r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3d0727e32cd103ddd4b73f28c81758aa
197a7bf43d63723fc532c23c6dced68d5cc36652
d3f75d03561d6a47d19370292e821a86e58381466f0c69386a21175de55882ff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D3F75D03561D6A47D19370292E821A86E58381466F0C69386A21175DE55882FF"
Last-Modified: Fri, 11 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2813
Expires: Mon, 14 Nov 2022 04:59:11 GMT
Date: Mon, 14 Nov 2022 04:12:18 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash b1e969be0f3201087da138cbc8b89f10
d0a27f525f2b242b5dafa157f126c2ba880c8809
f7e5f39372b5adcc30c27e727eee1b19e6d13ed1b54fa1ad67235dc8ee08ac51
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5830
Cache-Control: max-age=114973
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:12:18 GMT
Etag: "6370c779-1d7"
Expires: Tue, 15 Nov 2022 12:08:31 GMT
Last-Modified: Sun, 13 Nov 2022 10:31:21 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4736bac84ca28f2b1e961159fb4ea098
1319612979f53896fcfeacd4215c2715d4951e4c
5e81213e111ddf68c7f884f72b4e06fc4dc95eb902c3cf0762236b2418840dba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Length, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 14 Nov 2022 03:44:30 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1668
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8391107bfc5e4673e8a706f90f63768
5295ed0b1cb8bad4d3e851049acc7f0270937d12
ed5c27510100ffc4481be474ebcb020d147c645beb110604d5284eeeb8b97c02
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "ED5C27510100FFC4481BE474EBCB020D147C645BEB110604D5284EEEB8B97C02"
Last-Modified: Fri, 11 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3916
Expires: Mon, 14 Nov 2022 05:17:34 GMT
Date: Mon, 14 Nov 2022 04:12:18 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: hl7DBlPLERlHMcWzMj6U2UPbn2hD20lcCkDTYIbYh048KDJiOHNkYSWZzLiJ8vQ9knFi2Or6Qg4=
x-amz-request-id: 3AZC2Q08AG441DG9
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 14 Nov 2022 03:50:57 GMT
age: 1281
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 14 Nov 2022 04:12:18 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Cache-Control, Retry-After, Content-Length, Expires, ETag, Pragma, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 14 Nov 2022 03:44:48 GMT
cache-control: public,max-age=3600
age: 1650
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
fanlink.co.ke/
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 14 Nov 2022 04:12:18 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: https://fanlink.co.ke/
Cache-Control: max-age=600
Expires: Mon, 14 Nov 2022 04:22:18 GMT
Vary: User-Agent
Content-Length: 0
Keep-Alive: timeout=2, max=500
Content-Type: text/html; charset=UTF-8
ocsp.digicert.com/
200 OK 471 B IP
Hash 0a9a357f652868f9317812b8103ba15d
95a90c7a07b591dce7f39c6f9ab27974d1a1ed2a
16fd52c7ee6806455e724f30af8d58630a141a8a3823c48c20b5da3a71f066da
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3494
Cache-Control: max-age=107568
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:12:18 GMT
Etag: "6370b3ac-1d7"
Expires: Tue, 15 Nov 2022 10:05:06 GMT
Last-Modified: Sun, 13 Nov 2022 09:06:52 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: EAywU3SVi6VF4yRZhZztAg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: IT/GTLJiLxTSCsZVr9Wm4jt09d0=
fanlink.co.ke/
200 OK 20 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (7137), with CRLF, LF line terminators
Hash 28b4cef708340f9da98864d3927987e4
0dc330b6adf9603115f56700a28fe7665f18e809
5c7759d0e25634bbba5a81efd236ad65eb3584b57ecb4ef3de5bba1acf544eeb
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
link: <https://fanlink.co.ke/wp-json/>; rel="https://api.w.org/", <https://fanlink.co.ke/>; rel=shortlink
cache-control: max-age=600
expires: Mon, 14 Nov 2022 04:22:19 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 19889
content-type: text/html; charset=UTF-8
date: Mon, 14 Nov 2022 04:12:19 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bc49d7a510846ce4c52fc2bcf19c591c
42189d9ddeba55c15da20ab02c8ccad4a8ad7ae2
86ce259086857d53f246aa21f8cb5dc2be85435601b687f727d3a5a2e38ec406
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:12:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bc49d7a510846ce4c52fc2bcf19c591c
42189d9ddeba55c15da20ab02c8ccad4a8ad7ae2
86ce259086857d53f246aa21f8cb5dc2be85435601b687f727d3a5a2e38ec406
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:12:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bc49d7a510846ce4c52fc2bcf19c591c
42189d9ddeba55c15da20ab02c8ccad4a8ad7ae2
86ce259086857d53f246aa21f8cb5dc2be85435601b687f727d3a5a2e38ec406
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:12:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fanlink.co.ke/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.4
200 OK 671 B URL HTTP/2 fanlink.co.ke/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.4
IP
Hash 63dc88a9eaede6fccb60583f4a6e94df
45ba9e7d20aee8b8379dc57add7598b733f33dbb
6b89fca44b725e09dbb37f64eceea968703689f34bf2bc0183dab84699b2a395
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.4 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 06:57:59 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:19 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 671
content-type: text/css
date: Mon, 14 Nov 2022 04:12:19 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.8
200 OK 9.5 kB URL HTTP/2 fanlink.co.ke/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.8
IP
File type Unicode text, UTF-8 text, with very long lines (5178), with CRLF line terminators
Hash d263d5eaa7c883c3657af7dbb878b8a1
3d7423e15e86031092227572a6bfea1d1400ce9e
adf2c10039a96f761770b8744b46b019d0e80b2c1ee5d2eb077bae0e19a23a43
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.8 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 06:59:24 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:19 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 9545
content-type: text/css
date: Mon, 14 Nov 2022 04:12:19 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/themes/Fanlink/fonts/FontAwesome/back-compat.min.css?ver=6.9.2
200 OK 4.4 kB URL HTTP/2 fanlink.co.ke/wp-content/themes/Fanlink/fonts/FontAwesome/back-compat.min.css?ver=6.9.2
IP
File type ASCII text, with very long lines (28873), with no line terminators
Hash cee4ec2e39de59f9654afc5237339740
504bf92de4aa3dc822c7eed37d1b046928f4c0da
d341b2c7dee92ea1cc2ef7aee42594d4684a6b5273f87f64c44bb77beac32b75
GET /wp-content/themes/Fanlink/fonts/FontAwesome/back-compat.min.css?ver=6.9.2 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 31 Aug 2018 09:14:12 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4359
content-type: text/css
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/themes/Fanlink/fonts/fontello/css/fontello.min.css?ver=6.9.2
200 OK 4.6 kB URL HTTP/2 fanlink.co.ke/wp-content/themes/Fanlink/fonts/fontello/css/fontello.min.css?ver=6.9.2
IP
File type ASCII text, with very long lines (23615)
Hash a2061e70992806cfcd8aae862bba3c03
06c06182fd7329b290efdf345e5d7c78b7643cef
a2991bbd44c117ac706119f25544541762f0af5bb2066e22875cb67f4cd74050
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Fanlink/fonts/fontello/css/fontello.min.css?ver=6.9.2 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Jan 2016 10:38:42 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4550
content-type: text/css
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/themes/Fanlink/fonts/FontAwesome/css/all.css?ver=6.9.2
200 OK 9.9 kB URL HTTP/2 fanlink.co.ke/wp-content/themes/Fanlink/fonts/FontAwesome/css/all.css?ver=6.9.2
IP
File type ASCII text, with very long lines (45507)
Hash a5c31fc0d7703fa2ce465b62b5b4dfe9
86c73fe36b74b95183d3fd29149f0cb4bac6a1fe
9537a365e74353121addd2ff96cf68fc56b81f7c6cd194f1783d54f39ff8132a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Fanlink/fonts/FontAwesome/css/all.css?ver=6.9.2 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 28 Aug 2018 07:30:46 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 9929
content-type: text/css
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bc49d7a510846ce4c52fc2bcf19c591c
42189d9ddeba55c15da20ab02c8ccad4a8ad7ae2
86ce259086857d53f246aa21f8cb5dc2be85435601b687f727d3a5a2e38ec406
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:12:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 29b1503232a9cf0843bd9f0d01c0a9a5
620b3b98a58cd32175d40534dca81ef4a26d880f
1f54c0fa57ea62f131e173d4a365d6d2d4d10e0993eb69eaf9e27d3788a5daf8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F54C0FA57EA62F131E173D4A365D6D2D4D10E0993EB69EAF9E27D3788A5DAF8"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16141
Expires: Mon, 14 Nov 2022 08:41:21 GMT
Date: Mon, 14 Nov 2022 04:12:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 29b1503232a9cf0843bd9f0d01c0a9a5
620b3b98a58cd32175d40534dca81ef4a26d880f
1f54c0fa57ea62f131e173d4a365d6d2d4d10e0993eb69eaf9e27d3788a5daf8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F54C0FA57EA62F131E173D4A365D6D2D4D10E0993EB69EAF9E27D3788A5DAF8"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16141
Expires: Mon, 14 Nov 2022 08:41:21 GMT
Date: Mon, 14 Nov 2022 04:12:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 29b1503232a9cf0843bd9f0d01c0a9a5
620b3b98a58cd32175d40534dca81ef4a26d880f
1f54c0fa57ea62f131e173d4a365d6d2d4d10e0993eb69eaf9e27d3788a5daf8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F54C0FA57EA62F131E173D4A365D6D2D4D10E0993EB69EAF9E27D3788A5DAF8"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16141
Expires: Mon, 14 Nov 2022 08:41:21 GMT
Date: Mon, 14 Nov 2022 04:12:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 29b1503232a9cf0843bd9f0d01c0a9a5
620b3b98a58cd32175d40534dca81ef4a26d880f
1f54c0fa57ea62f131e173d4a365d6d2d4d10e0993eb69eaf9e27d3788a5daf8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F54C0FA57EA62F131E173D4A365D6D2D4D10E0993EB69EAF9E27D3788A5DAF8"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16141
Expires: Mon, 14 Nov 2022 08:41:21 GMT
Date: Mon, 14 Nov 2022 04:12:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 29b1503232a9cf0843bd9f0d01c0a9a5
620b3b98a58cd32175d40534dca81ef4a26d880f
1f54c0fa57ea62f131e173d4a365d6d2d4d10e0993eb69eaf9e27d3788a5daf8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F54C0FA57EA62F131E173D4A365D6D2D4D10E0993EB69EAF9E27D3788A5DAF8"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16141
Expires: Mon, 14 Nov 2022 08:41:21 GMT
Date: Mon, 14 Nov 2022 04:12:20 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ae99eef-8784-4c1a-8c91-bd4ef21987a2.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ae99eef-8784-4c1a-8c91-bd4ef21987a2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f4ac79607215beb845b6e7bf1e92506b
d4ac19f0373649804e9747b30552897a453db42d
ec4691a0573471e50dce4bd5db454dcd0498939aa6d1d9d39a1221ad01578a45
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ae99eef-8784-4c1a-8c91-bd4ef21987a2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7632
x-amzn-requestid: 2b3de800-a50f-4872-8a7c-54ec33923739
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bjzJYFCdIAMFmLQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6371656f-1ee2b3f21d22619e3381e1a4;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 21:45:19 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Dr0oeNxvib4qjo6CAg6YPyXkypbU5eF6GLLK1mN3jJer6G22pE8jLQ==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Sun, 13 Nov 2022 22:01:14 GMT
age: 22266
etag: "d4ac19f0373649804e9747b30552897a453db42d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 032386e5c9dffff1ba1ee5e8a322d438
dd4fd6c803a9b333bace9a541c6bd183d0c56bb9
0e9f559a0aa7e114c5810a27ba243c0da7b44dc0bf7aec2b7ab32b8f0e2b536c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11667
x-amzn-requestid: 4778d1bd-28c3-4665-89da-046e356087f0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bjyD1HE-oAMF0QQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637163b1-53c7330c5fd36d3c4d9e6aed;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 21:37:53 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ubqvgLaJlGIxyJC1KBJP4ncx_2ltXS0C5dLGddjtbkt6pJmX84_VAg==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Sun, 13 Nov 2022 21:54:01 GMT
age: 22699
etag: "dd4fd6c803a9b333bace9a541c6bd183d0c56bb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c41c5f7-45fd-4952-b779-caaaef2b43ff.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c41c5f7-45fd-4952-b779-caaaef2b43ff.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 179204c4982b4bf381897d3c2c3dea1c
776b482a3c0c61950ffe838decfb1384225f514a
5e66f04013c2a7e2cef32a50c0d409dc2911b31a412aa81346b7d65e16f4a6f6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c41c5f7-45fd-4952-b779-caaaef2b43ff.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11224
x-amzn-requestid: 4191c827-2bbf-4e08-b16a-aa7bd5616ecb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bjydBHMwIAMF63A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63716453-169dcbf913baf8c67bd9f3d5;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 21:40:35 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 40ZsYE0GZNGo7Xf6eXk7OFwqq6UpZT3csZPtNGmHpfZrso9fMXTvRQ==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Sun, 13 Nov 2022 22:01:14 GMT
age: 22266
etag: "776b482a3c0c61950ffe838decfb1384225f514a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd37ec5c0-8297-45c8-9552-5d310e07e034.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd37ec5c0-8297-45c8-9552-5d310e07e034.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6828ea3bf0f42867717e1ef95c398d02
13907043e5ff59dea9b9f0130b5079779b6fdda9
d990c2fab7762c251a7f4b10ca052704fd94faea54ff4596a9e4a5fdf51480e6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd37ec5c0-8297-45c8-9552-5d310e07e034.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11716
x-amzn-requestid: 28b42f16-f75b-4ddc-a3ab-4b88fda932b8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bjyDtG8IIAMFs0Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637163b1-62ab3858218912ec32b8df06;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 21:37:53 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: ylUFn0zALrUeJzA13sYlGytX_3VkuoDPkpADHuGw85jVbA8NpUfcHw==
via: 1.1 7f06047c304d80ea094816a27c933914.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Sun, 13 Nov 2022 22:20:36 GMT
etag: "13907043e5ff59dea9b9f0130b5079779b6fdda9"
content-type: image/jpeg
age: 21104
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5797e726-229b-4f42-9376-00ae67e14407.jpeg
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5797e726-229b-4f42-9376-00ae67e14407.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a0db3498954921b58948ad8a4e7fd49f
6b618c3ff6e589f9e01650bd0a619acb70d8004e
fa3baa9e32e455ab2eeefab0c76714bf0ff5f67a5ccd7c10b3f5c21d8138c5cf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5797e726-229b-4f42-9376-00ae67e14407.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6535
x-amzn-requestid: 3333aa65-c0c7-4704-9af1-fb0a49f830fb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bjyDtHbhoAMFSsg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637163b1-51c3e4513240b7e5662b8e6e;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 21:37:53 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 6dTOcWIKFuo-Thf3zUH_1WY70yFyQkj3w2xPrb6Ntjf8TUFPVG-_lA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Sun, 13 Nov 2022 21:54:01 GMT
age: 22699
etag: "6b618c3ff6e589f9e01650bd0a619acb70d8004e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feaa09e64-5032-43a4-b8f1-ac7a4c391ce2.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feaa09e64-5032-43a4-b8f1-ac7a4c391ce2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6f7c39108d3a61b6eaa3c7d8529f0ea0
a7a24b45563599abd1badffeffb965e6a9586f07
0dc12de0ae756b662448214eaa933aef9366404659585692730fa952b63e610f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feaa09e64-5032-43a4-b8f1-ac7a4c391ce2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10876
x-amzn-requestid: 916d129e-b6ca-4e4d-9818-67591d11c76c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bjybzGdDIAMF4Cw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6371644b-2f59bbb45dad57bc70c780b4;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 21:40:27 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: yhREIc3lmibj7EIUHeUhT-665yL20HkK5wPTfdLcIgaDq8_DjwwSEw==
via: 1.1 b4085435efbe95a420f374958bd145be.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Sun, 13 Nov 2022 21:53:07 GMT
age: 22753
etag: "a7a24b45563599abd1badffeffb965e6a9586f07"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/dt-the7-core/assets/css/post-type.min.css?ver=6.9.2
200 OK 9.2 kB URL HTTP/2 fanlink.co.ke/wp-content/plugins/dt-the7-core/assets/css/post-type.min.css?ver=6.9.2
IP
File type ASCII text, with very long lines (65448)
Hash a1a8826fa27547834203977a866070c8
77116d1da3807ee209df9eaef3ac5a7ca1d860d3
33d8074c2625fb1deda4b60510075adcc70696d679831416dea935d1d1d75435
GET /wp-content/plugins/dt-the7-core/assets/css/post-type.min.css?ver=6.9.2 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 06:58:10 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 9202
content-type: text/css
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=5.5.4
200 OK 46 kB URL HTTP/2 fanlink.co.ke/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=5.5.4
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 4cf73362be72b477287acbb3f7737f86
3c3e185f11497b3fc06fbb6b0e1932bf7f5dfb3d
c9e79d70c80ee8ee7114b162dc07a1fda6a6fe6e1cd7af94d8aba516e36a0a14
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=5.5.4 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 06:58:48 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:19 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 45591
content-type: text/css
date: Mon, 14 Nov 2022 04:12:19 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/uploads/the7-css/media.css?ver=cbaea8ef7265
200 OK 9.2 kB URL HTTP/2 fanlink.co.ke/wp-content/uploads/the7-css/media.css?ver=cbaea8ef7265
IP
Hash 74b78fb58fd9904b2d84fd960515ef94
6a9474cbbe68fdd72a01d9148fa15601f2eb3755
cdb832cbf9a6170294c3321607a3b8f004a0cc86fd0ed2121a6757c67c63e8c3
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/the7-css/media.css?ver=cbaea8ef7265 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Sep 2020 16:44:19 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 9181
content-type: text/css
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/uploads/the7-css/custom.css?ver=cbaea8ef7265
200 OK 39 kB URL HTTP/2 fanlink.co.ke/wp-content/uploads/the7-css/custom.css?ver=cbaea8ef7265
IP
File type assembler source, ASCII text, with very long lines (1357)
Hash c44bbc087e80214f5b25c011cdd2a2a6
180323ff80fe54a538bcac4e1e4bec2d1cbd5ddf
0d81376e934360d159577e587939ada3e2244d38a728f9489fd85ae7fadb2c30
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/the7-css/custom.css?ver=cbaea8ef7265 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Sep 2020 16:44:19 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 38935
content-type: text/css
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/themes/Fanlink/style.css?ver=6.9.2
200 OK 780 B URL HTTP/2 fanlink.co.ke/wp-content/themes/Fanlink/style.css?ver=6.9.2
IP
File type Unicode text, UTF-8 text, with very long lines (521)
Hash 379afddd563172969d5fb7137512f4e3
8f0569ad335150e38f26d6644fe6ae2d346fd42b
a30731fdd8d7e5038006e58fbc638e76bcd8f4d404f24e76ed0958e992461d57
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Fanlink/style.css?ver=6.9.2 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 10 Sep 2018 13:22:16 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 780
content-type: text/css
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/uploads/the7-css/post-type-dynamic.css?ver=cbaea8ef7265
200 OK 1.1 kB URL HTTP/2 fanlink.co.ke/wp-content/uploads/the7-css/post-type-dynamic.css?ver=cbaea8ef7265
IP
Hash 8310675b5fdb3e03e7ee0c768bfd2921
278de69139ced8d85c30377fb0e3da5a3ecde9bc
e2017d251f2fd92c543b5bb5ee17d685c897ae9ee2aed6879850126f78168cf0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/the7-css/post-type-dynamic.css?ver=cbaea8ef7265 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Sep 2020 16:44:19 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1110
content-type: text/css
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/headings.min.css?ver=3.16.25
200 OK 415 B URL HTTP/2 fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/headings.min.css?ver=3.16.25
IP
File type ASCII text, with very long lines (1255), with no line terminators
Hash b4acc333dae0f95b71484ae36e00899a
1594f387c148dd0637df1dbb07976db6be2be9ac
b369f3ef5feba4988bc5651fd2b581a6a07dacf3dfd9d963c365805b034db862
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-css/headings.min.css?ver=3.16.25 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 06:59:59 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 415
content-type: text/css
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/uploads/smile_fonts/icomoon-numbers-32x32/icomoon-numbers-32x32.css?ver=4.9.22
200 OK 413 B URL HTTP/2 fanlink.co.ke/wp-content/uploads/smile_fonts/icomoon-numbers-32x32/icomoon-numbers-32x32.css?ver=4.9.22
IP
File type ASCII text, with very long lines (1851), with no line terminators
Hash 1c3d74eb22c83cb20a4f3c22b3d2ee8c
da861d486a552fa5dff4358e0ea3686aec847a73
507640729506c9f0f3cfcc47757d86b4e5341f6376ad081bfbb3ae22973e78d5
GET /wp-content/uploads/smile_fonts/icomoon-numbers-32x32/icomoon-numbers-32x32.css?ver=4.9.22 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 07:06:16 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 413
content-type: text/css
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/info-box.min.css?ver=3.16.25
200 OK 824 B URL HTTP/2 fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/info-box.min.css?ver=3.16.25
IP
File type ASCII text, with very long lines (4226), with no line terminators
Hash a0b5fe7e71f7f0b5f3c253d326f7cc21
505203bca25d980fa7aeefef18b68691844e0628
0213a1a31952bb0410fdd7bda391476877cb65536c86145bfa6326745827cc36
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-css/info-box.min.css?ver=3.16.25 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 06:59:59 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 824
content-type: text/css
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/uploads/smile_fonts/icomoon-icomoonfree-16x16/icomoon-icomoonfree-16x16.css?ver=4.9.22
200 OK 3.7 kB URL HTTP/2 fanlink.co.ke/wp-content/uploads/smile_fonts/icomoon-icomoonfree-16x16/icomoon-icomoonfree-16x16.css?ver=4.9.22
IP
File type ASCII text, with very long lines (27934), with no line terminators
Hash 66d8903aa66bb1d1468b995c7eaafad4
87125298c0509a3e769cdfe152130601063e3e50
cbc7fd3bbc6eab54175fb7360484a40399796fdc0a097df69c1b98ad5d937c3a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/smile_fonts/icomoon-icomoonfree-16x16/icomoon-icomoonfree-16x16.css?ver=4.9.22 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 07:06:16 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3740
content-type: text/css
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/uploads/smile_fonts/Defaults/Defaults.css?ver=4.9.22
200 OK 4.8 kB URL HTTP/2 fanlink.co.ke/wp-content/uploads/smile_fonts/Defaults/Defaults.css?ver=4.9.22
IP
File type ASCII text, with very long lines (27639), with no line terminators
Hash da2fc2749d073a4558e07be91fd485bb
5b2c13af9ee717486ba75d132491dca65b7ca93c
e26b306c0363987a4a02bd157f64c1096a49715389def07c9d1207def1b4ab53
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/smile_fonts/Defaults/Defaults.css?ver=4.9.22 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 07:00:26 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4755
content-type: text/css
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
200 OK 4.0 kB URL HTTP/2 fanlink.co.ke/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
IP
File type ASCII text, with very long lines (9959)
Hash a6c81e2f02bd04160d2de88c4e8f3559
e3f3c91427d785820ca97dabe738f01faf041f36
b734d83af5da0eb627e04d3e62ce652b9eb7de19667a1b91da6b93f0ea5d7ffe
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 20 May 2016 08:41:28 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4014
content-type: application/javascript
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/creative-link.min.css?ver=3.16.25
200 OK 2.0 kB URL HTTP/2 fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/creative-link.min.css?ver=3.16.25
IP
File type Unicode text, UTF-8 text, with very long lines (14439), with no line terminators
Hash a4c89a71833c3f149692a8299cfb9bdf
a02bc4f3ca8933e2f375cbf7e23612d361abdb34
5381c33c86a950fb9307344d6aec78eb6b7d7bc37b6e323089bf86fe040474bd
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-css/creative-link.min.css?ver=3.16.25 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 06:59:59 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2005
content-type: text/css
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/info-circle.min.css?ver=3.16.25
200 OK 1.3 kB URL HTTP/2 fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/info-circle.min.css?ver=3.16.25
IP
File type ASCII text, with very long lines (8093), with no line terminators
Hash 90121e6fdfe4b7b58716a328b406ecfa
7dd3467c99e64195b2027819672fde95666c51ca
46f460cc967a501712729649e47ef160a1f066922a59a1bf9aa218bd263318b8
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-css/info-circle.min.css?ver=3.16.25 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 06:59:59 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1328
content-type: text/css
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/style.min.css?ver=3.16.25
200 OK 2.8 kB URL HTTP/2 fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/style.min.css?ver=3.16.25
IP
File type ASCII text, with very long lines (13362), with no line terminators
Hash 022bf1d37b467a4a6d0e964f4682ed2f
313cb2c56ffdd2ecc9f3f78348d060152085b3e0
fd5140ccd70892401a43e96c3a21205b63e1bc2f37dcb1870a6bbb7bd4f33b2c
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-css/style.min.css?ver=3.16.25 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 06:59:59 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2752
content-type: text/css
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/animate.min.css?ver=3.16.25
200 OK 6.0 kB URL HTTP/2 fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/animate.min.css?ver=3.16.25
IP
File type ASCII text, with very long lines (64392)
Hash fc253fd3c5838caa5f7260fd3c48dd6c
a03a434a1dcf3464d3ff15548a472dbd6547b631
c239cfdcf54333ef74d230ba93faaf06af2201f735c01715b2d863e0862822d0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-css/animate.min.css?ver=3.16.25 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 06:59:59 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 5990
content-type: text/css
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/uploads/the7-css/legacy.css?ver=cbaea8ef7265
200 OK 18 kB URL HTTP/2 fanlink.co.ke/wp-content/uploads/the7-css/legacy.css?ver=cbaea8ef7265
IP
Hash e6849d43a4469e77abf70deece077c8b
d8706afe360070be677d9b9a0731a5c9ae44f34b
b836f2bac1aeaa0de551857882ae4ae2cf43b9215367f743f211a410a8a147f1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/the7-css/legacy.css?ver=cbaea8ef7265 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Sep 2020 16:44:19 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 18151
content-type: text/css
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/ultimate-params.min.js?ver=3.16.25
200 OK 524 B URL HTTP/2 fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/ultimate-params.min.js?ver=3.16.25
IP
File type HTML document, ASCII text, with very long lines (1112), with no line terminators
Hash 088309ebec9b2c59b6ddf41ccd2d57ef
971d7bedccfcd44a9826f2eb37fb56cc321024c4
10a30ffccf626d32336fd520ce5d7cacd3df79f64d52a6dc20f3bdac88e8f713
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-js/ultimate-params.min.js?ver=3.16.25 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 07:00:03 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 524
content-type: application/javascript
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/jquery-appear.min.js?ver=3.16.25
200 OK 622 B URL HTTP/2 fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/jquery-appear.min.js?ver=3.16.25
IP
File type ASCII text, with very long lines (1430), with no line terminators
Hash beb75c2a93c3fd88b03c5392fa2365df
ecf3ebb3a975ac07a3a1c308ebb04d4c4082b7ae
8b920ab9f6e3c60c59673c9f73fcfd37a1e212dfcd6010c1ce50f0c4d9f232c5
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-js/jquery-appear.min.js?ver=3.16.25 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 07:00:05 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 622
content-type: application/javascript
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/themes/Fanlink/js/above-the-fold.min.js?ver=6.9.2
200 OK 3.7 kB URL HTTP/2 fanlink.co.ke/wp-content/themes/Fanlink/js/above-the-fold.min.js?ver=6.9.2
IP
File type ASCII text, with very long lines (9315), with no line terminators
Hash 83b963f9302699f33d52ae2e7cb804c6
11ed42b1d18cfefa238b2e04376a9ce5789cdf04
1f6241d7c2eb664cc5ddc9478b27d17c1f97979ddce95d400f33e6cefe998659
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Fanlink/js/above-the-fold.min.js?ver=6.9.2 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 31 Aug 2018 09:14:16 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3719
content-type: application/javascript
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/creative-link.min.js?ver=3.16.25
200 OK 521 B URL HTTP/2 fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/creative-link.min.js?ver=3.16.25
IP
File type ASCII text, with very long lines (2144), with no line terminators
Hash ded473d0443f7393a79baa3ad849f36e
8388482b4561d1da4b8078b7342855bdc31bd3e2
93a2cdea989138d70f3e1dfbe6098d008ea9b1250c9f3024af8cbc80aeffb68d
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-js/creative-link.min.js?ver=3.16.25 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 07:00:03 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 521
content-type: application/javascript
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/info-circle.min.js?ver=3.16.25
200 OK 2.6 kB URL HTTP/2 fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/info-circle.min.js?ver=3.16.25
IP
File type ASCII text, with very long lines (9824), with no line terminators
Hash 974e0db462fc74f405f942d045a51bb3
676a30bd2a8485337042d21577b3478041e94a2a
28d5ca91864864721363707e59ddb85f871443f8a781a0655cc6279b43a6a483
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-js/info-circle.min.js?ver=3.16.25 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 07:00:05 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2592
content-type: application/javascript
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/custom.min.js?ver=3.16.25
200 OK 4.8 kB URL HTTP/2 fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/custom.min.js?ver=3.16.25
IP
File type HTML document, ASCII text, with very long lines (21409), with no line terminators
Hash eb5c54156c0b6a5f90463063cf3d39db
e8faa9fa297bbd9a14ddd99a9a1fee3f722a42de
11a9a5511897c5bf95e0eef6cec0f0c48b777c54520bc5996fe520c591b71dea
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-js/custom.min.js?ver=3.16.25 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 07:00:03 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4813
content-type: application/javascript
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-includes/js/wp-embed.min.js?ver=4.9.22
200 OK 739 B URL HTTP/2 fanlink.co.ke/wp-includes/js/wp-embed.min.js?ver=4.9.22
IP
File type ASCII text, with very long lines (1391), with no line terminators
Hash 60d8829560031a011771efa2f39708af
a4689c3b70f773deb896eec78028e0902ef15097
a0176bd4cc53bd2e920b0dfd10f56d2a4a3820d671539414ef4b3e2b3e50b9b7
GET /wp-includes/js/wp-embed.min.js?ver=4.9.22 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Apr 2021 14:19:19 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 739
content-type: application/javascript
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/headings.min.js?ver=3.16.25
200 OK 861 B URL HTTP/2 fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/headings.min.js?ver=3.16.25
IP
File type HTML document, ASCII text, with very long lines (2728), with no line terminators
Hash 492621284e771fbc5d4e8e7ffec6f266
ef0982780973d24b9a4e79805eee56621c5a7a83
ded7f813265bcc1845f8d2a0770fed52d66492812d96db997ca8713c7ecb90ea
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-js/headings.min.js?ver=3.16.25 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 07:00:03 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 861
content-type: application/javascript
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/info-box.min.js?ver=3.16.25
200 OK 238 B URL HTTP/2 fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/info-box.min.js?ver=3.16.25
IP
File type ASCII text, with very long lines (471), with no line terminators
Hash d9a8e9ffaea20b320654e6c605e1cefc
8c2f3db6fe1ae8c7569c61487b932b1055a4af7b
5bd078fb1c9cd3575aaa06a944067ec2be602972aebb6a8ed3930631db879b9d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-js/info-box.min.js?ver=3.16.25 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 07:00:05 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 238
content-type: application/javascript
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/themes/Fanlink/js/legacy.min.js?ver=6.9.2
200 OK 600 B URL HTTP/2 fanlink.co.ke/wp-content/themes/Fanlink/js/legacy.min.js?ver=6.9.2
IP
File type ASCII text, with very long lines (1399), with no line terminators
Hash 68286dd9f5e444b866af2cc5d5634e58
3110cedc0435b1714638ea026367001cc53c2e68
95f59971bec9f5ee324a2559d878ba430db6a67cbe931b9b7782c92f4806a15d
GET /wp-content/themes/Fanlink/js/legacy.min.js?ver=6.9.2 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 31 Aug 2018 09:14:16 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 600
content-type: application/javascript
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/background-style.min.css?ver=3.16.25
200 OK 1.8 kB URL HTTP/2 fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/background-style.min.css?ver=3.16.25
IP
File type ASCII text, with very long lines (9312), with no line terminators
Hash 201a821d0093fc9b7b4e120ca51cefd3
d440fb972c1ecca4e24180a21dc2a1f399663397
0a4fc7354e973a436ffa77f98db4c2ae8bc1c234102f6e3ce81a912822c3e534
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-css/background-style.min.css?ver=3.16.25 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 07:00:01 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1786
content-type: text/css
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-includes/js/jquery/jquery.js?ver=1.12.4
200 OK 34 kB URL HTTP/2 fanlink.co.ke/wp-includes/js/jquery/jquery.js?ver=1.12.4
IP
File type ASCII text, with very long lines (31997)
Hash 6b2ceda6218e6810713286b29db017fb
71175271d84c90ca5f05ecc04d7f7a1052873380
de7a4d9a1cb75f0d1a4bf1a71907a44b85b9356da5c4f9e7f6729b8e69a38974
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 05 Sep 2019 01:37:44 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 33776
content-type: application/javascript
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-includes/js/wp-emoji-release.min.js?ver=4.9.22
200 OK 4.3 kB URL HTTP/2 fanlink.co.ke/wp-includes/js/wp-emoji-release.min.js?ver=4.9.22
IP
File type ASCII text, with very long lines (9063)
Hash bc89387b6a6f886f99511cca233b5071
77c1103c6d84263a73bff007bd635750d5b26296
baf8e3410e57e5650ad72f25eb93d82ea36ac8bd51904948e3d2f2a05faa3e78
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.22 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Apr 2021 14:19:19 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4347
content-type: application/javascript
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/dt-the7-core/assets/js/post-type.min.js?ver=6.9.2
200 OK 4.7 kB URL HTTP/2 fanlink.co.ke/wp-content/plugins/dt-the7-core/assets/js/post-type.min.js?ver=6.9.2
IP
File type ASCII text, with very long lines (19041), with no line terminators
Hash c636fcfea6d8c68eb57cff63d5a4593c
7457efcaad9f7226211ae3e20d41775351a83061
febdf3a7b55d48f7e38eccb44c67ef3cb6d1cfac97d803333c56a18e3e924b0d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/dt-the7-core/assets/js/post-type.min.js?ver=6.9.2 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 06:58:10 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4706
content-type: application/javascript
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.4
200 OK 4.0 kB URL HTTP/2 fanlink.co.ke/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.4
IP
Hash cc76150566e288ba52c395d105fc43e1
512f5dd7dd49dc388f095dcde797f442b66b98d1
ab81562eb44e8846c82a44f1157ad551e3c6cd33a4b7e55c32be48a00d0a5565
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.4 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 06:57:59 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4047
content-type: application/javascript
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=5.5.4
200 OK 5.7 kB URL HTTP/2 fanlink.co.ke/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=5.5.4
IP
File type ASCII text, with very long lines (19706), with no line terminators
Hash 7e76e8ec08b6706e3e5814ccecf4cefc
3be624813346feff0ee05ffac2d700a9411f1e6e
35f349a1c263c0e6669607bba7911e3467530bc4b12a0cbd492c6a577a3c35a7
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=5.5.4 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 06:58:52 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 5653
content-type: application/javascript
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.8
200 OK 18 kB URL HTTP/2 fanlink.co.ke/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.8
IP
File type ASCII text, with very long lines (64614), with CRLF line terminators
Hash b300af7280cf82d31e7f0b75c128598c
66b506bb8254f08ffe57c2b1e42722b73464670f
feffecee338ad546654ada73f52882c96356f6882a3e59cb540878415d77db1d
GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.8 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 06:59:33 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 18090
content-type: application/javascript
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/ultimate_bg.min.js?ver=4.9.22
200 OK 9.7 kB URL HTTP/2 fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/ultimate_bg.min.js?ver=4.9.22
IP
File type ASCII text, with very long lines (31956)
Hash 59a3b73645294812ff1f4db6d19ebeba
010bff2e5a527f240dc11c1309624137d2b3e0b4
aeb8155fcded545e8e49f2753fe61520e34528d879c9b59002f18c977f59f1b5
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-js/ultimate_bg.min.js?ver=4.9.22 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 07:00:03 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 9717
content-type: application/javascript
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/jquery-ui.min.js?ver=3.16.25
200 OK 26 kB URL HTTP/2 fanlink.co.ke/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/jquery-ui.min.js?ver=3.16.25
IP
File type ASCII text, with very long lines (31987)
Hash d5116601b860844e3e7a96a3cfaa5022
0d2797d909253be007af03d73de219cc25dc899c
271ea65d4758731d2aa87a5f9b2fb4f42d23cd2bf249196ba8e00b966ac23a4e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-js/jquery-ui.min.js?ver=3.16.25 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 07:00:03 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 26336
content-type: application/javascript
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.8
200 OK 38 kB URL HTTP/2 fanlink.co.ke/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.8
IP
File type ASCII text, with very long lines (27287), with CRLF line terminators
Hash 33ad97fbd5f6d0ad97af5461cc857da3
a975057df83659e526059661a2dae1a5a4d23fe2
ba0476734001e6e0808e7882a24852cf298dacac37b2beaf2c17718d2032afb2
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.8 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 06:59:33 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 38337
content-type: application/javascript
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/revslider/admin/assets/images/transparent.png
200 OK 71 B URL HTTP/2 fanlink.co.ke/wp-content/plugins/revslider/admin/assets/images/transparent.png
IP
File type PNG image data, 10 x 10, 8-bit/color RGBA, non-interlaced\012- data
Hash 753f6c59bbe7913f21576b58b193bc5a
b3e3885f69e401b3a320010ff7a40dd19768fe3b
8ea078292393a14a8e44be139a7fa6ed09d9c650e210eccca587045239b71cab
GET /wp-content/plugins/revslider/admin/assets/images/transparent.png HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 06:59:40 GMT
accept-ranges: bytes
content-length: 71
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
content-type: image/png
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/uploads/2018/10/Fanlink-logo_final-no-reflection2.png
200 OK 18 kB URL HTTP/2 fanlink.co.ke/wp-content/uploads/2018/10/Fanlink-logo_final-no-reflection2.png
IP
File type PNG image data, 350 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 817cf731b112079cf9d6a72fa4660545
edec158e8c71966d61285794ffd863389ea44dcb
d2c0860bcf94b52d16993f9b4db069b8d33c010e04bb3f659ceee96dfb468aa2
GET /wp-content/uploads/2018/10/Fanlink-logo_final-no-reflection2.png HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 Oct 2018 13:50:19 GMT
accept-ranges: bytes
content-length: 17821
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
content-type: image/png
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/uploads/2018/10/New-Fanlink-logo_final-no-reflection1.png
200 OK 20 kB URL HTTP/2 fanlink.co.ke/wp-content/uploads/2018/10/New-Fanlink-logo_final-no-reflection1.png
IP
File type PNG image data, 400 x 73, 8-bit/color RGBA, non-interlaced\012- data
Hash 0ef10b1bf75ef6c7cf309c063c783503
371c9c378b023864108c8de828888397819b9e59
ac60ecac4c2cc86ab8c0d41da1589be3f6e942a98be17b0dcf47775bd63aa76d
GET /wp-content/uploads/2018/10/New-Fanlink-logo_final-no-reflection1.png HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 Oct 2018 13:36:23 GMT
accept-ranges: bytes
content-length: 19547
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
content-type: image/png
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/uploads/2018/09/DS4.jpg
200 OK 84 kB URL HTTP/2 fanlink.co.ke/wp-content/uploads/2018/09/DS4.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x800, components 3\012- data
Hash eabcfe523468a4a1dc1d991ee4ff2417
020d9db75c854fc2d4752cfbfa3dd5ca4bce25bc
469a5d25652bf98972ad444d2e8596085eae5b549b1f8aadad5758b0fa0fd280
GET /wp-content/uploads/2018/09/DS4.jpg HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 19 Sep 2018 13:32:19 GMT
accept-ranges: bytes
content-length: 84100
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
content-type: image/jpeg
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/uploads/2018/09/cctv.jpg
200 OK 104 kB URL HTTP/2 fanlink.co.ke/wp-content/uploads/2018/09/cctv.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x800, components 3\012- data
Size 104 kB (104488 bytes)
Hash cb6f4a7fe027944736a02a7b3419f589
0c614e21a747f5877e45c0362a8976f55423cea1
37a212780481866ac51a9fb76faabb46b562ddedd16634efa8e0800562c07dc3
GET /wp-content/uploads/2018/09/cctv.jpg HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 17 Sep 2018 10:18:56 GMT
accept-ranges: bytes
content-length: 104488
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
content-type: image/jpeg
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/uploads/2018/11/005-1.jpg
200 OK 119 kB URL HTTP/2 fanlink.co.ke/wp-content/uploads/2018/11/005-1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 1024x683, components 3\012- data
Size 119 kB (118680 bytes)
Hash a48d5c304e3baeebcf96b177b556dad9
5159a687073f53265f57d165f047c180f91571a1
c90501aa05c643239ef08cf143d149219408dad1961599948772837012367bed
GET /wp-content/uploads/2018/11/005-1.jpg HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 23 Nov 2018 13:06:02 GMT
accept-ranges: bytes
content-length: 118680
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
content-type: image/jpeg
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/uploads/2018/09/datacentre1.jpg
200 OK 203 kB URL HTTP/2 fanlink.co.ke/wp-content/uploads/2018/09/datacentre1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x800, components 3\012- data
Size 203 kB (202584 bytes)
Hash c16f173734d9fd01101357689c152928
61b937b3f61c86e1e3753ca25482ccc6aea2baae
55074cae1e5679869a0037ccb1a1e8c7ce028565ef564b145ad65e0e30134730
GET /wp-content/uploads/2018/09/datacentre1.jpg HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 14 Sep 2018 14:30:33 GMT
accept-ranges: bytes
content-length: 202584
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
content-type: image/jpeg
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3723d23fdcd3f3d34132d56faae4428b
4bf9c6e15b8de24fc7387ce145382f9b3e9cb1c8
4bc047ec725bd4d99c9dd4fa11edc91702f722d16e53b5eef0920cb5dc7e7ca8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:12:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fanlink.co.ke
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Nov 2022 05:42:51 GMT
expires: Fri, 10 Nov 2023 05:42:51 GMT
cache-control: public, max-age=31536000
age: 340169
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 35ad471bf7f157abedbe322e59bb00ae
6f8c57f1c20377b6a1f74fd06849705a6370e291
b51251f347677a52f08a4a7c0d9ff0effed121992b6dc7fa709e33c400042e63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:12:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16740, version 1.0\012- data
Hash e43b535855a4ae53bd5b07a6eeb3bf67
6507312d9491156036316484bf8dc41e8b52ddd9
b34551ae25916c460423b82beb8e0675b27f76a9a2908f18286260fbd6de6681
GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fanlink.co.ke
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 07 Nov 2022 18:53:39 GMT
expires: Tue, 07 Nov 2023 18:53:39 GMT
cache-control: public, max-age=31536000
age: 551921
last-modified: Mon, 15 Aug 2022 18:14:44 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/themes/Fanlink/fonts/icomoon-the7-social/fonts/icomoon-the7-social-icons-16x16.ttf?esfwnl
200 OK 8.0 kB URL HTTP/2 fanlink.co.ke/wp-content/themes/Fanlink/fonts/icomoon-the7-social/fonts/icomoon-the7-social-icons-16x16.ttf?esfwnl
IP
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon-the7-social-icons-16x16\012- data
Hash 4d2fc58fde08de11d9c2ac8b4d1a41d3
369aac23a7ec1e5fe4e6fb1a8b63c9b891c3a2c2
e855d0097a2df46951689f4562f4ed2c291d56e6200bc3fbdc65092459948cb2
GET /wp-content/themes/Fanlink/fonts/icomoon-the7-social/fonts/icomoon-the7-social-icons-16x16.ttf?esfwnl HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/wp-content/themes/Fanlink/css/main.min.css?ver=6.9.2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 24 Jul 2018 10:48:48 GMT
accept-ranges: bytes
cache-control: max-age=172800
expires: Wed, 16 Nov 2022 04:12:21 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 8003
content-type: font/ttf
date: Mon, 14 Nov 2022 04:12:21 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a635b6112e22763022c9bce0e9141fae
13ba9e635ad5bf7bb57c39a154eec28c4b326801
4b22d01fc2179a0a13fd70d7e80b98f0b865397af369c2dc03678b072b7f7e90
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:12:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fanlink.co.ke/wp-content/themes/Fanlink/js/atoms/plugins/jquery.mousewheel.min.js
200 OK 1.3 kB URL HTTP/2 fanlink.co.ke/wp-content/themes/Fanlink/js/atoms/plugins/jquery.mousewheel.min.js
IP
File type ASCII text, with very long lines (2609)
Hash d0af0b9ca5ea0f7cd30feb8ae4cdb2d8
e83310028077c0b0560fc4fd7452387eb5b83487
eb4159c567157736af832ec1b6bb3dbd3c3c3d8a3eb4a737c10115b6f880329d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Fanlink/js/atoms/plugins/jquery.mousewheel.min.js HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 May 2018 08:11:20 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:21 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1254
content-type: application/javascript
date: Mon, 14 Nov 2022 04:12:21 GMT
server: Apache
X-Firefox-Spdy: h2
www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3988.777100963047!2d36.8285583141583!3d-1.3090059990452614!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x182f11072e7f5649%3A0xb4719850e4040125!2sTrance+Towers!5e0!3m2!1sen!2ske!4v1551890138140
200 OK 1.3 kB URL HTTP/2 www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3988.777100963047!2d36.8285583141583!3d-1.3090059990452614!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x182f11072e7f5649%3A0xb4719850e4040125!2sTrance+Towers!5e0!3m2!1sen!2ske!4v1551890138140
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2805)
Hash 7a400e11a48c546c1c3e5c9f55d75547
e86ded64f3fa2a85ecdf29d94bf53e32887b103e
a358078c5901a73f7a5ea1625070e1412b63934b278e96b7a8183271bfb05b8e
GET /maps/embed?pb=!1m18!1m12!1m3!1d3988.777100963047!2d36.8285583141583!3d-1.3090059990452614!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x182f11072e7f5649%3A0xb4719850e4040125!2sTrance+Towers!5e0!3m2!1sen!2ske!4v1551890138140 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Mon, 14 Nov 2022 04:12:21 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
vary: Accept-Language
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-UfUAk2QpAt1I4e68FYIwzg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/geo-maps-api/1
content-encoding: gzip
server: mafe
content-length: 1345
x-xss-protection: 0
server-timing: gfet4t7; dur=195
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/uploads/2018/11/fanlink-favicon.png
200 OK 6.6 kB URL HTTP/2 fanlink.co.ke/wp-content/uploads/2018/11/fanlink-favicon.png
IP
File type PNG image data, 77 x 77, 8-bit/color RGBA, non-interlaced\012- data
Hash 4238eb77f6f022d822668a5f78ba4b35
1dd64a7f51fea2e75a0c13cc4e0a9d8e1f7950ef
72e410ff8339c053c2cd743f0044a97a8fc1be890618218e7061083fe17eabcf
GET /wp-content/uploads/2018/11/fanlink-favicon.png HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 16 Nov 2018 10:30:43 GMT
accept-ranges: bytes
content-length: 6607
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:21 GMT
content-type: image/png
date: Mon, 14 Nov 2022 04:12:21 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 96c9e6a333b1f0fddf32f24e7b965151
647fee1eb0d6839e30115edebe8d0840e6152cdb
a2ac4ddc863a9d641d91d504db389e0116cf1699322d2391f17d5785bf5bc538
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 04:12:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fanlink.co.ke/wp-content/themes/Fanlink/fonts/icomoon-arrows-the7/fonts/icomoon-arrows-carousel-32x32.ttf?satvtg
200 OK 3.7 kB URL HTTP/2 fanlink.co.ke/wp-content/themes/Fanlink/fonts/icomoon-arrows-the7/fonts/icomoon-arrows-carousel-32x32.ttf?satvtg
IP
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon-arrows-carousel-32x32\012- data
Hash 1fe868ed7862aec23f8f569a06b5bec0
9248b6414a56326386934c1c3f8e1a6f56ccae97
2a06f1b47552bb9060a9aace09e51096e5940dbd65bbbff47a9b8db1068c571d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Fanlink/fonts/icomoon-arrows-the7/fonts/icomoon-arrows-carousel-32x32.ttf?satvtg HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/wp-content/themes/Fanlink/css/main.min.css?ver=6.9.2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 May 2018 08:11:20 GMT
accept-ranges: bytes
cache-control: max-age=172800
expires: Wed, 16 Nov 2022 04:12:21 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3681
content-type: font/ttf
date: Mon, 14 Nov 2022 04:12:21 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js?version=5.4.8
200 OK 6.9 kB URL HTTP/2 fanlink.co.ke/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js?version=5.4.8
IP
File type ASCII text, with very long lines (28818), with CRLF line terminators
Hash 9f0807f71a1b05c193d68a38898299d8
b0cf12f58dce38f7304eea163f1dc0886f076528
224470f71a11d53b8345fea1c9f0d57a626590c581b622b845e7f699b1944a95
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js?version=5.4.8 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 06:59:33 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:21 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 6880
content-type: application/javascript
date: Mon, 14 Nov 2022 04:12:21 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.actions.min.js?version=5.4.8
200 OK 2.6 kB URL HTTP/2 fanlink.co.ke/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.actions.min.js?version=5.4.8
IP
File type ASCII text, with very long lines (8089), with CRLF line terminators
Hash 3beee57c4dde3e8b875c82beb77a7327
609461801b026559ca5787a2336b3aa3ee06e63b
7dfd42c3837c9db1531177fc4c6ca8f5f72d8c93d1f723599b9a950dd56f4977
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.actions.min.js?version=5.4.8 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 06:59:33 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:21 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2572
content-type: application/javascript
date: Mon, 14 Nov 2022 04:12:21 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.layeranimation.min.js?version=5.4.8
200 OK 14 kB URL HTTP/2 fanlink.co.ke/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.layeranimation.min.js?version=5.4.8
IP
File type ASCII text, with very long lines (55556), with CRLF line terminators
Hash 652746269d9cc1861a68afc93b9f09f4
cb570e9d7d63b594a53189968cf1fb05c3a50b7b
09a82220c040a1b6a22d1454828fad1410dd497b68bd578492249e2155865c1b
GET /wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.layeranimation.min.js?version=5.4.8 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 06:59:33 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:21 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 14302
content-type: application/javascript
date: Mon, 14 Nov 2022 04:12:21 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.parallax.min.js?version=5.4.8
200 OK 3.2 kB URL HTTP/2 fanlink.co.ke/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.parallax.min.js?version=5.4.8
IP
File type ASCII text, with very long lines (10692), with CRLF line terminators
Hash af4c00990dea080d23b221bc1d850ed7
accdb8be084adf4690e03543351a35a9c4c8f6e3
2e8e11474246c0a31b1bd662c324b625d038c428fa7a4875a4aca4cff813f098
GET /wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.parallax.min.js?version=5.4.8 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 06:59:33 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:21 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3240
content-type: application/javascript
date: Mon, 14 Nov 2022 04:12:21 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.navigation.min.js?version=5.4.8
200 OK 7.0 kB URL HTTP/2 fanlink.co.ke/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.navigation.min.js?version=5.4.8
IP
File type ASCII text, with very long lines (25862), with CRLF line terminators
Hash 9122842266e2b0bc42bd817dfbce915a
a428ffe75f21bf46f450c7e52aee57b6de993caa
81384d2f04b6874b0ceda2fb9f09b945150a28e5b998ff3a4324c58d1fe225a0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.navigation.min.js?version=5.4.8 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 06:59:33 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:21 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 7041
content-type: application/javascript
date: Mon, 14 Nov 2022 04:12:21 GMT
server: Apache
X-Firefox-Spdy: h2
maps.gstatic.com/maps-api-v3/embed/js/50/12a/init_embed.js
200 OK 68 kB URL HTTP/2 maps.gstatic.com/maps-api-v3/embed/js/50/12a/init_embed.js
IP
File type ASCII text, with very long lines (2669)
Hash 33fed333a55580b5c13fb891bf0e0343
7566dff90bb8035abcced956615eadbc6ebcf4a9
70386264b35cd6ef3b68f7e6c568197388d1140bb4e8e2cdd6d44fdfb0c00a2a
GET /maps-api-v3/embed/js/50/12a/init_embed.js HTTP/1.1
Host: maps.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 68524
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 11 Nov 2022 23:24:59 GMT
expires: Sat, 11 Nov 2023 23:24:59 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 04 Nov 2022 20:13:38 GMT
content-type: text/javascript
age: 190042
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/plugins/revslider/public/assets/fonts/revicons/revicons.woff?5510888
200 OK 7.5 kB URL HTTP/2 fanlink.co.ke/wp-content/plugins/revslider/public/assets/fonts/revicons/revicons.woff?5510888
IP
File type Web Open Font Format, TrueType, length 7536, version 1.0\012- data
Hash 04eb8fc57f27498e5ae37523e3bfb2c7
d942ae11706c3f7e511e3c49b0e4574d7ad199c4
f7b9c3065e55fa3b9e320093612e7b30dcb14355a44ec461247b495a3e729686
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/revslider/public/assets/fonts/revicons/revicons.woff?5510888 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://fanlink.co.ke/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.8
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 13 Sep 2018 06:59:33 GMT
accept-ranges: bytes
content-length: 7536
cache-control: max-age=172800
expires: Wed, 16 Nov 2022 04:12:22 GMT
vary: Accept-Encoding,User-Agent
content-type: font/woff
date: Mon, 14 Nov 2022 04:12:22 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/uploads/2018/09/dct.jpg
200 OK 167 kB URL HTTP/2 fanlink.co.ke/wp-content/uploads/2018/09/dct.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3\012- data
Size 167 kB (167106 bytes)
Hash a3ec6b42181440d31c1103830e901d6e
92c23730ee7cbbbd8891c05807eca2bec9ab6ce8
74f453914fb0999aae5b6157ee2c61d925d40a5c2369d7ef424e46e0dae82069
GET /wp-content/uploads/2018/09/dct.jpg HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 19 Sep 2018 09:33:26 GMT
accept-ranges: bytes
content-length: 167106
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:22 GMT
content-type: image/jpeg
date: Mon, 14 Nov 2022 04:12:22 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/uploads/2018/09/pixta_32989733.jpg
200 OK 42 kB URL HTTP/2 fanlink.co.ke/wp-content/uploads/2018/09/pixta_32989733.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x562, components 3\012- data
Hash dc4b4d3f11b00568dc5ff8f1483f5bab
62eb9afc37df14ae9c2c70d9087429113c9e3f1e
3606bc0732dabb3024a7c0640fac171d5e4ea7d6791b28a8f83efd3c7ce79a9e
GET /wp-content/uploads/2018/09/pixta_32989733.jpg HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Sep 2018 10:34:45 GMT
accept-ranges: bytes
content-length: 41764
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:22 GMT
content-type: image/jpeg
date: Mon, 14 Nov 2022 04:12:22 GMT
server: Apache
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans+Condensed:700%2C400%7COpen+Sans:400
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans+Condensed:700%2C400%7COpen+Sans:400
IP
GET /css?family=Open+Sans+Condensed:700%2C400%7COpen+Sans:400 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 14 Nov 2022 04:12:20 GMT
date: Mon, 14 Nov 2022 04:12:20 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/uploads/2018/09/cable-management-.jpg
200 OK 0 B URL HTTP/2 fanlink.co.ke/wp-content/uploads/2018/09/cable-management-.jpg
IP
GET /wp-content/uploads/2018/09/cable-management-.jpg HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 17 Sep 2018 10:57:57 GMT
accept-ranges: bytes
content-length: 415489
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
content-type: image/jpeg
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/themes/Fanlink/css/main.min.css?ver=6.9.2
200 OK 0 B URL HTTP/2 fanlink.co.ke/wp-content/themes/Fanlink/css/main.min.css?ver=6.9.2
IP
GET /wp-content/themes/Fanlink/css/main.min.css?ver=6.9.2 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 31 Aug 2018 09:14:10 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-type: text/css
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto%3A400%2C600%2C700%7COpen+Sans%3A400%2C600%2C700%7CRoboto+Condensed%3A400%2C600%2C700&ver=4.9.22
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3A400%2C600%2C700%7COpen+Sans%3A400%2C600%2C700%7CRoboto+Condensed%3A400%2C600%2C700&ver=4.9.22
IP
GET /css?family=Roboto%3A400%2C600%2C700%7COpen+Sans%3A400%2C600%2C700%7CRoboto+Condensed%3A400%2C600%2C700&ver=4.9.22 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 14 Nov 2022 04:12:20 GMT
date: Mon, 14 Nov 2022 04:12:20 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fanlink.co.ke/wp-content/themes/Fanlink/js/main.min.js?ver=6.9.2
200 OK 0 B URL HTTP/2 fanlink.co.ke/wp-content/themes/Fanlink/js/main.min.js?ver=6.9.2
IP
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Fanlink/js/main.min.js?ver=6.9.2 HTTP/1.1
Host: fanlink.co.ke
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 31 Aug 2018 09:14:14 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 14 Dec 2022 04:12:20 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-type: application/javascript
date: Mon, 14 Nov 2022 04:12:20 GMT
server: Apache
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans+Condensed:regular,700|Roboto+Condensed
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans+Condensed:regular,700|Roboto+Condensed
IP
GET /css?family=Open+Sans+Condensed:regular,700|Roboto+Condensed HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fanlink.co.ke/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 14 Nov 2022 04:12:20 GMT
date: Mon, 14 Nov 2022 04:12:20 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
67.227.148.160
23.36.77.32
93.184.220.29
0.0.0.0