| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashf732c50f6a2482aeea20552e0370c2d0 6f33119d5c38e92a0a62f3a46766ff86014e4d68 a47e38c199c5fecd5594544a3889e1cfca5547d85f19056f06eaeeadf17f4fe9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3790
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 20:29:43 GMT
Last-Modified: Sat, 19 Nov 2022 19:26:33 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hasheb76c0b3adf4098ad8a9d1e38250758f 99610ddb2b4ec6d04250ac244f966951695d4f00 01ed8c191c175471aee23cbc196d558e5bf5209f166806fc97db08eb06544bab
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "01ED8C191C175471AEE23CBC196D558E5BF5209F166806FC97DB08EB06544BAB"
Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12092
Expires: Sat, 19 Nov 2022 23:51:15 GMT
Date: Sat, 19 Nov 2022 20:29:43 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashd130218d0e2841f39c99610fe1a2ab90 29fbe1e177ee55c7a61ae0a206afff271cf5f945 6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 19 Nov 2022 19:44:58 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2685
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash1cee7787feebac18f9eca273e56e3741 3a7dac544172921e24c2a1701beef5079b21d01b 79ff4a450c749d64e116c00ca3b00d40e968906c5c3881d6eeb2dc6374a4c858
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "79FF4A450C749D64E116C00CA3B00D40E968906C5C3881D6EEB2DC6374A4C858"
Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9573
Expires: Sat, 19 Nov 2022 23:09:16 GMT
Date: Sat, 19 Nov 2022 20:29:43 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash9ebddc2b260d081ebbefee47c037cb28 492bad62a7ca6a74738921ef5ae6f0be5edebf39 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: aRUs5Joo+WaoYhfFUe0k5K26nqBFPclNt7Nxz8QfoGacaOCpJCS5oxWIA72640xvbKsQM+t2E48=
x-amz-request-id: Z0Y2GCB2HFNEXZQE
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 19 Nov 2022 19:38:26 GMT
age: 3077
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 19 Nov 2022 20:29:43 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashe150a77a5e61987fc803946305206fa4 b73335f06367693fc568bc49f0cd4c3368665f87 7aa4b24ac19d2667e42756840eade3225b5d94b47d46266b5ea9bf03eeffdffc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7AA4B24AC19D2667E42756840EADE3225B5D94B47D46266B5EA9BF03EEFFDFFC"
Last-Modified: Sat, 19 Nov 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21546
Expires: Sun, 20 Nov 2022 02:28:49 GMT
Date: Sat, 19 Nov 2022 20:29:43 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 34.102.187.140 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 19 Nov 2022 20:25:01 GMT
cache-control: public,max-age=3600
age: 282
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash060d538b33e370fcd033339830d33a42 4a37d427988358eb318e18e2678c3484ef4a5ebd efa33f92547243814b5bd3bca4f94d26055d590a4431611b3ba251a8d774bfbb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4714
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 20:29:44 GMT
Last-Modified: Sat, 19 Nov 2022 19:11:10 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 52.38.139.17 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.38.139.17:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: +0ewVpAd3XYnHZulFBEppw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: X22JBlaZSLNwoKMRfM8vXpgVbr8=
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashf7c5da16d7c4384a4c2454d6b0d84710 69fd80fdf2f1ce27b25617589c867cd1c6e5d2ab a80d1b813523e44d2e59d7c2edd6919c0354873637bb15bccc88f66f5c24e05d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7956
Expires: Sat, 19 Nov 2022 22:42:21 GMT
Date: Sat, 19 Nov 2022 20:29:45 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashf7c5da16d7c4384a4c2454d6b0d84710 69fd80fdf2f1ce27b25617589c867cd1c6e5d2ab a80d1b813523e44d2e59d7c2edd6919c0354873637bb15bccc88f66f5c24e05d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7956
Expires: Sat, 19 Nov 2022 22:42:21 GMT
Date: Sat, 19 Nov 2022 20:29:45 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3007b4f3-f5db-4eb7-b71a-f9f854ae287e.jpeg | 34.120.237.76 | 200 OK | 7.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3007b4f3-f5db-4eb7-b71a-f9f854ae287e.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb2b393e36ee2c9649d90db136aa49542 e88c5832ff0c49bab181d948c3a510d88343bb6f 8b524701df43bff56ac52a021ff0fbd964e06f00e84b4861aa557ec6ae6b4ffd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3007b4f3-f5db-4eb7-b71a-f9f854ae287e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7631
x-amzn-requestid: b47e545d-1fb6-4a62-ab45-28cdb9d3f0b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-vQE0XoAMFS3w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376ab2e-56365eed3d4c082c53b172b3;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:44:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: WpaBFpaCu0GBiHiiQzCCsyXrA7uzesHS92c_PsgxROxPkqjZ8RyI6Q==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 22:35:17 GMT
age: 78868
etag: "e88c5832ff0c49bab181d948c3a510d88343bb6f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47c537d4-e03f-4ec6-8922-6dce72c72ab9.jpeg | 34.120.237.76 | 200 OK | 4.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47c537d4-e03f-4ec6-8922-6dce72c72ab9.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash459df915ce91b32b2dcc4850516d68a0 d7a5473d367e7965a4af55acbf4675ed7088fab2 a03e26ebee79ad9b9dda1bf680e0d2467ae6d5e582589ada9fe6ddfa437c483c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47c537d4-e03f-4ec6-8922-6dce72c72ab9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4851
x-amzn-requestid: 8c868655-d0eb-428d-9fc0-a7449f770bd4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brtDFF9HoAMFV9w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63748ee0-4f7daf8f7451dc5e0840f620;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 07:18:56 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: xirMw5z5GPbmx9Sii_I4iNeh1GS5k9lGmaaJvUGAPWoVyP0Tldhf1w==
via: 1.1 e9ba0a9a729ff2960a04323bf1833df8.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Sat, 19 Nov 2022 03:31:06 GMT
age: 61119
etag: "d7a5473d367e7965a4af55acbf4675ed7088fab2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0d2467c-b158-442b-92be-e4cb236d17fa.jpeg | 34.120.237.76 | 200 OK | 3.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0d2467c-b158-442b-92be-e4cb236d17fa.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashd6b026c34985bbf2ebf89a62d0724c66 72369ebeccf447fa91ef77711d6297063c99777e e5598ada634274ab9995dedda8c1fd18344abcfdd49b3a1aaede0a86fafc0f40
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0d2467c-b158-442b-92be-e4cb236d17fa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3035
x-amzn-requestid: 3e3f3a7f-9a1d-4b37-b932-22c6e3e638f1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0QRcFOuoAMF_fQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377fa6f-09dc20ea5620dd167e3f7265;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:39 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: pLsLyVnqWVp3c5Z5IavS9Xumx3cYUsungYuOLojzKNtOoRQx7-rEOQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:48:36 GMT
etag: "72369ebeccf447fa91ef77711d6297063c99777e"
content-type: image/jpeg
age: 81669
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffad6fa40-abda-4ea3-b899-aef6906a01e1.jpeg | 34.120.237.76 | 200 OK | 5.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffad6fa40-abda-4ea3-b899-aef6906a01e1.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash93b326374b3808d0af42e295643cdc14 dd691328acf190c745465208f18a41a75878df18 224ac3995e2e78ee5fcc6c5c3d5fb1f4b0ceca1c42b7a1a493c756aa199bf75f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffad6fa40-abda-4ea3-b899-aef6906a01e1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5198
x-amzn-requestid: ba4e00c8-a996-41f3-b15a-1e304907ca2a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw9UpH1ioAMF6ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376a8ea-2f9f794c4de03f8b212e072f;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:34:34 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: KVRDYZKrzaOvLC1NCAb6clyHxqb40wjyE0itVFOi1cwdGTvS2zsjUg==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:56:07 GMT
age: 81218
etag: "dd691328acf190c745465208f18a41a75878df18"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash481c033b9ffd030ff0de6e35cf788b47 85d3baad9217af2b5d75c019d2ef95dbb919a788 02443c7869914c2b29892deb0c645395bcf4e8379da3cf20974614ff9c92893b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11249
x-amzn-requestid: 65a3db77-b2e6-40b9-a776-021c2e9b56d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bubSsHbZoAMFZNg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6375a5aa-1286b97968cc2e4c7fe8ab29;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 03:08:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: s1153EpshSWYGLcN7Zzzs4PgXl9cddZ20gTwh5bK2HOBu4e_PSNCpQ==
via: 1.1 38eecd3ca21bf068d69a2f9cfe668d14.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Sat, 19 Nov 2022 03:36:46 GMT
age: 60779
etag: "85d3baad9217af2b5d75c019d2ef95dbb919a788"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f1b43b0-5ba1-4c6c-9a53-bfae9befdd7d.jpeg | 34.120.237.76 | 200 OK | 6.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f1b43b0-5ba1-4c6c-9a53-bfae9befdd7d.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasha9d32fa3866dd741de610a61a93ad893 4cb2141b1ef1e5bf19a3b355995dcd8fa36f695e 4492338de536cfae6fb42fd37170c60f4fbc281a2a924efe6d2b5af352cd102c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f1b43b0-5ba1-4c6c-9a53-bfae9befdd7d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6344
x-amzn-requestid: cac35b04-be3b-4ae1-bb5e-8cedcd7a7db4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: btqOVFCXIAMFcOg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63755728-45c28fa333b748520be29b57;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 21:33:28 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: mhgNSp1_LsVmn00ULm116flMHpnfE6G6JABrJwXH5i4q-isv_W1-Ig==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 f313d3df80c4dab8f5399614116801cc.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:34:05 GMT
age: 82540
etag: "4cb2141b1ef1e5bf19a3b355995dcd8fa36f695e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash07caf241d63e15426cd26434ef88e9dd ec289ab860ffccd49ce9a62d2c47c59dc181fbd5 d1f4bc6604b8a399049b5943d23dbfb842d9a100bf6f5c71e91a27cd3588cecb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 20:29:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| carlaleejohnston.com/wp-content/themes/jupiterx-child/assets/css/style.css?ver=6.1 | 192.185.48.171 | 200 OK | 129 B |
URL HTTP/2carlaleejohnston.com/wp-content/themes/jupiterx-child/assets/css/style.css?ver=6.1 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with CRLF line terminators Hash134a5527766b6794aaec3d28421e3a11 7f50ce792ef0aef5dcb987ad9092eb4e894d496c 93c5a5340fcafac7ed412937ae64c4c338ea69b146d8a8490059086777ad440e
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/themes/jupiterx-child/assets/css/style.css?ver=6.1 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 03 Aug 2022 14:50:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 129
content-type: text/css
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-includes/css/classic-themes.min.css?ver=1 | 192.185.48.171 | 200 OK | 189 B |
URL HTTP/2carlaleejohnston.com/wp-includes/css/classic-themes.min.css?ver=1 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash5a18e16eb01cbaa862eb32e6b77bedb2 3abf9b913cc9f558f02cba7c9b822f8d1812cb96 d2b5af913332941d5ae7786d1fa70e0d009315c4ede6ad5b80d0f663bb54521f
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 02 Nov 2022 11:20:03 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 189
content-type: text/css
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/uploads/jupiterx/compiler/jupiterx-elements-dynamic-styles/09263bf.css?ver=2.5.2 | 192.185.48.171 | 200 OK | 3.6 kB |
URL HTTP/2carlaleejohnston.com/wp-content/uploads/jupiterx/compiler/jupiterx-elements-dynamic-styles/09263bf.css?ver=2.5.2 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (29094), with no line terminators Hash253687a9255e37cef6e25c39ab510d63 34fcb6f7c2d1301b2a1ee30efd6ba8dd518b3fa4 0bc0870a7ef1012a3f6a738aacc441969d9ac609ebba0ef9812376da10b55626
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/jupiterx/compiler/jupiterx-elements-dynamic-styles/09263bf.css?ver=2.5.2 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 07 Nov 2022 11:28:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3553
content-type: text/css
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/plugins/jet-engine/assets/css/frontend.css?ver=3.0.2 | 192.185.48.171 | 200 OK | 11 kB |
URL HTTP/2carlaleejohnston.com/wp-content/plugins/jet-engine/assets/css/frontend.css?ver=3.0.2 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (52084), with no line terminators Hash46d67d469f805b68dd4b96d51368da06 ca34406e5406d0e3aeabb1b46447f8de13aea43d 7f1586c65d79b5acc39ef5821f62f9fc183161ebcb50af8ce3c052cb05cdc0e7
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/jet-engine/assets/css/frontend.css?ver=3.0.2 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 03 Aug 2022 14:56:01 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 10749
content-type: text/css
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/plugins/jet-elements/assets/css/jet-elements-skin.css?ver=2.6.6 | 192.185.48.171 | 200 OK | 3.9 kB |
URL HTTP/2carlaleejohnston.com/wp-content/plugins/jet-elements/assets/css/jet-elements-skin.css?ver=2.6.6 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (17675) Hash187ed8fbe30651dc3ea0503442b1b0f4 6e2d2b043822bc40d24516d6c77cf651f945ebea 43799c7a340576ad06d8f3a67027b32575c1143ef9d3bda3518721b4c6147933
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/jet-elements/assets/css/jet-elements-skin.css?ver=2.6.6 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 03 Aug 2022 14:55:53 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3920
content-type: text/css
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.8.0 | 192.185.48.171 | 200 OK | 1.6 kB |
URL HTTP/2carlaleejohnston.com/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.8.0 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (13766) Hash19061548a0d9b653c7a80a87553d1b42 402a620631418e2d802de838c8c643762e9ebb5d 521940b54935e184d7ba0003e0f4eed2845845f38336c43f11ccd35da4dd4e78
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.8.0 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 30 Oct 2022 23:20:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1609
content-type: text/css
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash07caf241d63e15426cd26434ef88e9dd ec289ab860ffccd49ce9a62d2c47c59dc181fbd5 d1f4bc6604b8a399049b5943d23dbfb842d9a100bf6f5c71e91a27cd3588cecb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 20:29:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| carlaleejohnston.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0 | 192.185.48.171 | 200 OK | 4.0 kB |
URL HTTP/2carlaleejohnston.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (19233) Hash2701214b028ad24fa347df8335b36d12 156bc8a7ad2657f00881890637f07c6052636499 9a6e62615ceeec7a9763e4f9614e4715d04fd87873b23db2b3ead06c996cad27
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 30 Oct 2022 23:20:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4008
content-type: text/css
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/uploads/elementor/css/post-136.css?ver=1659538612 | 192.185.48.171 | 200 OK | 333 B |
URL HTTP/2carlaleejohnston.com/wp-content/uploads/elementor/css/post-136.css?ver=1659538612 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (1091), with no line terminators Hasha826204495ebf26b782428f65c199abf 94f0dcdd6215a58ac965a1671f74e381408582b0 195801c15ae45432259390c3d5b4a46efbc0bf291fc8b3ed431157458f32990d
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/elementor/css/post-136.css?ver=1659538612 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 03 Aug 2022 14:56:52 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 333
content-type: text/css
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/uploads/elementor/css/post-241.css?ver=1659538612 | 192.185.48.171 | 200 OK | 956 B |
URL HTTP/2carlaleejohnston.com/wp-content/uploads/elementor/css/post-241.css?ver=1659538612 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (4812), with no line terminators Hash606a122b50d8a08d9bf739cfa57e2a8c ee46832857885ccdec5a53ff84247922d8a93f3e 04c8de23f06628e20e0a6e743d237bcdc68e01d432cbf65f14739a20c89a4527
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/elementor/css/post-241.css?ver=1659538612 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 03 Aug 2022 14:56:52 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 956
content-type: text/css
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/uploads/elementor/css/post-141.css?ver=1659538612 | 192.185.48.171 | 200 OK | 847 B |
URL HTTP/2carlaleejohnston.com/wp-content/uploads/elementor/css/post-141.css?ver=1659538612 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (4409), with no line terminators Hash30805eb1c01a05a2bd8b9b2b9a162b2c 868f3fb7f097638748250a3267508872fd5c9410 558111e15c6764bcf3ac12453d435e17310407756656fc21bf917f8fa1f44c3e
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/elementor/css/post-141.css?ver=1659538612 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 03 Aug 2022 14:56:52 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 847
content-type: text/css
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/uploads/elementor/css/post-339.css?ver=1660125305 | 192.185.48.171 | 200 OK | 430 B |
URL HTTP/2carlaleejohnston.com/wp-content/uploads/elementor/css/post-339.css?ver=1660125305 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (1501), with no line terminators Hash2caf3d822e5f335411194cbbd9b42e39 c9d1ef597d363e821726ea6617079daea486a410 2548d7d054d59948ab53a014b790aea92ee4d3787d846e61f5f88b4fdee5d8d7
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/elementor/css/post-339.css?ver=1660125305 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 10 Aug 2022 09:55:05 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 430
content-type: text/css
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/plugins/elementor/assets/lib/flatpickr/flatpickr.min.css?ver=4.1.4 | 192.185.48.171 | 200 OK | 4.1 kB |
URL HTTP/2carlaleejohnston.com/wp-content/plugins/elementor/assets/lib/flatpickr/flatpickr.min.css?ver=4.1.4 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (13854) Hash2da848f75a0419d61259ac795128eacd 9d0ee8c41ca71a7e99c7f184b869a4902ec5a46b 8b4c6f614ca81fea507f6a18f8d0aead0c514ac65d1e851f86ea3a404e792538
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/flatpickr/flatpickr.min.css?ver=4.1.4 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 30 Oct 2022 23:20:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4069
content-type: text/css
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/plugins/jet-tricks/assets/css/jet-tricks-frontend.css?ver=1.4.1 | 192.185.48.171 | 200 OK | 4.1 kB |
URL HTTP/2carlaleejohnston.com/wp-content/plugins/jet-tricks/assets/css/jet-tricks-frontend.css?ver=1.4.1 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (26810) Hash0cf4bdfce3162c3132f116f82ae4cbca bd1fe064c0785e976e38a6ed39516038df7bf8a2 e4cf1dca6f487bac0507c6b8b7bc5be0e12b28166570ebe7ee0a74f336461355
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/jet-tricks/assets/css/jet-tricks-frontend.css?ver=1.4.1 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 03 Aug 2022 14:56:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4059
content-type: text/css
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0 | 192.185.48.171 | 200 OK | 7.1 kB |
URL HTTP/2carlaleejohnston.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (30837) Hash09b8b6cbc1b0486aa66786792e8c6984 73a077a16ce58b6b5c7169a61989f7421a913936 a8e462cb54773ddf7cd4fdc03715c0cd12a537c633c026635d5810b621246db6
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 30 Oct 2022 23:20:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7112
content-type: text/css
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | 192.185.48.171 | 200 OK | 4.6 kB |
URL HTTP/2carlaleejohnston.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (11126) Hashacdb97105af28a7066790c6748ae2e1e 65794d2c5a9d04f747faf370bc8bacd330e69e5a dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Dec 2020 18:44:02 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4618
content-type: application/javascript
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/themes/jupiterx/lib/assets/dist/js/utils.min.js?ver=2.5.2 | 192.185.48.171 | 200 OK | 255 B |
URL HTTP/2carlaleejohnston.com/wp-content/themes/jupiterx/lib/assets/dist/js/utils.min.js?ver=2.5.2 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (354), with no line terminators Hashc5d304a365a0ed44811f83a8c61cee59 b980cd84e59c70b71f3b909a587b6997b12da461 c2b5b84469bceeadf803d3d5fa198d229268e05b18959d00bca492ee19564d57
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/themes/jupiterx/lib/assets/dist/js/utils.min.js?ver=2.5.2 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 07 Nov 2022 11:21:07 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 255
content-type: application/javascript
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/ece/qbot.zip | 192.185.48.171 | 200 OK | 28 kB |
URL HTTP/2carlaleejohnston.com/ece/qbot.zip IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash28f0e04b9a919024adb931d98877ea14 c77cf7088ae9f0da07b5cd249de6b43bc15605e2 1f72154b1c2078b883f743450e8989a548a8e5bb751013b5b6c1e6a5a0c9cd73
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /ece/qbot.zip HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Sat, 19 Nov 2022 20:29:43 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/themes/jupiterx/lib/admin/assets/lib/webfont/webfont.min.js?ver=1.6.26 | 192.185.48.171 | 200 OK | 5.6 kB |
URL HTTP/2carlaleejohnston.com/wp-content/themes/jupiterx/lib/admin/assets/lib/webfont/webfont.min.js?ver=1.6.26 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeUnicode text, UTF-8 text, with very long lines (12335), with no line terminators Hash195828f8469d050177c1b94a1a11b616 12208454ab19c88bd791d0ec521224bfcd06e546 c14cce4c81d0831162465b9eb249d5fc7f0f7881a090fa8519d19d864491442e
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/themes/jupiterx/lib/admin/assets/lib/webfont/webfont.min.js?ver=1.6.26 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 07 Nov 2022 11:21:07 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5609
content-type: application/javascript
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/uploads/elementor/css/post-132.css?ver=1659539057 | 192.185.48.171 | 200 OK | 1.1 kB |
URL HTTP/2carlaleejohnston.com/wp-content/uploads/elementor/css/post-132.css?ver=1659539057 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (5304), with no line terminators Hash580879a81657ad467ab8d27c8372b0b1 6609cf0deefec253fa963de986efa10bef5c5e7b 1fd09d59aea1eb326a40877548efea205fa86d3a51b7f12d2fe9e2a4b503ed12
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/elementor/css/post-132.css?ver=1659539057 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 03 Aug 2022 15:04:17 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1063
content-type: text/css
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/uploads/2021/01/lg_clear-1.png | 192.185.48.171 | 200 OK | 27 kB |
URL HTTP/2carlaleejohnston.com/wp-content/uploads/2021/01/lg_clear-1.png IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typePNG image data, 1256 x 232, 8-bit/color RGBA, non-interlaced\012- data Hash70c4525303825257c46c941693d13878 4238d94dc56476ee9f7ec09e4cf660161736fcfb ed470e240929c858cc75b61de20a5ce1330b0607277e87c0ef7834a982d8131a
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/2021/01/lg_clear-1.png HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 21 Jan 2021 14:08:26 GMT
accept-ranges: bytes
content-length: 27274
content-type: image/png
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.8.0 | 192.185.48.171 | 200 OK | 3.0 kB |
URL HTTP/2carlaleejohnston.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.8.0 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (10019) Hashc2b5af6052f630a96e450e5e2a3cea52 00ca76a8828a1bbec1534eb10786804fd36492f2 58f6cc2d4fa3e528622102975fb62949dc0170bd47b588a67318d18552a57d59
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.8.0 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 30 Oct 2022 23:20:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2997
content-type: text/css
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/themes/jupiterx-child/assets/js/script.js?ver=6.1 | 192.185.48.171 | 200 OK | 89 B |
URL HTTP/2carlaleejohnston.com/wp-content/themes/jupiterx-child/assets/js/script.js?ver=6.1 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with CRLF line terminators Hashc30b485189d0bd55119ad44cf76bd491 4a5d7049ec0263cd5bc2bd9102d0bbd27ef476f1 2f9028768935988f71c3db1ab708a2c28b627f16504b3219b468f65bc0fce892
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/themes/jupiterx-child/assets/js/script.js?ver=6.1 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 03 Aug 2022 14:50:11 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 89
content-type: application/javascript
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-includes/js/underscore.min.js?ver=1.13.4 | 192.185.48.171 | 200 OK | 8.3 kB |
URL HTTP/2carlaleejohnston.com/wp-includes/js/underscore.min.js?ver=1.13.4 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (18798) Hashac9c7baaab74ef2576932d5798161987 fa202113e12b09696788a7024984879bddd29143 c03d52f8f157e9209646e3e696e9845d7d2b3cf3e73c8204f371b7393e738026
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-includes/js/underscore.min.js?ver=1.13.4 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 02 Nov 2022 11:20:03 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8305
content-type: application/javascript
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.8.0 | 192.185.48.171 | 200 OK | 2.3 kB |
URL HTTP/2carlaleejohnston.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.8.0 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (4918) Hashcec23e5a0777df58b888ad2aaa3fe428 3904542fe17b29426f4f964d63e1d45d4bc2f3b7 7ac1b9ea37ea3bcf867bbabd8de828b2e6d7a8e3cb2acaa16b2ae9cbd79b740a
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.8.0 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 30 Oct 2022 23:20:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2312
content-type: application/javascript
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/plugins/jupiterx-core/includes/extensions/raven/assets/lib/url-polyfill/url-polyfill.min.js?ver=1.1.7 | 192.185.48.171 | 200 OK | 2.3 kB |
URL HTTP/2carlaleejohnston.com/wp-content/plugins/jupiterx-core/includes/extensions/raven/assets/lib/url-polyfill/url-polyfill.min.js?ver=1.1.7 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (6241), with no line terminators Hash3895a62d4084d1e92c4984f32798611f 98e660a549ed77c7d1a42b29257ba05f93d785aa 30669eae075fdc13048a3415c2a6773d6d2b78933c99a6104b1348a381d00a86
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/jupiterx-core/includes/extensions/raven/assets/lib/url-polyfill/url-polyfill.min.js?ver=1.1.7 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 03 Aug 2022 14:56:19 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2285
content-type: application/javascript
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 | 192.185.48.171 | 200 OK | 3.7 kB |
URL HTTP/2carlaleejohnston.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (12198), with no line terminators Hashe2a8decccf4d0a6b925af707a36077a9 26a0febc9c3d91e75410f74b9ec62099ba1cbe90 09e0e638a6f53c0fdcfeeb8ae91f3a404bef47b471324e335e29be14a2aa87f7
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 30 Oct 2022 23:20:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3747
content-type: application/javascript
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 | 192.185.48.171 | 200 OK | 8.3 kB |
URL HTTP/2carlaleejohnston.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeUnicode text, UTF-8 text, with very long lines (8189) Hash838560e989767f2ef5951b9eeee20352 6bf8419cb4d68d9beced9e4b79b22b347ae16a46 72e6d275c5229613a59aef94523fc6a96330553976aee003d8544d5806fa0c3d
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 02 Nov 2022 11:20:03 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8344
content-type: application/javascript
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/plugins/jupiterx-core/includes/extensions/raven/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.1.0 | 192.185.48.171 | 200 OK | 9.3 kB |
URL HTTP/2carlaleejohnston.com/wp-content/plugins/jupiterx-core/includes/extensions/raven/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.1.0 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (24298) Hashb4f8838d0f6269cefd262563ba6ada5d 7798934231c33c3d79377a4bae44ae21119c95cc 872aceb5e6f3e3ae04d63018748d262e8fd348fed5621cda65483512405bacc5
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/jupiterx-core/includes/extensions/raven/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.1.0 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 03 Aug 2022 14:56:19 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 9274
content-type: application/javascript
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.8.0 | 192.185.48.171 | 200 OK | 13 kB |
URL HTTP/2carlaleejohnston.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.8.0 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeUnicode text, UTF-8 text, with very long lines (32907) Hash37e06ea4e37d465ce76adb3954eaf201 d1d2f06cdfad134d4638de2ab2bfc54e47d02552 f839cbc0157e8e2efe0bb74b33bfa248b4ebb59d3d968d08124c8263a44dcfa6
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.8.0 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 30 Oct 2022 23:20:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 13291
content-type: application/javascript
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.8.0 | 192.185.48.171 | 200 OK | 1.2 kB |
URL HTTP/2carlaleejohnston.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.8.0 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (2620), with no line terminators Hash55936584085d0d310919b755eda1ab3f be317c3b2ed5143669375295b3107e591bf708da aad2265c39cafa6e01b791b1ef5025a2d237ee91346ef446beb722fdcd578d58
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.8.0 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 30 Oct 2022 23:20:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1187
content-type: application/javascript
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-includes/js/wp-util.min.js?ver=6.1 | 192.185.48.171 | 200 OK | 758 B |
URL HTTP/2carlaleejohnston.com/wp-includes/js/wp-util.min.js?ver=6.1 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (1391) Hash60bc75e3b14030c62d9fd3a3d317d8a8 6d919bbd05a3984a8e5e67b693e6d5d41cc885f9 e22df84be1a3ffe3b54352a4a39e14adb3fac69f2ce755e4c7babbc243c5bb4b
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-includes/js/wp-util.min.js?ver=6.1 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 02 Nov 2022 11:20:03 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 758
content-type: application/javascript
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0 | 192.185.48.171 | 200 OK | 4.2 kB |
URL HTTP/2carlaleejohnston.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (10544) Hash552977febe8ef2c71b0806dfaefd2552 01baebfd09383c5d44f066e7b5540fcca6a5eae4 7895907f5a4f54c08c4705b1a194e21c556d68027c5e0a70d4c05b377e712b1d
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 30 Oct 2022 23:20:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4200
content-type: application/javascript
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/plugins/jet-tricks/assets/js/jet-tricks-frontend.js?ver=1.4.1 | 192.185.48.171 | 200 OK | 8.1 kB |
URL HTTP/2carlaleejohnston.com/wp-content/plugins/jet-tricks/assets/js/jet-tricks-frontend.js?ver=1.4.1 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashd9176bf286e5044e3d0ea07374223ea7 020acc75ce8a775bb02bcbd6a2f378b748b29440 d3ec28e3ece729801cb8a629d282e16ef185a02386355805576ed6be2696261a
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/jet-tricks/assets/js/jet-tricks-frontend.js?ver=1.4.1 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 03 Aug 2022 14:56:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8147
content-type: application/javascript
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/plugins/jet-tricks/assets/js/lib/tippy/popperjs.js?ver=2.5.2 | 192.185.48.171 | 200 OK | 8.0 kB |
URL HTTP/2carlaleejohnston.com/wp-content/plugins/jet-tricks/assets/js/lib/tippy/popperjs.js?ver=2.5.2 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (18506) Hasha7d1b74f404f6ad22df4b373ec612ede 7caf57901845ed78d2dcb5ba3398f155b4399571 4c3d78462d2e3d80deffa306b2bddb4c49d58d0479292c9ab835c7d19bbd1a76
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/jet-tricks/assets/js/lib/tippy/popperjs.js?ver=2.5.2 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 03 Aug 2022 14:56:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7956
content-type: application/javascript
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1 | 142.250.74.10 | 200 OK | 18 kB |
URL HTTP/2fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1 IP142.250.74.10:0
File typeASCII text, with very long lines (22229) Hash51127b824a96a337de4b4a6b914f89b0 364c5f822f4211c44c3bb28e7eb368812f6e166c 6af8726c2dc5497eef958c2d3e77e002441d4ebf55e0ae6c09e53d4b9fc663c0
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 19 Nov 2022 20:29:45 GMT
date: Sat, 19 Nov 2022 20:29:45 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.8.0 | 192.185.48.171 | 200 OK | 17 kB |
URL HTTP/2carlaleejohnston.com/wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.8.0 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (43101) Hashf08836c2d6a263631eae2067b60574bf 00bdc3e985c03cd48c31216184b85f1308512a4d ed5db3202f81bffcd0366f1984cd7c02d0ae1c9ad1f797275c648c02937feb8b
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.8.0 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 30 Oct 2022 23:20:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 16899
content-type: application/javascript
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min.js?ver=1.7.7.2 | 192.185.48.171 | 200 OK | 374 B |
URL HTTP/2carlaleejohnston.com/wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min.js?ver=1.7.7.2 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (754), with no line terminators Hashef785f463505633971eae5c08ad626d4 624e22257f386801822229db3a4bbd2e24b25e2f b2a0dc77f0f79d81698a7e3893e16ecba7b0d980b80a5233656d9b11f1d8160d
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min.js?ver=1.7.7.2 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 12 Oct 2022 23:56:53 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 374
content-type: application/javascript
date: Sat, 19 Nov 2022 20:29:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1 | 192.185.48.171 | 200 OK | 34 kB |
URL HTTP/2carlaleejohnston.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (47826) Hash6f499e597573b9ba633712e773b2452f 6c9feb5c349881fdf3b891b1f340aa7c730de592 142420bf370f2a63d2bee43fb05199c7b306c0f90656cf61ef1237ac4275d4ce
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 02 Nov 2022 11:20:03 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashc58de690a701dea26333a42815dc3003 91d9e60c285f6578b5d814901a90f52cafbb8790 179d035993138ec5fdb0b2bf1987888f751903e959af09e335ada210be842ca6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 20:29:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| carlaleejohnston.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 | 192.185.48.171 | 200 OK | 55 kB |
URL HTTP/2carlaleejohnston.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash8d9e8325a4c979393e7b7bb464516567 3076d334f91096bf213758a150bca27c52a321e2 3cbdd8f413b99c806d24d19f6a9b6a15f123d1d8c9596a2c5a02bbd2add894c1
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 30 Oct 2022 23:20:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashc58de690a701dea26333a42815dc3003 91d9e60c285f6578b5d814901a90f52cafbb8790 179d035993138ec5fdb0b2bf1987888f751903e959af09e335ada210be842ca6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 20:29:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashc58de690a701dea26333a42815dc3003 91d9e60c285f6578b5d814901a90f52cafbb8790 179d035993138ec5fdb0b2bf1987888f751903e959af09e335ada210be842ca6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 20:29:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 | 216.58.207.195 | 200 OK | 7.7 kB |
URL HTTP/2fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 7748, version 1.0\012- data Hasha09f2fccfee35b7247b08a1a266f0328 0da2d17e738f46d2a09e6fb7969da451719a9820 cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
GET /s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://carlaleejohnston.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 08:32:10 GMT
expires: Thu, 16 Nov 2023 08:32:10 GMT
cache-control: public, max-age=31536000
age: 302257
last-modified: Wed, 27 Apr 2022 16:21:30 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 | 216.58.207.195 | 200 OK | 7.8 kB |
URL HTTP/2fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 7816, version 1.0\012- data Hash25b0e113ca7cce3770d542736db26368 cb726212d5d525021752a1d8470a0fb593e0c49e 9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://carlaleejohnston.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 19:30:59 GMT
expires: Thu, 16 Nov 2023 19:30:59 GMT
cache-control: public, max-age=31536000
age: 262728
last-modified: Wed, 27 Apr 2022 16:11:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashc58de690a701dea26333a42815dc3003 91d9e60c285f6578b5d814901a90f52cafbb8790 179d035993138ec5fdb0b2bf1987888f751903e959af09e335ada210be842ca6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 20:29:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| carlaleejohnston.com/favicon.ico | 192.185.48.171 | 200 OK | 1.8 kB |
URL HTTP/2carlaleejohnston.com/favicon.ico IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash0f7a9cbb9b392828b37f92649d3f2cdb 5573ceb1bca0779db4cd0eaeeb8d4b5f9ddb4baa e5575912c4bd0a84aec776220be46d36962044bb85c3df02dab85e76e8455311
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /favicon.ico HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-length: 1846
content-type: text/html; charset=UTF-8
date: Sat, 19 Nov 2022 20:29:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v20/pxiGyp8kv8JHgFVrLPTucHtA.woff2 | 216.58.207.195 | 200 OK | 7.5 kB |
URL HTTP/2fonts.gstatic.com/s/poppins/v20/pxiGyp8kv8JHgFVrLPTucHtA.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 7484, version 1.0\012- data Hash15ef609d3bea2ccc8a36910ba440e1f3 9bb181e467942bd18582fd1aa001431ac2d781f5 a9220f99b916978e5d7934b73be5ab91444871ba52a89032e4dd90e42b0a96e1
GET /s/poppins/v20/pxiGyp8kv8JHgFVrLPTucHtA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://carlaleejohnston.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7484
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 20:00:07 GMT
expires: Thu, 16 Nov 2023 20:00:07 GMT
cache-control: public, max-age=31536000
age: 260980
last-modified: Wed, 27 Apr 2022 16:12:29 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLFj_Z1xlFQ.woff2 | 216.58.207.195 | 200 OK | 7.9 kB |
URL HTTP/2fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLFj_Z1xlFQ.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 7932, version 1.0\012- data Hasha7f7eebec745ef48ccf7a3d08c66d84a 2c5f99afe358a3e8570818a99646779aaa607587 6f0c572590421075878908e0b380c5a6d404f72aa7d6d125385943be658f8399
GET /s/poppins/v20/pxiByp8kv8JHgFVrLFj_Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://carlaleejohnston.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7932
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 13 Nov 2022 00:50:59 GMT
expires: Mon, 13 Nov 2023 00:50:59 GMT
cache-control: public, max-age=31536000
age: 589128
last-modified: Wed, 27 Apr 2022 16:10:29 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 | 216.58.207.195 | 200 OK | 8.0 kB |
URL HTTP/2fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 8000, version 1.0\012- data Hash72993dddf88a63e8f226656f7de88e57 179f97ec0275f09603a8db94d4380eb584d81cd5 f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://carlaleejohnston.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 15 Nov 2022 14:43:52 GMT
expires: Wed, 15 Nov 2023 14:43:52 GMT
cache-control: public, max-age=31536000
age: 366355
last-modified: Wed, 27 Apr 2022 16:59:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 | 216.58.207.195 | 200 OK | 7.8 kB |
URL HTTP/2fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 7840, version 1.0\012- data Hash8d91ec1ca2d8b56640a47117e313a3e9 a9e9bafe64666f4595051a0e895b47a5fa39e67e 78bc3aa78faec288bbb3bf26c9a0fa4eb67b1e69da94a17233c5cab60525efdb
GET /s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://carlaleejohnston.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7840
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 19:31:06 GMT
expires: Thu, 16 Nov 2023 19:31:06 GMT
cache-control: public, max-age=31536000
age: 262721
last-modified: Wed, 27 Apr 2022 16:51:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v20/pxiAyp8kv8JHgFVrJJLmE0tCMPI.woff2 | 216.58.207.195 | 200 OK | 8.4 kB |
URL HTTP/2fonts.gstatic.com/s/poppins/v20/pxiAyp8kv8JHgFVrJJLmE0tCMPI.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 8404, version 1.0\012- data Hashacd438d2fbb9a101c703f916d0567425 13907723256082238f2d94d469319d85910f0859 d80200523e723113f1802f7eb3258d5b922e6546d637d502f0fd2ea470201df5
GET /s/poppins/v20/pxiAyp8kv8JHgFVrJJLmE0tCMPI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://carlaleejohnston.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8404
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 20:07:43 GMT
expires: Thu, 16 Nov 2023 20:07:43 GMT
cache-control: public, max-age=31536000
age: 260524
last-modified: Wed, 27 Apr 2022 16:11:38 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2 | 216.58.207.195 | 200 OK | 7.6 kB |
URL HTTP/2fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 7632, version 1.0\012- data Hash5426bf50c8455aab7a3e89d1138eb969 ec0cbbcb4600e691cb24a63451f758727f90a306 17ea10196a490a8d3b8da162c7d4af9c301c5229f70af90dad6fa33eb951d83f
GET /s/poppins/v20/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://carlaleejohnston.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7632
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Nov 2022 16:44:38 GMT
expires: Fri, 17 Nov 2023 16:44:38 GMT
cache-control: public, max-age=31536000
age: 186309
last-modified: Wed, 27 Apr 2022 17:09:57 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2 | 216.58.207.195 | 200 OK | 7.8 kB |
URL HTTP/2fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 7824, version 1.0\012- data Hashaf4d371a10271dafeb343f1eace762bc 6d11d743bc3cfb169d70bc86450f18351dc1a905 60bf0aba6526436f3930c58c12047687fbb6bff4dd180cce4613458ed3439ea2
GET /s/poppins/v20/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://carlaleejohnston.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7824
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 19:50:37 GMT
expires: Thu, 16 Nov 2023 19:50:37 GMT
cache-control: public, max-age=31536000
age: 261550
last-modified: Wed, 27 Apr 2022 16:52:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/plugins/jet-tricks/assets/js/lib/tippy/tippy-bundle.js?ver=6.3.1 | 192.185.48.171 | 200 OK | 34 kB |
URL HTTP/2carlaleejohnston.com/wp-content/plugins/jet-tricks/assets/js/lib/tippy/tippy-bundle.js?ver=6.3.1 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashba3660c212c5ce22d74ef38ebbeec9df a465038286103d87e62fec45e2b2b3582ac8c9e6 f2e25d94a0223ee06129419bf3a00b2fb2fc89d394c7001a1060c4dab3be3596
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/jet-tricks/assets/js/lib/tippy/tippy-bundle.js?ver=6.3.1 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 03 Aug 2022 14:56:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v20/pxiDyp8kv8JHgFVrJJLmv1pVF9eO.woff2 | 216.58.207.195 | 200 OK | 8.7 kB |
URL HTTP/2fonts.gstatic.com/s/poppins/v20/pxiDyp8kv8JHgFVrJJLmv1pVF9eO.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 8720, version 1.0\012- data Hasha51528d2000e9b4c894c275cc5722adb 130e001df902031f2e1352b069815c5e84296e46 28d28631a83de4ed8567b99ae8f9d895c0cc8a083cb42ae9c2c152367d3acd29
GET /s/poppins/v20/pxiDyp8kv8JHgFVrJJLmv1pVF9eO.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://carlaleejohnston.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8720
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 18 Nov 2022 22:55:06 GMT
expires: Sat, 18 Nov 2023 22:55:06 GMT
cache-control: public, max-age=31536000
age: 77681
last-modified: Wed, 27 Apr 2022 16:05:27 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v20/pxiGyp8kv8JHgFVrJJLucHtA.woff2 | 216.58.207.195 | 200 OK | 8.7 kB |
URL HTTP/2fonts.gstatic.com/s/poppins/v20/pxiGyp8kv8JHgFVrJJLucHtA.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 8668, version 1.0\012- data Hasha242ba0df3a128a2cab929a8c45d5056 d70e2c70b21cbb66cd883ae56e2dedacefd81c7c 50d0c1742d80ac71f4cde20e8c04d41a24806af342831f479938b527fbff0972
GET /s/poppins/v20/pxiGyp8kv8JHgFVrJJLucHtA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://carlaleejohnston.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8668
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 19:53:37 GMT
expires: Thu, 16 Nov 2023 19:53:37 GMT
cache-control: public, max-age=31536000
age: 261370
last-modified: Wed, 27 Apr 2022 16:07:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/plugins/jupiterx-core/includes/extensions/raven/assets/js/frontend.min.js?ver=6.1 | 192.185.48.171 | 200 OK | 37 kB |
URL HTTP/2carlaleejohnston.com/wp-content/plugins/jupiterx-core/includes/extensions/raven/assets/js/frontend.min.js?ver=6.1 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashccf944921e1500b7b8ee76782726e7dd 859d251b1897d389714ba2c122fa7d04365d7a7d 12bee0870747892ce57ace6e92da55821173d6513b83412a2a036caeae7e3be2
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/jupiterx-core/includes/extensions/raven/assets/js/frontend.min.js?ver=6.1 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 03 Aug 2022 14:56:19 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Sat, 19 Nov 2022 20:29:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v20/pxiDyp8kv8JHgFVrJJLmg1hVF9eO.woff2 | 216.58.207.195 | 200 OK | 8.5 kB |
URL HTTP/2fonts.gstatic.com/s/poppins/v20/pxiDyp8kv8JHgFVrJJLmg1hVF9eO.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 8504, version 1.0\012- data Hash88042d51a299f20ab0ddf917838fe403 a99a6d584385f86f84e893330f6ae158372b5d63 1ddb074f9963be8f6275c42dbd54d18625da8f91c85803121094ec81649f488b
GET /s/poppins/v20/pxiDyp8kv8JHgFVrJJLmg1hVF9eO.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://carlaleejohnston.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8504
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 14 Nov 2022 20:05:18 GMT
expires: Tue, 14 Nov 2023 20:05:18 GMT
cache-control: public, max-age=31536000
age: 433469
last-modified: Wed, 27 Apr 2022 16:30:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v20/pxiDyp8kv8JHgFVrJJLmy15VF9eO.woff2 | 216.58.207.195 | 200 OK | 8.6 kB |
URL HTTP/2fonts.gstatic.com/s/poppins/v20/pxiDyp8kv8JHgFVrJJLmy15VF9eO.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 8596, version 1.0\012- data Hash858549c2cb50c37c733cfa191fdb07ea 50900cbabf4ae9e1e174162f091404e343585c65 4b0864712c6e7ca75f8c003f7bc1a9270af33d6becd4119463771593274c48d2
GET /s/poppins/v20/pxiDyp8kv8JHgFVrJJLmy15VF9eO.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://carlaleejohnston.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8596
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 19:54:25 GMT
expires: Thu, 16 Nov 2023 19:54:25 GMT
cache-control: public, max-age=31536000
age: 261322
last-modified: Wed, 27 Apr 2022 16:03:33 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v20/pxiDyp8kv8JHgFVrJJLm111VF9eO.woff2 | 216.58.207.195 | 200 OK | 8.7 kB |
URL HTTP/2fonts.gstatic.com/s/poppins/v20/pxiDyp8kv8JHgFVrJJLm111VF9eO.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 8680, version 1.0\012- data Hash613d05fdd4da294c041ffac04802b86b 6d7575264299324b44d58aed8236eeb99d5b6671 494d66c1f510af5609c852b228a4ad3e0f12ccf93126b5f437f8e4ac14def828
GET /s/poppins/v20/pxiDyp8kv8JHgFVrJJLm111VF9eO.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://carlaleejohnston.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8680
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Nov 2022 20:18:41 GMT
expires: Fri, 17 Nov 2023 20:18:41 GMT
cache-control: public, max-age=31536000
age: 173466
last-modified: Wed, 27 Apr 2022 16:15:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v20/pxiDyp8kv8JHgFVrJJLm81xVF9eO.woff2 | 216.58.207.195 | 200 OK | 8.5 kB |
URL HTTP/2fonts.gstatic.com/s/poppins/v20/pxiDyp8kv8JHgFVrJJLm81xVF9eO.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 8488, version 1.0\012- data Hashc6f04b95e5ab4580b45e6cc8fe41f58b 47c920cbd187e62be2402c00da8aa2c9884dfae9 ed79248088783dd5be147808b6f904dc55122f18e80cc0780da3d3e6152ea1b1
GET /s/poppins/v20/pxiDyp8kv8JHgFVrJJLm81xVF9eO.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://carlaleejohnston.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8488
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 14 Nov 2022 20:08:19 GMT
expires: Tue, 14 Nov 2023 20:08:19 GMT
cache-control: public, max-age=31536000
age: 433288
last-modified: Wed, 27 Apr 2022 17:03:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/uploads/2021/10/TT_Favicon-Prayvvvvvvv.png | 192.185.48.171 | 200 OK | 1.0 kB |
URL HTTP/2carlaleejohnston.com/wp-content/uploads/2021/10/TT_Favicon-Prayvvvvvvv.png IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
File typePNG image data, 35 x 34, 8-bit/color RGBA, non-interlaced\012- data Hash8a19ce6d99a306ee4f9b87ffce7d9ed7 2b98ce3c6efc8d468dec99d6fb44970a0d7e10e4 292af88f50b8b6f86f62d4bafbcc731ebaa9a4586cddbae14ff84e95072bae75
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/2021/10/TT_Favicon-Prayvvvvvvv.png HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 29 Oct 2021 11:35:36 GMT
accept-ranges: bytes
content-length: 1021
content-type: image/png
date: Sat, 19 Nov 2022 20:29:47 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 | 192.185.48.171 | 200 OK | 0 B |
URL HTTP/2carlaleejohnston.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 02 Nov 2022 11:20:03 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/plugins/jet-elements/assets/js/jet-elements.min.js?ver=2.6.6 | 192.185.48.171 | 200 OK | 0 B |
URL HTTP/2carlaleejohnston.com/wp-content/plugins/jet-elements/assets/js/jet-elements.min.js?ver=2.6.6 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/jet-elements/assets/js/jet-elements.min.js?ver=2.6.6 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 03 Aug 2022 14:55:53 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/themes/jupiterx/lib/assets/dist/js/frontend.min.js?ver=2.5.2 | 192.185.48.171 | 200 OK | 0 B |
URL HTTP/2carlaleejohnston.com/wp-content/themes/jupiterx/lib/assets/dist/js/frontend.min.js?ver=2.5.2 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/themes/jupiterx/lib/assets/dist/js/frontend.min.js?ver=2.5.2 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 07 Nov 2022 11:21:07 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.8.0 | 192.185.48.171 | 200 OK | 0 B |
URL HTTP/2carlaleejohnston.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.8.0 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.8.0 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 30 Oct 2022 23:20:27 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/plugins/jupiterx-core/includes/extensions/raven/assets/css/frontend.min.css?ver=6.1 | 192.185.48.171 | 200 OK | 0 B |
URL HTTP/2carlaleejohnston.com/wp-content/plugins/jupiterx-core/includes/extensions/raven/assets/css/frontend.min.css?ver=6.1 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/jupiterx-core/includes/extensions/raven/assets/css/frontend.min.css?ver=6.1 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 03 Aug 2022 14:56:19 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/uploads/jupiterx/compiler/jupiterx/9f99e09.css?ver=2.5.2 | 192.185.48.171 | 200 OK | 0 B |
URL HTTP/2carlaleejohnston.com/wp-content/uploads/jupiterx/compiler/jupiterx/9f99e09.css?ver=2.5.2 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/uploads/jupiterx/compiler/jupiterx/9f99e09.css?ver=2.5.2 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 07 Nov 2022 11:28:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| carlaleejohnston.com/wp-content/plugins/jet-elements/assets/css/jet-elements.css?ver=2.6.6 | 192.185.48.171 | 200 OK | 0 B |
URL HTTP/2carlaleejohnston.com/wp-content/plugins/jet-elements/assets/css/jet-elements.css?ver=2.6.6 IP192.185.48.171:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /wp-content/plugins/jet-elements/assets/css/jet-elements.css?ver=2.6.6 HTTP/1.1
Host: carlaleejohnston.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carlaleejohnston.com/ece/qbot.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 03 Aug 2022 14:55:53 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Sat, 19 Nov 2022 20:29:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
0.0.0.0