firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 25 Sep 2022 00:14:42 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: dqGt51cl7a-mohtuBWDpRIO3qYec_T4nQDevVi1EtJokw5jhS5VIGg==
Age: 2924
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 09a973de929ab7452edc342c780d3668
3f14f6e0a36f76863c0aea6fb561c266404a7ea3
e82ca5f310e37267fbf792427747e65c2bb35e684d3f629c0aa302f688bc4f80
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E82CA5F310E37267FBF792427747E65C2BB35E684D3F629C0AA302F688BC4F80"
Last-Modified: Fri, 23 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8721
Expires: Sun, 25 Sep 2022 03:28:47 GMT
Date: Sun, 25 Sep 2022 01:03:26 GMT
Connection: keep-alive
main.iliyard.ge/
301 Moved Permanently 162 B IP
ASN #203301 Datacenter Ltd
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 25 Sep 2022 01:03:26 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://main.iliyard.ge/
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sat, 24 Sep 2022 04:35:15 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: N6WetGlU2c2D6dBvJaOuux4rt9P6bygLOJgygQZyaIQrcDzqgRkmDg==
age: 73692
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:26 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Sun, 25 Sep 2022 00:04:17 GMT
Expires: Sun, 25 Sep 2022 00:56:17 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Apfig98gfYIKkZU2HfXQL9j3MaSctAenCUDwDbBkFm_vtGrrSN93nA==
Age: 3549
ocsp.digicert.com/
200 OK 471 B IP
Hash a7809de115ea73f8b61f3d20a9978493
01fc65a2b694d7aadd5204d21801e87b2b55b73e
72692486033feeb149424c59576c6c75b17228dfc89b4c369d2e17cc4bff3d52
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4113
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 01:03:26 GMT
Last-Modified: Sat, 24 Sep 2022 23:54:53 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: WrXX1fafMZQFW16L2nRQ8g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: lpf7nkG1Jfw5nffw9XO2wQrudmw=
main.iliyard.ge/
200 OK 13 kB IP
ASN #203301 Datacenter Ltd
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (800), with CRLF, LF line terminators
Hash 725c4e5cbd422e2c8adb15c9806037bc
d01ab5838758eb69e53fbb08e1bbcd8f0f0b7fd8
503fa774f2dfb876ff2e6c5c5dc998a5b7682673804421cf9a31cb21e8c4917a
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: text/html; charset=utf-8
content-length: 12624
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1; path=/; secure; HttpOnly
last-modified: Tue, 26 Oct 2021 14:03:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-cache-status: MISS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PHP/7.4.30, PleskLin
X-Firefox-Spdy: h2
s3.tradingview.com/external-embedding/embed-widget-tickers.js
200 OK 10 kB URL HTTP/2 s3.tradingview.com/external-embedding/embed-widget-tickers.js
IP
File type ASCII text, with very long lines (3066)
Hash 573192f389b376dce6bc2d9bb12643a6
967fbfb15397387ef1412a8e9b2008faa393fdec
2657e4d6058c00eb8939ace3a0594f4c462262d5585ca8305eabd0920deb1204
GET /external-embedding/embed-widget-tickers.js HTTP/1.1
Host: s3.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 10391
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Fri, 23 Sep 2022 10:19:58 GMT
accept-ranges: bytes
server: AmazonS3
date: Sat, 24 Sep 2022 10:20:29 GMT
etag: "573192f389b376dce6bc2d9bb12643a6"
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1YhnyqSHaPKhRXksKMOl78-fL2F8jgxafsidk1QpnPoTxooGLlcCNg==
age: 52992
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash f335aebc53787d84d5a17c1d442ad050
538823dba9eb95e8d929a581446f04a1d225388a
f9bafc99e280dee2a19c0e16a6c5c771d9feef944a2730a8ad33154a78243724
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3503
Cache-Control: max-age=136196
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 01:03:27 GMT
Etag: "632f0c34-118"
Expires: Mon, 26 Sep 2022 14:53:23 GMT
Last-Modified: Sat, 24 Sep 2022 13:55:00 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 280
code.jquery.com/jquery-3.6.0.js
200 OK 85 kB URL HTTP/2 code.jquery.com/jquery-3.6.0.js
IP
Hash 416559bad4fc1149eba631e644a23a6e
20f8f18f94c74dbc1bde934719cbfa87d51828cf
37508a443be057a2fab1c4eee8d03632f406eaed15d09a26ac8dabe7877616e2
GET /jquery-3.6.0.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://main.iliyard.ge
Connection: keep-alive
Referer: https://main.iliyard.ge/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Sep 2022 01:03:27 GMT
content-encoding: gzip
content-length: 84714
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-46744"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1664067807.dop068.sk1.t,1664067807.cds072.sk1.hn,1664067807.cds214.sk1.c
X-Firefox-Spdy: h2
main.iliyard.ge/templates/maintpl/global.css
200 OK 431 B URL HTTP/2 main.iliyard.ge/templates/maintpl/global.css
IP
ASN #203301 Datacenter Ltd
File type ASCII text, with CRLF line terminators
Hash 112ed982e6855c4ef9a1b7db178884c6
00b437b229926e454809920b80ebdd177880aa6e
0d5d92e32273d85a019d880b45aa114be4138a915dc03687af37d623cb58faab
GET /templates/maintpl/global.css HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: text/css
content-length: 431
x-accel-version: 0.01
last-modified: Tue, 12 Oct 2021 12:47:16 GMT
etag: "316-5ce273ec99d00-gzip"
vary: Accept-Encoding
content-encoding: gzip
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
main.iliyard.ge/templates/maintpl/assets/slider.js
200 OK 317 B URL HTTP/2 main.iliyard.ge/templates/maintpl/assets/slider.js
IP
ASN #203301 Datacenter Ltd
Hash 74303df29ccc3933ee0d9699463ab37b
4edad065890dc1a238eea043ea7b0686d989cf6c
37cd52857919141c44e89cc72a1221cb68ca5103f9f54f96c619d135c9d80f09
Analyzer Verdict Alert fortinet Phishing
GET /templates/maintpl/assets/slider.js HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: application/javascript
content-length: 317
x-accel-version: 0.01
last-modified: Wed, 27 Oct 2021 11:00:32 GMT
etag: "2f3-5cf5380b3aef4-gzip"
vary: Accept-Encoding
content-encoding: gzip
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
main.iliyard.ge/engine/classes/js/dle_js.js?v=0df5c
200 OK 7.7 kB URL HTTP/2 main.iliyard.ge/engine/classes/js/dle_js.js?v=0df5c
IP
ASN #203301 Datacenter Ltd
File type HTML document, ASCII text, with very long lines (37805), with no line terminators
Hash 0d7f00e651fa71e26585eb5a422908cb
6f7c7f0b84a8bdf9580006630e5ce59f71f07ed9
dcc276b00f0dfa526ec40ec156b20bdfe1337e5492421b3124d2cd89a2d8fbe5
Analyzer Verdict Alert fortinet Phishing
GET /engine/classes/js/dle_js.js?v=0df5c HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: application/javascript
last-modified: Tue, 12 Oct 2021 12:45:12 GMT
etag: W/"61658358-93ad"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
main.iliyard.ge/templates/maintpl/assets/style.css
200 OK 39 kB URL HTTP/2 main.iliyard.ge/templates/maintpl/assets/style.css
IP
ASN #203301 Datacenter Ltd
File type assembler source, ASCII text, with very long lines (474)
Hash 1a3637365f4762725c05ead52f9a055d
f7a13b0dfdef3c583ad7c02384991c8221b5ec9d
7a2df5d5e4c6e872ece6944cd86bb785ba66f682743c2c3e08f1a3baa434e429
GET /templates/maintpl/assets/style.css HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: text/css
last-modified: Wed, 17 Nov 2021 21:51:00 GMT
etag: W/"61957944-57945"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
main.iliyard.ge/templates/maintpl/assets/css/style.css
200 OK 39 kB URL HTTP/2 main.iliyard.ge/templates/maintpl/assets/css/style.css
IP
ASN #203301 Datacenter Ltd
File type assembler source, ASCII text, with very long lines (474)
Hash cc7cb143693d03c761db44e58472a182
76d3a71768543d1082730f82002f68843e86648b
3145c528652af5403a4c77713cd4cf1b6a693dce70540f0e4257ff135a557ca7
GET /templates/maintpl/assets/css/style.css HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: text/css
last-modified: Tue, 22 Feb 2022 08:18:04 GMT
etag: W/"62149c3c-5a055"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
s3.tradingview.com/external-embedding/embed-widget-tickers.js
304 Not Modified 0 B URL HTTP/2 s3.tradingview.com/external-embedding/embed-widget-tickers.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /external-embedding/embed-widget-tickers.js HTTP/1.1
Host: s3.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
If-Modified-Since: Fri, 23 Sep 2022 10:19:58 GMT
If-None-Match: "573192f389b376dce6bc2d9bb12643a6"
TE: trailers
HTTP/2 304 Not Modified
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Fri, 23 Sep 2022 10:19:58 GMT
server: AmazonS3
date: Sat, 24 Sep 2022 10:20:29 GMT
etag: "573192f389b376dce6bc2d9bb12643a6"
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: IHlPLuO0U1P7UltrkWcEhp7g1-YvcHZDm4oZdNTNXnENCoS0ZuqLOQ==
age: 52992
X-Firefox-Spdy: h2
s3.tradingview.com/external-embedding/embed-widget-tickers.js
304 Not Modified 0 B URL HTTP/2 s3.tradingview.com/external-embedding/embed-widget-tickers.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /external-embedding/embed-widget-tickers.js HTTP/1.1
Host: s3.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
If-Modified-Since: Fri, 23 Sep 2022 10:19:58 GMT
If-None-Match: "573192f389b376dce6bc2d9bb12643a6"
TE: trailers
HTTP/2 304 Not Modified
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Fri, 23 Sep 2022 10:19:58 GMT
server: AmazonS3
date: Sat, 24 Sep 2022 10:20:29 GMT
etag: "573192f389b376dce6bc2d9bb12643a6"
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cd6WACGovvgfuC1hQ9vcSxEX4CazaG70hucnKQ9wgazyOOsdMuyA0Q==
age: 52992
X-Firefox-Spdy: h2
main.iliyard.ge/uploads/ulogo3.png
200 OK 6.8 kB URL HTTP/2 main.iliyard.ge/uploads/ulogo3.png
IP
ASN #203301 Datacenter Ltd
File type PNG image data, 459 x 96, 8-bit/color RGBA, non-interlaced\012- data
Hash 97d855b3f4f4bd7a4360a5a4d15ac421
0f6430c6f6b81f13ec240d6bf0fd9b93461d04d8
d42fab123a4676275f10853b3ea28f216d7b59dd27bbfa67aa1545bdd2e08880
GET /uploads/ulogo3.png HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: image/png
content-length: 6801
last-modified: Fri, 12 Nov 2021 13:46:16 GMT
etag: "618e7028-1a91"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
main.iliyard.ge/uploads/home02.png
200 OK 3.2 kB URL HTTP/2 main.iliyard.ge/uploads/home02.png
IP
ASN #203301 Datacenter Ltd
File type PNG image data, 150 x 124, 8-bit/color RGBA, non-interlaced\012- data
Hash d0566b89cd60157896f9ce1bca1f71d8
5a432bee41080507fd2fe21177ebe4151d5bb386
7906fd82b9bbe323f80c5d3e2a3553e6abe55d1f82c2a8b9b61ca92a07a03e17
GET /uploads/home02.png HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: image/png
content-length: 3162
last-modified: Thu, 16 Dec 2021 00:59:16 GMT
etag: "61ba8f64-c5a"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
main.iliyard.ge/uploads/home04.png
200 OK 2.3 kB URL HTTP/2 main.iliyard.ge/uploads/home04.png
IP
ASN #203301 Datacenter Ltd
File type PNG image data, 150 x 124, 8-bit/color RGBA, non-interlaced\012- data
Hash 00ba02f635693729deaae4fd00678902
9d5946cbfc881437b079ba72097f97f1af3bdae1
da4dfafa6878550228bc3ceb7e36444af9ec80ce4aeb37593675b7ec9a43d870
GET /uploads/home04.png HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: image/png
content-length: 2331
last-modified: Thu, 16 Dec 2021 00:59:16 GMT
etag: "61ba8f64-91b"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
main.iliyard.ge/uploads/united-states.png
200 OK 75 kB URL HTTP/2 main.iliyard.ge/uploads/united-states.png
IP
ASN #203301 Datacenter Ltd
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 0449ba25dc0b02f8a19c018b154b4600
269d3820522ea49417da6bb9100a68ecd31229d6
9b18b43c4a99418350cac6ebd65c9a29a112447d42ef44e08e03d32c80495fdc
GET /uploads/united-states.png HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: image/png
content-length: 75336
last-modified: Mon, 11 Apr 2022 06:45:56 GMT
etag: "6253cea4-12648"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
main.iliyard.ge/uploads/fotlogo.png
200 OK 2.2 kB URL HTTP/2 main.iliyard.ge/uploads/fotlogo.png
IP
ASN #203301 Datacenter Ltd
File type PNG image data, 459 x 96, 8-bit/color RGBA, non-interlaced\012- data
Hash 40968428d5ba4711dc301e2eabbed7da
5e875cbc8b2093a23aa980be492014a83a0413ef
6afd9e1b4766c6cb25f2ce10706f79c7acb9bfa7852d922ede77e0b96d98455c
GET /uploads/fotlogo.png HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: image/png
content-length: 2219
last-modified: Thu, 11 Nov 2021 08:24:36 GMT
etag: "618cd344-8ab"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
main.iliyard.ge/uploads/home03.png
200 OK 2.9 kB URL HTTP/2 main.iliyard.ge/uploads/home03.png
IP
ASN #203301 Datacenter Ltd
File type PNG image data, 150 x 124, 8-bit/color RGBA, non-interlaced\012- data
Hash 05cc14abd99780a88c267b9a6e98b78f
e3670ef656b7057a9c148f4da6d8b8a73f839fad
5329ae9a0f217fd29688a1a99dded863128c237937ff0ae4e2137c1c461fca9c
GET /uploads/home03.png HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: image/png
content-length: 2935
last-modified: Thu, 16 Dec 2021 00:59:16 GMT
etag: "61ba8f64-b77"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
main.iliyard.ge/uploads/home01.png
200 OK 3.5 kB URL HTTP/2 main.iliyard.ge/uploads/home01.png
IP
ASN #203301 Datacenter Ltd
File type PNG image data, 150 x 124, 8-bit/color RGBA, non-interlaced\012- data
Hash 35d30c1f2c18112409184e058c6a7ca3
c197104dde8352e3b85f8c8187d074cc3a14bba6
2c529011588b330d046577f3e4004d126859b20713690b86c5aa809bb0cfd3ff
GET /uploads/home01.png HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: image/png
content-length: 3537
last-modified: Thu, 16 Dec 2021 00:59:15 GMT
etag: "61ba8f63-dd1"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
main.iliyard.ge/uploads/georgia.png
200 OK 13 kB URL HTTP/2 main.iliyard.ge/uploads/georgia.png
IP
ASN #203301 Datacenter Ltd
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 0b50a1d0fba15a6b79b085b5256f3764
d46e16cc9631421a8a6ccccdd2d6583a12f31240
b2ca83f2463e32f2807c9bab7a1f175245f84f2cf840d1ff389365b7aa0ca082
GET /uploads/georgia.png HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: image/png
content-length: 13130
last-modified: Tue, 30 Nov 2021 01:09:50 GMT
etag: "61a579de-334a"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
main.iliyard.ge/templates/maintpl/assets/images/hero/slider-cybersecurity-slide-01-image-01.png
200 OK 3.8 kB URL HTTP/2 main.iliyard.ge/templates/maintpl/assets/images/hero/slider-cybersecurity-slide-01-image-01.png
IP
ASN #203301 Datacenter Ltd
File type PNG image data, 513 x 583, 8-bit/color RGBA, non-interlaced\012- data
Hash 1cb5b073874e583f8d6eb3e6562ddfe3
434abe1f5db5c07486df46da19599a56cde953f6
45a14a1ef249488c74708a047af9e01a4a01199ddd83dcd454db0cbc2e411ffd
GET /templates/maintpl/assets/images/hero/slider-cybersecurity-slide-01-image-01.png HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: image/png
content-length: 3825
last-modified: Tue, 12 Oct 2021 12:52:40 GMT
etag: "61658518-ef1"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
main.iliyard.ge/uploads/iliyard-main7.jpg
200 OK 95 kB URL HTTP/2 main.iliyard.ge/uploads/iliyard-main7.jpg
IP
ASN #203301 Datacenter Ltd
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 1920x711, components 3\012- data
Hash f8339ad7032908ea9b1e40bf6485199b
287b072bcb760845eb30e4a12e958b39acd13dda
3da9a7e1a4ab10898e238da7d8cf3eccef35dcb29974ed4c5f0b68eac8839587
GET /uploads/iliyard-main7.jpg HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:28 GMT
content-type: image/jpeg
content-length: 95111
last-modified: Thu, 16 Dec 2021 01:19:04 GMT
etag: "61ba9408-17387"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
main.iliyard.ge/templates/maintpl/assets/css/vendor/bootstrap.min.css
200 OK 119 kB URL HTTP/2 main.iliyard.ge/templates/maintpl/assets/css/vendor/bootstrap.min.css
IP
ASN #203301 Datacenter Ltd
File type ASCII text, with very long lines (64777), with CRLF line terminators
Size 119 kB (118677 bytes)
Hash c0ac9d8ee9c1df3001d5c887aca59339
4839ece4109cbb42d615cd431e6202d8d00ade3f
162986eb55e906e1a17aa5bf4047fc8ce78a00a11f2f8ab9af9cc1328a6a2431
GET /templates/maintpl/assets/css/vendor/bootstrap.min.css HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: text/css
last-modified: Tue, 12 Oct 2021 12:51:50 GMT
etag: W/"616584e6-2b972"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
main.iliyard.ge/templates/maintpl/assets/css/vendor/vendor.min.css
200 OK 158 kB URL HTTP/2 main.iliyard.ge/templates/maintpl/assets/css/vendor/vendor.min.css
IP
ASN #203301 Datacenter Ltd
File type ASCII text, with very long lines (65304), with CRLF line terminators
Size 158 kB (158536 bytes)
Hash c61a43ca8e65ac1da5d973ed11e867bc
e81888eb4efeb73c4a3705e740083339e4ac94d7
d1087b6a6cf7f87140a5c9b0b8809ae6d1f692a48b323aae456a19a52aa0717e
GET /templates/maintpl/assets/css/vendor/vendor.min.css HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: text/css
last-modified: Tue, 12 Oct 2021 12:51:50 GMT
etag: W/"616584e6-4547a"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
main.iliyard.ge/templates/maintpl/assets/gif-logic.js
200 OK 20 kB URL HTTP/2 main.iliyard.ge/templates/maintpl/assets/gif-logic.js
IP
ASN #203301 Datacenter Ltd
File type ASCII text, with CRLF line terminators
Hash b3f3bdd1466d30e797dd78083b1b3d6f
95eb8596b43c2aeac341c73854bbf28131fcac35
b8138df92bf791372cf5c1d614b6faa949a38a6724245191097b4b42eba9a9ae
Analyzer Verdict Alert fortinet Phishing
GET /templates/maintpl/assets/gif-logic.js HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: application/javascript
last-modified: Tue, 12 Oct 2021 12:47:18 GMT
etag: W/"616583d6-11a9"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
main.iliyard.ge/templates/maintpl/assets/font/Perpetua-Bold.woff2
200 OK 26 kB URL HTTP/2 main.iliyard.ge/templates/maintpl/assets/font/Perpetua-Bold.woff2
IP
ASN #203301 Datacenter Ltd
File type Web Open Font Format (Version 2), TrueType, length 26396, version 1.0\012- data
Hash 2cfdcdb427e9ea0d7d9aa6b609a85346
b84959bc6e3f0a55f4373b81e70e8023d96e0c89
c2889f5576f3eb9d04392c35e9f93c7c6a09ab9de0794e7b566e12494c0c7d05
Analyzer Verdict Alert fortinet Phishing
GET /templates/maintpl/assets/font/Perpetua-Bold.woff2 HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://main.iliyard.ge/templates/maintpl/assets/css/style.css
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:28 GMT
content-type: font/woff2
content-length: 26396
last-modified: Tue, 12 Oct 2021 12:47:22 GMT
etag: "616583da-671c"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
main.iliyard.ge/templates/maintpl/assets/css/phone-version.css
200 OK 46 kB URL HTTP/2 main.iliyard.ge/templates/maintpl/assets/css/phone-version.css
IP
ASN #203301 Datacenter Ltd
Hash 01a84d692b9cf89fd139b4b15c588873
b9b494e0a8abedc409689d98b9ce753e6c17f18e
f8100d87a7eb6b76cd8c122069ddf1935158001dcd8a691c9ba83a866f8115a0
GET /templates/maintpl/assets/css/phone-version.css HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: text/css
last-modified: Tue, 02 Nov 2021 13:46:07 GMT
etag: W/"6181411f-78e"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
main.iliyard.ge/uploads/ftwallpaper.jpg
200 OK 97 kB URL HTTP/2 main.iliyard.ge/uploads/ftwallpaper.jpg
IP
ASN #203301 Datacenter Ltd
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 1962x771, components 3\012- data
Hash da71e346def617d267ec908007d24319
a3f06f26e09e8ba93cbee9a873c871b11cbd7603
db59d0b8fb2bfc1839a900f7b46323bfea0d4d41100ba3e3dc39f40fb5e79dbd
GET /uploads/ftwallpaper.jpg HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:28 GMT
content-type: image/jpeg
content-length: 97139
last-modified: Thu, 11 Nov 2021 08:22:13 GMT
etag: "618cd2b5-17b73"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
main.iliyard.ge/templates/maintpl/assets/images/icons/light-close.png
200 OK 187 B URL HTTP/2 main.iliyard.ge/templates/maintpl/assets/images/icons/light-close.png
IP
ASN #203301 Datacenter Ltd
File type PNG image data, 24 x 24, 2-bit colormap, non-interlaced\012- data
Hash c1b43adb6a63a1c158216808d88e92b3
c759d6521ae65b1a7fe441b3b2ca7ae854aaf903
7df974e001657753c0f1b001c39ab6c76c362d4dab1551f15c0d2f0a8e6e4d90
GET /templates/maintpl/assets/images/icons/light-close.png HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/templates/maintpl/assets/css/style.css
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:28 GMT
content-type: image/png
content-length: 187
x-accel-version: 0.01
last-modified: Tue, 12 Oct 2021 12:52:42 GMT
etag: "bb-5ce275237fa80"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
main.iliyard.ge/templates/maintpl/assets/css/plugins/plugins.min.css
200 OK 1.0 MB URL HTTP/2 main.iliyard.ge/templates/maintpl/assets/css/plugins/plugins.min.css
IP
ASN #203301 Datacenter Ltd
File type ASCII text, with very long lines (48942)
Size 1.0 MB (1015712 bytes)
Hash 3868160babd00677611c15fb93860fcc
44dcf86b0b67be44cf68194ee287e637587949a1
702df233cdf2063be6627a0381d03a3b7dd33b95e8ac33d6effb18a67cbc09a2
GET /templates/maintpl/assets/css/plugins/plugins.min.css HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: text/css
last-modified: Tue, 22 Feb 2022 08:27:19 GMT
etag: W/"62149e67-1ca92"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
main.iliyard.ge/templates/maintpl/assets/fonts/fa-light-300.woff2
200 OK 159 kB URL HTTP/2 main.iliyard.ge/templates/maintpl/assets/fonts/fa-light-300.woff2
IP
ASN #203301 Datacenter Ltd
File type Web Open Font Format (Version 2), TrueType, length 159376, version 1.0\012- data
Size 159 kB (159376 bytes)
Hash 23fbd7c6763eca9c0d6079b3c56c5b1f
a3719ea0854dc3b753b276e64b18ec2737cede2c
a4388bb9500288f960437fc3efa557cc43a52633ecca4d3561cce0e0b1c82713
Analyzer Verdict Alert fortinet Phishing
GET /templates/maintpl/assets/fonts/fa-light-300.woff2 HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://main.iliyard.ge/templates/maintpl/assets/css/vendor/vendor.min.css
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:28 GMT
content-type: font/woff2
content-length: 159376
last-modified: Tue, 12 Oct 2021 12:52:04 GMT
etag: "616584f4-26e90"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
main.iliyard.ge/templates/maintpl/assets/fonts/fa-regular-400.woff2
200 OK 147 kB URL HTTP/2 main.iliyard.ge/templates/maintpl/assets/fonts/fa-regular-400.woff2
IP
ASN #203301 Datacenter Ltd
File type Web Open Font Format (Version 2), TrueType, length 147092, version 1.0\012- data
Size 147 kB (147092 bytes)
Hash 2fa6bcb87bcf488cbc93e7391cb3373a
3c4ed821eab65c60f9f9b8da0ea039dcdb0cc6fc
1a5371729ea35a55e4b55f85dea603692a645093e59dda4818fb9209a8ca031f
Analyzer Verdict Alert fortinet Phishing
GET /templates/maintpl/assets/fonts/fa-regular-400.woff2 HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://main.iliyard.ge/templates/maintpl/assets/css/vendor/vendor.min.css
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:28 GMT
content-type: font/woff2
content-length: 147092
last-modified: Tue, 12 Oct 2021 12:51:52 GMT
etag: "616584e8-23e94"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
img.ge/images/00825774109752563516.gif
200 OK 658 kB URL HTTP/2 img.ge/images/00825774109752563516.gif
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 360 x 360\012- data
Size 658 kB (658513 bytes)
Hash 0704888a3cc3877e662019cfb1072337
d6f14b858a436e2f98257a0f1c5a838ad1dc6095
b9300fe7d3e09b9246d81d85d3f46c0c2c447ac831386ff8b498d6267531b1d1
GET /images/00825774109752563516.gif HTTP/1.1
Host: img.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 02 Oct 2022 01:03:28 GMT
content-type: image/gif
last-modified: Wed, 17 Nov 2021 19:20:29 GMT
accept-ranges: bytes
content-length: 658513
date: Sun, 25 Sep 2022 01:03:28 GMT
server: LiteSpeed
alt-svc: quic=":443"; ma=2592000; v="43,46", h3-Q043=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-25=":443"; ma=2592000, h3-27=":443"; ma=2592000
X-Firefox-Spdy: h2
main.iliyard.ge/templates/maintpl/assets/css/assets/fonts/Marcellus-Regular.woff2
404 Not Found 329 B URL HTTP/2 main.iliyard.ge/templates/maintpl/assets/css/assets/fonts/Marcellus-Regular.woff2
IP
ASN #203301 Datacenter Ltd
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 7536581df9f81b437b2ee9b37fb57ce5
d4650a3ab327224b4da23d3bdb2adbb6f86bfd0a
2141a2f08e7f322de1490fa625e06eaf66a2f9653c67e5ecfeb034e3d36f84a3
Analyzer Verdict Alert fortinet Phishing
GET /templates/maintpl/assets/css/assets/fonts/Marcellus-Regular.woff2 HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://main.iliyard.ge/templates/maintpl/assets/css/plugins/plugins.min.css
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sun, 25 Sep 2022 01:03:28 GMT
content-type: text/html; charset=iso-8859-1
content-length: 329
strict-transport-security: max-age=63072000; includeSubDomains
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3496
Expires: Sun, 25 Sep 2022 02:01:44 GMT
Date: Sun, 25 Sep 2022 01:03:28 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c48523c-250d-4030-8145-14c8967dc600.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c48523c-250d-4030-8145-14c8967dc600.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dfdacc8edea3c24dad020d7e9c11b3f4
2b6e37596e88b62f288dc8e8c937fd904fae28d5
338a44f3bcc01bdd197f037dd8f8bf58a18dea00127465488efe76fb72a6fdff
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c48523c-250d-4030-8145-14c8967dc600.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8914
x-amzn-requestid: 8cfdc32e-f04a-4fd6-a1f1-632934a682fd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y-_EUHqJoAMF7MQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632f7881-14a6d8ef126409964607e0aa;Sampled=0
x-amzn-remapped-date: Sat, 24 Sep 2022 21:37:05 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: kdF6En2vbJhRH1bkYMOuNm5XOIsT1qs3FE281N1SKn1FbyW-oNZsEw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 21:37:06 GMT
age: 12382
etag: "2b6e37596e88b62f288dc8e8c937fd904fae28d5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
main.iliyard.ge/templates/maintpl/assets/gif/vd3.mp4
206 Partial Content 532 kB URL HTTP/2 main.iliyard.ge/templates/maintpl/assets/gif/vd3.mp4
IP
ASN #203301 Datacenter Ltd
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Size 532 kB (531692 bytes)
Hash cd4324c49a8a0eaee3c07868fd5e6c25
677c98eb30f720037bca367826fbbce87b761e1c
932114f0641247fb983a94e6d2ba66cd25d1d519690a510b67678ef9115654bb
Analyzer Verdict Alert fortinet Phishing
GET /templates/maintpl/assets/gif/vd3.mp4 HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
server: nginx
date: Sun, 25 Sep 2022 01:03:28 GMT
content-type: video/mp4
content-length: 2489693
last-modified: Tue, 12 Oct 2021 12:47:54 GMT
etag: "616583fa-25fd5d"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
content-range: bytes 0-2489692/2489693
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6307cf78-7c68-41f1-9dfd-ba063eeb3f4b.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6307cf78-7c68-41f1-9dfd-ba063eeb3f4b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d7bd3afd3069904500c28e9bb16587e8
a881666627e1077859ed1941cee576caf600d798
78a7b0a2127c583aba569abace503cff376cde67d5faa9a346c1494d91e8f3cf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6307cf78-7c68-41f1-9dfd-ba063eeb3f4b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5172
x-amzn-requestid: d366d3e0-71d7-404c-a93b-3267852824ef
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y-_T5F5PoAMFqWw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632f78e5-52362b5f0dc1ee8951eebc07;Sampled=0
x-amzn-remapped-date: Sat, 24 Sep 2022 21:38:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: E5AjrYJrZjEREIaYV21riZZIvhquVUTRRwArp-UNXAEKlwHUL1CtIw==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 21:58:23 GMT
age: 11105
etag: "a881666627e1077859ed1941cee576caf600d798"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3 DIY-Thermocam raw data\012- (Lepton 2.x), scale 3-257, spot sensor temperature 0.000000, unit celsius, color scheme 0, show scale bar, calibration: offset 0.000000, slope 241253891388563521536.000000\012- data
Hash b3a72e81317074689a71dac7059e4b6a
b6d56333d7f1ea7ddc8838d84de498ff913c5464
e665a8821b5e7b2e78787647a08d629bf70cbf4cbfee2057c8601cf0565154a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12826
x-amzn-requestid: f075cf62-acfc-4bc1-be14-7c3dafb7aaed
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YfVRNFP-oAMFgrA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322cf3a-184b678042d64ac9266b1128;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 07:07:38 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: W6ZD1652Yn1xqZG7ehDcirlYoG8Hcsrdj11Fzfgj7zb-OiU8xHj1gw==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 21:37:32 GMT
age: 12356
etag: "b6d56333d7f1ea7ddc8838d84de498ff913c5464"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
main.iliyard.ge/templates/maintpl/assets/js/vendor/modernizr-2.8.3.min.js
200 OK 11 kB URL HTTP/2 main.iliyard.ge/templates/maintpl/assets/js/vendor/modernizr-2.8.3.min.js
IP
ASN #203301 Datacenter Ltd
File type HTML document, ASCII text, with very long lines (14856), with CRLF line terminators
Hash 92fdf51288a09ab9d8b82b2f6563487e
90ca994df35ed8603081b16fd1570e4655898456
1d8ccdb014101af56a487ac7220e160ee4d7ecddb8305521786d37a8f1460098
Analyzer Verdict Alert fortinet Phishing
GET /templates/maintpl/assets/js/vendor/modernizr-2.8.3.min.js HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: application/javascript
last-modified: Tue, 12 Oct 2021 12:47:22 GMT
etag: W/"616583da-3ca1"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73844595-b7d7-4585-a846-ab38b27af847.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73844595-b7d7-4585-a846-ab38b27af847.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1a9f4d93ea4a06628bc31a00a9c4e692
27f05479fd4fbe68993748fdb043850807ddebdd
31b0809297c7e8acbb46b544cf6f3f4ffaa6bda7a8896fe8678fbfc839a115ab
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73844595-b7d7-4585-a846-ab38b27af847.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11435
x-amzn-requestid: e1288aca-0375-4ce8-9daa-81afe23c9c5c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y-_ETHE6oAMFqGQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632f7881-01a836ab57a326356f838bfc;Sampled=0
x-amzn-remapped-date: Sat, 24 Sep 2022 21:37:05 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: X8xpMQCKuQGx46BrQ_851U0HhXIALy0k22WRO-zp8TuFhK0KaHItBw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 21:37:06 GMT
age: 12382
etag: "27f05479fd4fbe68993748fdb043850807ddebdd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 6738d1761d3c5000a4a15aa4abf2f7d0
7a81af5cdb7fb0d139ac3974e1fc3a031a0b0b49
7920e24baa7bcf6ac07d419e4e2a71ad39e8ad273e6d12003e0730adb95c9afa
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 746
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 01:03:28 GMT
Last-Modified: Sun, 25 Sep 2022 00:51:02 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cfbe772bfdcc656e94ceed53256863ca
34055ed3761ab4b69af25a2cb70ca7a337a9f79b
7464464772c70e6a9f1b516b9fc3b60f4e567c10f968c573d5a187f5f22d0722
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 01:03:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
main.iliyard.ge/map3/logo2.png
200 OK 18 kB URL HTTP/2 main.iliyard.ge/map3/logo2.png
IP
ASN #203301 Datacenter Ltd
File type PNG image data, 350 x 350, 16-bit/color RGBA, non-interlaced\012- data
Hash bea10e574f44403a7571c2a2fc060ada
a502ec0c49cc35b24564311c1a46173ede1f2978
b0275599e7665179c6f5b7d8acb637972d5280b6ffc119e07afcca008097b60d
GET /map3/logo2.png HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/map3/index.html
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:28 GMT
content-type: image/png
content-length: 18363
last-modified: Sat, 06 Nov 2021 16:31:08 GMT
etag: "6186adcc-47bb"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
main.iliyard.ge/map3/bgmap.jpg
200 OK 728 kB URL HTTP/2 main.iliyard.ge/map3/bgmap.jpg
IP
ASN #203301 Datacenter Ltd
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2063x1080, components 3\012- data
Size 728 kB (728327 bytes)
Hash 320835aadf396b9ea76f404063fb1233
8705b36c5a6698c0328cdd1bc65ba546a53a54c9
46515b6641c029d825022a7b87e53791aa243c3a37c2d46f4e8974960ef203a2
GET /map3/bgmap.jpg HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/map3/index.html
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:28 GMT
content-type: image/jpeg
content-length: 728327
last-modified: Mon, 11 Apr 2022 07:32:26 GMT
etag: "6253d98a-b1d07"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
main.iliyard.ge/map3/style.css
200 OK 9.7 kB URL HTTP/2 main.iliyard.ge/map3/style.css
IP
ASN #203301 Datacenter Ltd
File type ASCII text, with CRLF line terminators
Hash bdcda616469a046f3e7be9bb645baa9f
a84172f80005451fe1a4a3cdc9fa5ca60180085a
01575e8d4f5170bfa04e94fbf9d4f54f179281f8d4f3154180d1067b011e5fb7
GET /map3/style.css HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/map3/index.html
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:28 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 13:26:47 GMT
etag: W/"62597297-402f"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
main.iliyard.ge/map2/index.js
200 OK 93 kB URL HTTP/2 main.iliyard.ge/map2/index.js
IP
ASN #203301 Datacenter Ltd
File type ASCII text, with CRLF line terminators
Hash 52cf5088a8cba79616bff5812a536f50
6ad4afbcb971a0cc75d66a31dfaacecac294b507
1b84529851730ffc6edfb0f3e758d6b579d2ed80621a3e93e03a6d1a73a788a9
Analyzer Verdict Alert fortinet Phishing
GET /map2/index.js HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/map3/index.html
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:28 GMT
content-type: application/javascript
last-modified: Wed, 27 Oct 2021 12:35:59 GMT
etag: W/"617947af-660"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
main.iliyard.ge/templates/maintpl/assets/gif/vd5.mp4
206 Partial Content 74 kB URL HTTP/2 main.iliyard.ge/templates/maintpl/assets/gif/vd5.mp4
IP
ASN #203301 Datacenter Ltd
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Hash 97fbbeef9620fd8e6ac5813bde31569d
473684aaf15008ec4a4542551a1d979d6beb05db
952459711eaeea1deb5a6500ed9675733ac483d0594e5b9b4b41733184a4e62b
Analyzer Verdict Alert fortinet Phishing
GET /templates/maintpl/assets/gif/vd5.mp4 HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
server: nginx
date: Sun, 25 Sep 2022 01:03:28 GMT
content-type: video/mp4
content-length: 3115024
last-modified: Tue, 12 Oct 2021 12:47:52 GMT
etag: "616583f8-2f8810"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
content-range: bytes 0-3115023/3115024
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 6738d1761d3c5000a4a15aa4abf2f7d0
7a81af5cdb7fb0d139ac3974e1fc3a031a0b0b49
7920e24baa7bcf6ac07d419e4e2a71ad39e8ad273e6d12003e0730adb95c9afa
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 746
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 01:03:28 GMT
Last-Modified: Sun, 25 Sep 2022 00:51:02 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cfbe772bfdcc656e94ceed53256863ca
34055ed3761ab4b69af25a2cb70ca7a337a9f79b
7464464772c70e6a9f1b516b9fc3b60f4e567c10f968c573d5a187f5f22d0722
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 01:03:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.tradingview.com/static/localization/translations/en.39dbf21df23abce9.js
200 OK 69 kB URL HTTP/2 static.tradingview.com/static/localization/translations/en.39dbf21df23abce9.js
IP
File type Unicode text, UTF-8 text, with very long lines (65504), with no line terminators
Hash 9f4ec2c9c1570b883418ce5c1d4e080b
259e92455a809a614b2b1443976d5dad7022b8ba
59a9f5992973a5e7c8c8d843ad4106f4dddef335c60c775e3e43a2de16e058cd
GET /static/localization/translations/en.39dbf21df23abce9.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 69437
date: Fri, 23 Sep 2022 10:21:05 GMT
last-modified: Fri, 23 Sep 2022 08:31:25 GMT
etag: "632d6edd-10f3d"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mZ9KdRz1lGqocTKaHnSzXHTJELGDaP1Heeu4RX7IuvsgAD-MiyYIcQ==
age: 139342
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/9610.4b9f8462aa3659c59d53.css
200 OK 613 B URL HTTP/2 static.tradingview.com/static/bundles/embed/9610.4b9f8462aa3659c59d53.css
IP
File type ASCII text, with very long lines (1510), with no line terminators
Hash 2ed39ab10b595276b053cddd1eb97895
681c53e78e44ed13467fecce18ea2601876c4928
0b15d02d18e4d0166410d14ed6b9a4c0dabebc4c6216ff6a449a8d16c2666aea
GET /static/bundles/embed/9610.4b9f8462aa3659c59d53.css HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 613
date: Thu, 18 Aug 2022 10:18:06 GMT
last-modified: Thu, 18 Aug 2022 08:39:39 GMT
etag: "62fdfacb-265"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NVyL1MiyEQtwcV3JP-QyMVtm53ltD-R1xqeKz-Uy-gmlM8GImEwkAw==
age: 3249922
content-security-policy: default-src 'none'
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/3086.0d1fcc5f4fdd633672c7.css
200 OK 275 B URL HTTP/2 static.tradingview.com/static/bundles/embed/3086.0d1fcc5f4fdd633672c7.css
IP
File type ASCII text, with very long lines (948), with no line terminators
Hash fed499f0b2313d63adf3417b0bae8e27
a8541f56b888a27d47cbd2f298bd0ba024831be9
ea584321e666a290e526cb885982143175d4324dc21947a9c53b58dc60b56f1e
GET /static/bundles/embed/3086.0d1fcc5f4fdd633672c7.css HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 275
date: Thu, 18 Aug 2022 10:18:06 GMT
last-modified: Thu, 18 Aug 2022 08:39:37 GMT
etag: "62fdfac9-113"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VtN_n3TMsMXudzZRNpfckYS2efru2CCBNHjDPqwlIXVldpDBnU0auA==
age: 3249922
content-security-policy: default-src 'none'
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/72369.9291747e1fab1074d523.js
200 OK 33 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/72369.9291747e1fab1074d523.js
IP
File type Unicode text, UTF-8 text, with very long lines (3072)
Hash 9c9774810a51f9f1b3a727876d3583f3
3901e2ff90220d4364bd0a65037f0bd219115069
ba0aa991398b2bcd70e58c5706503f3735dbee5750a63bfcfa2903271a0820c0
GET /static/bundles/embed/72369.9291747e1fab1074d523.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 33014
date: Tue, 30 Aug 2022 10:48:07 GMT
last-modified: Tue, 30 Aug 2022 10:04:53 GMT
etag: "630de0c5-80f6"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: StSjzNCVYPFBxG9AhXqs1ymjaOOQ4m_f01pKQHGkw_xEBnVJGdh8uw==
age: 2211321
content-security-policy: default-src 'none'
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/69952.06b0e333ddc07ff1bde0.js
200 OK 4.1 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/69952.06b0e333ddc07ff1bde0.js
IP
File type ASCII text, with very long lines (11868)
Hash 82c0166d07dafbc60c0256135ff70c1d
2640a815ffbed854738cf29d2ab876d55f8c60dc
5a880fd727f2a0141993963276994f900261db54dc1e62577c23d0f1dc03192a
GET /static/bundles/embed/69952.06b0e333ddc07ff1bde0.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 4128
date: Wed, 21 Sep 2022 10:20:06 GMT
last-modified: Wed, 21 Sep 2022 08:40:50 GMT
etag: "632ace12-1020"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: IpZ2FUnKyZhAWWAYYbR7Ft8R1i2ey6le_4z8OzwdhesdM-LVByykhA==
age: 312201
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/59349.06c5af95e99eb360e0d3.js
200 OK 4.5 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/59349.06c5af95e99eb360e0d3.js
IP
File type ASCII text, with very long lines (3036)
Hash 222668586f47e46b73c5c28e18e2f785
9613ae8405a964b43dfa22e4bd8ffb835981970a
7cadd0fb593df958580a40f6e191e5b5b007a50a731ed48f384605748f01d53a
GET /static/bundles/embed/59349.06c5af95e99eb360e0d3.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 4541
date: Wed, 07 Sep 2022 10:11:06 GMT
last-modified: Wed, 07 Sep 2022 08:33:52 GMT
etag: "63185770-11bd"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gSK6hC7Zfrj3BD9jT4lAmTXNdqF_mYCz9Ct5mXmBbODaqL8WBbrxoA==
age: 1522342
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/95170.8c229ea611144b3d939d.js
200 OK 8.9 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/95170.8c229ea611144b3d939d.js
IP
File type ASCII text, with very long lines (3072)
Hash fbdc997c1e2881ef8bb545eb7c1f2bdb
8b4bb8fee879ef2ef0d720d8d3096740bab8a106
0f0fed29649e13d5b891443c4f819050dfb7e42c58d2c0f9170af36e5da7d495
GET /static/bundles/embed/95170.8c229ea611144b3d939d.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 8938
date: Sat, 30 Jul 2022 06:28:07 GMT
last-modified: Fri, 29 Jul 2022 13:14:57 GMT
etag: "62e3dd51-22ea"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ruguSp7w0EovVW6UDFVvDnUBNpB9maA8ntBg7D_ML9fPCKqUBefIaA==
age: 4905321
content-security-policy: default-src 'none'
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/35664.d2d84158aec377ba99cd.js
200 OK 7.7 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/35664.d2d84158aec377ba99cd.js
IP
File type ASCII text, with very long lines (3070)
Hash c025a7f2840bc65d2524e723a1ca0f83
896c2361b6de9c2393a8984523e2fc718c1bd7be
33192f858b6344bc05a3d79d7ab8ebdf2ef2e77e5cd3af5b78087ada39b852ed
GET /static/bundles/embed/35664.d2d84158aec377ba99cd.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 7686
date: Sat, 30 Jul 2022 06:28:06 GMT
last-modified: Fri, 29 Jul 2022 13:14:59 GMT
etag: "62e3dd53-1e06"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZhPGIewvnEvc2wbN92HfciM81aTZ1shVTi8Qr44JlYQspct5jWJi9g==
age: 4905322
content-security-policy: default-src 'none'
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/6373.cbf79a416472d97ee266.js
200 OK 8.9 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/6373.cbf79a416472d97ee266.js
IP
File type Unicode text, UTF-8 text, with very long lines (3071)
Hash 2bb2f6ec14e1b7033a1efb7bfd636f22
36218963433e51d8c95ecf68abdbf37fff1c7b24
71ea00c5c9d3ce9cbe2faede0ca2dfef8c741de04257d8a9b2ab1c14518621e6
GET /static/bundles/embed/6373.cbf79a416472d97ee266.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 8861
date: Wed, 21 Sep 2022 10:20:06 GMT
last-modified: Wed, 21 Sep 2022 08:40:50 GMT
etag: "632ace12-229d"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uHHQh7k_mHmauKO2VwiMLK3PxDL7EUhV-fcZk6umXX7FpQXVGaseXg==
age: 312201
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/47872.b614638f482af661b1f9.js
200 OK 19 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/47872.b614638f482af661b1f9.js
IP
File type Unicode text, UTF-8 text, with very long lines (3072)
Hash bc31af672be65f56e0e123800b74486d
a30c94ad36729c1cb7c1982f20c2567a6dc2cf83
6234758d8c4d5e7e9d7738c97f7a4c06861e0c596e1347c69de7e1ff14c05ec4
GET /static/bundles/embed/47872.b614638f482af661b1f9.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 18927
date: Wed, 21 Sep 2022 10:20:06 GMT
last-modified: Wed, 21 Sep 2022 08:40:50 GMT
etag: "632ace12-49ef"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: h-qixXPSeU_M3bhAz26IQQWvOZoURLOpleDnWLe9KQdjDHYqBHDz-Q==
age: 312202
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/61165.669f518fb3ca12a08781.js
200 OK 9.6 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/61165.669f518fb3ca12a08781.js
IP
File type ASCII text, with very long lines (3071)
Hash 5d9570cd52c8c73b9e1a2e9865429c3e
eb47e79aebf1eb741a9018b31d22c7c10de0e7fd
4729a1722a0cc609a32e59ee76174287c4711b72cde258d0441014f43991b4ee
GET /static/bundles/embed/61165.669f518fb3ca12a08781.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 9641
date: Tue, 30 Aug 2022 10:48:07 GMT
last-modified: Tue, 30 Aug 2022 10:04:54 GMT
etag: "630de0c6-25a9"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FkVQplPCooOH6v0aLNuvXj_CBnsMFUih1CRTqkiROYNvxNk0L4Bi7A==
age: 2211321
content-security-policy: default-src 'none'
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/embed_tickers_widget.de3b8fda66fdacd4e108.js
200 OK 5.3 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/embed_tickers_widget.de3b8fda66fdacd4e108.js
IP
File type ASCII text, with very long lines (3056)
Hash 5e35727bf2d89e18146d65d235dee33b
1dfc763b2c14e9d0f0bfb5cdc86c10bae799431b
1d1ff7f7db5beb34082ad3024341359bfc405728beffbafff57529bda0c17e5e
GET /static/bundles/embed/embed_tickers_widget.de3b8fda66fdacd4e108.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 5300
date: Wed, 21 Sep 2022 10:20:07 GMT
last-modified: Wed, 21 Sep 2022 08:40:50 GMT
etag: "632ace12-14b4"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5CK3FDx2tAA-aKm_ngbXgrONo-3voxxGSoTaJL2qllHsO1FDduug6w==
age: 312201
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/21629.59ea3f34e1413a77f290.js
200 OK 11 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/21629.59ea3f34e1413a77f290.js
IP
File type Unicode text, UTF-8 text, with very long lines (15650)
Hash b3a404cb516ade1695c0705696d97ad1
e63067338645699570f486a7a13f126f16944156
30eddd13db49b8c00d8e64e7bb79266f0ff8b1f76e7699842e60a05ed317fdb4
GET /static/bundles/embed/21629.59ea3f34e1413a77f290.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 11131
date: Thu, 15 Sep 2022 10:58:07 GMT
last-modified: Thu, 15 Sep 2022 08:58:09 GMT
etag: "6322e921-2b7b"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZsKx4debgYlD0CAugqayF6M0PnKK_La8qDfSc02-mpwle69svoxd3A==
age: 828321
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/75932.cd4f83e4607134502a66.js
200 OK 13 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/75932.cd4f83e4607134502a66.js
IP
File type ASCII text, with very long lines (3072)
Hash 2530217b97708764f52dc0cf5845f7ab
87cbc5d07d96eb91b9c1047cbd079ccabfc93faa
9c2c6b71cb207ccd181ea244eb0a336f15c52fd0a856b3186365e38d511cf409
GET /static/bundles/embed/75932.cd4f83e4607134502a66.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 12665
date: Tue, 16 Aug 2022 10:42:05 GMT
last-modified: Tue, 16 Aug 2022 09:48:59 GMT
etag: "62fb680b-3179"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Ti9rteCRdMTMKJ3bDjVG3TeRM8GyH8hyxrubY4megdE5RJho4Xbblw==
age: 3421283
content-security-policy: default-src 'none'
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/72066.f1aaa4b56bfc5daefd58.css
200 OK 272 B URL HTTP/2 static.tradingview.com/static/bundles/embed/72066.f1aaa4b56bfc5daefd58.css
IP
File type ASCII text, with very long lines (1187), with no line terminators
Hash 2c94a40a0cdaab30536f9ff9aac30780
13e3a1701670362dc0356126be21982f8a371247
12b841c633c6498d1604f4d6dc199c8d61b22a45abb7b2d4aacbc364d16c21b6
GET /static/bundles/embed/72066.f1aaa4b56bfc5daefd58.css HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 272
date: Thu, 18 Aug 2022 10:18:06 GMT
last-modified: Thu, 18 Aug 2022 08:39:38 GMT
etag: "62fdfaca-110"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CYnxGFhcd2JKc3WJUdKmgZudsyZLFqNjtN1gt54eQyxckODAEhzyjg==
age: 3249922
content-security-policy: default-src 'none'
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/93419.83330e98cd0f13f52e0f.css
200 OK 1.3 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/93419.83330e98cd0f13f52e0f.css
IP
File type ASCII text, with very long lines (9662), with no line terminators
Hash 1590890d2b95e5dd26b6619078fc3716
7f099065b77017303b41d575174d0506404c2422
0f2d89b30ed40c9645acec4a6708531eb2489aff5aca6f0639d92e6de208c97b
GET /static/bundles/embed/93419.83330e98cd0f13f52e0f.css HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 1254
date: Tue, 06 Sep 2022 10:02:46 GMT
last-modified: Tue, 06 Sep 2022 09:02:07 GMT
etag: "63170c8f-4e6"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: eUHfq84XoJT22Aaa8mDpe4M_U4Z47YtwHpZebc1hPET87XPSSsfruA==
age: 1609242
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/5735.c773d84ae2dfa00f5f7e.css
200 OK 458 B URL HTTP/2 static.tradingview.com/static/bundles/embed/5735.c773d84ae2dfa00f5f7e.css
IP
File type ASCII text, with very long lines (1649), with no line terminators
Hash 7497343e286bffb0f77343a72c52c807
a0b16b6844fec13e7e4f05c5ec1dff354a843128
f775ccacb10b864665283b42df806044d4c07d2b103c4a3d15fc6fa967890a87
GET /static/bundles/embed/5735.c773d84ae2dfa00f5f7e.css HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 458
date: Tue, 06 Sep 2022 10:02:17 GMT
last-modified: Tue, 06 Sep 2022 09:02:06 GMT
etag: "63170c8e-1ca"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Lqp2Dihu5YmkmHgXzrj3tArrWC59qt-Qp8_eoeKhRasReM2zEm5eXw==
age: 1609271
content-security-policy: default-src 'none'
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/4704.721cbfb1a5d6784e3109.css
200 OK 482 B URL HTTP/2 static.tradingview.com/static/bundles/embed/4704.721cbfb1a5d6784e3109.css
IP
File type ASCII text, with very long lines (2185), with no line terminators
Hash 58cbe331cf45c85a52eb02587adc9fef
13f08c64e54a3f211e26f97b80af35abd49b670b
53adcb676377768d48af24466b08fb38f141ede6a9e84b20d72ed3c209aaf647
GET /static/bundles/embed/4704.721cbfb1a5d6784e3109.css HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 482
date: Thu, 18 Aug 2022 10:18:06 GMT
last-modified: Thu, 18 Aug 2022 08:39:39 GMT
etag: "62fdfacb-1e2"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 50Oh4g-YK-AH5u_RKXhoxk1LcucHWUeN-cTy4ur2OWidaGCmVgSt_w==
age: 3249922
content-security-policy: default-src 'none'
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/22641.c7183a76dc0599de9f42.css
200 OK 566 B URL HTTP/2 static.tradingview.com/static/bundles/embed/22641.c7183a76dc0599de9f42.css
IP
File type ASCII text, with very long lines (3872), with no line terminators
Hash 6e6b52d09836b19a082054796f9fbadf
47f855654aca16bb3d22b0a261028c07bfbf3ac1
b66836dc4dcb259fd7f709598dc05417bc69fe1c7f6382e3be864e124f711186
GET /static/bundles/embed/22641.c7183a76dc0599de9f42.css HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 566
date: Thu, 18 Aug 2022 10:18:06 GMT
last-modified: Thu, 18 Aug 2022 08:39:39 GMT
etag: "62fdfacb-236"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XSHFAE23B_kpWAiGvp2aGQ5-ge77CEhckhLcyRwnea0zVT4r_qdwDw==
age: 3249922
content-security-policy: default-src 'none'
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/49859.57ed1f0e14de0ce7dcbb.css
200 OK 275 B URL HTTP/2 static.tradingview.com/static/bundles/embed/49859.57ed1f0e14de0ce7dcbb.css
IP
File type ASCII text, with very long lines (868), with no line terminators
Hash baa8242f859530e38f8b32a9c0615593
c883ab6d475cbd4fea077661f25bbca065950a08
c7b10129b6beba6afdd65d4b6079e7952447d0a79c094ee6a850c7a583fb7406
GET /static/bundles/embed/49859.57ed1f0e14de0ce7dcbb.css HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 275
date: Thu, 18 Aug 2022 10:18:06 GMT
last-modified: Thu, 18 Aug 2022 08:39:39 GMT
etag: "62fdfacb-113"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Bz3XTM8Y7qgYMXXQZGC6B-Ai6p7xOYBNtkK2eRegk-x86SuVU19PSA==
age: 3249922
content-security-policy: default-src 'none'
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/30802.30d503dc3d29d9930510.css
200 OK 1.0 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/30802.30d503dc3d29d9930510.css
IP
File type ASCII text, with very long lines (4310), with no line terminators
Hash 61dc8e3d38960d27d19070df457e524c
046071ceecfb745bbfcc08873d1c2876d3589ff5
09b286eb0b3aa5f289bbd8ffc41875fa5278780a77a6bdb214cce4898f5ba8e0
GET /static/bundles/embed/30802.30d503dc3d29d9930510.css HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 1043
date: Thu, 18 Aug 2022 10:18:32 GMT
last-modified: Thu, 18 Aug 2022 08:39:39 GMT
etag: "62fdfacb-413"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2NYTX3hykMHkAtygu4WKEsFJ8qMBeiUDPPk2ir_073LY3ZhHpneRcQ==
age: 3249896
content-security-policy: default-src 'none'
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/runtime.4bcbc047b131d88cea00.js
200 OK 21 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/runtime.4bcbc047b131d88cea00.js
IP
File type Unicode text, UTF-8 text, with very long lines (3068)
Hash 0169f69b573225f4d9bc3562eebfd087
7bf2019684dbceac5757d356b99b436fa1e83fba
7dea9a4c6044d4f82ff83c28031843b8ddb5f0f92b2b11c02e1d45c4f5eea2f0
GET /static/bundles/embed/runtime.4bcbc047b131d88cea00.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 20747
date: Fri, 23 Sep 2022 10:21:05 GMT
last-modified: Fri, 23 Sep 2022 08:31:49 GMT
etag: "632d6ef5-510b"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: F42wzzA2DCTDcWN0ebqBZml1xuCv--kNEqtvjiFlDumgL52ibHliVw==
age: 139342
X-Firefox-Spdy: h2
fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2
200 OK 35 kB URL HTTP/2 fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 34852, version 1.0\012- data
Hash 0e8eefb4549a2edf26c560cb9845952e
8d0b1718aacad934fd0043c87cbc54aa091396bf
7f653b3ce9d3277457fc6da4edb246ae2f6c913f088c42dcb8cd2e96267aa21a
GET /s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://main.iliyard.ge
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 34852
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 19:28:55 GMT
expires: Thu, 21 Sep 2023 19:28:55 GMT
cache-control: public, max-age=31536000
age: 279273
last-modified: Wed, 27 Apr 2022 16:31:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash da681c2f112645651e5b32be2cfcd052
2e57e4163b8ed8ceebe8c6dde5ff1aa5efc7b946
302a7e1f8156051b7c793c61fbe3e81096374431e22bd9821b4aa38e1a5772f7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 01:03:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
widgetdata.tradingview.com/socket.io/websocket?from=embed-widget%2Ftickers%2F&date=2022_09_23-11_39
101 Switching Protocols 0 B URL HTTP/1.1 widgetdata.tradingview.com/socket.io/websocket?from=embed-widget%2Ftickers%2F&date=2022_09_23-11_39
IP
ASN #394380 LEASEWEB-USA-DAL
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/websocket?from=embed-widget%2Ftickers%2F&date=2022_09_23-11_39 HTTP/1.1
Host: widgetdata.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://s.tradingview.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: AAT5BwjyD4LeibWn8cJtLQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Sun, 25 Sep 2022 01:03:29 GMT
Connection: upgrade
sec-websocket-accept: 1AZLlksAKU3f8cU0dpaDY4/atm0=
sec-websocket-extensions: permessage-deflate
upgrade: websocket
Server: tv
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 58b52380a6b5c598d1ad88e8da148137
a56206a0277aea6e8e2f7629793aba713d8edd0c
561a57c27dfa1f8651a89292428576b626e8700b9cd6b8173a0ce121aa8f9f4a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 01:03:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
main.iliyard.ge/templates/maintpl/assets/css/assets/fonts/Marcellus-Regular.woff2
404 Not Found 329 B URL HTTP/2 main.iliyard.ge/templates/maintpl/assets/css/assets/fonts/Marcellus-Regular.woff2
IP
ASN #203301 Datacenter Ltd
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 7536581df9f81b437b2ee9b37fb57ce5
d4650a3ab327224b4da23d3bdb2adbb6f86bfd0a
2141a2f08e7f322de1490fa625e06eaf66a2f9653c67e5ecfeb034e3d36f84a3
Analyzer Verdict Alert fortinet Phishing
GET /templates/maintpl/assets/css/assets/fonts/Marcellus-Regular.woff2 HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://main.iliyard.ge/templates/maintpl/assets/css/vendor/bootstrap.min.css
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sun, 25 Sep 2022 01:03:29 GMT
content-type: text/html; charset=iso-8859-1
content-length: 329
strict-transport-security: max-age=63072000; includeSubDomains
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/28903.415109541489380d12f6.css
200 OK 219 B URL HTTP/2 static.tradingview.com/static/bundles/embed/28903.415109541489380d12f6.css
IP
File type ASCII text, with very long lines (801), with no line terminators
Hash 97f7a20e8f5b5aab89e7323c3f952f93
0a86a43d70147185f1f356ac3061d461f498a0af
51e40ba29ca9c9b7f89f255331a616a93beb9fb033c029e058a6a45483c0209c
GET /static/bundles/embed/28903.415109541489380d12f6.css HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 219
date: Tue, 06 Sep 2022 10:02:46 GMT
last-modified: Tue, 06 Sep 2022 09:02:06 GMT
etag: "63170c8e-db"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2bW7_3iKjekzKEWeVuVtYypG72-mGdm832S2cNkA9qqKz9KRyyaYuw==
age: 1609243
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/tradingview-copyright-data-impl.8fddca2ccd8456d34a10.js
200 OK 2.1 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/tradingview-copyright-data-impl.8fddca2ccd8456d34a10.js
IP
File type ASCII text, with very long lines (3332)
Hash e6796590284ab6cfb534e922a2ebca47
a18fcd51aab7f7a2510583126f25f33f94bf1626
fa3c19b48ad254a9cd1bc6753b098c4db439979efae0b12705e89087a1541da9
GET /static/bundles/embed/tradingview-copyright-data-impl.8fddca2ccd8456d34a10.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 2082
date: Tue, 06 Sep 2022 10:03:06 GMT
last-modified: Tue, 06 Sep 2022 09:02:07 GMT
etag: "63170c8f-822"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: MB8p5MUrWVe5DqRyh_G1CTTNEZ7WNeDLnrfldZSswU7bvZKBkVD1nQ==
age: 1609223
content-security-policy: default-src 'none'
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-96826332-1
200 OK 42 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-96826332-1
IP
File type ASCII text, with very long lines (1720)
Hash a429b01aa4c5655aa13622733d69359b
a278a9a2c4d3f991db8b4e92040fc86985ba5451
8528f6aabd41a56ec9d3f290b37bf75b3f4a924b244642ee3bc045350a163aae
GET /gtag/js?id=UA-96826332-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s.tradingview.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 25 Sep 2022 01:03:29 GMT
expires: Sun, 25 Sep 2022 01:03:29 GMT
cache-control: private, max-age=900
last-modified: Sun, 25 Sep 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42258
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 58b52380a6b5c598d1ad88e8da148137
a56206a0277aea6e8e2f7629793aba713d8edd0c
561a57c27dfa1f8651a89292428576b626e8700b9cd6b8173a0ce121aa8f9f4a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 01:03:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
widgetdata.tradingview.com/socket.io/websocket?from=embed-widget%2Ftickers%2F&date=2022_09_23-11_39
101 Switching Protocols 0 B URL HTTP/1.1 widgetdata.tradingview.com/socket.io/websocket?from=embed-widget%2Ftickers%2F&date=2022_09_23-11_39
IP
ASN #394380 LEASEWEB-USA-DAL
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/websocket?from=embed-widget%2Ftickers%2F&date=2022_09_23-11_39 HTTP/1.1
Host: widgetdata.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://s.tradingview.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Nxzzuj3Tfqf36zWocP4Kzg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Sun, 25 Sep 2022 01:03:29 GMT
Connection: upgrade
sec-websocket-accept: WJeM3+33h/gGapyOfWEHb399KpM=
sec-websocket-extensions: permessage-deflate
upgrade: websocket
Server: tv
main.iliyard.ge/templates/maintpl/assets/css/assets/fonts/Marcellus-Regular.woff
404 Not Found 328 B URL HTTP/2 main.iliyard.ge/templates/maintpl/assets/css/assets/fonts/Marcellus-Regular.woff
IP
ASN #203301 Datacenter Ltd
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a2b33f78b0d6ea5aeb7457a41a811750
8abdd9ac5ff73713436fd1db3991dfe8a3554b80
769366fcfd557808e61eee2e8e9c1f16bbffe660b31caf7b56aa33447de0c247
Analyzer Verdict Alert fortinet Phishing
GET /templates/maintpl/assets/css/assets/fonts/Marcellus-Regular.woff HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://main.iliyard.ge/templates/maintpl/assets/css/vendor/bootstrap.min.css
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sun, 25 Sep 2022 01:03:30 GMT
content-type: text/html; charset=iso-8859-1
content-length: 328
strict-transport-security: max-age=63072000; includeSubDomains
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash cae538dcce82598fbe43c0bf443e62dd
cc68ac6be9c5e0087a0000e5735b83270ace30f5
954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s.tradingview.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Sun, 25 Sep 2022 00:41:09 GMT
expires: Sun, 25 Sep 2022 02:41:09 GMT
cache-control: public, max-age=7200
age: 1341
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s.tradingview.com/embed-widget/tickers/?locale=ge
200 OK 7.1 kB URL HTTP/2 s.tradingview.com/embed-widget/tickers/?locale=ge
IP
Hash 2346014ee5d0bdf7738f0d91b9dc2bea
17e69163886e5f86a2f64891a79fdeae2207694a
680d4d2ab327cfcc2cd34183908702a2d703f5e5bd4bc59b3693952ba25a48de
GET /embed-widget/tickers/?locale=ge HTTP/1.1
Host: s.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
date: Sun, 25 Sep 2022 01:03:28 GMT
expires: Sun, 25 Sep 2022 01:05:28 GMT
cache-control: max-age=120
content-security-policy: base-uri 'none'; script-src https://static.tradingview.com/static/ 'unsafe-eval' blob: https://*.ampproject.org/ https://*.paypal.com/ https://platform.twitter.com https://songbird.cardinalcommerce.com/edge/v1/ 'nonce-qXs7ffbNgDFv70vIPmDTAw=='; default-src 'self' https: data: blob: wss: 'unsafe-inline'; object-src 'none'
referrer-policy: origin-when-cross-origin
x-content-type-options: nosniff
content-encoding: gzip
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9Hqc9YeG4R4ukr5wj2vLRMBOILilITb3zN8WtF8ziXofymS7BG2sSA==
X-Firefox-Spdy: h2
widgetdata.tradingview.com/socket.io/websocket?from=embed-widget%2Ftickers%2F&date=2022_09_23-11_39
101 Switching Protocols 0 B URL HTTP/1.1 widgetdata.tradingview.com/socket.io/websocket?from=embed-widget%2Ftickers%2F&date=2022_09_23-11_39
IP
ASN #394380 LEASEWEB-USA-DAL
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/websocket?from=embed-widget%2Ftickers%2F&date=2022_09_23-11_39 HTTP/1.1
Host: widgetdata.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://s.tradingview.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ra/LXOxyw5eeUqhk139O3g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Sun, 25 Sep 2022 01:03:30 GMT
Connection: upgrade
sec-websocket-accept: cha4ZoIunm+OemdtrnHYn2Ru5do=
sec-websocket-extensions: permessage-deflate
upgrade: websocket
Server: tv
s.tradingview.com/embed-widget/tickers/?locale=ge
200 OK 6.7 kB URL HTTP/2 s.tradingview.com/embed-widget/tickers/?locale=ge
IP
Hash 3d885dd75c726bf8224779ce40630fd3
37bef9c102970c7fc28675b1420562ad9531cb6c
af9496598619f0a42dae45b2b3da0aee53568d0c81178c97dc7eabbfd046d20c
GET /embed-widget/tickers/?locale=ge HTTP/1.1
Host: s.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
date: Sun, 25 Sep 2022 01:03:28 GMT
expires: Sun, 25 Sep 2022 01:05:28 GMT
cache-control: max-age=120
content-security-policy: base-uri 'none'; script-src https://static.tradingview.com/static/ 'unsafe-eval' blob: https://*.ampproject.org/ https://*.paypal.com/ https://platform.twitter.com https://songbird.cardinalcommerce.com/edge/v1/ 'nonce-qXs7ffbNgDFv70vIPmDTAw=='; default-src 'self' https: data: blob: wss: 'unsafe-inline'; object-src 'none'
referrer-policy: origin-when-cross-origin
x-content-type-options: nosniff
content-encoding: gzip
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DTOzZvVJu-2Q7b8OuQKAAyr7W5rsAdpW6WuPCqU79DkPV8grMsFDyg==
X-Firefox-Spdy: h2
www.facebook.com/plugins/customer_chat/SDK/?app_id=&attribution=biz_inbox&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df27bb453c78c6e8%26domain%3Dmain.iliyard.ge%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fmain.iliyard.ge%252Ff1262e9f2b9119a%26relation%3Dparent.parent¤t_url=https%3A%2F%2Fmain.iliyard.ge%2F&event_name=chat_plugin_sdk_facade_create&is_loaded_by_facade=true&loading_time=0&locale=en_US&log_id=420584d2-1c3d-45d7-b7d1-24db033da901&page_id=112507794555418&request_time=1664067809098&sdk=joey&should_use_new_domain=false&suppress_http_code=1
200 OK 0 B URL HTTP/2 www.facebook.com/plugins/customer_chat/SDK/?app_id=&attribution=biz_inbox&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df27bb453c78c6e8%26domain%3Dmain.iliyard.ge%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fmain.iliyard.ge%252Ff1262e9f2b9119a%26relation%3Dparent.parent¤t_url=https%3A%2F%2Fmain.iliyard.ge%2F&event_name=chat_plugin_sdk_facade_create&is_loaded_by_facade=true&loading_time=0&locale=en_US&log_id=420584d2-1c3d-45d7-b7d1-24db033da901&page_id=112507794555418&request_time=1664067809098&sdk=joey&should_use_new_domain=false&suppress_http_code=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /plugins/customer_chat/SDK/?app_id=&attribution=biz_inbox&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df27bb453c78c6e8%26domain%3Dmain.iliyard.ge%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fmain.iliyard.ge%252Ff1262e9f2b9119a%26relation%3Dparent.parent¤t_url=https%3A%2F%2Fmain.iliyard.ge%2F&event_name=chat_plugin_sdk_facade_create&is_loaded_by_facade=true&loading_time=0&locale=en_US&log_id=420584d2-1c3d-45d7-b7d1-24db033da901&page_id=112507794555418&request_time=1664067809098&sdk=joey&should_use_new_domain=false&suppress_http_code=1 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Origin: https://main.iliyard.ge
Connection: keep-alive
Referer: https://main.iliyard.ge/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
x-frame-options: DENY
access-control-allow-origin: https://main.iliyard.ge
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: c+fjAXRWgGsgZZ7B08fymeL93GEQ3q5xnWJw0P6EEVIIRX60St7Mag6T86ATgbL9H7zrEC8zWIdSfqeAiFyUNg==
content-length: 0
date: Sun, 25 Sep 2022 01:03:30 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s3-symbol-logo.tradingview.com/country/GE.svg
200 OK 368 B URL HTTP/2 s3-symbol-logo.tradingview.com/country/GE.svg
IP
File type exported SGML document, ASCII text, with very long lines (368), with no line terminators
Hash ae64f460b8a263575f815df9990f6a83
1069ecdbafbd29b0c4eaa4a458e335726d159deb
1dfc84799a7b207c5a6099f8249036877b2ae3ff5ef9ee6bba59390771234325
GET /country/GE.svg HTTP/1.1
Host: s3-symbol-logo.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 368
last-modified: Wed, 08 Sep 2021 09:02:53 GMT
x-amz-meta-hash: ae64f460b8a263575f815df9990f6a83
accept-ranges: bytes
server: AmazonS3
date: Sun, 25 Sep 2022 01:03:30 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: "ae64f460b8a263575f815df9990f6a83"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Yduo7lNBQE0yPws59oYjlGocjfcI2-GOfYpYjWV6zbOCgque-eEtzQ==
age: 1643
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 8eff3f5b838fb277574bc3f5a798c5af
c32f05710bb234eb9120d55f55572844ace35830
d5705502553e03794d3aabe292c241ff0aff84cee93aa1d2c065c64180c2114e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1499
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 01:03:30 GMT
Last-Modified: Sun, 25 Sep 2022 00:38:31 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
s3-symbol-logo.tradingview.com/crypto/XTVCBTC.svg
200 OK 801 B URL HTTP/2 s3-symbol-logo.tradingview.com/crypto/XTVCBTC.svg
IP
File type exported SGML document, ASCII text, with very long lines (801), with no line terminators
Hash 107060b925841745f310697bd9f1f83d
40a2e01da20c164a3c3f774a72f3feadf17cafa2
4dfca512e957e14f05da07751a96061cf4bfd5df438504f65287fa0a8c3cadb6
GET /crypto/XTVCBTC.svg HTTP/1.1
Host: s3-symbol-logo.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 801
last-modified: Wed, 08 Sep 2021 09:03:52 GMT
x-amz-meta-hash: 107060b925841745f310697bd9f1f83d
accept-ranges: bytes
server: AmazonS3
date: Sun, 25 Sep 2022 00:26:43 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: "107060b925841745f310697bd9f1f83d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9Z7krqpVRGVHqfaC6qqi9IbcQ8Ez3WnNMhZBnlPE1-UpDzPlMfzeSw==
age: 2209
X-Firefox-Spdy: h2
s3-symbol-logo.tradingview.com/country/GB.svg
200 OK 468 B URL HTTP/2 s3-symbol-logo.tradingview.com/country/GB.svg
IP
File type exported SGML document, ASCII text, with very long lines (468), with no line terminators
Hash 09bfac5408302ee8c52fa2ed008c4f13
ec2b53eba8ec1a31fc6745cd9c4fc09518db1c2f
b3e463d925abc879f5b76428144c0da44bc02fae2188f71bc9e7aa7ab6f46037
GET /country/GB.svg HTTP/1.1
Host: s3-symbol-logo.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 468
last-modified: Wed, 08 Sep 2021 09:01:59 GMT
x-amz-meta-hash: 09bfac5408302ee8c52fa2ed008c4f13
accept-ranges: bytes
server: AmazonS3
date: Sun, 25 Sep 2022 00:08:19 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: "09bfac5408302ee8c52fa2ed008c4f13"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RsEHr35qubHhp3NTMQH_C0z5_SuBhbKBaYmUMyQ-DhKKcq8LRh5_Cw==
age: 3560
X-Firefox-Spdy: h2
s3-symbol-logo.tradingview.com/country/EU.svg
200 OK 870 B URL HTTP/2 s3-symbol-logo.tradingview.com/country/EU.svg
IP
File type exported SGML document, ASCII text, with very long lines (870), with no line terminators
Hash e9173ef4613c3da43c45885ea39c4b96
218b28ec16584e3f2326b778d3cca1d5c6a682d1
b47993af3ef9963a193ddc9d0bd10fc8f1f773fe0881ffa3c8d2151498fccf03
GET /country/EU.svg HTTP/1.1
Host: s3-symbol-logo.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 870
last-modified: Wed, 08 Sep 2021 09:01:40 GMT
x-amz-meta-hash: e9173ef4613c3da43c45885ea39c4b96
accept-ranges: bytes
server: AmazonS3
date: Sun, 25 Sep 2022 00:41:16 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: "e9173ef4613c3da43c45885ea39c4b96"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: jSnJPEoai1M8rl4_Cfz4hEpQPhrPyyi4rhGUu0oayKUoAqfsdviKWQ==
age: 1350
X-Firefox-Spdy: h2
s3-symbol-logo.tradingview.com/crypto/XTVCETH.svg
200 OK 523 B URL HTTP/2 s3-symbol-logo.tradingview.com/crypto/XTVCETH.svg
IP
File type exported SGML document, ASCII text, with very long lines (523), with no line terminators
Hash 4542d4ecd73f04c73affa787a4522596
6e7129a5417dac4d4547b375e8b23d5a7dc5b714
955bd5f554e5d8270b845efa8be72101716a41e43d07288b7619bbb5f2039774
GET /crypto/XTVCETH.svg HTTP/1.1
Host: s3-symbol-logo.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 523
last-modified: Wed, 08 Sep 2021 09:05:18 GMT
x-amz-meta-hash: 4542d4ecd73f04c73affa787a4522596
accept-ranges: bytes
server: AmazonS3
date: Sun, 25 Sep 2022 00:36:38 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: "4542d4ecd73f04c73affa787a4522596"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BTCG34N8CppUNsa_ngG99qU4uy050zXgmbqPK2DvaGB1kvCUdDHWuQ==
age: 1628
X-Firefox-Spdy: h2
www.facebook.com/plugins/customer_chat/SDK/?app_id=&attribution=biz_inbox&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df27bb453c78c6e8%26domain%3Dmain.iliyard.ge%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fmain.iliyard.ge%252Ff1262e9f2b9119a%26relation%3Dparent.parent¤t_url=https%3A%2F%2Fmain.iliyard.ge%2F&event_name=chat_plugin_sdk_facade_load&is_loaded_by_facade=true&loading_time=220&locale=en_US&log_id=420584d2-1c3d-45d7-b7d1-24db033da901&page_id=112507794555418&request_time=1664067809318&sdk=joey&should_use_new_domain=false&suppress_http_code=1
200 OK 0 B URL HTTP/2 www.facebook.com/plugins/customer_chat/SDK/?app_id=&attribution=biz_inbox&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df27bb453c78c6e8%26domain%3Dmain.iliyard.ge%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fmain.iliyard.ge%252Ff1262e9f2b9119a%26relation%3Dparent.parent¤t_url=https%3A%2F%2Fmain.iliyard.ge%2F&event_name=chat_plugin_sdk_facade_load&is_loaded_by_facade=true&loading_time=220&locale=en_US&log_id=420584d2-1c3d-45d7-b7d1-24db033da901&page_id=112507794555418&request_time=1664067809318&sdk=joey&should_use_new_domain=false&suppress_http_code=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /plugins/customer_chat/SDK/?app_id=&attribution=biz_inbox&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df27bb453c78c6e8%26domain%3Dmain.iliyard.ge%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fmain.iliyard.ge%252Ff1262e9f2b9119a%26relation%3Dparent.parent¤t_url=https%3A%2F%2Fmain.iliyard.ge%2F&event_name=chat_plugin_sdk_facade_load&is_loaded_by_facade=true&loading_time=220&locale=en_US&log_id=420584d2-1c3d-45d7-b7d1-24db033da901&page_id=112507794555418&request_time=1664067809318&sdk=joey&should_use_new_domain=false&suppress_http_code=1 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Origin: https://main.iliyard.ge
Connection: keep-alive
Referer: https://main.iliyard.ge/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
x-frame-options: DENY
access-control-allow-origin: https://main.iliyard.ge
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: I5ANMQtRbRFAFjntu8uskjWc3NBmiWvpzvIQzBs4zLmLRxXfsYowcA+CXmUNvV8/xFcoS8WmexzSxaZ4cMCeXA==
content-length: 0
date: Sun, 25 Sep 2022 01:03:30 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
widgetdata.tradingview.com/socket.io/websocket?from=embed-widget%2Ftickers%2F&date=2022_09_23-11_39
101 Switching Protocols 0 B URL HTTP/1.1 widgetdata.tradingview.com/socket.io/websocket?from=embed-widget%2Ftickers%2F&date=2022_09_23-11_39
IP
ASN #394380 LEASEWEB-USA-DAL
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/websocket?from=embed-widget%2Ftickers%2F&date=2022_09_23-11_39 HTTP/1.1
Host: widgetdata.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://s.tradingview.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Omp1kvLIedKZjprN1ZS/wg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Sun, 25 Sep 2022 01:03:30 GMT
Connection: upgrade
sec-websocket-accept: vFKi5hdKRR5bps2H+A2t+UKMXMk=
sec-websocket-extensions: permessage-deflate
upgrade: websocket
Server: tv
widgetdata.tradingview.com/socket.io/websocket?from=embed-widget%2Ftickers%2F&date=2022_09_23-11_39
101 Switching Protocols 0 B URL HTTP/1.1 widgetdata.tradingview.com/socket.io/websocket?from=embed-widget%2Ftickers%2F&date=2022_09_23-11_39
IP
ASN #394380 LEASEWEB-USA-DAL
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/websocket?from=embed-widget%2Ftickers%2F&date=2022_09_23-11_39 HTTP/1.1
Host: widgetdata.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://s.tradingview.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 6WR6Xc/qOlYA9ueeJfZwxg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Sun, 25 Sep 2022 01:03:31 GMT
Connection: upgrade
sec-websocket-accept: lHVsrF+H/MI3H6WshJ4M0NF28KI=
sec-websocket-extensions: permessage-deflate
upgrade: websocket
Server: tv
widgetdata.tradingview.com/socket.io/websocket?from=embed-widget%2Ftickers%2F&date=2022_09_23-11_39
101 Switching Protocols 0 B URL HTTP/1.1 widgetdata.tradingview.com/socket.io/websocket?from=embed-widget%2Ftickers%2F&date=2022_09_23-11_39
IP
ASN #394380 LEASEWEB-USA-DAL
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/websocket?from=embed-widget%2Ftickers%2F&date=2022_09_23-11_39 HTTP/1.1
Host: widgetdata.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://s.tradingview.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: +QC8QX5mIw4I5GDS/CL3/Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Sun, 25 Sep 2022 01:03:31 GMT
Connection: upgrade
sec-websocket-accept: 1kxRZH3KGQgk1wt8P8Ma663hzH0=
sec-websocket-extensions: permessage-deflate
upgrade: websocket
Server: tv
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77d4989e-b390-4a8b-be36-820e0256c211.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77d4989e-b390-4a8b-be36-820e0256c211.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4b247d936b6e75a5075e09d9d2f7c3b1
7d3650b77b7f501d2f94592b8a4c0e02a75feb70
165d5ef729be431744228c7f1791141536db476811a3e9c7ab5958c6e38a781a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77d4989e-b390-4a8b-be36-820e0256c211.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7977
x-amzn-requestid: 6d6cbdf9-91f4-4fb5-8afe-cb8dea476e8b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y-_EoFjtIAMFjcg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632f7883-5681f08725a5ce7e36c27d75;Sampled=0
x-amzn-remapped-date: Sat, 24 Sep 2022 21:37:07 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2PPXUy_jWaHVW359h8C0Y4KHHwGTHGju_8C1BGdNuZdroWCuSD74aA==
via: 1.1 f4367b41311e3e9a490d7461b7b85490.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 21:58:23 GMT
age: 11112
etag: "7d3650b77b7f501d2f94592b8a4c0e02a75feb70"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
s.tradingview.com/embed-widget/tickers/?locale=ge
200 OK 0 B URL HTTP/2 s.tradingview.com/embed-widget/tickers/?locale=ge
IP
GET /embed-widget/tickers/?locale=ge HTTP/1.1
Host: s.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
date: Sun, 25 Sep 2022 01:03:28 GMT
expires: Sun, 25 Sep 2022 01:05:28 GMT
cache-control: max-age=120
content-security-policy: base-uri 'none'; script-src https://static.tradingview.com/static/ 'unsafe-eval' blob: https://*.ampproject.org/ https://*.paypal.com/ https://platform.twitter.com https://songbird.cardinalcommerce.com/edge/v1/ 'nonce-qXs7ffbNgDFv70vIPmDTAw=='; default-src 'self' https: data: blob: wss: 'unsafe-inline'; object-src 'none'
referrer-policy: origin-when-cross-origin
x-content-type-options: nosniff
content-encoding: gzip
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding,Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Nj-cv4UiOUYeQXUuAjzg_MmdZmflPJrjv67SjQ_NHkMvARnyPIEaHw==
X-Firefox-Spdy: h2
s.tradingview.com/embed-widget/tickers/?locale=ge
200 OK 0 B URL HTTP/2 s.tradingview.com/embed-widget/tickers/?locale=ge
IP
GET /embed-widget/tickers/?locale=ge HTTP/1.1
Host: s.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
date: Sun, 25 Sep 2022 01:03:28 GMT
expires: Sun, 25 Sep 2022 01:05:28 GMT
cache-control: max-age=120
content-security-policy: base-uri 'none'; script-src https://static.tradingview.com/static/ 'unsafe-eval' blob: https://*.ampproject.org/ https://*.paypal.com/ https://platform.twitter.com https://songbird.cardinalcommerce.com/edge/v1/ 'nonce-qXs7ffbNgDFv70vIPmDTAw=='; default-src 'self' https: data: blob: wss: 'unsafe-inline'; object-src 'none'
referrer-policy: origin-when-cross-origin
x-content-type-options: nosniff
content-encoding: gzip
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: IEhJJEzmvFwsbsVdziV4odpAfYsgU5VG2PC-UohMjz720aXL_VeJhw==
X-Firefox-Spdy: h2
socialplugin.facebook.net/new_domain_gating/?endpoint=customerchat&page_id=112507794555418&suppress_http_code=1
200 OK 0 B URL HTTP/2 socialplugin.facebook.net/new_domain_gating/?endpoint=customerchat&page_id=112507794555418&suppress_http_code=1
IP
GET /new_domain_gating/?endpoint=customerchat&page_id=112507794555418&suppress_http_code=1 HTTP/1.1
Host: socialplugin.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Origin: https://main.iliyard.ge
Connection: keep-alive
Referer: https://main.iliyard.ge/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
content-type: application/json; charset=utf-8
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
content-security-policy: default-src * data: blob: 'self';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;
x-frame-options: DENY
access-control-allow-origin: https://main.iliyard.ge
x-fb-debug: RjYm4zOKC8GFHms6UGAW0YsECdaogXpYB55xGiu3a5IFnBSZgIuI8IapNNJ4F3Nim8MpV1t0hAAq5+79okFlZw==
date: Sun, 25 Sep 2022 01:03:30 GMT
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.instagram.com/portfolio.devitems/
200 OK 0 B URL HTTP/2 www.instagram.com/portfolio.devitems/
IP
GET /portfolio.devitems/ HTTP/1.1
Host: www.instagram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://main.iliyard.ge
Connection: keep-alive
Referer: https://main.iliyard.ge/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
accept-ch-lifetime: 4838400
accept-ch: sec-ch-prefers-color-scheme
reporting-endpoints:
cross-origin-opener-policy: same-origin-allow-popups
vary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding
strict-transport-security: max-age=15552000
content-type: text/html; charset="utf-8"
x-fb-debug: dIiC21w5pZsTyoux7Ivi/vUR2k4HA8oPFYLHuPPmEgJSMPk5BS6gtJo8DONX3a39Yx8258TxHKdZvprVRNWUUg==
date: Sun, 25 Sep 2022 01:03:30 GMT
x-fb-trip-id: 1679558926
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
main.iliyard.ge/engine/classes/js/jqueryui3.js?v=0df5c
200 OK 0 B URL HTTP/2 main.iliyard.ge/engine/classes/js/jqueryui3.js?v=0df5c
IP
ASN #203301 Datacenter Ltd
Analyzer Verdict Alert fortinet Phishing
GET /engine/classes/js/jqueryui3.js?v=0df5c HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: application/javascript
last-modified: Tue, 12 Oct 2021 12:45:12 GMT
etag: W/"61658358-1f29c"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
main.iliyard.ge/templates/maintpl/assets/js/plugins/plugins.min.js
200 OK 0 B URL HTTP/2 main.iliyard.ge/templates/maintpl/assets/js/plugins/plugins.min.js
IP
ASN #203301 Datacenter Ltd
Analyzer Verdict Alert fortinet Phishing
GET /templates/maintpl/assets/js/plugins/plugins.min.js HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: application/javascript
last-modified: Tue, 12 Oct 2021 12:47:22 GMT
etag: W/"616583da-91840"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
main.iliyard.ge/engine/classes/js/jquery3.js?v=0df5c
200 OK 0 B URL HTTP/2 main.iliyard.ge/engine/classes/js/jquery3.js?v=0df5c
IP
ASN #203301 Datacenter Ltd
GET /engine/classes/js/jquery3.js?v=0df5c HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: application/javascript
last-modified: Tue, 12 Oct 2021 12:45:12 GMT
etag: W/"61658358-15d9f"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.15.4/css/all.css
200 OK 0 B URL HTTP/2 use.fontawesome.com/releases/v5.15.4/css/all.css
IP
GET /releases/v5.15.4/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://main.iliyard.ge
Connection: keep-alive
Referer: https://main.iliyard.ge/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: text/css
x-amz-id-2: vlSiNuBNAWkqDh4GL0pwaxv1rf1ebhwID9pKSZiIAfDwKxzsg2gle563CcNYdveAQIDb7eGZI/g=
x-amz-request-id: MFPKXARWY1PPJ1WK
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 04 Aug 2021 20:43:22 GMT
etag: W/"ecd507b3125edc4d2a03aa6ae5d07da9"
cache-control: max-age=31556926
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uOJgBgYynxp7DTGZx0TqexhjrEEPUdLnncnr69Ual6IYBTwLu0oPs4CnU1kq5%2FSqwk3rmWX5j%2BDiOvPhJsUzi83X23vcYHI7rKpDnjZ34fBUcc6zB9EoyzbcKe28zLrcha2L%2B%2FX3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74ffd714dbdf76cf-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s3-symbol-logo.tradingview.com/country/US.svg
200 OK 0 B URL HTTP/2 s3-symbol-logo.tradingview.com/country/US.svg
IP
GET /country/US.svg HTTP/1.1
Host: s3-symbol-logo.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Wed, 08 Sep 2021 09:01:07 GMT
x-amz-meta-hash: 2a945cbbe3767a4009ec5f2c655780a7
server: AmazonS3
content-encoding: gzip
date: Sun, 25 Sep 2022 00:43:40 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: W/"2a945cbbe3767a4009ec5f2c655780a7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: CiZe-_ULUO3p6XKKDWieqMFZJ0neemDKNfWstmvrullpLADDTNK2Sg==
age: 1295
X-Firefox-Spdy: h2
main.iliyard.ge//templates/maintpl/assets/hove.js
200 OK 0 B URL HTTP/2 main.iliyard.ge//templates/maintpl/assets/hove.js
IP
ASN #203301 Datacenter Ltd
Analyzer Verdict Alert fortinet Phishing
GET //templates/maintpl/assets/hove.js HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: application/javascript
last-modified: Tue, 12 Oct 2021 12:47:18 GMT
etag: W/"616583d6-d69"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/87461.aa126d16f4609615d7a4.js
200 OK 0 B URL HTTP/2 static.tradingview.com/static/bundles/embed/87461.aa126d16f4609615d7a4.js
IP
GET /static/bundles/embed/87461.aa126d16f4609615d7a4.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 07 Sep 2022 10:11:07 GMT
last-modified: Wed, 07 Sep 2022 08:33:53 GMT
etag: W/"63185771-1518"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: I_LWK82U-zVyANLjYMhgjg5ztibl9tEHYzHCNEukNSCbHxFSTgVu3A==
age: 1522341
X-Firefox-Spdy: h2
main.iliyard.ge/templates/maintpl/assets/gif/vd4.mp4
206 Partial Content 0 B URL HTTP/2 main.iliyard.ge/templates/maintpl/assets/gif/vd4.mp4
IP
ASN #203301 Datacenter Ltd
Analyzer Verdict Alert fortinet Phishing
GET /templates/maintpl/assets/gif/vd4.mp4 HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
server: nginx
date: Sun, 25 Sep 2022 01:03:28 GMT
content-type: video/mp4
content-length: 2756604
last-modified: Tue, 12 Oct 2021 12:47:50 GMT
etag: "616583f6-2a0ffc"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
content-range: bytes 0-2756603/2756604
X-Firefox-Spdy: h2
main.iliyard.ge/templates/maintpl/assets/gif/vd2.mp4
206 Partial Content 0 B URL HTTP/2 main.iliyard.ge/templates/maintpl/assets/gif/vd2.mp4
IP
ASN #203301 Datacenter Ltd
Analyzer Verdict Alert fortinet Phishing
GET /templates/maintpl/assets/gif/vd2.mp4 HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
server: nginx
date: Sun, 25 Sep 2022 01:03:28 GMT
content-type: video/mp4
content-length: 3206104
last-modified: Tue, 12 Oct 2021 12:47:24 GMT
etag: "616583dc-30ebd8"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
content-range: bytes 0-3206103/3206104
X-Firefox-Spdy: h2
main.iliyard.ge/map3/index.html
200 OK 0 B URL HTTP/2 main.iliyard.ge/map3/index.html
IP
ASN #203301 Datacenter Ltd
Analyzer Verdict Alert fortinet Phishing
GET /map3/index.html HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:28 GMT
content-type: text/html
last-modified: Wed, 17 Nov 2021 18:53:14 GMT
etag: W/"61954f9a-138c"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
main.iliyard.ge/templates/maintpl/assets/gif/bgp2_5.gif
404 Not Found 0 B URL HTTP/2 main.iliyard.ge/templates/maintpl/assets/gif/bgp2_5.gif
IP
ASN #203301 Datacenter Ltd
GET /templates/maintpl/assets/gif/bgp2_5.gif HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sun, 25 Sep 2022 01:03:28 GMT
content-type: text/html; charset=iso-8859-1
strict-transport-security: max-age=63072000; includeSubDomains
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Ubuntu&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Ubuntu&display=swap
IP
GET /css2?family=Ubuntu&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 25 Sep 2022 01:03:28 GMT
date: Sun, 25 Sep 2022 01:03:28 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s.tradingview.com/embed-widget/tickers/?locale=ge
200 OK 0 B URL HTTP/2 s.tradingview.com/embed-widget/tickers/?locale=ge
IP
GET /embed-widget/tickers/?locale=ge HTTP/1.1
Host: s.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
date: Sun, 25 Sep 2022 01:03:28 GMT
expires: Sun, 25 Sep 2022 01:05:28 GMT
cache-control: max-age=120
content-security-policy: base-uri 'none'; script-src https://static.tradingview.com/static/ 'unsafe-eval' blob: https://*.ampproject.org/ https://*.paypal.com/ https://platform.twitter.com https://songbird.cardinalcommerce.com/edge/v1/ 'nonce-qXs7ffbNgDFv70vIPmDTAw=='; default-src 'self' https: data: blob: wss: 'unsafe-inline'; object-src 'none'
referrer-policy: origin-when-cross-origin
x-content-type-options: nosniff
content-encoding: gzip
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zLaCbStCaWgQWXIsG0mu3dswf6IvL5WHDqCF7pSU6SSgCiZOSzB1YA==
X-Firefox-Spdy: h2
main.iliyard.ge/templates/maintpl/assets/js/main.js
200 OK 0 B URL HTTP/2 main.iliyard.ge/templates/maintpl/assets/js/main.js
IP
ASN #203301 Datacenter Ltd
Analyzer Verdict Alert fortinet Phishing
GET /templates/maintpl/assets/js/main.js HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: application/javascript
last-modified: Tue, 12 Oct 2021 12:47:22 GMT
etag: W/"616583da-aa40"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
main.iliyard.ge/templates/maintpl/assets/js/vendor/bootstrap.min.js
200 OK 0 B URL HTTP/2 main.iliyard.ge/templates/maintpl/assets/js/vendor/bootstrap.min.js
IP
ASN #203301 Datacenter Ltd
Analyzer Verdict Alert fortinet Phishing
GET /templates/maintpl/assets/js/vendor/bootstrap.min.js HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: application/javascript
last-modified: Tue, 12 Oct 2021 12:47:22 GMT
etag: W/"616583da-1496e"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
main.iliyard.ge/templates/maintpl/assets/js/vendor/jquery-migrate-3.3.0.min.js
200 OK 0 B URL HTTP/2 main.iliyard.ge/templates/maintpl/assets/js/vendor/jquery-migrate-3.3.0.min.js
IP
ASN #203301 Datacenter Ltd
Analyzer Verdict Alert fortinet Phishing
GET /templates/maintpl/assets/js/vendor/jquery-migrate-3.3.0.min.js HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: application/javascript
last-modified: Tue, 12 Oct 2021 12:47:22 GMT
etag: W/"616583da-2b0a"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
main.iliyard.ge/templates/maintpl/assets/script.js
200 OK 0 B URL HTTP/2 main.iliyard.ge/templates/maintpl/assets/script.js
IP
ASN #203301 Datacenter Ltd
Analyzer Verdict Alert fortinet Phishing
GET /templates/maintpl/assets/script.js HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: application/javascript
last-modified: Tue, 12 Oct 2021 12:47:18 GMT
etag: W/"616583d6-97c"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
unpkg.com/aos@2.3.1/dist/aos.js
200 OK 0 B URL HTTP/2 unpkg.com/aos@2.3.1/dist/aos.js
IP
GET /aos@2.3.1/dist/aos.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Thu, 17 May 2018 22:11:13 GMT
etag: W/"379f-cNv9OKDx/DsafZ+tq1h4ZITDTxc"
via: 1.1 fly.io
fly-request-id: 01F3YGTK14BN7YR0KMC99B0BKK
cf-cache-status: HIT
age: 13378583
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74ffd714dd7d0b06-OSL
content-encoding: br
X-Firefox-Spdy: h2
main.iliyard.ge/templates/maintpl/assets/gif/vd1.mp4
206 Partial Content 0 B URL HTTP/2 main.iliyard.ge/templates/maintpl/assets/gif/vd1.mp4
IP
ASN #203301 Datacenter Ltd
Analyzer Verdict Alert fortinet Phishing
GET /templates/maintpl/assets/gif/vd1.mp4 HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
server: nginx
date: Sun, 25 Sep 2022 01:03:28 GMT
content-type: video/mp4
content-length: 2946759
last-modified: Tue, 12 Oct 2021 12:47:40 GMT
etag: "616583ec-2cf6c7"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
content-range: bytes 0-2946758/2946759
X-Firefox-Spdy: h2
s.tradingview.com/embed-widget/tickers/?locale=ge
200 OK 0 B URL HTTP/2 s.tradingview.com/embed-widget/tickers/?locale=ge
IP
GET /embed-widget/tickers/?locale=ge HTTP/1.1
Host: s.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
date: Sun, 25 Sep 2022 01:03:28 GMT
expires: Sun, 25 Sep 2022 01:05:28 GMT
cache-control: max-age=120
content-security-policy: base-uri 'none'; script-src https://static.tradingview.com/static/ 'unsafe-eval' blob: https://*.ampproject.org/ https://*.paypal.com/ https://platform.twitter.com https://songbird.cardinalcommerce.com/edge/v1/ 'nonce-qXs7ffbNgDFv70vIPmDTAw=='; default-src 'self' https: data: blob: wss: 'unsafe-inline'; object-src 'none'
referrer-policy: origin-when-cross-origin
x-content-type-options: nosniff
content-encoding: gzip
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wQKH21Tnm7fG488rlVHuTf7_ZeOL_n0ogZkaLEUgrsb-U9Ss2_-94Q==
X-Firefox-Spdy: h2
main.iliyard.ge/templates/maintpl/assets/js/vendor/jquery-3.5.1.min.js
200 OK 0 B URL HTTP/2 main.iliyard.ge/templates/maintpl/assets/js/vendor/jquery-3.5.1.min.js
IP
ASN #203301 Datacenter Ltd
Analyzer Verdict Alert fortinet Phishing
GET /templates/maintpl/assets/js/vendor/jquery-3.5.1.min.js HTTP/1.1
Host: main.iliyard.ge
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://main.iliyard.ge/
Cookie: PHPSESSID=a3580r14ml0pc6rtms392qj7v1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 01:03:27 GMT
content-type: application/javascript
last-modified: Tue, 12 Oct 2021 12:47:22 GMT
etag: W/"616583da-15d86"
x-cache-status: BYPASS
strict-transport-security: max-age=63072000; includeSubDomains
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
185.139.57.124
142.250.74.174
157.240.200.16
104.16.123.175
93.184.220.29
195.201.108.108
23.36.77.32