| r3.o.lencr.org/ |  95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashe6b7a72139d0ef7688330456e9be9a4c e130a94e7d531768300071764dd1e81fee5bbbcb d3818afd1493030105341b4cfb91037acbf27085c96068b3ef91c5071277c8e5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D3818AFD1493030105341B4CFB91037ACBF27085C96068B3EF91C5071277C8E5"
Last-Modified: Mon, 09 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17867
Expires: Thu, 12 Jan 2023 00:07:53 GMT
Date: Wed, 11 Jan 2023 19:10:06 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash1f67827b21be68d925837dd729590f2d dc24511141f5352e496b300d7d7e81b0cffb7475 afb1850e7c16f02d267a1310f1681367ecf598816fc62bd02447ffcd26117a9f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AFB1850E7C16F02D267A1310F1681367ECF598816FC62BD02447FFCD26117A9F"
Last-Modified: Mon, 09 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3425
Expires: Wed, 11 Jan 2023 20:07:11 GMT
Date: Wed, 11 Jan 2023 19:10:06 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashff250d3ef3fa45322bf05039a0122a9f b3e7a2c383bce1bab807dbe1a03c375258b51f1d d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 11 Jan 2023 18:41:49 GMT
content-type: application/json
age: 1697
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash718fc486cd6a70fcacc1653759703fae bf60ba7a37d2deef1b7000e91cc88da586bb75ca 398d02e16da466ffe87b64ac34b007615951cca14d43610b4acd58bc2a5fadff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "398D02E16DA466FFE87B64AC34B007615951CCA14D43610B4ACD58BC2A5FADFF"
Last-Modified: Tue, 10 Jan 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19257
Expires: Thu, 12 Jan 2023 00:31:03 GMT
Date: Wed, 11 Jan 2023 19:10:06 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hashb1fcd419a4245617397846e8d17233f6 2a037ce244587640b27ead9a0ec2af4f862d91b2 e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: x1zQuarSb4bWxR0njoWVLpNy/qEWp97Uzpw0dXC43cwzPmICQzwMvllDGKnhmffanp/q78K76MhjJNhTPb/d7Q==
x-amz-request-id: T6P4B1DVTV4T7FNK
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 11 Jan 2023 18:17:08 GMT
age: 3178
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 11 Jan 2023 19:10:06 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Pragma, Content-Length, Alert, Expires, ETag, Last-Modified, Backoff, Content-Type, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 11 Jan 2023 18:33:45 GMT
age: 2181
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashce604e6f88a42844a4ec7d404879bdcf d462a2a194a67d39d091ff49c4435fdfc39b3e5b 9e0222bcc67f019bb5c61657fc921fc42aa0cd7a75f6b1358d05231c53cc26e4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5754
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 11 Jan 2023 19:10:07 GMT
Last-Modified: Wed, 11 Jan 2023 17:34:13 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 52.24.78.9 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.24.78.9:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: C0QzZ3iQXmll29cbNqffXw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ZJDlBO1sPBljQxGKOdKk3gGfQoc=
|
|
| www.thefeathercompany.co/ | 64.31.43.178 | 301 Moved Permanently | 20 B |
URL HTTP/1.1www.thefeathercompany.co/ IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
Hash7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET / HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html; charset=UTF-8
x-redirect-by: WordPress
location: https://www.thefeathercompany.co/
vary: Accept-Encoding
content-length: 20
content-encoding: gzip
date: Wed, 11 Jan 2023 19:10:07 GMT
server: LiteSpeed
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash385fbe651dc747111b979f40f9583702 a69fa58ffc6e2b15222f17ad6345b2bec9d75106 c82b794c471d79568f5eee05529ceddbefc383ac0d035578da7bc3866062e5cc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C82B794C471D79568F5EEE05529CEDDBEFC383AC0D035578DA7BC3866062E5CC"
Last-Modified: Tue, 10 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21583
Expires: Thu, 12 Jan 2023 01:09:51 GMT
Date: Wed, 11 Jan 2023 19:10:08 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash385fbe651dc747111b979f40f9583702 a69fa58ffc6e2b15222f17ad6345b2bec9d75106 c82b794c471d79568f5eee05529ceddbefc383ac0d035578da7bc3866062e5cc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C82B794C471D79568F5EEE05529CEDDBEFC383AC0D035578DA7BC3866062E5CC"
Last-Modified: Tue, 10 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21583
Expires: Thu, 12 Jan 2023 01:09:51 GMT
Date: Wed, 11 Jan 2023 19:10:08 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash385fbe651dc747111b979f40f9583702 a69fa58ffc6e2b15222f17ad6345b2bec9d75106 c82b794c471d79568f5eee05529ceddbefc383ac0d035578da7bc3866062e5cc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C82B794C471D79568F5EEE05529CEDDBEFC383AC0D035578DA7BC3866062E5CC"
Last-Modified: Tue, 10 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21583
Expires: Thu, 12 Jan 2023 01:09:51 GMT
Date: Wed, 11 Jan 2023 19:10:08 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash385fbe651dc747111b979f40f9583702 a69fa58ffc6e2b15222f17ad6345b2bec9d75106 c82b794c471d79568f5eee05529ceddbefc383ac0d035578da7bc3866062e5cc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C82B794C471D79568F5EEE05529CEDDBEFC383AC0D035578DA7BC3866062E5CC"
Last-Modified: Tue, 10 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21583
Expires: Thu, 12 Jan 2023 01:09:51 GMT
Date: Wed, 11 Jan 2023 19:10:08 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash385fbe651dc747111b979f40f9583702 a69fa58ffc6e2b15222f17ad6345b2bec9d75106 c82b794c471d79568f5eee05529ceddbefc383ac0d035578da7bc3866062e5cc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C82B794C471D79568F5EEE05529CEDDBEFC383AC0D035578DA7BC3866062E5CC"
Last-Modified: Tue, 10 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21583
Expires: Thu, 12 Jan 2023 01:09:51 GMT
Date: Wed, 11 Jan 2023 19:10:08 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe834a7de-1ed4-4b8b-a3be-fce3151bd1b1.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe834a7de-1ed4-4b8b-a3be-fce3151bd1b1.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash68af9d9acdc08345ac38ae59f83a9a24 d3c0b7fa6ab4f421835acd595a75b5035d1ff9ee 1ae2e194f6bb20166d326002b39a4e3f44a9a97046e77ffd2a186eae384b7ce1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe834a7de-1ed4-4b8b-a3be-fce3151bd1b1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10640
x-amzn-requestid: 0b0b6732-7692-4b35-9625-154dc39386dd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ei745GEooAMFafA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bdd9d2-314dad90600e9d8c737adf05;Sampled=0
x-amzn-remapped-date: Tue, 10 Jan 2023 21:34:10 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ZR6BWnywdcRk5KkmuuMtlIgFKqD_IHiv9jSum7TsjPo5US-gkn7Z-w==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Tue, 10 Jan 2023 21:43:43 GMT
etag: "d3c0b7fa6ab4f421835acd595a75b5035d1ff9ee"
content-type: image/jpeg
age: 77185
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faabf1f2c-deb1-4d58-9ee6-5dd522512882.jpeg | 34.120.237.76 | 200 OK | 6.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faabf1f2c-deb1-4d58-9ee6-5dd522512882.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash56de8a53fb494855ff7717eeb39c1fed 438999ac8d0853e235a2c0e0f404291961c891ab 357db338b2f6fcf434bdd9c2561f91d3fc7e5d42a92e5068402ce3eeb6fba412
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faabf1f2c-deb1-4d58-9ee6-5dd522512882.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6400
x-amzn-requestid: f76c3961-a118-4639-a943-2ffbd3d28537
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eaD7hEEdoAMFs5A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ba4d16-3881379864dcae085aa4fd4d;Sampled=0
x-amzn-remapped-date: Sun, 08 Jan 2023 04:56:54 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mYQfpwVDSCnen6utBvdBBOmlxS0gGhOqIg8YZ1D0Bt2Ii9O07L9G9A==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 11 Jan 2023 07:56:16 GMT
age: 40432
etag: "438999ac8d0853e235a2c0e0f404291961c891ab"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0d03d252-a4d1-4207-aa34-25d15894724a.jpeg | 34.120.237.76 | 200 OK | 5.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0d03d252-a4d1-4207-aa34-25d15894724a.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashcfdccf6a024cbd033eea815d49112057 0d987b906b2fd7e45d09169898e7cc14e0e62f64 739c6dadc197a3cf88c8fcdb8a6f35bc7bb98355b3804e0b2c71cd6a87f08900
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0d03d252-a4d1-4207-aa34-25d15894724a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5434
x-amzn-requestid: a6d8944c-dae3-43f6-91bd-6dda6f9275b2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ei75NErNIAMFlsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bdd9d4-44e8212239c649ba56cd3256;Sampled=0
x-amzn-remapped-date: Tue, 10 Jan 2023 21:34:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2AoL4ZExGsF3_xld3G2LV73EWnyJ4Eq_Uyh2FUB-voXc25sEgnuMfA==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Tue, 10 Jan 2023 21:43:27 GMT
age: 77201
etag: "0d987b906b2fd7e45d09169898e7cc14e0e62f64"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Febe61553-0d3d-4c00-8e9b-da1405590a9b.jpeg | 34.120.237.76 | 200 OK | 7.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Febe61553-0d3d-4c00-8e9b-da1405590a9b.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasha708649e0d6b128eb599b221445a8e06 59f9b06ee8e4c9608e29e7b19832fb925789f373 b4e17cfdee53b56ac33cb5a86253e4839ed7bd9bb1604209834bb22d881472f1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Febe61553-0d3d-4c00-8e9b-da1405590a9b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7140
x-amzn-requestid: 96450c55-6068-4946-9e5f-650c19d2772a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ei739GoJIAMF0lA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bdd9cc-2bf965d47a10fd61619d945f;Sampled=0
x-amzn-remapped-date: Tue, 10 Jan 2023 21:34:04 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: pURlX7y10G8YZmmDErWlZPJoW6evZ716B3NVZXafQRDpZ3Ei1ixeWA==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Tue, 10 Jan 2023 21:43:26 GMT
age: 77202
etag: "59f9b06ee8e4c9608e29e7b19832fb925789f373"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd91e555-c9f3-4166-92be-27db2e1919b6.jpeg | 34.120.237.76 | 200 OK | 14 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd91e555-c9f3-4166-92be-27db2e1919b6.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashafcc8f4875f4b74ca0640829b689731e 584d0e11665ae89f9a294baf1e9bb4f0e4e9a4df 3e487396389c4330abc99bc99053eecc6aaf56f7afa398d70c30e1f4709577a0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd91e555-c9f3-4166-92be-27db2e1919b6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13626
x-amzn-requestid: 4769eaeb-0c78-4054-ad47-eefdd6ab2d03
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eWHMZErbIAMF6sQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b8b8b5-4c7bacfe060899044e361f70;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 00:11:33 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 02vFLorTeOMyO8_Z-KNstD-o26WHWAqbIpg7eQsZSwxG3Q_FXXmapg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 11 Jan 2023 10:50:26 GMT
age: 29982
etag: "584d0e11665ae89f9a294baf1e9bb4f0e4e9a4df"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad96383c-d707-4b10-ad6c-110acc0ed5e3.jpeg | 34.120.237.76 | 200 OK | 8.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad96383c-d707-4b10-ad6c-110acc0ed5e3.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash35ee3a36f2d56adfa27324f734f8f7fc 6ec36e85e464004c5e6255739e962e6dcc4c24c6 6cedd3770eb8879c837799d36ebca9d631789d972d3631d730829fc5d64abb25
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad96383c-d707-4b10-ad6c-110acc0ed5e3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8024
x-amzn-requestid: b331ee66-c166-4fa6-b950-287134d07fa2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eWhZ6EM0oAMFQFg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b8e2a5-39ff669b44e3dd9339daa56b;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 03:10:29 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7zCIruOrf5jJueIqE6Z96QIjSPsQLEzcePndU89BTMpN9Uw6Arhc3w==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Wed, 11 Jan 2023 07:47:33 GMT
age: 40955
etag: "6ec36e85e464004c5e6255739e962e6dcc4c24c6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.5.6 | 64.31.43.178 | 200 OK | 16 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.5.6 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (65497) Hash48d276b35947e294ad4d22ba7905d92a 101f6bc97f9654608f667a9392b8c3ef94c2b6b7 0ce796b738c2d821a948d2483af9ce26369055666dc1cddfc456b88bbc60201f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.5.6 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Tue, 01 Mar 2022 07:50:51 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 16226
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.5.6 | 64.31.43.178 | 200 OK | 741 B |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.5.6 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (13766) Hash1cc078fa76d8018bf327f9b6947d5481 442161b68ecc870a5b2af73e532a870a66b62039 331a9e07a04ad5b8de1ceab969a7397204e75bd5ed0048399b3e89f9c8515d1a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.5.6 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Tue, 01 Mar 2022 07:50:51 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 741
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 | 64.31.43.178 | 200 OK | 12 kB |
URL HTTP/2www.thefeathercompany.co/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (47826) Hashc4d7cc056b49b00e05cc29cc59aa3d5a 48c426bec60099d2a8628df430ed682c72aab42a 8009c12f2674a8d38401f4b5faad1fef2cfcd18a8c927ed2561ae9d7de9b57b5
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Tue, 15 Nov 2022 21:13:46 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 11616
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/bdthemes-element-pack/assets/css/bdt-uikit.css?ver=3.7.2 | 64.31.43.178 | 200 OK | 14 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/bdthemes-element-pack/assets/css/bdt-uikit.css?ver=3.7.2 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeUnicode text, UTF-8 text, with very long lines (65534), with no line terminators Hash865714d917eb1b5b86240ec0cec9956f bb95287e4fe90c8a28b95c4365a26402fa201c95 8772fa12971d8adde1c1b54292f18f688ac04a39d7858c4249b22b4598d7320e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/bdthemes-element-pack/assets/css/bdt-uikit.css?ver=3.7.2 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Tue, 01 Mar 2022 07:52:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 14468
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash0a8373bb4c517a184db7e8ae6ac202d2 ab6c13439aa7f9a46a2407444d3f80e8895b6f46 8ffd5ad2cebcb95eb36745886fbd643ab4b4f917a7544b548786837a8cb8e6d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 11 Jan 2023 19:10:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash36d866ff9883c4de599d7500e5d075c7 4c7f6817ef09645830f7ac8c74a303ae847dd25c fc081651de3dd143b05c0fa145ea357197a8f2dda3507959e3f8288d3c42731a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 11 Jan 2023 19:10:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.thefeathercompany.co/wp-content/plugins/quick-download-button/css/minified/style.min.css?ver=1664543801 | 64.31.43.178 | 200 OK | 16 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/quick-download-button/css/minified/style.min.css?ver=1664543801 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (38129), with no line terminators Hashaa849716595de2a41e4da227e72f9982 3f458ec5ee4a03bbebb120b5cbc92e0c488464f0 87243505c12c28ba89cc89533222e8c9e877dba1532ad35c052f1f93ee787d54
GET /wp-content/plugins/quick-download-button/css/minified/style.min.css?ver=1664543801 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Fri, 30 Sep 2022 13:16:41 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 15752
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/bdthemes-element-pack/assets/css/element-pack-site.css?ver=5.15.1 | 64.31.43.178 | 200 OK | 4.8 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/bdthemes-element-pack/assets/css/element-pack-site.css?ver=5.15.1 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (31489), with no line terminators Hash3e47d745bcc1767edd6b86acc3a249a5 191acb85a7c9ee2245d47c759f6065f6f6d74329 490d3284cdeb6f7f409f7f331e8c5e42df9ace066a572c7db385785a86edb6d4
GET /wp-content/plugins/bdthemes-element-pack/assets/css/element-pack-site.css?ver=5.15.1 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Tue, 01 Mar 2022 07:52:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4756
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/uploads/elementor/css/post-2016.css?ver=1671619975 | 64.31.43.178 | 200 OK | 1.1 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/uploads/elementor/css/post-2016.css?ver=1671619975 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (8122), with no line terminators Hash7c724d42679e35233cfcc937fab8efe0 9860810797b6fd27260eeddc3ecd954f5f28609e 77004efdce29abcf3ca599cdf398400cedeed1a1b857d9b310b8246956221582
GET /wp-content/uploads/elementor/css/post-2016.css?ver=1671619975 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Wed, 21 Dec 2022 10:52:55 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1068
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/uploads/elementor/css/post-2005.css?ver=1671619975 | 64.31.43.178 | 200 OK | 1.7 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/uploads/elementor/css/post-2005.css?ver=1671619975 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (28543), with no line terminators Hash8dc3d525b8c02e1ed6ea114dcdb4bc75 8e2d11ca35a9ea0793f818784b3d959ea08345ab 5aa3db9d71e61908c379c7dc22deec3de175bae8599b6c7a268cddde8f2e3ae8
GET /wp-content/uploads/elementor/css/post-2005.css?ver=1671619975 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Wed, 21 Dec 2022 10:52:55 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1720
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.0.0 | 64.31.43.178 | 200 OK | 1.1 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.0.0 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (4933), with no line terminators Hash8f2da34c6f082c7bec00f9cca661fd59 d0de5b6b29a9788a64826b833465a9d08f7c2ab7 d461fea6636b26aab698f636b2518709cb79416c7d3916d6b03497c4d75befdd
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.0.0 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Thu, 08 Sep 2022 10:19:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1109
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.0.0 | 64.31.43.178 | 200 OK | 21 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.0.0 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeUnicode text, UTF-8 text, with very long lines (65527), with no line terminators Hash844842439ba060ee255a40ec00e69ff5 a37c3b78aeea3c7d58a6e59bfa99ff3d81ec5b8c 169af0ea951379b0d2a47976e8e76c6684fb2c92146e23c31e57079b9cacdba2
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.0.0 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Thu, 08 Sep 2022 10:19:39 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 20786
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-includes/css/classic-themes.min.css?ver=1 | 64.31.43.178 | 200 OK | 144 B |
URL HTTP/2www.thefeathercompany.co/wp-includes/css/classic-themes.min.css?ver=1 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
Hashfcbd239f30d9a6dd1f3637f291143d37 2871bf7d98af3f43e42f7fa32808048e7134fabf c2f98e9d71f782b7a3266cd337c61ae6c8dcbb7203669c07852aa2ab65ab6144
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 10:07:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 144
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/chaty/css/chaty-front.min.css?ver=1663338359 | 64.31.43.178 | 200 OK | 4.5 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/chaty/css/chaty-front.min.css?ver=1663338359 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (20627), with no line terminators Hash93c0520598cc431839e8dfc295f3e80e 5b3c31dc00f563b3ae9f6d67d903c0254a09dd8b c942e9302c4354523b522a69181fead2ebe865e99b2eedaea13b834e0849ee0d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/chaty/css/chaty-front.min.css?ver=1663338359 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Mon, 12 Sep 2022 07:04:29 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4456
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/themes/phlox-pro/css/auxin-icon.css?ver=5.7.3 | 64.31.43.178 | 200 OK | 7.9 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/themes/phlox-pro/css/auxin-icon.css?ver=5.7.3 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (448) Hashe4d4e923b24b542c52a7b8a203bdb80e eada7819374de7ad5ec725c9721bae2f5b98ad2d 2824346b9a216ab20e0e44388ed8c3912e5fea47ddd033b34d4c03d1d85ad483
GET /wp-content/themes/phlox-pro/css/auxin-icon.css?ver=5.7.3 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Tue, 01 Mar 2022 07:49:23 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7926
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/css/ekiticons.css?ver=2.7.0 | 64.31.43.178 | 200 OK | 11 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/css/ekiticons.css?ver=2.7.0 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (65536), with no line terminators Hashb63b193295827d2c3f687011a2bec6c4 6e54061f8edfb0a0e15b9ad00f08d6f731a23b1e a9f0039aa767f89648c3c4e498ffc66ffdab2df9da4a03972eeda3a7e86adaf9
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/css/ekiticons.css?ver=2.7.0 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Thu, 22 Sep 2022 11:07:39 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 11388
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/themes/phlox-pro/css/shop.css?ver=1.8.6 | 64.31.43.178 | 200 OK | 13 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/themes/phlox-pro/css/shop.css?ver=1.8.6 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (671) Hash174079bfbad4023eaf336e54937f0940 8ea3fa9fd2e151066ac52217d1af7f675648ab94 98cc0190d1d1e079b4e76efe69e0be9ce2dd7ea86a32b4cf4be8e833eeb92daf
GET /wp-content/themes/phlox-pro/css/shop.css?ver=1.8.6 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Tue, 01 Mar 2022 07:49:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 13027
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/uploads/elementor/css/post-1834.css?ver=1671619975 | 64.31.43.178 | 200 OK | 285 B |
URL HTTP/2www.thefeathercompany.co/wp-content/uploads/elementor/css/post-1834.css?ver=1671619975 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (962), with no line terminators Hashf09ebe3cd05f26c457aa18ebe8122d2a fe0a76c60f13d6d0839bb208f3dbecb7f617e739 adf896203c0c64c794653fd5dca8b1e1fbc8f654211aa49c23d135f98565e96e
GET /wp-content/uploads/elementor/css/post-1834.css?ver=1671619975 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Wed, 21 Dec 2022 10:52:55 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 285
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.156 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.156:0
Hash5c90185f5b81f577fe89b1736bb277de d00385010217d37e926ca41e457936c6b1fba910 8a3e3957544e57d8ff2db7b899546b3eda53a5d01db14bc7e47d2f077b46f7a6
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=140029
Date: Wed, 11 Jan 2023 19:10:11 GMT
Etag: "63be7958-1d7"
Expires: Fri, 13 Jan 2023 10:04:00 GMT
Last-Modified: Wed, 11 Jan 2023 08:54:48 GMT
Server: ECS (nyb/1D2C)
X-Cache: Miss from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: xYZ3AKmJzOBzlg6fx9D6tVoNWhqI58D3kGAYlP63QbdiJYiaJp0sCw==
Age: 4152
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.156 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.156:0
Hash5c90185f5b81f577fe89b1736bb277de d00385010217d37e926ca41e457936c6b1fba910 8a3e3957544e57d8ff2db7b899546b3eda53a5d01db14bc7e47d2f077b46f7a6
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=139601
Date: Wed, 11 Jan 2023 19:10:11 GMT
Etag: "63be7958-1d7"
Expires: Fri, 13 Jan 2023 09:56:52 GMT
Last-Modified: Wed, 11 Jan 2023 08:54:48 GMT
Server: ECS (bsa/EB1E)
X-Cache: Miss from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: igwkxxYvNKVPCYjOSqAom5VzDTvzwntpDYXplApyW88pl_NZzHCmGQ==
Age: 3724
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.156 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.156:0
Hash5c90185f5b81f577fe89b1736bb277de d00385010217d37e926ca41e457936c6b1fba910 8a3e3957544e57d8ff2db7b899546b3eda53a5d01db14bc7e47d2f077b46f7a6
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=140853
Date: Wed, 11 Jan 2023 19:10:11 GMT
Etag: "63be7958-1d7"
Expires: Fri, 13 Jan 2023 10:17:44 GMT
Last-Modified: Wed, 11 Jan 2023 08:54:48 GMT
Server: ECS (nyb/1D0A)
X-Cache: Miss from cloudfront
Via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: QqvsNZ6K6P_BU1gNUzHArHQ8tS-BvieVBupfotqdtaL9PV2Azd0PDg==
Age: 4976
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.156 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.156:0
Hash5c90185f5b81f577fe89b1736bb277de d00385010217d37e926ca41e457936c6b1fba910 8a3e3957544e57d8ff2db7b899546b3eda53a5d01db14bc7e47d2f077b46f7a6
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 11 Jan 2023 19:10:11 GMT
Last-Modified: Wed, 11 Jan 2023 17:58:43 GMT
Server: ECS (bsa/EB1F)
X-Cache: Miss from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: MUH2yMZDTZIM-WkEodIEYVTi6rMkLBqtUwQr5Yr7gpM3jkr3MUhcIg==
Age: 4288
|
|
| www.thefeathercompany.co/wp-content/plugins/ajax-search-for-woocommerce/assets/css/style.min.css?ver=1.20.0 | 64.31.43.178 | 200 OK | 5.6 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/ajax-search-for-woocommerce/assets/css/style.min.css?ver=1.20.0 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (33185) Hash28055b88381582d485c7df5345b4efd1 2eb5318a1ce767ef8e477ffe384ecf840e133734 b8e0b1d99ec6af9b3a7cba4e99c4687651bbc343188fb6aa39fdd881d262fff2
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/ajax-search-for-woocommerce/assets/css/style.min.css?ver=1.20.0 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Wed, 05 Oct 2022 13:34:41 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5582
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.14.0 | 64.31.43.178 | 200 OK | 3.6 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.14.0 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (19004) Hash50b87cec4577ab86bcd2be17c0721a4e 99adaa3153c9c60adbd506389dddb7df71e6e307 32bfae98d3ef6c2bf6c5822ae4ff8eb91b1d804e5f65e32f54e5fe114821c2b3
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.14.0 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Tue, 01 Mar 2022 07:50:52 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3589
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.1.1 | 64.31.43.178 | 200 OK | 982 B |
URL HTTP/2www.thefeathercompany.co/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.1.1 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (4186), with no line terminators Hash24f4d7f425e792ab35adaab50816e54a 9e25bf79b674ddb7ba09ad7f118c50ec473c02c8 1c78bfb4d523785a4ebd37bb1f79f214f9bdb16673f7cc50805f7f1a26ad7f83
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.1.1 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Sat, 08 Jun 2019 02:15:02 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 982
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/auxin-elements/admin/assets/css/elementor-widgets.css?ver=6.1.1 | 64.31.43.178 | 200 OK | 109 B |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/auxin-elements/admin/assets/css/elementor-widgets.css?ver=6.1.1 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
Hashbcac653a4c98073fc9711917f8157709 a16d6ce7ccff8341a5d9a09104d8dba7de2da3ea 4e4b781cd42516c03313048515e766fa293f65afaba289ea95662aaa8d1b0c46
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/auxin-elements/admin/assets/css/elementor-widgets.css?ver=6.1.1 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Tue, 01 Mar 2022 07:50:27 GMT
accept-ranges: bytes
content-length: 109
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/uploads/elementor/css/post-76.css?ver=1671619976 | 64.31.43.178 | 200 OK | 2.9 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/uploads/elementor/css/post-76.css?ver=1671619976 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (49520), with no line terminators Hashac1e818e6623c04075658e633c13a785 d9d8c590da81e289590c4cc723478337c194ce8f 374104ced91220fcceba2882a05bb67a950fa441a9b9e757462f192e4dd1133c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/uploads/elementor/css/post-76.css?ver=1671619976 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Wed, 21 Dec 2022 10:52:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2862
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17 | 64.31.43.178 | 200 OK | 2.4 kB |
URL HTTP/2www.thefeathercompany.co/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (11256), with no line terminators Hashce94f62588d05264ac0148712111cb11 518bcd922f54169aeb199c0ccbc5877165ac218e 84ab658a69c39f424be0b27f61d612447d01606fce33beb962cbea53627d8c81
GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Tue, 29 Sep 2020 21:23:06 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2394
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/elementskit-lite/widgets/init/assets/css/responsive.css?ver=2.7.0 | 64.31.43.178 | 200 OK | 2.9 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/elementskit-lite/widgets/init/assets/css/responsive.css?ver=2.7.0 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (30283), with no line terminators Hash1119301a85ab323270d853e94a9b2f2f 3bd61b9dd43e2e0166c4036273b4b02d50d3fec7 8cbeb42d6bac404c391197cf1f219086c8501143db7e4cfde22919d6124b3fc3
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementskit-lite/widgets/init/assets/css/responsive.css?ver=2.7.0 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Thu, 22 Sep 2022 11:07:43 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2851
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/uploads/phlox-pro/custom.css?ver=1.5 | 64.31.43.178 | 200 OK | 2.2 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/uploads/phlox-pro/custom.css?ver=1.5 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
Hashb6741be8acbad3ff9a4f120588efcfeb e270ad9e568f69be12b74351cf28ca2b5a6eac61 d6b4a4378444a645feed794cc92c0f175f5434be273e605efa47e312ad3bc917
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/uploads/phlox-pro/custom.css?ver=1.5 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Mon, 19 Dec 2022 08:09:51 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2229
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash0a8373bb4c517a184db7e8ae6ac202d2 ab6c13439aa7f9a46a2407444d3f80e8895b6f46 8ffd5ad2cebcb95eb36745886fbd643ab4b4f917a7544b548786837a8cb8e6d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 11 Jan 2023 19:10:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.156 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.156:0
Hash5c90185f5b81f577fe89b1736bb277de d00385010217d37e926ca41e457936c6b1fba910 8a3e3957544e57d8ff2db7b899546b3eda53a5d01db14bc7e47d2f077b46f7a6
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=139585
Date: Wed, 11 Jan 2023 19:10:11 GMT
Etag: "63be7958-1d7"
Expires: Fri, 13 Jan 2023 09:56:36 GMT
Last-Modified: Wed, 11 Jan 2023 08:54:48 GMT
Server: ECS (nyb/1D0F)
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: y67oiGlTVD5nG6B-OzH1slRhTqVnrQb9mGeulLm7kybrFJRB4eFYYQ==
Age: 3709
|
|
| www.thefeathercompany.co/ | 64.31.43.178 | 200 OK | 40 kB |
URL HTTP/2www.thefeathercompany.co/ IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
Hash49ccf99a07e9015d1f3f83c5f45016b7 e909a6c8a1fc744f4efa7c72fcd86559ded29f79 eefc8a82990fe238c26b4a5216bf41d710f783727d76b44d5b51c9d12c53aa63
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET / HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
link: <https://www.thefeathercompany.co/wp-json/>; rel="https://api.w.org/", <https://www.thefeathercompany.co/wp-json/wp/v2/pages/76>; rel="alternate"; type="application/json", <https://www.thefeathercompany.co/>; rel=shortlink
vary: Accept-Encoding
content-encoding: gzip
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/themes/phlox-pro/css/other/elementor.css?ver=5.7.3 | 64.31.43.178 | 200 OK | 196 B |
URL HTTP/2www.thefeathercompany.co/wp-content/themes/phlox-pro/css/other/elementor.css?ver=5.7.3 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
Hash206eb8858ec85f7affc110d6e57973b7 06ed15976b88f3fbca53b998a339f895e1a9ad30 417619673bb0519b2eda92c4b0d4a8cd1db42d1171953ca77ab6bd1cc8ef64a7
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/phlox-pro/css/other/elementor.css?ver=5.7.3 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Tue, 01 Mar 2022 07:49:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 196
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 | 64.31.43.178 | 200 OK | 12 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (57726) Hashf463afd8661ddc733305df1f0cbdaff2 77262f0209e75e340eb7014aba9cd8d69966032f c4b6541be58a0ca61549cd4562850315077880c459c019f01e835cf2d7b764de
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Tue, 01 Mar 2022 07:50:52 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 12133
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | 64.31.43.178 | 200 OK | 4.0 kB |
URL HTTP/2www.thefeathercompany.co/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (11126) Hash7e058b51f939eacfa31cdface14dded5 9d732e5afdeb42edef9e1b9631b7e95e054787cc 4ece5b00423755d8f4121ce382c8ea4dc44c241f28f150abe19caa85d0b0acc1
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: application/javascript
last-modified: Wed, 18 Nov 2020 14:36:06 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3995
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/smartslider.min.css?ver=f0b633e7 | 64.31.43.178 | 200 OK | 3.8 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/smartslider.min.css?ver=f0b633e7 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (22127), with no line terminators Hashee1134bcbb23f0cfaf992183c1087a6f f2d2be83e5a1012f232eae5d2b4ed71071613fd2 cd2720a78f53e52ebf656e1b69a9a8f7960462072834b5b016538add8c1479f9
GET /wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/smartslider.min.css?ver=f0b633e7 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Thu, 06 Oct 2022 06:42:54 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3809
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 | 64.31.43.178 | 200 OK | 284 B |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (489) Hashdc279c928e2924b07a4a7575f8070ee8 0196756cacdb61ef40483af7ea982b699b0933de 80b6d9e3f0304f4199350c6015fd96084646c2a0121332bcb5a46d3956b7df5c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Tue, 01 Mar 2022 07:50:52 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 284
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/themes/phlox-pro/js/solo/modernizr-custom.min.js?ver=5.7.3 | 64.31.43.178 | 200 OK | 5.9 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/themes/phlox-pro/js/solo/modernizr-custom.min.js?ver=5.7.3 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeHTML document, ASCII text, with very long lines (19371), with no line terminators Hash70160b03f251db1cc0b458b05abab226 5160e3f22f7f830b392a9af4493cc46f9b78daf0 f11209153b02a818f4f71efc1ab693f080b0e228c08697559967c5b92fdaff9b
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/phlox-pro/js/solo/modernizr-custom.min.js?ver=5.7.3 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: application/javascript
last-modified: Tue, 01 Mar 2022 07:49:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5921
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/auxin-pro-tools/admin/assets/js/elementor/widgets.js?ver=1.7.4 | 64.31.43.178 | 200 OK | 394 B |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/auxin-pro-tools/admin/assets/js/elementor/widgets.js?ver=1.7.4 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
Hash89d43a8fc541017d7c6512ef7eb7e908 2be1e5eb68bdb252baa31ddbfe8eb5b6b7bfb337 a5982b4dba22088da949260281ec5d257cba09d76797e4bfd17edad1dc2748ea
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/auxin-pro-tools/admin/assets/js/elementor/widgets.js?ver=1.7.4 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: application/javascript
last-modified: Tue, 01 Mar 2022 07:51:15 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 394
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/n2.min.js?ver=f0b633e7 | 64.31.43.178 | 200 OK | 12 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/n2.min.js?ver=f0b633e7 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (41234), with no line terminators Hash7d2dff41a2cd3cb76fffd0832c630c7b 1bec11d39166b0b10e890590e605b1fefd244c21 3a405acba03ee25277fb3a017bf25cb926be7bc003e9bcc6c018b3c0217a1366
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/n2.min.js?ver=f0b633e7 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: application/javascript
last-modified: Thu, 06 Oct 2022 06:42:54 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 11979
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/themes/phlox-pro/css/base.css?ver=5.7.3 | 64.31.43.178 | 200 OK | 18 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/themes/phlox-pro/css/base.css?ver=5.7.3 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeUnicode text, UTF-8 text, with very long lines (448) Hash18848776b6e8185db160ae878d61cd01 75fc51bee5fd9940e1f4eb05701c4c3570cfcddf b51bb06eb57a8c55559322b82fb8865eb6fcab398ec84d4e7bc0ef8b386e8b5a
GET /wp-content/themes/phlox-pro/css/base.css?ver=5.7.3 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Tue, 01 Mar 2022 07:49:23 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 17632
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/elementskit-lite/widgets/init/assets/css/widget-styles.css?ver=2.7.0 | 64.31.43.178 | 200 OK | 47 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/elementskit-lite/widgets/init/assets/css/widget-styles.css?ver=2.7.0 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeUnicode text, UTF-8 text, with very long lines (65530), with no line terminators Hash4242f1a2c3779ae86c7c697817cbe2bf 1d300bfa1cab7c4fd33a6ea1a94d864c3675df48 eee6bcf54e4c0c2ad8e0f97b541a344f25ebcb5c6f62062841978af8644857f3
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementskit-lite/widgets/init/assets/css/widget-styles.css?ver=2.7.0 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Thu, 22 Sep 2022 11:07:43 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 47274
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 | 64.31.43.178 | 200 OK | 30 kB |
URL HTTP/2www.thefeathercompany.co/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (65447) Hash3a1740685bd5c0bbd5f2b812e1eb7fb4 488e07695da787fed18361c50292aef35abb5e81 4a07aed2d8cf88afdec0b56b365b951c76d387db3459166b5a0d25e2e6cc95ef
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:07:37 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 30324
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/smartslider-frontend.min.js?ver=f0b633e7 | 64.31.43.178 | 200 OK | 26 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/smartslider-frontend.min.js?ver=f0b633e7 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (65536), with no line terminators Hash0f97091306c26e82e9deeeaa2fe8e57e 80a798ebf340a763b4770d607284dc4919d95fa6 095a25237dc1ac3a924f7692806b5a17b366dd4f2b975404b25c982176d63fd6
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/smartslider-frontend.min.js?ver=f0b633e7 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: application/javascript
last-modified: Thu, 06 Oct 2022 06:42:54 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 25554
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| thefeather.s3.eu-west-1.amazonaws.com/2022/12/cropped-Group-177.png |  52.218.21.211 | 200 OK | 58 kB |
URL HTTP/1.1thefeather.s3.eu-west-1.amazonaws.com/2022/12/cropped-Group-177.png IP52.218.21.211:0
File typePNG image data, 1079 x 670, 8-bit/color RGBA, non-interlaced\012- data Hash881ca5607ca099ecd3ae6ae49fae1518 8b8ec715aeaf3b1e3b50dccec04057df7aa7b867 610ae15e0de6a06be52fcaad84e883173bdfdaf6f0e6fb866bccb6d699f75447
GET /2022/12/cropped-Group-177.png HTTP/1.1
Host: thefeather.s3.eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: NGV4ZKir4lquR/rK9MANOJ8HGOTQszaKB86s9P3egpjWy5QdcCHEMurNCF4nkxpUXGTvV4YZ45c=
x-amz-request-id: 8FPD762NY00MM14Y
Date: Wed, 11 Jan 2023 19:10:12 GMT
Last-Modified: Fri, 16 Dec 2022 12:06:35 GMT
ETag: "881ca5607ca099ecd3ae6ae49fae1518"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 58536
|
|
| www.thefeathercompany.co/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Arrow/ArrowImage/Assets/dist/w-arrow-image.min.js?ver=f0b633e7 | 64.31.43.178 | 200 OK | 500 B |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Arrow/ArrowImage/Assets/dist/w-arrow-image.min.js?ver=f0b633e7 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (1246), with no line terminators Hash777bdd17ed4e872b93b6329fcb4411af 35542c69d3dd3722fd26441dbba29c237d79b5a1 9953b2cdbeaf134383094bd33fe10d49f9e8104606250a09f06cbf0e80deb08b
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Arrow/ArrowImage/Assets/dist/w-arrow-image.min.js?ver=f0b633e7 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: application/javascript
last-modified: Thu, 06 Oct 2022 06:42:55 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 500
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Slider/SliderType/Simple/Assets/dist/ss-simple.min.js?ver=f0b633e7 | 64.31.43.178 | 200 OK | 2.9 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Slider/SliderType/Simple/Assets/dist/ss-simple.min.js?ver=f0b633e7 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (13218), with no line terminators Hash02a6797f8c705021db9993f19f04fd15 0606aa275d8c47a7e74aebe89fa35b62f12eabab 48c5e8b371f4c0e2e8d4277d410071c583b3c6a31a1fd38867d48ba72423b55a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/smart-slider-3/Public/SmartSlider3/Slider/SliderType/Simple/Assets/dist/ss-simple.min.js?ver=f0b633e7 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: application/javascript
last-modified: Thu, 06 Oct 2022 06:42:55 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2896
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Thumbnail/Basic/Assets/dist/w-thumbnail-horizontal.min.js?ver=f0b633e7 | 64.31.43.178 | 200 OK | 1.3 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Thumbnail/Basic/Assets/dist/w-thumbnail-horizontal.min.js?ver=f0b633e7 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (3854), with no line terminators Hash378ad0478e923e688d3366cfab1dcc60 762cd73c508ce8accf46479d14d775537c34ea0f 53cb7afc38fc69cd3353fc26d9e7f7a976f41995b30d52ae09cd22606ae723f6
GET /wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Thumbnail/Basic/Assets/dist/w-thumbnail-horizontal.min.js?ver=f0b633e7 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: application/javascript
last-modified: Thu, 06 Oct 2022 06:42:55 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1292
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/uploads/elementor/css/post-2380.css?ver=1671619976 | 64.31.43.178 | 200 OK | 656 B |
URL HTTP/2www.thefeathercompany.co/wp-content/uploads/elementor/css/post-2380.css?ver=1671619976 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (6424), with no line terminators Hash33d72d7f0118e2e85a4729be51805b06 4de412bc6aab8f76b58d64a9bbe32305af42d197 f8ae0e12b8cd975847a7314d2becda993f6f5ecdf85adf3ec762e875f469fa11
GET /wp-content/uploads/elementor/css/post-2380.css?ver=1671619976 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Wed, 21 Dec 2022 10:52:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 656
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-includes/js/imagesloaded.min.js?ver=4.1.4 | 64.31.43.178 | 200 OK | 1.7 kB |
URL HTTP/2www.thefeathercompany.co/wp-includes/js/imagesloaded.min.js?ver=4.1.4 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (5477) Hashfa921f07ecc438baf227765de450e215 1fdd49d8bb681cb118ea8d67d4fc61b0ad46cc95 b2cc68637048b04952a2f33163f64571145dbe0817a14c68fe6f1661bd81091f
GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Sun, 14 Jun 2020 00:23:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1733
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.1.1 | 64.31.43.178 | 200 OK | 479 B |
URL HTTP/2www.thefeathercompany.co/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.1.1 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (1191), with no line terminators Hash62b3593ce258f7488f936d31b1ab1b6e 34c14a9bf90463e4456add8d8d039453b8bb8b8e be4b9efdf77f14940f6b8aa22e7287411cf0377f99009d49276b5cfa47c4f3ad
GET /wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.1.1 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Sat, 09 Apr 2022 01:37:18 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 479
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.1.1 | 64.31.43.178 | 200 OK | 392 B |
URL HTTP/2www.thefeathercompany.co/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.1.1 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeHTML document, ASCII text, with very long lines (906), with no line terminators Hash200d0ec78a54a35bb97450e75bddfe52 25a0c90e7c2a7f49b4d5abf3165eb2d03849c2cb 9555fae27002a4036ca476b62143a67552e3870a1ff46c5869611b5edbe1deac
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.1.1 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Wed, 20 Jan 2021 19:05:18 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 392
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/auxin-elements/public/assets/js/scripts.js?ver=2.9.4 | 64.31.43.178 | 200 OK | 1.6 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/auxin-elements/public/assets/js/scripts.js?ver=2.9.4 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
Hash5b0026c0140893b13329140e02819410 3c619e2d5d30b47672b5525fb781007df6f3b160 cbca8bd4ca16cea9a4a8bf6662a198a3cba51606066f31c4b2bf4fff84a252fa
GET /wp-content/plugins/auxin-elements/public/assets/js/scripts.js?ver=2.9.4 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Tue, 01 Mar 2022 07:50:29 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1649
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/auxin-elements/public/assets/js/plugins.min.js?ver=2.9.4 | 64.31.43.178 | 200 OK | 8.9 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/auxin-elements/public/assets/js/plugins.min.js?ver=2.9.4 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (31771), with no line terminators Hash7dd5aeefffe2808fe969878c27bc8d9f 63ba1ec3a194749fd1b06ff3783dcf10f5bfb929 d93ef39fd9243b200efe4aca9aa7626500119f64f85c51dc4f81bd33131769d3
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/auxin-elements/public/assets/js/plugins.min.js?ver=2.9.4 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Tue, 01 Mar 2022 07:50:29 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 8942
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.5.6 | 64.31.43.178 | 200 OK | 2.4 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.5.6 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (10019) Hashd2db71c82a8f672aea59a3e050cd8cd7 af626566f94b3164e4310288cfb142431e8349a6 bcd2c9c2ba22a48a8fabf9fbe5e947deb6404367e4be24f48326e302aead1180
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.5.6 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: text/css
last-modified: Tue, 01 Mar 2022 07:50:52 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2442
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/auxin-elements/admin/assets/js/elementor/widgets.js?ver=2.9.4 | 64.31.43.178 | 200 OK | 651 B |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/auxin-elements/admin/assets/js/elementor/widgets.js?ver=2.9.4 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
Hash2b4e0216dd9080273760f3325287174e e8f19ca50edb9cb86694ba00b00efce77f7a0744 68c403edd8641060db7c955492cbd1237e1f4575940bf0e88c985b0ff56cb65b
GET /wp-content/plugins/auxin-elements/admin/assets/js/elementor/widgets.js?ver=2.9.4 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Tue, 01 Mar 2022 07:50:27 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 651
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-includes/js/masonry.min.js?ver=4.2.2 | 64.31.43.178 | 200 OK | 7.1 kB |
URL HTTP/2www.thefeathercompany.co/wp-includes/js/masonry.min.js?ver=4.2.2 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (23966) Hashacbcd70975a7cfaf92dc02b2ede1fd24 7a50461999972abb541d4baf1ccf23d8e435aad6 c1250ec4943afb181633078eb9d67c5944fc64b2bb219c98406c286e9449189e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/masonry.min.js?ver=4.2.2 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Sun, 14 Jun 2020 00:23:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7117
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17 | 64.31.43.178 | 200 OK | 36 kB |
URL HTTP/2www.thefeathercompany.co/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (65266) Hasheabd3755fb73f0e4ef1ac6e474373dd8 cd92121ebac48f10a27821172202bb1d06267663 37f62084aa872e3b695e87f549c236fda5828bc68036875a771768cd90bf2436
GET /wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:07:27 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 36433
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/themes/phlox-pro/js/scripts.min.js?ver=5.7.3 | 64.31.43.178 | 200 OK | 14 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/themes/phlox-pro/js/scripts.min.js?ver=5.7.3 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (55807) Hash93ad1c8f38c0dd0f777ef241d44654ac e9d637921dd9570f884170b92ac0765e6540ff21 e654c4d8beb498ead6b07a2078526bf52940dc27bc0cf6f7496a48b24f7ab2d8
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/phlox-pro/js/scripts.min.js?ver=5.7.3 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Tue, 01 Mar 2022 07:49:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 13477
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/elementor/assets/lib/jquery-numerator/jquery-numerator.min.js?ver=0.2.1 | 64.31.43.178 | 200 OK | 677 B |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/elementor/assets/lib/jquery-numerator/jquery-numerator.min.js?ver=0.2.1 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (1801), with no line terminators Hashdb051acb4889a24419e22987f52524e0 9203ad9b9d24b786801743b1e007e52980d5bed1 09a2aeba1874512f5c34d52f523ac86bebb479dbc02f0875e7e1ba1d63783908
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/lib/jquery-numerator/jquery-numerator.min.js?ver=0.2.1 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Tue, 01 Mar 2022 07:50:52 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 677
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.8.2 | 64.31.43.178 | 200 OK | 899 B |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.8.2 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (1668) Hash22d65ba38528349e705d912ce26bf8ac c89ba006009043d93b88ff155b4fec8797330550 6253bcb85e4267ad3ba843145534e729ee2c1d7e85e5b4ab5b2e074ae636bca3
GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.8.2 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Thu, 08 Sep 2022 10:19:50 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 899
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 | 64.31.43.178 | 200 OK | 6.8 kB |
URL HTTP/2www.thefeathercompany.co/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeUnicode text, UTF-8 text, with very long lines (8189) Hash3d0ff0f6731d9cef860af9a5a0e3ce62 13aed444304d782039e261475c8b4450b83e743e e8d05db77732c71843ced6f386ea82eb32243ac36e7ca3e071cb7f53e2ffbce5
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:07:37 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6800
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.8.2 | 64.31.43.178 | 200 OK | 974 B |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.8.2 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeHTML document, ASCII text, with very long lines (3037), with no line terminators Hashfd8b126d3265cc6afc5b672273f78531 5058e579885cccf36c44bdeb5b7318bd75952af9 72da6709db061566cb5f67322f674a77f68acb69ac6181d37f9ca4a1bb7287b7
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.8.2 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Thu, 08 Sep 2022 10:19:50 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 974
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.8.2 | 64.31.43.178 | 200 OK | 677 B |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.8.2 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (2139), with no line terminators Hasha43fc0dde8fdd69656ad0957e62849c7 4b07cf702ac8a770c8cbffc22b9a788b6e5389ba 1ce3d0493424870c81deec0ec41de0592d2af9f91cd8081cd40a1d7ea89b614f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.8.2 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Thu, 08 Sep 2022 10:19:51 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 677
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.8.2 | 64.31.43.178 | 200 OK | 934 B |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.8.2 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (2938), with no line terminators Hashcf25dd071a208312bdc07f34d2cee027 76119563119eaae392ecc8903c989d98d0b93002 8635ba2cad8f887e72779bd526f8738ff6343c74cba715caf2eddea383ba7ce6
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.8.2 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Thu, 08 Sep 2022 10:19:50 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 934
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-includes/js/jquery/ui/checkboxradio.min.js?ver=1.13.2 | 64.31.43.178 | 200 OK | 1.3 kB |
URL HTTP/2www.thefeathercompany.co/wp-includes/js/jquery/ui/checkboxradio.min.js?ver=1.13.2 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (4123) Hashba2bcc9f8b7445126c73246b081731e4 8daefcdfe72f10c465d53125a681fd42e8c98d4f 2f75360504a53984b735398a5ab5dc72c13e3ff3768757f50367f7bd5752b515
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/jquery/ui/checkboxradio.min.js?ver=1.13.2 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:07:37 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1273
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-includes/js/jquery/ui/controlgroup.min.js?ver=1.13.2 | 64.31.43.178 | 200 OK | 1.4 kB |
URL HTTP/2www.thefeathercompany.co/wp-includes/js/jquery/ui/controlgroup.min.js?ver=1.13.2 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (4205) Hashf973396439d69c748c68227df6a13e37 97ace9383120cfce7c4ff540e3c829541ce94ef1 d6a475f6805246cd0cbd24519db972729d5e72137573967e91c42285bc5804ad
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/jquery/ui/controlgroup.min.js?ver=1.13.2 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:07:37 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1445
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-includes/js/jquery/ui/button.min.js?ver=1.13.2 | 64.31.43.178 | 200 OK | 1.8 kB |
URL HTTP/2www.thefeathercompany.co/wp-includes/js/jquery/ui/button.min.js?ver=1.13.2 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (5959) Hash97cc4222b9e95bf033c11f58d8e18586 00ec04d88312bf657086fb52778ebedb7e4eebe8 7493c62a15b2c127e11c8be610b9782176c3032865b5b7f5be0cf378133a5f5d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/jquery/ui/button.min.js?ver=1.13.2 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:07:37 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1814
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/auxin-shop/public/assets/js/shop.min.js?ver=1.8.6 | 64.31.43.178 | 200 OK | 4.1 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/auxin-shop/public/assets/js/shop.min.js?ver=1.8.6 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (16652), with no line terminators Hashebf0823fdcd89c244160cbfaf37e6be5 4707ea1fe287965155dea4ff874123430f186376 a3bec749755d5dd95da7e7acdbf6ed42708ea7658b6e070b39d5075ebaa8e2f4
GET /wp-content/plugins/auxin-shop/public/assets/js/shop.min.js?ver=1.8.6 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Tue, 01 Mar 2022 07:54:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4109
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-includes/js/jquery/ui/spinner.min.js?ver=1.13.2 | 64.31.43.178 | 200 OK | 2.3 kB |
URL HTTP/2www.thefeathercompany.co/wp-includes/js/jquery/ui/spinner.min.js?ver=1.13.2 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (7440) Hash36b4f759a150501a54d0ebcd29b6583f 59ac16c17dab58bf5bb333de5ac6252fffb39169 8e1f4a804fdbca711cc932dbc93042008bcf2bcac87ec96b0a2cd6054af2ed74
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/jquery/ui/spinner.min.js?ver=1.13.2 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:07:37 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2274
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/elementskit-lite/libs/framework/assets/js/frontend-script.js?ver=2.7.0 | 64.31.43.178 | 200 OK | 40 B |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/elementskit-lite/libs/framework/assets/js/frontend-script.js?ver=2.7.0 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with no line terminators Hash94d041d462db321cdb888066586f2068 717d2f9da7fb9f9e2bf2058a8177a0344f8a8647 b8166c5475df6a64ab2456e95f64564164ed697d258e8bfed8cebca40efd6fa5
GET /wp-content/plugins/elementskit-lite/libs/framework/assets/js/frontend-script.js?ver=2.7.0 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Thu, 22 Sep 2022 11:07:38 GMT
accept-ranges: bytes
content-length: 40
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/variation-swatches-for-woocommerce/assets/js/frontend.js?ver=2.1.6 | 64.31.43.178 | 200 OK | 1.7 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/variation-swatches-for-woocommerce/assets/js/frontend.js?ver=2.1.6 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
Hash1cf9598015603ae9c54751c7f50bcfec 707959b4d1fac703fce3d64e0ce35c068fad0f36 3e279c00c2ee7346a36d1bacc279ac0c01bdb7bff48cac0087d81e81cf9333ff
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/variation-swatches-for-woocommerce/assets/js/frontend.js?ver=2.1.6 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Thu, 08 Sep 2022 10:25:16 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1741
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/quick-download-button/frontend/minified/frontend.js?ver=1664543801 | 64.31.43.178 | 200 OK | 1.2 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/quick-download-button/frontend/minified/frontend.js?ver=1664543801 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (3274), with no line terminators Hash08d8d844c0c8f8e2de57db4171cc09b6 939dacb3bc5eeb4df9d611ad0c4460f9f125d5ed 889b989f4e393b0a739e85170e0e750f95ca94333282ccbf0a3ca82d2c8aab19
GET /wp-content/plugins/quick-download-button/frontend/minified/frontend.js?ver=1664543801 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Fri, 30 Sep 2022 13:16:41 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1172
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js?ver=2.7.0 | 64.31.43.178 | 200 OK | 40 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js?ver=2.7.0 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (45047) Hash4b29f739d2f0c324f8fe0292072a0215 e5ed795866581ac6ad512a55e4ece20a235920b5 351aa10967750cc94c97b8ee2c44cd129b24d80497a8a8e5065b417f18834ff2
GET /wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js?ver=2.7.0 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Thu, 22 Sep 2022 11:07:43 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 40424
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-includes/js/wp-util.min.js?ver=6.1.1 | 64.31.43.178 | 200 OK | 690 B |
URL HTTP/2www.thefeathercompany.co/wp-includes/js/wp-util.min.js?ver=6.1.1 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (1391) Hashebe552e54e3815c6867913d252ff2a79 4982bd9ba944833e821be18419ad8408290f5d75 8b0aedc73b1d41ab59c0ad42553259c90458cfb72b149946a3bae3298c012e40
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/wp-util.min.js?ver=6.1.1 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:07:27 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 690
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-includes/js/underscore.min.js?ver=1.13.4 | 64.31.43.178 | 200 OK | 7.2 kB |
URL HTTP/2www.thefeathercompany.co/wp-includes/js/underscore.min.js?ver=1.13.4 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (18798) Hashf4bb18d2e152ba945cb63980362f40e9 925f93a6c4ee411e97d8dc3186f9d66c4b5169ab 16ab496a6c74f5f272f7a5c31e9cb69c753fea994396ef6deacf641180ad317b
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/underscore.min.js?ver=1.13.4 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 10:07:27 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7179
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js?ver=6.8.2 | 64.31.43.178 | 200 OK | 3.4 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js?ver=6.8.2 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (13887), with no line terminators Hash25fb50f4945fa93ea85568456a86fa97 0ea82027ad4720f101de9715adf4ad963a326207 c84cd16cc99c06eec7939713048efa3f35d176236b4c9740e3eb060c12791fb3
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js?ver=6.8.2 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Thu, 08 Sep 2022 10:19:51 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3436
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 | 64.31.43.178 | 200 OK | 2.9 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (12198), with no line terminators Hash869caa171b68cbec9fee5abbfb944ee8 f237e485e41f88b77384cfdb880f9d5a8f46eac8 25c2896e2790fb0e52f6b6ba1ce97bd87eb40463b4bb65ba16ad434c1d7a36dc
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Tue, 01 Mar 2022 07:50:53 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2867
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.5.6 | 64.31.43.178 | 200 OK | 4.4 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.5.6 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (14196) Hash57e0c7d8ed4038f4fd77961771e4bfbc df3641b46c045d51ac48e8aef889616432befeb9 e47ec06c6481b7eb334b6cfa2f3f7de0c2e0dac0f1bb0c80ab4eb7284d192b11
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.5.6 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Tue, 01 Mar 2022 07:50:52 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4441
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/ajax-search-for-woocommerce/assets/js/search.min.js?ver=1.20.0 | 64.31.43.178 | 200 OK | 15 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/ajax-search-for-woocommerce/assets/js/search.min.js?ver=1.20.0 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (58925) Hash2784233b3cbe2dcac2d53dc3a16867ec 7fe5b20ce07d49da1e035d31a461a5aed3f2f420 905f11629a7a7990ba3080675f56cae221e731db2fb30c09f2e550908ab6ab8b
GET /wp-content/plugins/ajax-search-for-woocommerce/assets/js/search.min.js?ver=1.20.0 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Wed, 05 Oct 2022 13:34:41 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 14969
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/uploads/phlox-pro/custom.js?ver=4.8 | 64.31.43.178 | 200 OK | 117 B |
URL HTTP/2www.thefeathercompany.co/wp-content/uploads/phlox-pro/custom.js?ver=4.8 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
Hash79aaf5d3e68624a2a3e62f1e703d9c3f 6ecb9889a5b2de86f12135514d075b5ea5432079 434d364436c34fbcc7c1e6dc30cf69d7064be27b9c40a1f09164747f0d14809b
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/uploads/phlox-pro/custom.js?ver=4.8 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Mon, 19 Dec 2022 08:09:51 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 117
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.5.6 | 64.31.43.178 | 200 OK | 2.0 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.5.6 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (4866) Hash5f80654bb9772a88484aa994679b274a 0a4c49bc58e3003776f78b196aecbc76a78eae73 f41c574cea6fe8fe2cd7c480ac237a2351de548979bb53ec6d0124f8eeaac319
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.5.6 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Tue, 01 Mar 2022 07:50:52 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2024
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.5.6 | 64.31.43.178 | 200 OK | 1.0 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.5.6 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (2577) Hashf5c8273175207966436fe071db580974 643680fc9a1703cb3bc469bfbb3dbcbf6425e38a 8b0897055f6baa5de94adb95e824af4afd1dced496711c905c8b7c09738aa4de
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.5.6 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Tue, 01 Mar 2022 07:50:53 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1023
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0 | 64.31.43.178 | 200 OK | 3.3 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (10544) Hash3821415a39954c48c7927e661467c6b8 dfe1116a0efc9898cb6caf094213880da83d6990 5f7f5b28f47c366a0bb70435dc3b2253278222c92429f013084f71fd7d29a32e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Tue, 01 Mar 2022 07:50:52 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3268
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.5.6 | 64.31.43.178 | 200 OK | 10 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.5.6 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (36994) Hash72c9ca23846ec6dd0e5fc5dd49c34fe4 c2f711d60bafa89fd4b8de9766b9a55aa0ddfc46 a199de2bda636d001e222d8cb9a9fc7dec22e773bf047c7ee910e23aaaf5f7d2
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.5.6 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Tue, 01 Mar 2022 07:50:52 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 10488
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/elementskit-lite/widgets/init/assets/js/animate-circle.js?ver=2.7.0 | 64.31.43.178 | 200 OK | 389 B |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/elementskit-lite/widgets/init/assets/js/animate-circle.js?ver=2.7.0 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (810), with no line terminators Hashbc80f83337ad9e96f9c5d9b3d0305b5d 464e35c91ecfa7e96e58cb7c9f523352758385ac 0b12bc106b406b2ecd33244ea0c1d17da81bbdb75874835d6ce5ef3a16fa8ad0
GET /wp-content/plugins/elementskit-lite/widgets/init/assets/js/animate-circle.js?ver=2.7.0 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Thu, 22 Sep 2022 11:07:43 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 389
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.5.6 | 64.31.43.178 | 200 OK | 12 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.5.6 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (43087) Hash58b58408d201015420448a0819e3b077 a91d50a99a858289e46c868f32526c5d8f06f496 8b95c7b04084455dd60b6d2823fedf0de08517d5d5adc4c39ac9461bfc1d56ce
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.5.6 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Tue, 01 Mar 2022 07:50:52 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 12422
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/elementskit-lite/widgets/init/assets/js/elementor.js?ver=2.7.0 | 64.31.43.178 | 200 OK | 4.7 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/elementskit-lite/widgets/init/assets/js/elementor.js?ver=2.7.0 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (17602), with no line terminators Hash19174ac47efd3829d062de3c26b846dc c0e9f99ea60888d89d4269328288b2927c4cbc31 edd620e3cea00d26aa912b01edd8e96f04000c3e898df60a48582d483840f553
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementskit-lite/widgets/init/assets/js/elementor.js?ver=2.7.0 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Thu, 22 Sep 2022 11:07:43 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4707
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 | 64.31.43.178 | 200 OK | 4.6 kB |
URL HTTP/2www.thefeathercompany.co/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (15660) Hash0232689bd203f330529b36a437f41a68 9046583f7469ad38297969f10a9513eb895d5316 feea9f30a6e454579bbeabf236b7abdb0c7de84dd2852422555ad67348c5e886
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Tue, 12 Apr 2022 11:26:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4619
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min.js?ver=1.7.7.1 | 64.31.43.178 | 200 OK | 339 B |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min.js?ver=1.7.7.1 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (754), with no line terminators Hashf4cea5c82bb62f34a31f39a322513366 bab5dfb3f8d04b76f83ca994798534e697b85290 5b00e0c1288d5d1f1df303a55bd0ff67d9acf5b734bc0093a651727c48a077ff
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min.js?ver=1.7.7.1 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Thu, 06 Oct 2022 06:49:54 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 339
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/bdthemes-element-pack/assets/js/bdt-uikit.min.js?ver=3.7.2 | 64.31.43.178 | 200 OK | 41 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/bdthemes-element-pack/assets/js/bdt-uikit.min.js?ver=3.7.2 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (65443), with CRLF line terminators Hashb270945ed935087aa77d01f4f1062a24 5b08b9b699866337fb89c8d3cb4bd4ac335cb5cd a9eff12d280ebcc0e920ce12b2538b26201f122140af85d7e6be5a6fbff57733
GET /wp-content/plugins/bdthemes-element-pack/assets/js/bdt-uikit.min.js?ver=3.7.2 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Tue, 01 Mar 2022 07:52:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 41236
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| thefeather.s3.eu-west-1.amazonaws.com/2022/09/Group-230.jpg | 52.218.21.211 | 200 OK | 1.1 MB |
URL HTTP/1.1thefeather.s3.eu-west-1.amazonaws.com/2022/09/Group-230.jpg IP52.218.21.211:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x877, components 3\012- data Size1.1 MB (1116763 bytes) Hash03c498671669b2b155a720e08b382264 15da82829f81232bb09c6d17e0556f4a73959a1f c91f83d2a329b2565ff6f008a7e755b1ba6bf7bdb3d164862c33936445801b7a
GET /2022/09/Group-230.jpg HTTP/1.1
Host: thefeather.s3.eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: u7+YOK24LIbOAd+8jiKlkrn6gNhpfXiFQPIorfTL7Ogaff1gxuD/1JlbWrEAuSJ5HGwjjCPdu9Q=
x-amz-request-id: 8FPBGFZ6EDZ1PTZ0
Date: Wed, 11 Jan 2023 19:10:12 GMT
Last-Modified: Tue, 27 Sep 2022 11:02:26 GMT
ETag: "03c498671669b2b155a720e08b382264"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 1116763
|
|
| thefeather.s3.eu-west-1.amazonaws.com/2022/10/Group-238.png | 52.218.21.211 | 200 OK | 547 kB |
URL HTTP/1.1thefeather.s3.eu-west-1.amazonaws.com/2022/10/Group-238.png IP52.218.21.211:0
File typePNG image data, 428 x 600, 8-bit/color RGBA, non-interlaced\012- data Size547 kB (547338 bytes) Hash557e94ec810fcbbeb9f485dfa43f2b6d fb3a58a96263e95b6913646703f528624f51b1fd 6c2cbbd171dff6f54c27c0711301ccf3c1ee0a325e8433369a535b416e3974d9
GET /2022/10/Group-238.png HTTP/1.1
Host: thefeather.s3.eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: DiTAbXgvnv26JZfV0mTQ54POZi/VgMEiSszeLxIxCDfMtlHE/aHc1o72KDSSW1YeMQAFFtdstjc=
x-amz-request-id: 8FPFQ6KQAETM073K
Date: Wed, 11 Jan 2023 19:10:12 GMT
Last-Modified: Wed, 05 Oct 2022 10:40:35 GMT
ETag: "557e94ec810fcbbeb9f485dfa43f2b6d"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 547338
|
|
| thefeather.s3.eu-west-1.amazonaws.com/2022/09/Group-229.jpg | 52.218.21.211 | 200 OK | 1.1 MB |
URL HTTP/1.1thefeather.s3.eu-west-1.amazonaws.com/2022/09/Group-229.jpg IP52.218.21.211:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x880, components 3\012- data Size1.1 MB (1133184 bytes) Hash984c62347c4ccfd0fea3fa1406a9f9e9 fe777a8296043ec4411d7dfe4cf1783642f8a408 9b39163df24c6d80c0cf36d12437e065be0afcb1b60c2180cf8f1246f1bc7049
GET /2022/09/Group-229.jpg HTTP/1.1
Host: thefeather.s3.eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: +bMTkHuyALoBX7TYuPWflNZXt4SB2R/QgRmmkwiIN6BPniITJga8xdRlNG8YYWayBN78vjTkotQ=
x-amz-request-id: 8FP7EQQA5Q6Z5PMK
Date: Wed, 11 Jan 2023 19:10:12 GMT
Last-Modified: Tue, 27 Sep 2022 10:47:51 GMT
ETag: "984c62347c4ccfd0fea3fa1406a9f9e9"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 1133184
|
|
| thefeather.s3.eu-west-1.amazonaws.com/2022/10/Group-236.png | 52.218.21.211 | 200 OK | 470 kB |
URL HTTP/1.1thefeather.s3.eu-west-1.amazonaws.com/2022/10/Group-236.png IP52.218.21.211:0
File typePNG image data, 428 x 600, 8-bit/color RGBA, non-interlaced\012- data Size470 kB (469651 bytes) Hash7f1d94781207a4cc6bdc7f5e9103fcd3 a8c8eb93a7f556a89132df3b1ef7a0662e0eeb16 8e74801ee7a5a58f7c528bc63abc67dd5e5ed92d5e8cf9d29ddc1f9ae571a6a4
GET /2022/10/Group-236.png HTTP/1.1
Host: thefeather.s3.eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: Gj3AB++YWOOQVmc9CNXJUKNRfw7xKOz36f/nx2hqJxwtuNXtfhrzPAev2N+XyZ+eW9PdQKb7VfA=
x-amz-request-id: 8FP89RFH98YR95KE
Date: Wed, 11 Jan 2023 19:10:12 GMT
Last-Modified: Wed, 05 Oct 2022 10:40:42 GMT
ETag: "7f1d94781207a4cc6bdc7f5e9103fcd3"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 469651
|
|
| www.thefeathercompany.co/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 | 64.31.43.178 | 200 OK | 34 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (65280) Hash83a90323ac82b98062b4b2c8ac8c5051 d7d376677e3546b756b4fec6219be72b85c4f8f5 7fd68e9ea0ebd35958da46d7373113d1a3646a671217cf2cf471c65c3d710613
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Tue, 01 Mar 2022 07:50:53 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 34004
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/bdthemes-element-pack/assets/js/element-pack-site.min.js?ver=5.15.1 | 64.31.43.178 | 200 OK | 27 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/bdthemes-element-pack/assets/js/element-pack-site.min.js?ver=5.15.1 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeASCII text, with very long lines (65536), with no line terminators Hashb81728aa776b059f5888b579f1162603 0a76fcc051a7b87217ecd10c2d3ebf30c6158d4f 92b18cbd924ad0bc855adc1eaeb2d383291129c24d119c7e5350ea2c06183753
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/bdthemes-element-pack/assets/js/element-pack-site.min.js?ver=5.15.1 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Tue, 01 Mar 2022 07:52:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 27424
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hashb78bb80d4b9c0f5b434f1bb2ecdebb51 7407a21a41e7750f74eca5a85d274f6fd01225fa 9a46cf2328b20a3f2d47481221aecd56d700f440287bc334b7123793c19f163b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 11 Jan 2023 19:10:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash3fd9aec50c5b22d51d69a2b1e7b2943e 830e764e707bb208a68f9cd72f3071627b1f2ff9 8d5a4fd9f70788c686b88c48160ebcfa51ae2ed8cc1a0340f893a8b0f58755da
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 11 Jan 2023 19:10:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| thefeather.s3.eu-west-1.amazonaws.com/2022/09/IMG_0672-scaled.jpg | 52.218.21.211 | 200 OK | 529 kB |
URL HTTP/1.1thefeather.s3.eu-west-1.amazonaws.com/2022/09/IMG_0672-scaled.jpg IP52.218.21.211:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 2560x1707, components 3\012- data Size529 kB (529414 bytes) Hash000eea954331aa5d04c76e5f1123aff5 57281c6507ecc40493bb152bce033bc1c1fa196e ef50635b4a07f15ddf254e5c8375ce06f92f1b115e4882ee7c45b0b5dc89b4ac
GET /2022/09/IMG_0672-scaled.jpg HTTP/1.1
Host: thefeather.s3.eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: X1Zaoi2Fg3+3krNchr0w9l7isc5UlNwmW/XslQ0e+Q/pKNVM4PdhOigcnOPGmAIN0zNFH/lcBl8=
x-amz-request-id: 8FP6H33J6PRWEA2A
Date: Wed, 11 Jan 2023 19:10:12 GMT
Last-Modified: Tue, 13 Sep 2022 06:10:57 GMT
ETag: "000eea954331aa5d04c76e5f1123aff5"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 529414
|
|
| thefeather.s3.eu-west-1.amazonaws.com/2022/10/IMG_0572.png | 52.218.21.211 | 200 OK | 932 kB |
URL HTTP/1.1thefeather.s3.eu-west-1.amazonaws.com/2022/10/IMG_0572.png IP52.218.21.211:0
File typePNG image data, 938 x 478, 8-bit/color RGBA, non-interlaced\012- data Size932 kB (931785 bytes) Hash6ffc3962c4c21b3cf536a8ff79c45d5c 9e981fda5e8c8ecf6f18272b73fac7601b373a59 560acfafb11bd2d113337dfb0164b9de0708c6759c22376a79da20017bccbea5
GET /2022/10/IMG_0572.png HTTP/1.1
Host: thefeather.s3.eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: NUi2bOH6NvYyCXPyT9ZyJ5iWYTFu2bqPAbRCoGb0h2OjuhZzGa40JrgAkYtJ3FVCs4z4LH9Nng8=
x-amz-request-id: 8FP812W9683BF74H
Date: Wed, 11 Jan 2023 19:10:12 GMT
Last-Modified: Thu, 13 Oct 2022 11:55:46 GMT
ETag: "6ffc3962c4c21b3cf536a8ff79c45d5c"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 931785
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hashb78bb80d4b9c0f5b434f1bb2ecdebb51 7407a21a41e7750f74eca5a85d274f6fd01225fa 9a46cf2328b20a3f2d47481221aecd56d700f440287bc334b7123793c19f163b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 11 Jan 2023 19:10:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hashb78bb80d4b9c0f5b434f1bb2ecdebb51 7407a21a41e7750f74eca5a85d274f6fd01225fa 9a46cf2328b20a3f2d47481221aecd56d700f440287bc334b7123793c19f163b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 11 Jan 2023 19:10:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| thefeather.s3.eu-west-1.amazonaws.com/2022/10/IMG_0460.png | 52.218.21.211 | 200 OK | 586 kB |
URL HTTP/1.1thefeather.s3.eu-west-1.amazonaws.com/2022/10/IMG_0460.png IP52.218.21.211:0
File typePNG image data, 630 x 478, 8-bit/color RGBA, non-interlaced\012- data Size586 kB (586083 bytes) Hash33f1ce1d8d3033a8d8113c2b6274dc34 3bbfda3a4d6a1af875a02836142eb3be1006557f f1971b23e6ce8c87b3a587151003112a873215d132bf990097a82b4e4a4e45f0
GET /2022/10/IMG_0460.png HTTP/1.1
Host: thefeather.s3.eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: WN1r4V3wR5cXKM/LVr6uJ32f4IslOfx17hLAM3SijoI60vZhaUXG+oFMCCu5NXD5ZdJBUJuVIUg=
x-amz-request-id: 8FPE667V60E9WX42
Date: Wed, 11 Jan 2023 19:10:12 GMT
Last-Modified: Thu, 13 Oct 2022 11:55:55 GMT
ETag: "33f1ce1d8d3033a8d8113c2b6274dc34"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 586083
|
|
| fonts.gstatic.com/s/kumbhsans/v12/c4ml1n92AsfhuCq6tVsaioBd-Q.woff2 | 142.250.74.131 | 200 OK | 30 kB |
URL HTTP/2fonts.gstatic.com/s/kumbhsans/v12/c4ml1n92AsfhuCq6tVsaioBd-Q.woff2 IP142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 30224, version 1.0\012- data Hash36be22721f29ac75d4342891b79854c3 7e6f3a83742896703841449e462922bfe76224ca 9b2d0cbb68f699b93854f9ecfe945428a66c439340416ee9d7fb8ee465fc727a
GET /s/kumbhsans/v12/c4ml1n92AsfhuCq6tVsaioBd-Q.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.thefeathercompany.co
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30224
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Jan 2023 18:07:55 GMT
expires: Sun, 07 Jan 2024 18:07:55 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Jul 2022 19:05:28 GMT
content-type: font/woff2
age: 349337
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 | 64.31.43.178 | 200 OK | 77 kB |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
File typeWeb Open Font Format (Version 2), TrueType, length 76764, version 331.-31261\012- data Hashf7307680c7fe85959f3ecf122493ea7d fce0da592a3e536d6d5df5b50cb513398d8c5161 43c072c16c9ee6d67acdfa6c6d6685ff1e74eb4237b7cc3c1348ab1c108b26af
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.thefeathercompany.co/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:12 GMT
content-type: font/woff2
last-modified: Tue, 01 Mar 2022 07:50:52 GMT
accept-ranges: bytes
content-length: 76764
date: Wed, 11 Jan 2023 19:10:12 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| thefeather.s3.eu-west-1.amazonaws.com/2022/10/IMG_6271-1536x931.jpg | 52.218.21.211 | 200 OK | 203 kB |
URL HTTP/1.1thefeather.s3.eu-west-1.amazonaws.com/2022/10/IMG_6271-1536x931.jpg IP52.218.21.211:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1536x931, components 3\012- data Size203 kB (202745 bytes) Hash3bcfe8a0f99c20da8ff5336b5173f838 ace9bb58b98bf7d1eb34febc0215de862c9bf2f7 f1db1bab9a89a813dcc1de06255716a1b70a5e067142b10bfb1c3f5be34f4868
GET /2022/10/IMG_6271-1536x931.jpg HTTP/1.1
Host: thefeather.s3.eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: IZxU9hs1Pwiejd4WDr78X+WBziNxb3iAesAqygfpNOw+T+AicfOU14s7ezQ7KHlm63OEb3Y9pto=
x-amz-request-id: 8EB4DGCSTD797MYZ
Date: Wed, 11 Jan 2023 19:10:13 GMT
Last-Modified: Fri, 07 Oct 2022 12:32:36 GMT
ETag: "3bcfe8a0f99c20da8ff5336b5173f838"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 202745
|
|
| thefeather.s3.eu-west-1.amazonaws.com/2022/10/rI9cUmga-IMG_0476.png | 52.218.21.211 | 200 OK | 789 kB |
URL HTTP/1.1thefeather.s3.eu-west-1.amazonaws.com/2022/10/rI9cUmga-IMG_0476.png IP52.218.21.211:0
File typePNG image data, 938 x 478, 8-bit/color RGBA, non-interlaced\012- data Size789 kB (789066 bytes) Hashedd861fad416af4002dbab5d66b05292 99e3373f531c9eaa693e5ef61d26cc3379ba4190 78a48c8daf78ec09e1a31291979a9abb1a4a72af2443de160bfaf12204ae52e1
GET /2022/10/rI9cUmga-IMG_0476.png HTTP/1.1
Host: thefeather.s3.eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 8NF2F4Tg1Sw/XwyAWTHcV4Q6D8CL6X/W6+zfOivfge3j1Og4H1PyZy7AE9vQ1A1LCjcpwXP6kso=
x-amz-request-id: 8FPC81D41S2S6G7D
Date: Wed, 11 Jan 2023 19:10:12 GMT
Last-Modified: Thu, 13 Oct 2022 11:54:29 GMT
ETag: "edd861fad416af4002dbab5d66b05292"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 789066
|
|
| fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 | 142.250.74.131 | 200 OK | 31 kB |
URL HTTP/2fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 IP142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data Hashac0d2859ea5f8fd6bcb3c305c08ec184 7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7 ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.thefeathercompany.co
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 05 Jan 2023 09:45:37 GMT
expires: Fri, 05 Jan 2024 09:45:37 GMT
cache-control: public, max-age=31536000
age: 552275
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hashb78bb80d4b9c0f5b434f1bb2ecdebb51 7407a21a41e7750f74eca5a85d274f6fd01225fa 9a46cf2328b20a3f2d47481221aecd56d700f440287bc334b7123793c19f163b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 11 Jan 2023 19:10:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| thefeather.s3.eu-west-1.amazonaws.com/2022/09/NE0IizxV-Box-PSD-Mockup.png | 52.218.21.211 | 200 OK | 637 kB |
URL HTTP/1.1thefeather.s3.eu-west-1.amazonaws.com/2022/09/NE0IizxV-Box-PSD-Mockup.png IP52.218.21.211:0
File typePNG image data, 1604 x 500, 8-bit/color RGBA, non-interlaced\012- data Size637 kB (637021 bytes) Hashc693d5c4f0038acee892ec4d47c81654 9e447cfac88ba11e0ace13c34981efe96a2fd9ce 558ccc73ee119a423533fc92c13292d8f18272ed8dde30e67ef506e73285364e
GET /2022/09/NE0IizxV-Box-PSD-Mockup.png HTTP/1.1
Host: thefeather.s3.eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: YT2gXft7ZjG4UEJG3UQTUKwSGKcKcKlpiujoCv7oG49XvFDr2B63eGlECxYGIu5rMeMlTGLD7j8=
x-amz-request-id: 8EBENQFZR27TS5TW
Date: Wed, 11 Jan 2023 19:10:13 GMT
Last-Modified: Thu, 22 Sep 2022 12:07:20 GMT
ETag: "c693d5c4f0038acee892ec4d47c81654"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 637021
|
|
| thefeather.s3.eu-west-1.amazonaws.com/2022/12/VDHLmtDD-TFC-fav-s-300x300.png | 52.218.21.211 | 200 OK | 15 kB |
URL HTTP/1.1thefeather.s3.eu-west-1.amazonaws.com/2022/12/VDHLmtDD-TFC-fav-s-300x300.png IP52.218.21.211:0
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data Hash3a6ee9f85a847245138d6e5236bdc3c9 41e959917fcf22d5f2b49feedb890ce441ffcf51 99b82751cf8bdba03f4b559ce47b718df5dd8b1cc987306a7837323cb641e5fb
GET /2022/12/VDHLmtDD-TFC-fav-s-300x300.png HTTP/1.1
Host: thefeather.s3.eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: F8D2ck0BmCu8zwbYmcIx+u0mlhIyE0WyqxZne2n+gcV6BvFGjqFVUEY0yGrB+myAxgFDVIFzyWM=
x-amz-request-id: 8EB8GZS8RQ072PVW
Date: Wed, 11 Jan 2023 19:10:13 GMT
Last-Modified: Mon, 19 Dec 2022 08:26:23 GMT
ETag: "3a6ee9f85a847245138d6e5236bdc3c9"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 14840
|
|
| thefeather.s3.eu-west-1.amazonaws.com/2022/12/TFC-fav-s-64x64.png | 52.218.21.211 | 200 OK | 2.1 kB |
URL HTTP/1.1thefeather.s3.eu-west-1.amazonaws.com/2022/12/TFC-fav-s-64x64.png IP52.218.21.211:0
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data Hashd2cab4005d9ffbda42f34d497db6fa2e a545ab74297f0a1e9d0f8320fb4c573d8dd4f0d5 ee87e561dfb31af407cd6fe409b68cbb4d1c7afd013ab3ee78895ea6c25845ee
GET /2022/12/TFC-fav-s-64x64.png HTTP/1.1
Host: thefeather.s3.eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: a4nCmBfc+ldZBKmZt8w0LcDkqirrpsA8QT1NvPAOS86+Ey85/EzyqkKAERPNeGQ6WyRYuHZvyRw=
x-amz-request-id: 8EBDSR19AMFBZJBQ
Date: Wed, 11 Jan 2023 19:10:13 GMT
Last-Modified: Mon, 19 Dec 2022 08:26:24 GMT
ETag: "d2cab4005d9ffbda42f34d497db6fa2e"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 2116
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4869fe48-260f-46c9-81a4-5ac67e647443.jpeg | 34.120.237.76 | 200 OK | 8.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4869fe48-260f-46c9-81a4-5ac67e647443.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash7a241015ff8d404c1837655539fc53ed 6dc1b2fd2ef31f12d95e912ed56316c2fb01ae35 c289b877f9e66a830ec4effffd411d1e1a251aac2fa82ac80bee8369bce1748b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4869fe48-260f-46c9-81a4-5ac67e647443.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8772
x-amzn-requestid: 0d049342-a984-487a-b48b-862704fa3d5c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ei8QdFKXIAMFX0g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bdda69-1caef78222b6470241e7db53;Sampled=0
x-amzn-remapped-date: Tue, 10 Jan 2023 21:36:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: aE4f4yuWkPLj8UAKwg4efQzzP1fI9fcXpv2AG2ZJZxMVx920yqqbQg==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 10 Jan 2023 21:43:48 GMT
age: 77187
etag: "6dc1b2fd2ef31f12d95e912ed56316c2fb01ae35"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/themes/phlox-pro/css/main.css?ver=5.7.3 | 64.31.43.178 | 200 OK | 0 B |
URL HTTP/2www.thefeathercompany.co/wp-content/themes/phlox-pro/css/main.css?ver=5.7.3 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
GET /wp-content/themes/phlox-pro/css/main.css?ver=5.7.3 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: text/css
last-modified: Tue, 01 Mar 2022 07:49:23 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 84543
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/?wc-ajax=get_refreshed_fragments | 64.31.43.178 | 200 OK | 0 B |
URL HTTP/2www.thefeathercompany.co/?wc-ajax=get_refreshed_fragments IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
POST /?wc-ajax=get_refreshed_fragments HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 18
Origin: https://www.thefeathercompany.co
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Cookie: chatyWidget_0=[{"k":"v-widget","v":"2023-01-11T19:09:57.947Z"},{"k":"v-Whatsapp","v":"2023-01-11T19:09:57.948Z"}]; activechatyWidgets=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.thefeathercompany.co
access-control-allow-credentials: true
x-content-type-options: nosniff
x-robots-tag: noindex
content-type: application/json; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
vary: Accept-Encoding
content-encoding: gzip
date: Wed, 11 Jan 2023 19:10:13 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/fonts/elementskit.woff?y24e1e | 64.31.43.178 | 200 OK | 0 B |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/fonts/elementskit.woff?y24e1e IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/fonts/elementskit.woff?y24e1e HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.thefeathercompany.co/wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/css/ekiticons.css?ver=2.7.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:12 GMT
content-type: font/woff
last-modified: Thu, 22 Sep 2022 11:07:39 GMT
accept-ranges: bytes
content-length: 445836
date: Wed, 11 Jan 2023 19:10:12 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| thefeather.s3.eu-west-1.amazonaws.com/2022/10/Group-237.png | 52.218.21.211 | 200 OK | 0 B |
URL HTTP/1.1thefeather.s3.eu-west-1.amazonaws.com/2022/10/Group-237.png IP52.218.21.211:0
GET /2022/10/Group-237.png HTTP/1.1
Host: thefeather.s3.eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: MBjrppD9q3JJgCHHuR80h/rIoCNdeeuz4t4ZipJDQI8z6uZWVCbHKnsEf0SJBNCpdxy+dvYNTxE=
x-amz-request-id: 8FP1ZA5T3R7JVAZZ
Date: Wed, 11 Jan 2023 19:10:12 GMT
Last-Modified: Wed, 05 Oct 2022 10:40:27 GMT
ETag: "6380a5cf8d000749636c44a7b51f3b2c"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 467427
|
|
| thefeather.s3.eu-west-1.amazonaws.com/2022/10/IMG_1248-1536x931.jpg | 52.218.21.211 | 200 OK | 0 B |
URL HTTP/1.1thefeather.s3.eu-west-1.amazonaws.com/2022/10/IMG_1248-1536x931.jpg IP52.218.21.211:0
GET /2022/10/IMG_1248-1536x931.jpg HTTP/1.1
Host: thefeather.s3.eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: ZXhXeFEoG2OW7JUAeodV5LCXnHqXtAySa6j/pJuTERte2FQt1qe4yUZsilLAYbSEmLAfwxW7eV4=
x-amz-request-id: 8EBENR06HVZPVMXR
Date: Wed, 11 Jan 2023 19:10:13 GMT
Last-Modified: Fri, 07 Oct 2022 12:32:21 GMT
ETag: "4b0439c84be4a9cdbd9d270d3cecac8b"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 187541
|
|
| www.thefeathercompany.co/wp-content/plugins/chaty/js/cht-front-script.min.js?ver=1663338359 | 64.31.43.178 | 200 OK | 0 B |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/chaty/js/cht-front-script.min.js?ver=1663338359 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/chaty/js/cht-front-script.min.js?ver=1663338359 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:10 GMT
content-type: application/javascript
last-modified: Mon, 12 Sep 2022 07:04:29 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 13590
date: Wed, 11 Jan 2023 19:10:10 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Kumbh+Sans%3A300%2Cregular%2C700%7CJost%3A100%2C200%2C300%2Cregular%2C500%2C600%2C700%2C800%2C900%2C100italic%2C200italic%2C300italic%2Citalic%2C500italic%2C600italic%2C700italic%2C800italic%2C900italic&ver=1.5 | 216.58.207.202 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Kumbh+Sans%3A300%2Cregular%2C700%7CJost%3A100%2C200%2C300%2Cregular%2C500%2C600%2C700%2C800%2C900%2C100italic%2C200italic%2C300italic%2Citalic%2C500italic%2C600italic%2C700italic%2C800italic%2C900italic&ver=1.5 IP216.58.207.202:0
GET /css?family=Kumbh+Sans%3A300%2Cregular%2C700%7CJost%3A100%2C200%2C300%2Cregular%2C500%2C600%2C700%2C800%2C900%2C100italic%2C200italic%2C300italic%2Citalic%2C500italic%2C600italic%2C700italic%2C800italic%2C900italic&ver=1.5 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 11 Jan 2023 19:10:11 GMT
date: Wed, 11 Jan 2023 19:10:11 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Montserrat%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1.1 | 216.58.207.202 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Montserrat%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1.1 IP216.58.207.202:0
GET /css?family=Montserrat%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 11 Jan 2023 19:10:11 GMT
date: Wed, 11 Jan 2023 19:10:11 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| thefeather.s3.eu-west-1.amazonaws.com/2022/09/Group-232.jpg | 52.218.21.211 | 200 OK | 0 B |
URL HTTP/1.1thefeather.s3.eu-west-1.amazonaws.com/2022/09/Group-232.jpg IP52.218.21.211:0
GET /2022/09/Group-232.jpg HTTP/1.1
Host: thefeather.s3.eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: +RWlaM69PJRxfbnn0p91xZzx5njXxDIkQD16eB3B4uKIzKhK4oTxCMd5fzVFMV+GWAbu/BCmpDo=
x-amz-request-id: 8FP82E5GBR2RDWTY
Date: Wed, 11 Jan 2023 19:10:12 GMT
Last-Modified: Tue, 27 Sep 2022 11:02:35 GMT
ETag: "42e25c8f4956a52a803d55a70c6c995a"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 1107146
|
|
| www.thefeathercompany.co/wp-content/themes/phlox-pro/js/plugins.min.js?ver=5.7.3 | 64.31.43.178 | 200 OK | 0 B |
URL HTTP/2www.thefeathercompany.co/wp-content/themes/phlox-pro/js/plugins.min.js?ver=5.7.3 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/phlox-pro/js/plugins.min.js?ver=5.7.3 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Tue, 01 Mar 2022 07:49:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 141110
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.thefeathercompany.co/wp-content/plugins/auxin-pro-tools/public/assets/js/pro-tools.js?ver=1.7.4 | 64.31.43.178 | 200 OK | 0 B |
URL HTTP/2www.thefeathercompany.co/wp-content/plugins/auxin-pro-tools/public/assets/js/pro-tools.js?ver=1.7.4 IP64.31.43.178:0 ASN#46475 LIMESTONENETWORKS
GET /wp-content/plugins/auxin-pro-tools/public/assets/js/pro-tools.js?ver=1.7.4 HTTP/1.1
Host: www.thefeathercompany.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.thefeathercompany.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Jan 2023 19:10:11 GMT
content-type: application/javascript
last-modified: Tue, 01 Mar 2022 07:51:16 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1030
date: Wed, 11 Jan 2023 19:10:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
0.0.0.0