200 OK | 3.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F498f96cc-d02c-4ca3-a7e2-0be324253465.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash0078c7a407144a1ede33aef6f734eecf 113393e0dbabb3aff949d19ab6517ba1082b622d 42afcaf15e45dfa9aff14f59f69d60a3de127005e35783d2d35a4cfa652b57b3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F498f96cc-d02c-4ca3-a7e2-0be324253465.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3125
x-amzn-requestid: 5820e798-6469-40f9-8d70-ee71f1a163b9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YLM5GGQAoAMF8eQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631ac1d3-3a0e9db848ea7ab145f1cffa;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 04:32:19 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: eZaKpjBYe3Qn7vs3zF52Cxob-xu3LMFs8esQAu6Lp6bzM0aOEHoXVg==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 1352c0a623ff0601dd16439f3f225f70.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 04:32:20 GMT
etag: "113393e0dbabb3aff949d19ab6517ba1082b622d"
content-type: image/jpeg
age: 59984
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F793f20c6-757e-47e5-8ab6-4d73ceae75af.jpeg | 34.120.237.76 | 200 OK | 4.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F793f20c6-757e-47e5-8ab6-4d73ceae75af.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashc9590b525c8b07a297c8784f02b161a1 cec8428d159a5bde29e89c64cfb04146f759d52b d309772ce79d36f7b1df0a3ea85a01f8278db2909c860721d105b772efed82ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F793f20c6-757e-47e5-8ab6-4d73ceae75af.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4002
x-amzn-requestid: ea2f5309-e220-4b7e-b718-9339b9444cc2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YKQ6hHM8IAMFeJQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631a61dc-7d45fd9253b7b7fa732b6f8d;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 21:42:52 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: VD7SlrM2RwFk5cfQvul2bTJA__GPYd5_UPY0D0_5NGLHoBj3yur7PA==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 5abfab33f248090bb0f31ca137ce9464.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 22:15:21 GMT
age: 82603
etag: "cec8428d159a5bde29e89c64cfb04146f759d52b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9009587-828b-4a7a-8b84-f28d4b93cdef.jpeg | 34.120.237.76 | 200 OK | 7.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9009587-828b-4a7a-8b84-f28d4b93cdef.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash60fa03262bb3728f24a4c7a8177ec788 09dcbdc6043f01dd56920cca3ce3920d0d07b795 e7448f186933f9848f1d55f0e8dba593918846d02fb9cc3a7cd86d69b96a7fde
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9009587-828b-4a7a-8b84-f28d4b93cdef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7515
x-amzn-requestid: eaf81b32-3b53-4e89-a9d0-943bc9f9982f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X0j0QFhxoAMF-Mw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6311b34e-114287d30092033a2b54ec01;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 07:39:58 GMT
x-amz-cf-pop: SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: _mlXN3nJ7ZPcUDWIqqiv2CB6dkSJ2Y-AZIXNs4xOj18ZX6DYMdhXAA==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 ece5d4a731ece5ff46c564ab2b946ede.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 21:46:19 GMT
age: 84345
etag: "09dcbdc6043f01dd56920cca3ce3920d0d07b795"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ee79a10-bae9-4fae-b19f-8beb6d75a42c.jpeg | 34.120.237.76 | 200 OK | 7.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ee79a10-bae9-4fae-b19f-8beb6d75a42c.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash706c7ceb40056f848425ca7d994cedc8 b9b1bf8291b6a66f260f82947966fa01ca78c61f 739205893d17a123d2fac165f468314de14a99dc56c9e5b0ac79434f7c38b558
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ee79a10-bae9-4fae-b19f-8beb6d75a42c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7139
x-amzn-requestid: 5125cc11-410a-4a86-a0cf-68950433b602
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YFBoyHycIAMFxcw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6318496b-5579dee14390c1b63e97e0fc;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 07:34:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QAFJoWNKPurEH344wsc43OZdBSFCrN7zlnQfTsrMrF6qKM4Wj0QV7w==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 22:03:18 GMT
age: 83326
etag: "b9b1bf8291b6a66f260f82947966fa01ca78c61f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc632269f-fb89-42dc-acc4-f733f3d7beb7.jpeg | 34.120.237.76 | 200 OK | 4.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc632269f-fb89-42dc-acc4-f733f3d7beb7.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasha5fdeb374d4e3669ce5d9ff2cd22cd19 70ede5692526afd351d134a391383461dafdc64f 10c5d8e41aae1a36525a45375966b5067333f0c7edc176a540fd6527ebe1ad8c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc632269f-fb89-42dc-acc4-f733f3d7beb7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4532
x-amzn-requestid: e5694699-7f38-4542-8808-54bda7ee7d86
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YIMmGGUmIAMF2cw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63198e26-1aa6788e24fcfdf0008bee21;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 06:39:34 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zdVUahmbPQ7sQMlg14M89JOwjN2PEM03GNLYEwxPjcaioRpyqb8isA==
via: 1.1 ef6538ee7be7b17c84d06edb0f4c0a1a.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 22:26:32 GMT
age: 81932
etag: "70ede5692526afd351d134a391383461dafdc64f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9258cc3-ebbf-4d4c-85d1-6bc185623583.jpeg | 34.120.237.76 | 200 OK | 8.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9258cc3-ebbf-4d4c-85d1-6bc185623583.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash7afe346e3b24ea4388913b449d1ffc42 f5348ba99fb8966dded580409108316f4e4e1237 1d1cafc3e99c20b23212679838567d4d5fc98c45cf902188e44b25ff2982c8ad
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9258cc3-ebbf-4d4c-85d1-6bc185623583.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8354
x-amzn-requestid: 55971de2-bf63-4300-9007-1bc234962d0e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YKRKXFGTIAMFp3A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631a6242-23914ec672a0a898498bbed6;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 21:44:34 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: lxqcvxSdM4FBQBZTNnhCrpl02fsnInyii7Yaw7fs4STzEd2fZIuuXA==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 a8e5d5aeee6eacca5c379e5059b1f68c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 21:45:36 GMT
etag: "f5348ba99fb8966dded580409108316f4e4e1237"
content-type: image/jpeg
age: 84388
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| vitus.com/wp-content/plugins/league-table/public/assets/js/general.js?ver=2.05 | 104.21.87.120 | 200 OK | 84 kB |
URL HTTP/2vitus.com/wp-content/plugins/league-table/public/assets/js/general.js?ver=2.05 IP104.21.87.120:0
File typeASCII text, with very long lines (428), with CRLF line terminators Hashf83be4966890003f5fcd43c35580b7bd ce17be85abec87124a800245ad8e2600cb7368ff c3c8af9752b283d0c1cfd295adaa748e618da7740cf2dbbb63c41d60809a1b23
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/plugins/league-table/public/assets/js/general.js?ver=2.05 HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:03 GMT
content-type: application/javascript
last-modified: Fri, 03 May 2019 21:32:08 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"5cccb358-b823"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hIjqmmPv2ORJVJNbkR70%2Bk7HeLP6Z%2FHIKYBzSmnbu4F%2BkhKrdVtzPtmteKBafvZueQIdDKFxYCnyTQDDXqsrquZKV4JbaYg0PwxcwEkOdZnmkj2W%2Fgp0aD%2FF3eQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb7d5af9b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| vitus.com/wp-content/themes/pro/cornerstone/assets/fonts/fa-solid-900.woff2 | 104.21.87.120 | 200 OK | 141 kB |
URL HTTP/2vitus.com/wp-content/themes/pro/cornerstone/assets/fonts/fa-solid-900.woff2 IP104.21.87.120:0
File typeWeb Open Font Format (Version 2), TrueType, length 140996, version 331.-31392\012- data Size141 kB (140996 bytes) Hash25d740d42658b6e2c293ce7b3322aac7 41cc9ae4b5dd70fd3988059dfb864f20f99ae371 8b5a3ff47c2413e0bf3dd3bb7899a25aeef9b390a055847a1185a39ad48a2da2
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/themes/pro/cornerstone/assets/fonts/fa-solid-900.woff2 HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:04 GMT
content-type: font/woff2
content-length: 140996
last-modified: Thu, 07 Jul 2022 19:57:21 GMT
etag: "62c73aa1-226c4"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1C8sXPu0OAqMCFdrq2uYzWJE7hI0fBQ8Zvuz4ZOQeci27%2Bxmjv3xSpFlycQAj0JR4lbxjT3RsavVyY8RmQ6yOESw5pu9CFCRQ9uoKZBwJaHuD5KWuLZJslw20Pg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb805f13b527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| vitus.com/wp-content/plugins/elfsight-popup-cc/assets/elfsight-popup.js?ver=1.1.0 | 104.21.87.120 | 200 OK | 144 kB |
URL HTTP/2vitus.com/wp-content/plugins/elfsight-popup-cc/assets/elfsight-popup.js?ver=1.1.0 IP104.21.87.120:0
File typeUnicode text, UTF-8 text, with very long lines (65380) Size144 kB (143824 bytes) Hashc17e1050bc5a7207ae452ab51ba71e99 833892efcaecb251ce9b6e58ace4b3d16c9c4313 e98a354f98c69a7d712b73db03d044089859f44c5175cb206200e3c2e5f96333
GET /wp-content/plugins/elfsight-popup-cc/assets/elfsight-popup.js?ver=1.1.0 HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:04 GMT
content-type: application/javascript
last-modified: Wed, 02 Sep 2020 21:58:45 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"5f501595-6b7ec"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Iz5Z5SYkRNdu3vJHUNkW83i%2FINNSwDbqtoZUk9xacg3pbpqnLgnz%2BJHbzGUqTEXU7mvkv5UpRG8pf%2Bkf6B9VJHTBFQSnfVcjZIHiWAGIszV3HJ85xC8ONvOu6u8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb7d6b0db527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| vitus.com/wp-content/plugins/the-grid/frontend/assets/fonts/the_grid.ttf | 104.21.87.120 | 200 OK | 34 kB |
URL HTTP/2vitus.com/wp-content/plugins/the-grid/frontend/assets/fonts/the_grid.ttf IP104.21.87.120:0
File typeTrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, the_grid \012- data Hashebd94e7766ab1038ebc2885064da3471 f23e91fc975dc8377365f5b653300db3c52eff85 a90132d0c3ec0a1cd36bf50e490740d1562bd1c836573116c5dca932b25c9a52
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/plugins/the-grid/frontend/assets/fonts/the_grid.ttf HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/wp-content/plugins/the-grid/frontend/assets/css/the-grid.min.css?ver=2.7.1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:04 GMT
content-type: application/octet-stream
content-length: 33556
last-modified: Fri, 03 May 2019 21:32:08 GMT
etag: "5cccb358-8314"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oKFUDbwcgptjAOW4ZJkS%2BOckBuMuDaqQDSVzkmkZwk8zM4VYy98YK0oFGSNrIYtoeYxswLAVWTTjMs9v5X3hqlgFK7EM3URIQKq79wgysBzfTPHR%2FeFwezii3O4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb82ea42b527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| vitus.com/wp-content/uploads/2019/02/android-chrome-256x256-50x50.png | 104.21.87.120 | 200 OK | 3.3 kB |
URL HTTP/2vitus.com/wp-content/uploads/2019/02/android-chrome-256x256-50x50.png IP104.21.87.120:0
File typePNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data Hashe2e8b542f5c4c605575e81858420c6ca 7f83a952935512e52dead433db920341346496fa fad03846473f145411ec083d4fb38ac8b65d9c4e8a7be7715d9e809f44d2eb10
GET /wp-content/uploads/2019/02/android-chrome-256x256-50x50.png HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:04 GMT
content-type: image/png
content-length: 3332
last-modified: Fri, 03 May 2019 21:28:24 GMT
etag: "5cccb278-d04"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 92472
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vTm3sIPfTw252muXz9w59ZleiSX%2FYvUhCoi%2B0ffSS02hgqCH9inglJwP2E2cOzllp%2BoIVCZSuTzGr1DF0M862RI2%2FrJeYuZZ%2FxDzFKRxqJ6oyV%2BW60EZPEF84aU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb859ddcb527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| f.vimeocdn.com/p/4.10.0/css/player.css | 151.101.86.109 | 200 OK | 20 kB |
URL HTTP/2f.vimeocdn.com/p/4.10.0/css/player.css IP151.101.86.109:0
File typeASCII text, with very long lines (65495) Hash4004ba0e2bb66b9aeaa32a8544f6eeab 5bf81fc199d0a7fcc805d154e33cdfc992a9689b 1bb8fbd867ab8d696b7ca95485fa59d154afb14213041f9d4d12bbff398da7fd
GET /p/4.10.0/css/player.css HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 09 Sep 2022 21:12:04 GMT
age: 95437
x-served-by: cache-iad-kcgs7200157-IAD, cache-bma1630-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 19695
x-timer: S1662757925.769869,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
access-control-allow-origin: *
content-length: 20291
X-Firefox-Spdy: h2
|
|
| f.vimeocdn.com/js_opt/modules/utils/vuid.min.js | 151.101.86.109 | 200 OK | 997 B |
URL HTTP/2f.vimeocdn.com/js_opt/modules/utils/vuid.min.js IP151.101.86.109:0
File typeASCII text, with very long lines (1839) Hash0ad074ceab68348048a8100a67d36d2c 2a35d9429a411fd87aafd7e6c7fafe51cca82345 0445c9738353c896284236d8c98b5c8b5d7954621d4c4d2bd5cf138660d247aa
GET /js_opt/modules/utils/vuid.min.js HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: gzip
cache-control: public, max-age=2592000
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 09 Sep 2022 21:12:04 GMT
age: 1742086
x-served-by: cache-iad-kiad7000127-IAD, cache-bma1630-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 133807
x-timer: S1662757925.782551,VS0,VE0
vary: Accept-Encoding,x-http-method-override
content-length: 997
X-Firefox-Spdy: h2
|
|
| f.vimeocdn.com/p/4.10.0/js/player.js | 151.101.86.109 | 200 OK | 212 kB |
URL HTTP/2f.vimeocdn.com/p/4.10.0/js/player.js IP151.101.86.109:0
File typeASCII text, with very long lines (64649) Size212 kB (212200 bytes) Hash1bf1cd7e4980bdcf6fc5f33823b2280e 3f9724f4a224915506d6ef7c96dc0564f2c51466 13d45c1b32674b0f6d60248713b74d4845ccbef7714b97799f76b3be286ca1d2
GET /p/4.10.0/js/player.js HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 09 Sep 2022 21:12:04 GMT
age: 95437
x-served-by: cache-iad-kcgs7200061-IAD, cache-bma1630-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 15215
x-timer: S1662757925.782330,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
content-length: 212200
X-Firefox-Spdy: h2
|
|
| vitus.com/wp-content/uploads/2019/02/android-chrome-256x256.png | 104.21.87.120 | 200 OK | 28 kB |
URL HTTP/2vitus.com/wp-content/uploads/2019/02/android-chrome-256x256.png IP104.21.87.120:0
File typePNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data Hash32dd9007c39f59d5d7d4d53124c0cfbd 758b7b567e3f0bba18b86e7b5e43e8bc0a45c773 235c465553ad56e1d0a99fa0bf067a62f923cff60a57c7118dba5e65131dbc28
GET /wp-content/uploads/2019/02/android-chrome-256x256.png HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:05 GMT
content-type: image/png
content-length: 28199
last-modified: Fri, 03 May 2019 21:27:40 GMT
etag: "5cccb24c-6e27"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=82vrTQwrDteAk24XCM4k0lCajM7i4K3mxWPH%2FcmFuh6UX7wOYUPacSZVPq5qUuo9o5x70KrXwhcf2umndqRufgkJI8x2VWYTfLLnjlJnz5LqBdW1wi85gNjcoTg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb859ddab527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| 178vod-adaptive.akamaized.net/exp=1662761824~acl=%2F9f82b510-1a38-4112-b1d6-cadaed392081%2F%2A~hmac=6d2c569ba375f766225d62946c7f700d4d2301b064193adaeb6da6452f8eacf3/9f82b510-1a38-4112-b1d6-cadaed392081/sep/video/b95cc6a6,805aec76,7b40119d/master.json?base64_init=1 | 23.36.76.200 | 200 OK | 1.8 kB |
URL HTTP/1.1178vod-adaptive.akamaized.net/exp=1662761824~acl=%2F9f82b510-1a38-4112-b1d6-cadaed392081%2F%2A~hmac=6d2c569ba375f766225d62946c7f700d4d2301b064193adaeb6da6452f8eacf3/9f82b510-1a38-4112-b1d6-cadaed392081/sep/video/b95cc6a6,805aec76,7b40119d/master.json?base64_init=1 IP23.36.76.200:0 ASN#20940 Akamai International B.V.
File typeJSON data\012- , ASCII text, with very long lines (6885) Hashbe013059282a6b364da7e1477888b632 55af3a6e5d6253183b0fb8f18efe47d3734067ff 4093b86b192f17f40a8d21026aeeb7e9f5c7ac80f49e0aea435ac47d7b99ad49
GET /exp=1662761824~acl=%2F9f82b510-1a38-4112-b1d6-cadaed392081%2F%2A~hmac=6d2c569ba375f766225d62946c7f700d4d2301b064193adaeb6da6452f8eacf3/9f82b510-1a38-4112-b1d6-cadaed392081/sep/video/b95cc6a6,805aec76,7b40119d/master.json?base64_init=1 HTTP/1.1
Host: 178vod-adaptive.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
origin-retrieved-hour: 1657695600
Access-Control-Max-Age: 86400
timing-allow-origin: *
Content-Encoding: gzip
Content-Length: 1761
Aka-c-hit: cache-hit
Cache-Control: max-age=30770462
Date: Fri, 09 Sep 2022 21:12:05 GMT
Connection: keep-alive
Vary: Accept-Encoding
Akamai-Mon-Iucid-Del: 877678
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
AK-REFERENCE-ID: 0.c44c2417.1662757925.4c9487b
X-VIM-CACHEBC: EP:H11,E:m,TD0:h
Access-Control-Expose-Headers: Akamai-Edge-IP, X-VIM-CACHEBC, X-Akamai-Request-ID, AK-REFERENCE-ID
Akamai-Edge-IP: 23.36.76.200
Access-Control-Allow-Headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
Access-Control-Allow-Origin: *
|
|
| 178vod-adaptive.akamaized.net/exp=1662761824~acl=%2F9f82b510-1a38-4112-b1d6-cadaed392081%2F%2A~hmac=6d2c569ba375f766225d62946c7f700d4d2301b064193adaeb6da6452f8eacf3/9f82b510-1a38-4112-b1d6-cadaed392081/sep/audio/b95cc6a6/chop/segment-1.m4s?r=dXM%3D | 23.36.76.200 | 200 OK | 104 kB |
URL HTTP/1.1178vod-adaptive.akamaized.net/exp=1662761824~acl=%2F9f82b510-1a38-4112-b1d6-cadaed392081%2F%2A~hmac=6d2c569ba375f766225d62946c7f700d4d2301b064193adaeb6da6452f8eacf3/9f82b510-1a38-4112-b1d6-cadaed392081/sep/audio/b95cc6a6/chop/segment-1.m4s?r=dXM%3D IP23.36.76.200:0 ASN#20940 Akamai International B.V.
Size104 kB (104320 bytes) Hash0f99382ad3618c03bbe38f2f6ed84f9b 2d73d6241fbaa8f0ed8904d4eb7095e9ce5cb3b8 b03ea04cb13fe6af5b5ce045cd068e3aaaf39187389232af7b8d95a610a61e4b
GET /exp=1662761824~acl=%2F9f82b510-1a38-4112-b1d6-cadaed392081%2F%2A~hmac=6d2c569ba375f766225d62946c7f700d4d2301b064193adaeb6da6452f8eacf3/9f82b510-1a38-4112-b1d6-cadaed392081/sep/audio/b95cc6a6/chop/segment-1.m4s?r=dXM%3D HTTP/1.1
Host: 178vod-adaptive.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 104320
using-starlord: true
origin-retrieved-hour: 1657108800
Access-Control-Max-Age: 86400
timing-allow-origin: *
Aka-c-hit: cache-hit
Cache-Control: max-age=30185051
Date: Fri, 09 Sep 2022 21:12:05 GMT
Connection: keep-alive
Akamai-Mon-Iucid-Del: 877678
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Content-Type: video/mp4
AK-REFERENCE-ID: 0.c44c2417.1662757925.4c9488d
X-VIM-CACHEBC: EP:H11,E:m,TD0:h
Access-Control-Expose-Headers: Akamai-Edge-IP, X-VIM-CACHEBC, X-Akamai-Request-ID, AK-REFERENCE-ID
Akamai-Edge-IP: 23.36.76.200
Access-Control-Allow-Headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
Access-Control-Allow-Origin: *
|
|
| 178vod-adaptive.akamaized.net/exp=1662761824~acl=%2F9f82b510-1a38-4112-b1d6-cadaed392081%2F%2A~hmac=6d2c569ba375f766225d62946c7f700d4d2301b064193adaeb6da6452f8eacf3/9f82b510-1a38-4112-b1d6-cadaed392081/sep/video/805aec76/chop/segment-1.m4s?r=dXM%3D | 23.36.76.200 | 200 OK | 428 kB |
URL HTTP/1.1178vod-adaptive.akamaized.net/exp=1662761824~acl=%2F9f82b510-1a38-4112-b1d6-cadaed392081%2F%2A~hmac=6d2c569ba375f766225d62946c7f700d4d2301b064193adaeb6da6452f8eacf3/9f82b510-1a38-4112-b1d6-cadaed392081/sep/video/805aec76/chop/segment-1.m4s?r=dXM%3D IP23.36.76.200:0 ASN#20940 Akamai International B.V.
Size428 kB (428499 bytes) Hash9caf597baf058826e224eae532bb2a58 bec7621a438cde05bbe32432905b2e30c1a1615c 48b6cc7ad763f3cc3410a3d884cefbd98c77420d49a8fbe7a4e28e807eb82e34
GET /exp=1662761824~acl=%2F9f82b510-1a38-4112-b1d6-cadaed392081%2F%2A~hmac=6d2c569ba375f766225d62946c7f700d4d2301b064193adaeb6da6452f8eacf3/9f82b510-1a38-4112-b1d6-cadaed392081/sep/video/805aec76/chop/segment-1.m4s?r=dXM%3D HTTP/1.1
Host: 178vod-adaptive.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 428499
using-starlord: true
origin-retrieved-hour: 1657720800
Access-Control-Max-Age: 86400
timing-allow-origin: *
Aka-c-hit: cache-hit
Cache-Control: max-age=30795825
Date: Fri, 09 Sep 2022 21:12:05 GMT
Connection: keep-alive
Akamai-Mon-Iucid-Del: 877678
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Content-Type: video/mp4
AK-REFERENCE-ID: 0.c44c2417.1662757925.4c948a2
X-VIM-CACHEBC: EP:H11,E:m,TD0:h
Access-Control-Expose-Headers: Akamai-Edge-IP, X-VIM-CACHEBC, X-Akamai-Request-ID, AK-REFERENCE-ID
Akamai-Edge-IP: 23.36.76.200
Access-Control-Allow-Headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
Access-Control-Allow-Origin: *
|
|
| 178vod-adaptive.akamaized.net/exp=1662761824~acl=%2F9f82b510-1a38-4112-b1d6-cadaed392081%2F%2A~hmac=6d2c569ba375f766225d62946c7f700d4d2301b064193adaeb6da6452f8eacf3/9f82b510-1a38-4112-b1d6-cadaed392081/sep/video/b95cc6a6/chop/segment-1.m4s?r=dXM%3D | 23.36.76.200 | 200 OK | 1.2 MB |
URL HTTP/1.1178vod-adaptive.akamaized.net/exp=1662761824~acl=%2F9f82b510-1a38-4112-b1d6-cadaed392081%2F%2A~hmac=6d2c569ba375f766225d62946c7f700d4d2301b064193adaeb6da6452f8eacf3/9f82b510-1a38-4112-b1d6-cadaed392081/sep/video/b95cc6a6/chop/segment-1.m4s?r=dXM%3D IP23.36.76.200:0 ASN#20940 Akamai International B.V.
Size1.2 MB (1224817 bytes) Hash98f98ea2fdb1b9593307f1e1d94e776a 015e6298e85f3810f1ac906b2f2ef390c40beedf c438b96071291ead3f088129995cf71abe06a8ede4ce1d9233c05ab052925d64
GET /exp=1662761824~acl=%2F9f82b510-1a38-4112-b1d6-cadaed392081%2F%2A~hmac=6d2c569ba375f766225d62946c7f700d4d2301b064193adaeb6da6452f8eacf3/9f82b510-1a38-4112-b1d6-cadaed392081/sep/video/b95cc6a6/chop/segment-1.m4s?r=dXM%3D HTTP/1.1
Host: 178vod-adaptive.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 1224817
using-starlord: true
origin-retrieved-hour: 1657803600
Access-Control-Max-Age: 86400
timing-allow-origin: *
Aka-c-hit: cache-hit
Cache-Control: max-age=30877317
Date: Fri, 09 Sep 2022 21:12:05 GMT
Connection: keep-alive
Akamai-Mon-Iucid-Del: 877678
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Content-Type: video/mp4
AK-REFERENCE-ID: 0.c44c2417.1662757925.4c948a7
X-VIM-CACHEBC: EP:H11,E:m,TD0:m,CW:h
Access-Control-Expose-Headers: Akamai-Edge-IP, X-VIM-CACHEBC, X-Akamai-Request-ID, AK-REFERENCE-ID
Akamai-Edge-IP: 23.36.76.200
Access-Control-Allow-Headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
Access-Control-Allow-Origin: *
|
|
| ocsp.pki.goog/s/gts1d4/5Ylu76wHhgo | 142.250.74.3 | 200 OK | 471 B |
URL HTTP/1.1ocsp.pki.goog/s/gts1d4/5Ylu76wHhgo IP142.250.74.3:0
Hash4488af71ba85e33bad5d45946babec83 d17f9238da394a22d1d95e75fd2b9ce6ba330de2 22c6c75733a1d65b07bed389fb8d0ed2a46e367c4bf60d54923db98d6d2e4666
POST /s/gts1d4/5Ylu76wHhgo HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 21:12:05 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/s/gts1d4/5Ylu76wHhgo | 142.250.74.3 | 200 OK | 471 B |
URL HTTP/1.1ocsp.pki.goog/s/gts1d4/5Ylu76wHhgo IP142.250.74.3:0
Hash4488af71ba85e33bad5d45946babec83 d17f9238da394a22d1d95e75fd2b9ce6ba330de2 22c6c75733a1d65b07bed389fb8d0ed2a46e367c4bf60d54923db98d6d2e4666
POST /s/gts1d4/5Ylu76wHhgo HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 21:12:05 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fresnel.vimeocdn.com/add/player-test-impression?beacon=1 | 34.120.202.204 | 200 OK | 0 B |
URL HTTP/2fresnel.vimeocdn.com/add/player-test-impression?beacon=1 IP34.120.202.204:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /add/player-test-impression?beacon=1 HTTP/1.1
Host: fresnel.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 116
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://player.vimeo.com
date: Fri, 09 Sep 2022 21:12:05 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fresnel.vimeocdn.com/add/player-stats?beacon=1&session-id=bcdbd9b7002e4b192c13cde1da25afa26aa0c8af1662757924 | 34.120.202.204 | 200 OK | 0 B |
URL HTTP/2fresnel.vimeocdn.com/add/player-stats?beacon=1&session-id=bcdbd9b7002e4b192c13cde1da25afa26aa0c8af1662757924 IP34.120.202.204:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /add/player-stats?beacon=1&session-id=bcdbd9b7002e4b192c13cde1da25afa26aa0c8af1662757924 HTTP/1.1
Host: fresnel.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1711
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://player.vimeo.com
date: Fri, 09 Sep 2022 21:12:05 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fresnel.vimeocdn.com/add/player-stats?beacon=1&session-id=bcdbd9b7002e4b192c13cde1da25afa26aa0c8af1662757924 | 34.120.202.204 | 200 OK | 0 B |
URL HTTP/2fresnel.vimeocdn.com/add/player-stats?beacon=1&session-id=bcdbd9b7002e4b192c13cde1da25afa26aa0c8af1662757924 IP34.120.202.204:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /add/player-stats?beacon=1&session-id=bcdbd9b7002e4b192c13cde1da25afa26aa0c8af1662757924 HTTP/1.1
Host: fresnel.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1420
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://player.vimeo.com
date: Fri, 09 Sep 2022 21:12:05 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| player-telemetry.vimeo.com/player-events/log/play | 34.120.202.204 | 200 OK | 0 B |
URL HTTP/2player-telemetry.vimeo.com/player-events/log/play IP34.120.202.204:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /player-events/log/play HTTP/1.1
Host: player-telemetry.vimeo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 651
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://player.vimeo.com
content-type: text/html; charset=UTF-8
date: Fri, 09 Sep 2022 21:12:05 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| i.vimeocdn.com/video/753495389-41aa66390f1015914083cce7f91b7729f3fd8f733f34ab4857590b1327d11ffc-d?mw=800&mh=450 | 151.101.86.109 | 200 OK | 99 kB |
URL HTTP/2i.vimeocdn.com/video/753495389-41aa66390f1015914083cce7f91b7729f3fd8f733f34ab4857590b1327d11ffc-d?mw=800&mh=450 IP151.101.86.109:0
File typeISO Media, AVIF Image\012- data Hash226a69d839b0b2951152226d9904757a 4ba29184fc3997193e9a298bca2a5bcb33d52ed4 d5c510d39575b560d6ba0b4a63590160c8b045f117186ad43da2fec1ada6a94d
GET /video/753495389-41aa66390f1015914083cce7f91b7729f3fd8f733f34ab4857590b1327d11ffc-d?mw=800&mh=450 HTTP/1.1
Host: i.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/avif
etag: 226a69d839b0b2951152226d9904757a
x-viewmaster-lossless-format: automatic
viewmaster-server: viewmaster-us-central1-13r9
cache-control: public, max-age=2592000
via: vvarnish, 1.1 varnish, 1.1 varnish
x-backend-server: varnish
access-control-allow-origin: *
access-control-expose-headers: X-Viewmaster-Status
access-control-max-age: 86400
accept-ranges: bytes
date: Fri, 09 Sep 2022 21:12:05 GMT
age: 0
x-served-by: cache-dfw-kdfw8210099-DFW, cache-bma1630-BMA
x-cache: miss, MISS, MISS
x-cache-hits: 0, 0
x-timer: S1662757925.023153,VS0,VE861
vary: Accept
content-length: 99315
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/s/gts1d4/5Ylu76wHhgo | 142.250.74.3 | 200 OK | 471 B |
URL HTTP/1.1ocsp.pki.goog/s/gts1d4/5Ylu76wHhgo IP142.250.74.3:0
Hash4488af71ba85e33bad5d45946babec83 d17f9238da394a22d1d95e75fd2b9ce6ba330de2 22c6c75733a1d65b07bed389fb8d0ed2a46e367c4bf60d54923db98d6d2e4666
POST /s/gts1d4/5Ylu76wHhgo HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 21:12:05 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/s/gts1d4/5Ylu76wHhgo | 142.250.74.3 | 200 OK | 471 B |
URL HTTP/1.1ocsp.pki.goog/s/gts1d4/5Ylu76wHhgo IP142.250.74.3:0
Hash4488af71ba85e33bad5d45946babec83 d17f9238da394a22d1d95e75fd2b9ce6ba330de2 22c6c75733a1d65b07bed389fb8d0ed2a46e367c4bf60d54923db98d6d2e4666
POST /s/gts1d4/5Ylu76wHhgo HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 21:12:05 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5f31e9e-7d20-466c-a9b3-ce9e9c5475e8.jpeg | 34.120.237.76 | 200 OK | 9.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5f31e9e-7d20-466c-a9b3-ce9e9c5475e8.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashba8d1b764c2d18807caecb5ee1e046c0 c0e3d10ce67f77a92b54954410e30621af7ee87c f558c4827c2edf896588b6e3f0b4f295269e95f86143b40729a7a2a5e1adbbb6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5f31e9e-7d20-466c-a9b3-ce9e9c5475e8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9011
x-amzn-requestid: cf861da4-5f3b-43b8-931a-5285839c6301
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YKQgHFbOoAMFYVQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631a6133-4cf2e37f5e762a557b081446;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 21:40:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: wqcl8zkszPZhWjJ7mr_p82IRaNzU2vMV3wtipUYgRaL7Vj3ntmYYqQ==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 95785220a566cd050f3ad80928463374.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 21:47:07 GMT
age: 84304
etag: "c0e3d10ce67f77a92b54954410e30621af7ee87c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| xup.wpengine.com/wp-content/plugins/league-table/public/assets/js/tablesorter/jquery.tablesorter-min.js?ver=2.05 | 35.188.68.113 | 200 OK | 0 B |
URL HTTP/2xup.wpengine.com/wp-content/plugins/league-table/public/assets/js/tablesorter/jquery.tablesorter-min.js?ver=2.05 IP35.188.68.113:0
GET /wp-content/plugins/league-table/public/assets/js/tablesorter/jquery.tablesorter-min.js?ver=2.05 HTTP/1.1
Host: xup.wpengine.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Sep 2022 21:12:03 GMT
content-type: application/javascript
last-modified: Fri, 03 May 2019 21:32:27 GMT
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
etag: W/"5cccb36b-a676"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| vitus.com/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.18 | 104.21.87.120 | 200 OK | 0 B |
URL HTTP/2vitus.com/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.18 IP104.21.87.120:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.18 HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:03 GMT
content-type: application/javascript
last-modified: Thu, 07 Jul 2022 19:56:46 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"62c73a7e-1f725"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: HIT
age: 163912
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YO%2B%2BNWTXb%2BBir3vLG0gNfEHFuvi9FUqeT3lfMEwiPsL%2BTFmL%2F1S3ua57J0vMQpbSj7rmJiZTgZRlHfzLMquWNLLGELvv%2Bg8oBjpGR9Gg8Rk2CvJ5GL%2BDLbnq8qU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb7cfa9db527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Heebo:900,700,400,300%7CRaleway:300,300i,500,500i%7CLato:900,900i,300,300i&subset=latin,latin-ext&display=auto | 142.250.74.10 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Heebo:900,700,400,300%7CRaleway:300,300i,500,500i%7CLato:900,900i,300,300i&subset=latin,latin-ext&display=auto IP142.250.74.10:0
GET /css?family=Heebo:900,700,400,300%7CRaleway:300,300i,500,500i%7CLato:900,900i,300,300i&subset=latin,latin-ext&display=auto HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 Sep 2022 21:12:03 GMT
date: Fri, 09 Sep 2022 21:12:03 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| vitus.com/wp-content/themes/pro-child/style.css?ver=5.1.5 | 104.21.87.120 | 200 OK | 0 B |
URL HTTP/2vitus.com/wp-content/themes/pro-child/style.css?ver=5.1.5 IP104.21.87.120:0
GET /wp-content/themes/pro-child/style.css?ver=5.1.5 HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:03 GMT
content-type: text/css
last-modified: Fri, 17 Apr 2020 22:43:11 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"5e9a30ff-916"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LMdJ4YNs41kHO5Ft3D5dTMX13s7psajffsCm27MDuCVBU48KYhHFzYo%2FDg0v84Q%2B%2FT4aS68dA0LpnZpLUXZBeXyyBARIIckuHlbbcXrPF0M7yKEcFTx8AIYft94%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb7cfa8bb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| vitus.com/wp-content/uploads/sass/a3_lazy_load.min.css?ver=1555967068 | 104.21.87.120 | 200 OK | 0 B |
URL HTTP/2vitus.com/wp-content/uploads/sass/a3_lazy_load.min.css?ver=1555967068 IP104.21.87.120:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/uploads/sass/a3_lazy_load.min.css?ver=1555967068 HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:03 GMT
content-type: text/css
last-modified: Fri, 03 May 2019 21:26:11 GMT
etag: W/"5cccb1f3-7f"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7moSoSoAV8WUn2C%2BXyyUTaXOhvm4DeCIR45Xa5hZt7kMo63RY%2BZLG2y0BiWxL8%2Bu1gN1Cs5KATlbigJ8XoTk6dpEOO0wclA4yoil%2Fr7jWv0jZM6Ouhn6Tl1clQk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb7cfa92b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| vitus.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | 104.21.87.120 | 200 OK | 0 B |
URL HTTP/2vitus.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 IP104.21.87.120:0
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:03 GMT
content-type: application/javascript
last-modified: Wed, 18 Nov 2020 09:06:06 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"5fb4e3fe-2bd8"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2v3v3a%2FtvkMTy5IPzDcGgnQRagTC8ZADfv%2FeZx9LCHAHhoEWy5UvwVVgRBblUNuVyQsdg%2FVW4VfIzwYK4uCk01CBV91TDhQ50Nom%2FUWNDLvzl6%2FN1nkXJ1kftGE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb7cfa9cb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| vitus.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.25 | 104.21.87.120 | 200 OK | 0 B |
URL HTTP/2vitus.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.25 IP104.21.87.120:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.25 HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:03 GMT
content-type: application/javascript
last-modified: Thu, 07 Jul 2022 19:56:46 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"62c73a7e-5f948"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: HIT
age: 178056
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DjCLiKYQibdloRDttPNUlRBcA7k66wHM2r8aJTkmz%2Bexfhy2%2F%2FqzX7IAX%2FhiwcKnMuF%2FkwjVXrAFjXlzxYaOTNAaVBnYk2QthlMMgFBEfk1x6KdBHQx8LKERvyo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb7cfaa1b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| vitus.com/wp-content/plugins/a3-lazy-load/assets/css/jquery.lazyloadxt.spinner.css?ver=6.0.1 | 104.21.87.120 | 200 OK | 0 B |
URL HTTP/2vitus.com/wp-content/plugins/a3-lazy-load/assets/css/jquery.lazyloadxt.spinner.css?ver=6.0.1 IP104.21.87.120:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/plugins/a3-lazy-load/assets/css/jquery.lazyloadxt.spinner.css?ver=6.0.1 HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:03 GMT
content-type: text/css
last-modified: Thu, 18 Aug 2022 18:19:54 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"62fe82ca-137"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oHPqEo3l0KHa2nT09%2FyA%2FMWL4IXqAxRV0Fb1PLt1JuCA3S9mpWzM8%2BCbYdrYrPO98FhCNiYDHUenjJAbNVwprQPeP2ua9Pqf06UOdNn4zr79ZyCanXwXhW6cS7s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb7cfa8fb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| vitus.com/wp-content/plugins/the-grid/frontend/assets/css/the-grid.min.css?ver=2.7.1 | 104.21.87.120 | 200 OK | 0 B |
URL HTTP/2vitus.com/wp-content/plugins/the-grid/frontend/assets/css/the-grid.min.css?ver=2.7.1 IP104.21.87.120:0
GET /wp-content/plugins/the-grid/frontend/assets/css/the-grid.min.css?ver=2.7.1 HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:03 GMT
content-type: text/css
last-modified: Fri, 03 May 2019 21:32:08 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"5cccb358-ab5a"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Lgez21mpP9rvdIwyysGpw95V4nOB25A08K3kgRBRdDucVdbVlxqb6J6BR6aP2Pq6uJQEIBJn%2FqMCyeQ%2FgdXha%2Fgnn0vQCpw7jqib3aSAhbc5cwCsOEPK0Lqz%2Fzw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb7cfa96b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| vitus.com/wp-includes/js/comment-reply.min.js?ver=6.0.1 | 104.21.87.120 | 200 OK | 0 B |
URL HTTP/2vitus.com/wp-includes/js/comment-reply.min.js?ver=6.0.1 IP104.21.87.120:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-includes/js/comment-reply.min.js?ver=6.0.1 HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:03 GMT
content-type: application/javascript
last-modified: Fri, 08 Apr 2022 20:07:18 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"625095f6-ba5"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L3rhQroxzIV68%2Fia6%2B71pPhLeGiuN3ZSUgQkVqDgICcYWxz5Q1bgEjXAkyka0wFwba86k5ppAGdSOsRJHY%2BarjDL6f%2FviCt09GXW%2B94BJ0PfGZo53rF9Ntcg%2FkY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb7d5afeb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| vitus.com/wp-content/plugins/a3-lazy-load/assets/js/jquery.lazyloadxt.extra.min.js?ver=2.6.0 | 104.21.87.120 | 200 OK | 0 B |
URL HTTP/2vitus.com/wp-content/plugins/a3-lazy-load/assets/js/jquery.lazyloadxt.extra.min.js?ver=2.6.0 IP104.21.87.120:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/plugins/a3-lazy-load/assets/js/jquery.lazyloadxt.extra.min.js?ver=2.6.0 HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:03 GMT
content-type: application/javascript
last-modified: Thu, 18 Aug 2022 18:19:54 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"62fe82ca-bc7"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xwxZukOASgyOow6lwhypaNBQ4G0SjF77u%2FrqHNQ9kdTZDzNj8QBZekvT4Cr9HWJExqcn5j4FXcuGQ9ktHF7kHqAIvI6q%2FklNJxk4SJgZG0kT7pjP21%2BnFIml%2B94%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb7d5b00b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| vitus.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0 | 104.21.87.120 | 200 OK | 0 B |
URL HTTP/2vitus.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0 IP104.21.87.120:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:03 GMT
content-type: application/javascript
last-modified: Wed, 10 Mar 2021 15:07:24 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"6048e0ac-15db1"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X5B2Lj56%2FZxJmYl5CUJxZM%2FJPY1te2H4Yc0n8cIRhqdJFpe3boblbqWyxQl6xSbhLYavJrm1O24Vj2wjo3XlQhGW6iRdECnk9Nc8MhrFgEIvjLZhOjZopjZdDdc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb7cfa9ab527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| vitus.com/wp-includes/css/dashicons.min.css?ver=6.0.1 | 104.21.87.120 | 200 OK | 0 B |
URL HTTP/2vitus.com/wp-includes/css/dashicons.min.css?ver=6.0.1 IP104.21.87.120:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-includes/css/dashicons.min.css?ver=6.0.1 HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:03 GMT
content-type: text/css
last-modified: Wed, 03 Mar 2021 21:16:22 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"603ffca6-e688"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wP%2BtmSpeulLEO6RbCZyyVb%2Fx1sUzmkM9simsZjEyfSHOCYppn%2BBB4Rm3BqcT%2FM8o4CSmjnFKIWlhMO1ROwGQZh0D4l%2Flg9HdpRLEpvniZq75%2BbboHOEPxqiVXws%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb7cea7fb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| vitus.com/wp-content/themes/pro/framework/dist/js/site/x.js?ver=5.1.5 | 104.21.87.120 | 200 OK | 0 B |
URL HTTP/2vitus.com/wp-content/themes/pro/framework/dist/js/site/x.js?ver=5.1.5 IP104.21.87.120:0
GET /wp-content/themes/pro/framework/dist/js/site/x.js?ver=5.1.5 HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:03 GMT
content-type: application/javascript
last-modified: Thu, 07 Jul 2022 19:57:21 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"62c73aa1-cd42"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lmFo4v9sNGIP5V5Bbwnv56uYksjJejZGCYXvigsSq%2Bdc4afsTrhRUUcSCGIx8i7RvuUDT3m18kZ1MKaep1Sluf4L0xmIaVT60FLOfYRu4RLluQICKzZBYtsCiOM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb7d5afab527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.vitus.com/ | 104.21.87.120 | 301 Moved Permanently | 0 B |
IP104.21.87.120:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET / HTTP/1.1
Host: www.vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
date: Fri, 09 Sep 2022 21:12:03 GMT
content-type: text/html; charset=UTF-8
location: https://vitus.com/
vary: X-Forwarded-Proto,Accept-Encoding
cf-edge-cache: cache,platform=wordpress
x-pingback: https://vitus.com/xmlrpc.php
x-redirect-by: WordPress
expires: Sun, 09 Oct 2022 19:46:00 GMT
x-powered-by: WP Engine
x-cacheable: non200
cache-control: max-age=600, must-revalidate
x-cache: HIT: 2
x-cache-group: normal
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZoZWqSo0TxDbGlXIxB55uWB1frrWctckHPLnzRrNd55NiB5tMYdU63Hj92uhUhlde3JXFYKakew6zKf1Yjaxqgh9eKCYfQ0Be5VXOxA8yA58N2S87Y3Pd0hLK2e%2Bws6F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb79bdd4b527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| vitus.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.1 | 104.21.87.120 | 200 OK | 0 B |
URL HTTP/2vitus.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.1 IP104.21.87.120:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.1 HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:03 GMT
content-type: application/javascript
last-modified: Tue, 12 Apr 2022 05:56:23 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"62551487-48b9"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AGVM5UvxC1VY9fl3IF8dtUm2URzrj219GT0%2BUNsTzbPMftTWycRFADUMMoUusfHW8tKvkX%2FcncI5qOtUEuYos64DQXxq4FbB7lmcWhRZUpsthqrp%2F98wmhOw%2FmQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb7d1ac2b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| vitus.com/wp-content/themes/pro/cornerstone/assets/js/site/cs.6f62d0f.js | 104.21.87.120 | 200 OK | 0 B |
URL HTTP/2vitus.com/wp-content/themes/pro/cornerstone/assets/js/site/cs.6f62d0f.js IP104.21.87.120:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/themes/pro/cornerstone/assets/js/site/cs.6f62d0f.js HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:03 GMT
content-type: application/javascript
last-modified: Thu, 07 Jul 2022 19:57:21 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"62c73aa1-22403"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IG1ShKIYxe%2FWp36ZYoevuw%2BKJEIaicdVP133%2FmRh8x5MKcEAKCdwcUh6jf8rjKoBiyBZ8Lay%2FcR1amJcXhTisY4ryoUazei1dNg1j8v3790312lRcsV6UKzxkaM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb7d5af5b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| vitus.com/wp-includes/js/jquery/ui/effect.min.js?ver=1.13.1 | 104.21.87.120 | 200 OK | 0 B |
URL HTTP/2vitus.com/wp-includes/js/jquery/ui/effect.min.js?ver=1.13.1 IP104.21.87.120:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-includes/js/jquery/ui/effect.min.js?ver=1.13.1 HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:03 GMT
content-type: application/javascript
last-modified: Fri, 08 Apr 2022 20:07:18 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"625095f6-43b3"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: HIT
age: 178054
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E6eHim7oc0FvtLNFPkSNU9FmwjMaVSa3dJ0q5buZlUz0hIIfvLFCywILLTsFhN7pYwsbyl9h5B72%2FiGkYft0Jb%2Ba%2FSJ6GPrvca%2BG1si6eLFF8tP4vEs7yCg%2FjaY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb7d5b05b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Open+Sans&subset=cyrillic,cyrillic-ext,greek,greek-ext,latin-ext,vietnamese | 142.250.74.10 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Open+Sans&subset=cyrillic,cyrillic-ext,greek,greek-ext,latin-ext,vietnamese IP142.250.74.10:0
GET /css?family=Open+Sans&subset=cyrillic,cyrillic-ext,greek,greek-ext,latin-ext,vietnamese HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 Sep 2022 21:12:03 GMT
date: Fri, 09 Sep 2022 21:12:03 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| vitus.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.1 | 104.21.87.120 | 200 OK | 0 B |
URL HTTP/2vitus.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.1 IP104.21.87.120:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.1 HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:03 GMT
content-type: text/css
last-modified: Mon, 04 Jul 2022 12:10:37 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"62c2d8bd-15b64"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aYA6hsFydrJ1tLHxfrgpbHqkdcZoquYx9431IZZ46%2FSINn7QBLVMErl7Y15bgW1yPvhlaUc331Ulkr8mzyXjrJQoyRWGa5FuuZk40UNca6lcXilsBHwMVrOanMI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb7cea7db527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| vitus.com/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.16 | 104.21.87.120 | 200 OK | 0 B |
URL HTTP/2vitus.com/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.16 IP104.21.87.120:0
GET /wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.16 HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:03 GMT
content-type: application/javascript
last-modified: Tue, 29 Sep 2020 15:53:06 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"5f735862-267aa"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dgf6F2n15yMi%2BdUMggLUUhYGPCF8OljfrUPUBAfv8vN69CVUwSojHAPjtSPoWXA%2FvFhLXMbejY%2FJJDh74NmbKISDEs3dSzSiUdhnFcuYs6EOhjHqGRUwJ1bK3jQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb7d5b08b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| vitus.com/wp-content/themes/pro-child/main.js?ver=1660854604 | 104.21.87.120 | 200 OK | 0 B |
URL HTTP/2vitus.com/wp-content/themes/pro-child/main.js?ver=1660854604 IP104.21.87.120:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/themes/pro-child/main.js?ver=1660854604 HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:03 GMT
content-type: application/javascript
last-modified: Fri, 03 May 2019 21:26:11 GMT
etag: W/"5cccb1f3-ac"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JdJCGvuM2V4vTKINKfqpqTWjNVFzvpe4sNMR6RarZ%2FIkI0cCXnVNDHsbpUniz%2FT4nxRWdn5ujaRUzCHA2M%2F8yd8BJHgIvzAAvDeBx%2Bs3f4UzGWlaenDaoaus9rE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb7cfaa5b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| vitus.com/wp-content/plugins/league-table/public/assets/css/general.css?ver=2.05 | 104.21.87.120 | 200 OK | 0 B |
URL HTTP/2vitus.com/wp-content/plugins/league-table/public/assets/css/general.css?ver=2.05 IP104.21.87.120:0
GET /wp-content/plugins/league-table/public/assets/css/general.css?ver=2.05 HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:03 GMT
content-type: text/css
last-modified: Fri, 03 May 2019 21:32:08 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"5cccb358-cc9"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e1WghGNyg24AGNBjM6%2B9Bbzp9hnc4%2BVlTyshHKW7EfIr8k5gCXOaxUAbII2tXx1Z6yPT0SQEViBx3Tfez4h%2FgjeUCIDYE407rFCOXcEPX%2FQs9i8dBA3tT%2Fylne8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb7cfa82b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| vitus.com/wp-content/themes/pro-child/style.css?ver=1660854604 | 104.21.87.120 | 200 OK | 0 B |
URL HTTP/2vitus.com/wp-content/themes/pro-child/style.css?ver=1660854604 IP104.21.87.120:0
GET /wp-content/themes/pro-child/style.css?ver=1660854604 HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:03 GMT
content-type: text/css
last-modified: Fri, 17 Apr 2020 22:43:11 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"5e9a30ff-916"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MS2ro0904AcsSe%2ByPiyRWVZLAOnrtrYpAkbLWdFjdfdIBR8GYUkmv7SKdo8PWMtdepB9DUrJW8pSkghxg8lyUI2gzcEAsUHL%2FGW%2BmyQ2i3lG1gbrLn4HyZnGj3w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb7cfa88b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| vitus.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.25 | 104.21.87.120 | 200 OK | 0 B |
URL HTTP/2vitus.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.25 IP104.21.87.120:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.25 HTTP/1.1
Host: vitus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vitus.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 21:12:03 GMT
content-type: text/css
last-modified: Thu, 07 Jul 2022 19:56:46 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"62c73a7e-e87c"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LKx0APScqpghg3cKfNMFUlkkziALHAFop6oSMyauJdEebsAYW7KGoYW6LeYhAo7um9AZ8aC%2Fj8oN2V77EQyomD8w1RP9fYhBW3jhI%2F6%2FJrkJly9pkgdb%2FuRu6BY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7482eb7d5af3b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|