firefox.settings.services.mozilla.com/v1/
143.204.55.27200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 17 Sep 2022 07:11:15 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: icqIPDvrk3fhEWNNdc6lndapJu2vpsJNSvS9jOsYLwNvgJfjwwkpbw==
Age: 2663
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b0d651d83075c7a68e3c6a9204226150
294785e3f3a67cdd5f1a530b83a2cbd2c2cc0665
17cbb43fd6662576ba3fe8e06cf44247c903c1313cc419053599c41e286a2442
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "17CBB43FD6662576BA3FE8E06CF44247C903C1313CC419053599C41E286A2442"
Last-Modified: Thu, 15 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11461
Expires: Sat, 17 Sep 2022 11:06:39 GMT
Date: Sat, 17 Sep 2022 07:55:38 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.25200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP 143.204.55.25:0
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sat, 17 Sep 2022 04:35:16 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pPyMqGGQQeB1_qVeaMMS5MTGYeusKXcHxwcNYk9-lUOcv6X3zckm3A==
age: 15896
X-Firefox-Spdy: h2
notnice.club/wellss/login/login.php?cmd=login_submit&id=18354a6bb7ac99899568ea1a673afca618354a6bb7ac99899568ea1a673afca6&session=18354a6bb7ac99899568ea1a673afca618354a6bb7ac99899568ea1a673afca6]
198.187.31.172301 Moved Permanently 707 B URL HTTP/1.1 notnice.club/wellss/login/login.php?cmd=login_submit&id=18354a6bb7ac99899568ea1a673afca618354a6bb7ac99899568ea1a673afca6&session=18354a6bb7ac99899568ea1a673afca618354a6bb7ac99899568ea1a673afca6]
IP 198.187.31.172:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wellss/login/login.php?cmd=login_submit&id=18354a6bb7ac99899568ea1a673afca618354a6bb7ac99899568ea1a673afca6&session=18354a6bb7ac99899568ea1a673afca618354a6bb7ac99899568ea1a673afca6] HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
keep-alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Sat, 17 Sep 2022 07:55:38 GMT
server: LiteSpeed
location: https://notnice.club/wellss/login/login.php?cmd=login_submit&id=18354a6bb7ac99899568ea1a673afca618354a6bb7ac99899568ea1a673afca6&session=18354a6bb7ac99899568ea1a673afca618354a6bb7ac99899568ea1a673afca6]
x-turbo-charged-by: LiteSpeed
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 17 Sep 2022 07:55:38 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.27200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sat, 17 Sep 2022 07:03:22 GMT
Cache-Control: max-age=3600
Expires: Sat, 17 Sep 2022 07:05:25 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: UWELtJOur2Rh6iD_rS8chetE08fqgcOSYp9eSusXqZl37FtVvHaHRQ==
Age: 3136
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 6342ea8b4553da90c25e40f1b9add429
19dd831610842b18df9646d08fdb7f53b42575d3
9671a1d5f903f4edc50b96fdeef5a19c12c0028ea7df1c1789ad25b08d5f4db1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 17 Sep 2022 07:55:38 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 14 Sep 2022 18:12:53 GMT
Expires: Wed, 21 Sep 2022 18:12:52 GMT
Etag: "19dd831610842b18df9646d08fdb7f53b42575d3"
Cache-Control: max-age=382033,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74c047de0f2b1bfa-OSL
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 3db421016cf0e3ad25f324cf0faf0fac
b15909de1105d4d2fb5be5b3920c454daf022445
914b15f28636e0a5e851540ffb0625ecd09d0546b2f1f7af90b267ceebcf1d5d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4713
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 07:55:38 GMT
Last-Modified: Sat, 17 Sep 2022 06:37:05 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
notnice.club/wellss/login/login.php?cmd=login_submit&id=18354a6bb7ac99899568ea1a673afca618354a6bb7ac99899568ea1a673afca6&session=18354a6bb7ac99899568ea1a673afca618354a6bb7ac99899568ea1a673afca6]
198.187.31.172301 Moved Permanently 0 B URL HTTP/2 notnice.club/wellss/login/login.php?cmd=login_submit&id=18354a6bb7ac99899568ea1a673afca618354a6bb7ac99899568ea1a673afca6&session=18354a6bb7ac99899568ea1a673afca618354a6bb7ac99899568ea1a673afca6]
IP 198.187.31.172:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wellss/login/login.php?cmd=login_submit&id=18354a6bb7ac99899568ea1a673afca618354a6bb7ac99899568ea1a673afca6&session=18354a6bb7ac99899568ea1a673afca618354a6bb7ac99899568ea1a673afca6] HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
x-powered-by: PHP/7.4.30
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
content-type: text/html; charset=UTF-8
x-ua-compatible: IE=edge
x-redirect-by: WordPress
location: https://notnice.club
x-litespeed-cache: hit
content-length: 0
date: Sat, 17 Sep 2022 07:55:38 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
push.services.mozilla.com/
54.69.181.45101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.69.181.45:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: vRjcIIU1/V5TWZ4UyEKhxA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: uN3DMUREXYC5MjZzxeltD7QUaS8=
notnice.club/
198.187.31.172200 OK 23 kB IP 198.187.31.172:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (14692), with CRLF, LF line terminators
Hash e6ee68ca27d8a6f4549e09e784c65f7d
ccddfadf32db4877f93ba8f4a691c9c2ac4b78e3
49e01071240d07c0a0420e076b53ad5f865d7acf22266adf6be3d1177f370824
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/7.4.30
content-type: text/html; charset=UTF-8
x-ua-compatible: IE=edge
link: <https://notnice.club/wp-json/>; rel="https://api.w.org/", <https://notnice.club/wp-json/wp/v2/pages/1173>; rel="alternate"; type="application/json", <https://notnice.club/>; rel=shortlink
etag: "25-1663161663;br"
x-litespeed-cache: hit
content-encoding: br
vary: Accept-Encoding
content-length: 22967
date: Sat, 17 Sep 2022 07:55:38 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 4cc0aaf293fed6c16e1dde02c50c8f40
e94f11cd8fa955f28856a02aa7115aa5f3626d98
b1592dc8fc0d63052f66b7be9b5ff1f562f6fbd05f6365ce828758bfbb3f1a12
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 07:55:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 5d12cc59489773babbc650161772d674
6fa23d626e8a64d98e59984567cd4dc42c648833
f43eae2b85acffc988fbc2c97e18ae1c013217db2cbe24df14dd3b8c35d0ff27
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 07:55:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 5d12cc59489773babbc650161772d674
6fa23d626e8a64d98e59984567cd4dc42c648833
f43eae2b85acffc988fbc2c97e18ae1c013217db2cbe24df14dd3b8c35d0ff27
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 07:55:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=330874283
142.250.74.72200 OK 36 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=330874283
IP 142.250.74.72:0
File type ASCII text, with very long lines (1720)
Hash da43290c868be28bb4a334c0ba396a4f
7d55524fa150269720b054cb1b50762fd5db3fa4
8e0bd45f97dac525c75f3097ff375c7ce2a2cc41e40123a611da302a07138b85
GET /gtag/js?id=330874283 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 17 Sep 2022 07:55:39 GMT
expires: Sat, 17 Sep 2022 07:55:39 GMT
cache-control: private, max-age=900
last-modified: Sat, 17 Sep 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 36126
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-4JCF5RZ0HK
142.250.74.72200 OK 75 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-4JCF5RZ0HK
IP 142.250.74.72:0
File type ASCII text, with very long lines (20189)
Hash e22a58229879e5a4b5368aa2abf60353
122e67ccbdf2b19fa360df190387b8158dd61501
13876ae387e657602c8fcb3bbc4a0bcd07756417add6ded3814926f50d776ab1
GET /gtag/js?id=G-4JCF5RZ0HK HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 17 Sep 2022 07:55:39 GMT
expires: Sat, 17 Sep 2022 07:55:39 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 75323
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
notnice.club/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16
198.187.31.172200 OK 2.4 kB URL HTTP/2 notnice.club/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16
IP 198.187.31.172:0
File type ASCII text, with very long lines (11256), with no line terminators
Hash ce94f62588d05264ac0148712111cb11
518bcd922f54169aeb199c0ccbc5877165ac218e
84ab658a69c39f424be0b27f61d612447d01606fce33beb962cbea53627d8c81
GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: text/css
last-modified: Tue, 29 Sep 2020 19:53:06 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2394
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
assets.pinterest.com/js/pinit.js?ver=1.2.2
151.101.84.84200 OK 203 B URL HTTP/2 assets.pinterest.com/js/pinit.js?ver=1.2.2
IP 151.101.84.84:0
File type ASCII text, with very long lines (361), with no line terminators
Hash 62d32c28f14783b94192cd8d35bc010d
78c1ba11e104bbd01a07225d0f8c41d7712094d4
e823b68f75484d37c74ebb652e2a5b183a1b65c43f1592985e519a8cabc44b2e
GET /js/pinit.js?ver=1.2.2 HTTP/1.1
Host: assets.pinterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
etag: "62d32c28f14783b94192cd8d35bc010d"
content-encoding: br
content-type: application/javascript; charset=utf-8
x-cdn: fastly
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 86400
access-control-expose-headers: X-CDN
vary: Accept-Encoding, Origin
cache-control: max-age=300
date: Sat, 17 Sep 2022 07:55:39 GMT
content-length: 203
X-Firefox-Spdy: h2
notnice.club/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
198.187.31.172200 OK 11 kB URL HTTP/2 notnice.club/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
IP 198.187.31.172:0
File type ASCII text, with very long lines (43771)
Hash d45207ee05c1f0c57dfa075e61405ccd
a8d35143a2d828a739ea0fdde75f97d33621e7ec
a9a4adbbcee31ec277f1bdd573eef97dc4341f29f2db3b5685a02dfe4d2fe9bb
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.2 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: text/css
last-modified: Tue, 12 Jul 2022 22:24:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 10946
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.0.2
198.187.31.172200 OK 982 B URL HTTP/2 notnice.club/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.0.2
IP 198.187.31.172:0
File type ASCII text, with very long lines (4186), with no line terminators
Hash 24f4d7f425e792ab35adaab50816e54a
9e25bf79b674ddb7ba09ad7f118c50ec473c02c8
1c78bfb4d523785a4ebd37bb1f79f214f9bdb16673f7cc50805f7f1a26ad7f83
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.0.2 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: text/css
last-modified: Sat, 08 Jun 2019 00:45:02 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 982
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 4cc0aaf293fed6c16e1dde02c50c8f40
e94f11cd8fa955f28856a02aa7115aa5f3626d98
b1592dc8fc0d63052f66b7be9b5ff1f562f6fbd05f6365ce828758bfbb3f1a12
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 07:55:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 5d12cc59489773babbc650161772d674
6fa23d626e8a64d98e59984567cd4dc42c648833
f43eae2b85acffc988fbc2c97e18ae1c013217db2cbe24df14dd3b8c35d0ff27
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 07:55:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
notnice.club/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.0.0
198.187.31.172200 OK 1.8 kB URL HTTP/2 notnice.club/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.0.0
IP 198.187.31.172:0
File type ASCII text, with very long lines (10435), with no line terminators
Hash f7237084ac82ea6a4f5bf1448c3a2148
60457635a5e809ee1199c61090d8e33b91e8e1f2
18a1cb7f08c1ace52a79f46d73461ed03bf8cf5c9e8a3687eacc3e04f08e7a09
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.0.0 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: text/css
last-modified: Thu, 15 Sep 2022 22:32:45 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1754
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.0.0
198.187.31.172200 OK 21 kB URL HTTP/2 notnice.club/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.0.0
IP 198.187.31.172:0
File type Unicode text, UTF-8 text, with very long lines (65527), with no line terminators
Hash b949966fb1c62c392babd0eb97a080ca
68842cbc531c38a01569da81eff51b1d358f7734
c7804b0b1571c1986e8661aef7343839d797bb368222a537c996b062f1d9f695
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.0.0 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: text/css
last-modified: Thu, 15 Sep 2022 22:32:45 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 20885
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=6.8.2
198.187.31.172200 OK 2.3 kB URL HTTP/2 notnice.club/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=6.8.2
IP 198.187.31.172:0
File type ASCII text, with very long lines (17809), with no line terminators
Hash 09d93f4de720fc11a2944fea38fcafcd
e46cf6a8d3373c7fa5feba0b30cd9b9983f719b2
cf900721be13309b96cf6c6f56b1c0a40194e8aea1b0a0361739219c9c0f9998
GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=6.8.2 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: text/css
last-modified: Thu, 15 Sep 2022 22:32:45 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2329
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/official-mailerlite-sign-up-forms/assets/css/mailerlite_forms.css?ver=1.5.9
198.187.31.172200 OK 208 B URL HTTP/2 notnice.club/wp-content/plugins/official-mailerlite-sign-up-forms/assets/css/mailerlite_forms.css?ver=1.5.9
IP 198.187.31.172:0
Hash 9cd715795053d1f2a32e45ec0b29acd1
9aac36872ad64358be25cd963806e6d0d9dc0194
592f0c95cef072b3f05ed2a826ba3bfbea8c1c6eef185a0a07c2f7979dfd96c1
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/official-mailerlite-sign-up-forms/assets/css/mailerlite_forms.css?ver=1.5.9 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: text/css
last-modified: Wed, 07 Sep 2022 00:53:37 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 208
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=6.8.2
198.187.31.172200 OK 8.4 kB URL HTTP/2 notnice.club/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=6.8.2
IP 198.187.31.172:0
File type Unicode text, UTF-8 text, with very long lines (62753), with no line terminators
Hash 60aea8fe062ea93aa6dfa342ea23b7fd
bf9a4843acf8f1f116ef2cae7fb40a9a2f37253a
7db430ef3124de87a8a33cf0ffe134a86bff67de803eea16f4b3ed4d2d569d4f
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=6.8.2 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: text/css
last-modified: Thu, 15 Sep 2022 22:32:45 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 8432
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/pinterest-for-woocommerce/assets/css/frontend/pinterest-for-woocommerce-pins.min.css?ver=1.2.2
198.187.31.172200 OK 210 B URL HTTP/2 notnice.club/wp-content/plugins/pinterest-for-woocommerce/assets/css/frontend/pinterest-for-woocommerce-pins.min.css?ver=1.2.2
IP 198.187.31.172:0
File type ASCII text, with very long lines (516)
Hash d88318e16e38efa8a9126d79296f16d9
c34cf2d25b94207b6ee8489fd32406ec0bc553a0
466ae717a6dad6866b5db73c04e97b2d617b3c2ff547adaf89d2b732e4b0cf2a
GET /wp-content/plugins/pinterest-for-woocommerce/assets/css/frontend/pinterest-for-woocommerce-pins.min.css?ver=1.2.2 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: text/css
last-modified: Wed, 07 Sep 2022 00:48:25 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 210
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/themes/generatepress/assets/css/all.min.css?ver=3.1.3
198.187.31.172200 OK 6.5 kB URL HTTP/2 notnice.club/wp-content/themes/generatepress/assets/css/all.min.css?ver=3.1.3
IP 198.187.31.172:0
File type ASCII text, with very long lines (31339), with no line terminators
Hash 5ef9855df4184cac0287e2ebac674674
f5d835ea88efbe5748674b57676a7c4cdb5ca683
6dc3ac9db09977b3ea10d9d471718d1a973491cbb43e2c1674f2ff64d6b2d7e0
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/generatepress/assets/css/all.min.css?ver=3.1.3 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: text/css
last-modified: Wed, 09 Feb 2022 22:27:39 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6470
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0
198.187.31.172200 OK 3.6 kB URL HTTP/2 notnice.club/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0
IP 198.187.31.172:0
File type ASCII text, with very long lines (19233)
Hash af3bdf44d09914e8adb51fec560d8816
84bb225e096bab405868dd504e62133ba75cf1c1
4325dab21d3eb9efb8e285a0926be743f27e46446ccf5f9be65bb4b60c024152
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: text/css
last-modified: Thu, 15 Sep 2022 22:32:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3629
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.7.4
198.187.31.172200 OK 741 B URL HTTP/2 notnice.club/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.7.4
IP 198.187.31.172:0
File type ASCII text, with very long lines (13766)
Hash e6187c9d99bf01bbf5ae94ff0d1099de
236827c7af5b9175431f90f3a200f7b1f9102d29
b69c786866d69635d144e19079ff8c8830666b639220e64d9b5ccdedb31d7bb3
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.7.4 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: text/css
last-modified: Thu, 15 Sep 2022 22:32:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 741
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
198.187.31.172200 OK 4.0 kB URL HTTP/2 notnice.club/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP 198.187.31.172:0
File type ASCII text, with very long lines (11126)
Hash 7e058b51f939eacfa31cdface14dded5
9d732e5afdeb42edef9e1b9631b7e95e054787cc
4ece5b00423755d8f4121ce382c8ea4dc44c241f28f150abe19caa85d0b0acc1
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Wed, 18 Nov 2020 14:06:06 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3995
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/themes/generatepress/assets/css/components/font-icons.min.css?ver=3.1.3
198.187.31.172200 OK 680 B URL HTTP/2 notnice.club/wp-content/themes/generatepress/assets/css/components/font-icons.min.css?ver=3.1.3
IP 198.187.31.172:0
File type ASCII text, with very long lines (2964), with no line terminators
Hash bdf49cdc5ba87b2bcffbfad20f0ce4ca
205ab19992b8de72a3beee7e6e52827b0b8d9220
a88520a3b8810244c98f074baecf23e359eff8965db961701b194d1487e5d21f
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/generatepress/assets/css/components/font-icons.min.css?ver=3.1.3 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: text/css
last-modified: Wed, 09 Feb 2022 22:27:39 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 680
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/woo-category-slider-for-elementor/asset/css/grid.css?ver=6.0.2
198.187.31.172200 OK 3.6 kB URL HTTP/2 notnice.club/wp-content/plugins/woo-category-slider-for-elementor/asset/css/grid.css?ver=6.0.2
IP 198.187.31.172:0
File type ASCII text, with CRLF line terminators
Hash d1ac8cd7d48285cc0c2641d12ae3d870
dc73381ae1bac3d958c983019bb88cedcb12571f
f2c765c828155ed5e196000edec0a34a0c85742d78cc6648eaa9cde510c75a64
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woo-category-slider-for-elementor/asset/css/grid.css?ver=6.0.2 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: text/css
last-modified: Sun, 29 Aug 2021 18:31:57 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3618
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/woo-category-slider-for-elementor/asset/css/owl.carousel.css?ver=6.0.2
198.187.31.172200 OK 1.2 kB URL HTTP/2 notnice.club/wp-content/plugins/woo-category-slider-for-elementor/asset/css/owl.carousel.css?ver=6.0.2
IP 198.187.31.172:0
Hash 4d212a5c6caf5b0cb400af74557e3ca3
8a84de44f52e8bd1449e72b72d87b24bf880f456
13453f72b0eefd25528b5307c94ed5d1460625d6f7313720530b7d9edb10bd9e
GET /wp-content/plugins/woo-category-slider-for-elementor/asset/css/owl.carousel.css?ver=6.0.2 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: text/css
last-modified: Sun, 29 Aug 2021 18:31:57 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1232
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/ele-custom-skin/assets/css/ecs-style.css?ver=3.1.7
198.187.31.172200 OK 1.7 kB URL HTTP/2 notnice.club/wp-content/plugins/ele-custom-skin/assets/css/ecs-style.css?ver=3.1.7
IP 198.187.31.172:0
Hash 9504a8a9736bcb1a5d5d2b8b3a5a2a28
2e5f60e75a28d4afb29e79682532c93c41439337
bec9f5b7ce607ca23aaf55a7227b5483a8d84a29560c0d5f12a7ba829fa49692
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ele-custom-skin/assets/css/ecs-style.css?ver=3.1.7 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: text/css
last-modified: Tue, 23 Aug 2022 22:19:30 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1665
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/woo-category-slider-for-elementor/asset/css/style.css?ver=6.0.2
198.187.31.172200 OK 4.0 kB URL HTTP/2 notnice.club/wp-content/plugins/woo-category-slider-for-elementor/asset/css/style.css?ver=6.0.2
IP 198.187.31.172:0
File type ASCII text, with CRLF line terminators
Hash d9f28a113af85320fc95c6b2c186173d
9a94047080240fe9c2f58678398249c2d1df653e
581131b171de4d359edde6616ffe99f271164ca78f0abe268719ab8f5da69a80
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woo-category-slider-for-elementor/asset/css/style.css?ver=6.0.2 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: text/css
last-modified: Sun, 29 Aug 2021 18:31:57 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3973
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.7.4
198.187.31.172200 OK 19 kB URL HTTP/2 notnice.club/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.7.4
IP 198.187.31.172:0
File type ASCII text, with very long lines (65497)
Hash f995bb892cf0fa91ba32f7d5cbde6ec4
fc936b505820ce44364c0412661bac819d60bc9c
88e8ba874ad4a7c545148dac7863696d50d66febf97bef612d685f168063e84c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.7.4 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: text/css
last-modified: Thu, 15 Sep 2022 22:32:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 18716
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/themes/generatepress%20-%20child/style.css?ver=1619059690
198.187.31.172200 OK 7.7 kB URL HTTP/2 notnice.club/wp-content/themes/generatepress%20-%20child/style.css?ver=1619059690
IP 198.187.31.172:0
Hash 0a5d90e7ba85685489a740ccf03743e0
4a4faec4f5541305a7d1760d10c42b3325035868
19fe70c6b22940b4ea7e77e1693de5d589efed33331489dc749c444514dc3565
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/generatepress%20-%20child/style.css?ver=1619059690 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: text/css
last-modified: Thu, 22 Apr 2021 02:48:10 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7657
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/jetpack/css/jetpack.css?ver=11.3.1
198.187.31.172200 OK 16 kB URL HTTP/2 notnice.club/wp-content/plugins/jetpack/css/jetpack.css?ver=11.3.1
IP 198.187.31.172:0
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 63440a10045040089c23b9e57001dc2c
ddeedb5fa2831e3c973720cdafd1843d61e6d3dd
5ab6086189a9163156a7fda2cca4ffa21a3c10083a5eb1383196b62a0ea7d131
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/jetpack/css/jetpack.css?ver=11.3.1 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: text/css
last-modified: Fri, 09 Sep 2022 22:20:58 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 15532
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3
198.187.31.172200 OK 12 kB URL HTTP/2 notnice.club/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3
IP 198.187.31.172:0
File type ASCII text, with very long lines (57726)
Hash f463afd8661ddc733305df1f0cbdaff2
77262f0209e75e340eb7014aba9cd8d69966032f
c4b6541be58a0ca61549cd4562850315077880c459c019f01e835cf2d7b764de
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: text/css
last-modified: Thu, 15 Sep 2022 22:32:39 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 12133
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
198.187.31.172200 OK 2.4 kB URL HTTP/2 notnice.club/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP 198.187.31.172:0
File type ASCII text, with very long lines (6475), with no line terminators
Hash 4e773d7cec56bacab6d2db420be6f262
c95573d884c1caec0ec9c6f3e2a8c0fbf28d939a
5c8839d0b02f21e8d83d856bbf85a6b87fbedf9ba0b70711b11a1c378d5443e7
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Mon, 11 Apr 2022 16:04:30 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2354
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-includes/js/dist/hooks.min.js?ver=c6d64f2cb8f5c6bb49caca37f8828ce3
198.187.31.172200 OK 1.6 kB URL HTTP/2 notnice.club/wp-includes/js/dist/hooks.min.js?ver=c6d64f2cb8f5c6bb49caca37f8828ce3
IP 198.187.31.172:0
File type ASCII text, with very long lines (4875)
Hash 06a8ac0e71976bc143cfa7861a31169d
def6031fe13259bf17752661832d815e37068bf2
e6f42d97e7299522bbb002364128fdf72cd22263ca72c5edc41dcd8f4672cd33
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/dist/hooks.min.js?ver=c6d64f2cb8f5c6bb49caca37f8828ce3 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Mon, 11 Apr 2022 16:04:30 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1575
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-includes/js/dist/i18n.min.js?ver=ebee46757c6a411e38fd079a7ac71d94
198.187.31.172200 OK 3.7 kB URL HTTP/2 notnice.club/wp-includes/js/dist/i18n.min.js?ver=ebee46757c6a411e38fd079a7ac71d94
IP 198.187.31.172:0
Hash f778ade6a70be55cbf039cfafb20fa7f
68d7a7f2d88907a038ec557ae0ab67f58d7bcdc5
88fd2a2f80a5ff9f70a6c4019d81f3bae8bc92623697454faa44f448cc43ad93
GET /wp-includes/js/dist/i18n.min.js?ver=ebee46757c6a411e38fd079a7ac71d94 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Tue, 12 Apr 2022 19:12:48 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3717
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
198.187.31.172200 OK 286 B URL HTTP/2 notnice.club/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
IP 198.187.31.172:0
File type ASCII text, with very long lines (483)
Hash 8828fa3c5bdcfa66615714a2b8c9d807
4f556d0b005ac7754af607418df445f8cf98e8b1
16950dcce60bc3ee2613b60439c99e7ed74d10245f59fe6f68346b7e72dd95e7
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: text/css
last-modified: Thu, 15 Sep 2022 22:32:39 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 286
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.7.4
198.187.31.172200 OK 2.4 kB URL HTTP/2 notnice.club/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.7.4
IP 198.187.31.172:0
File type ASCII text, with very long lines (10019)
Hash d2db71c82a8f672aea59a3e050cd8cd7
af626566f94b3164e4310288cfb142431e8349a6
bcd2c9c2ba22a48a8fabf9fbe5e947deb6404367e4be24f48326e302aead1180
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.7.4 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: text/css
last-modified: Thu, 15 Sep 2022 22:32:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2442
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/ele-custom-skin/assets/js/ecs_ajax_pagination.js?ver=3.1.7
198.187.31.172200 OK 1.2 kB URL HTTP/2 notnice.club/wp-content/plugins/ele-custom-skin/assets/js/ecs_ajax_pagination.js?ver=3.1.7
IP 198.187.31.172:0
Hash 1e72af5b9e17655b73d42f2ae5ba47da
ce15373d84e1834364eb7d1a3840cecb1d694701
e68be32a16c5af6b29fd61d88778d7c53a8636e8b9e02d0a217e6dbb57594378
GET /wp-content/plugins/ele-custom-skin/assets/js/ecs_ajax_pagination.js?ver=3.1.7 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Tue, 23 Aug 2022 22:19:30 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1187
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.8.2
198.187.31.172200 OK 3.2 kB URL HTTP/2 notnice.club/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.8.2
IP 198.187.31.172:0
File type ASCII text, with very long lines (9115)
Hash 66c388e07cfb57895688b3347ab7290b
f23bd7a31995b3b19924575f2afa297a29257856
3971f3ab5179d1f4f91d2c102f27c2bf1dac2c04e2f62ff3eae3ebfa8c28494e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.8.2 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Thu, 15 Sep 2022 22:32:45 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3245
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.8.2
198.187.31.172200 OK 899 B URL HTTP/2 notnice.club/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.8.2
IP 198.187.31.172:0
File type ASCII text, with very long lines (1668)
Hash 22d65ba38528349e705d912ce26bf8ac
c89ba006009043d93b88ff155b4fec8797330550
6253bcb85e4267ad3ba843145534e729ee2c1d7e85e5b4ab5b2e074ae636bca3
GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.8.2 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Thu, 15 Sep 2022 22:32:45 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 899
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/themes/generatepress/assets/js/menu.min.js?ver=3.1.3
198.187.31.172200 OK 1.5 kB URL HTTP/2 notnice.club/wp-content/themes/generatepress/assets/js/menu.min.js?ver=3.1.3
IP 198.187.31.172:0
File type ASCII text, with very long lines (6940), with no line terminators
Hash 9f2ba716b62228936b407eb14616468d
3e6fdc1529ffbc22334002cf070c9772a7b940b3
42b857e52375be7af6a8d0ce4dbf4a082b7d04949b9fe4b5ebcaee94e6e7f9e2
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/generatepress/assets/js/menu.min.js?ver=3.1.3 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Mon, 13 Jun 2022 11:48:50 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1509
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/official-mailerlite-sign-up-forms/assets/js/jquery.validate.min.js?ver=6.0.2
198.187.31.172200 OK 6.5 kB URL HTTP/2 notnice.club/wp-content/plugins/official-mailerlite-sign-up-forms/assets/js/jquery.validate.min.js?ver=6.0.2
IP 198.187.31.172:0
File type Unicode text, UTF-8 text, with very long lines (21388)
Hash 9afc9568e9cd6f3697561bac8a29e7a9
7e09c5aa6b975cfa6fd79aeb46bc2328a6290417
a74ad35c340a09879b6154e19d5bcd351e1d1ec6245acbc5fe20eb9651fe5aa2
GET /wp-content/plugins/official-mailerlite-sign-up-forms/assets/js/jquery.validate.min.js?ver=6.0.2 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Wed, 07 Sep 2022 00:53:37 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6513
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.8.2
198.187.31.172200 OK 934 B URL HTTP/2 notnice.club/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.8.2
IP 198.187.31.172:0
File type ASCII text, with very long lines (2938), with no line terminators
Hash cf25dd071a208312bdc07f34d2cee027
76119563119eaae392ecc8903c989d98d0b93002
8635ba2cad8f887e72779bd526f8738ff6343c74cba715caf2eddea383ba7ce6
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.8.2 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Thu, 15 Sep 2022 22:32:45 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 934
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.8.2
198.187.31.172200 OK 677 B URL HTTP/2 notnice.club/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.8.2
IP 198.187.31.172:0
File type ASCII text, with very long lines (2139), with no line terminators
Hash a43fc0dde8fdd69656ad0957e62849c7
4b07cf702ac8a770c8cbffc22b9a788b6e5389ba
1ce3d0493424870c81deec0ec41de0592d2af9f91cd8081cd40a1d7ea89b614f
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.8.2 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Thu, 15 Sep 2022 22:32:45 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 677
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/ele-custom-skin/assets/js/ecs.js?ver=3.1.7
198.187.31.172200 OK 284 B URL HTTP/2 notnice.club/wp-content/plugins/ele-custom-skin/assets/js/ecs.js?ver=3.1.7
IP 198.187.31.172:0
Hash 447712f49ef92d24eda0381882e5f00b
b041299af91182f0d7a997769cd20e3a2f7ebef4
566d4c5dfefc9c4d867e6bef080917a4273b4228731a8700e81f1763eae3d861
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ele-custom-skin/assets/js/ecs.js?ver=3.1.7 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Tue, 23 Aug 2022 22:19:30 GMT
accept-ranges: bytes
content-length: 284
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.8.2
198.187.31.172200 OK 974 B URL HTTP/2 notnice.club/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.8.2
IP 198.187.31.172:0
File type HTML document, ASCII text, with very long lines (3037), with no line terminators
Hash fd8b126d3265cc6afc5b672273f78531
5058e579885cccf36c44bdeb5b7318bd75952af9
72da6709db061566cb5f67322f674a77f68acb69ac6181d37f9ca4a1bb7287b7
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.8.2 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Thu, 15 Sep 2022 22:32:45 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 974
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/woo-category-slider-for-elementor/asset/js/main.js
198.187.31.172200 OK 1.0 kB URL HTTP/2 notnice.club/wp-content/plugins/woo-category-slider-for-elementor/asset/js/main.js
IP 198.187.31.172:0
File type ASCII text, with CRLF line terminators
Hash bc3212a5c0a8135df7af87b81039d6a4
fa58f677b715c6a13c79b6892caf308434267d23
f0a0bb0376681f8711929e31f83386ad6bb4b2f39e8074ea0197939e63c518dd
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woo-category-slider-for-elementor/asset/js/main.js HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Mon, 13 Jun 2022 11:43:04 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1020
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.7.4
198.187.31.172200 OK 2.0 kB URL HTTP/2 notnice.club/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.7.4
IP 198.187.31.172:0
File type ASCII text, with very long lines (4918)
Hash 67ee1d5699a6c22728b012d8f1dfedc8
7de8080d2e87ec286debbba822ff2ae1d798c35b
9fe7ed8282155ba8835f78860f4029d684573a931d51413d2738ce6cc90c9dfc
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.7.4 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Thu, 15 Sep 2022 22:32:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2044
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/pinterest-for-woocommerce/assets/js/pinterest-for-woocommerce-tracking.min.js?ver=1.2.2
198.187.31.172200 OK 216 B URL HTTP/2 notnice.club/wp-content/plugins/pinterest-for-woocommerce/assets/js/pinterest-for-woocommerce-tracking.min.js?ver=1.2.2
IP 198.187.31.172:0
Hash 670fc119acc1296614bbb4643a9a72bf
41d5ac60ac3161dd7773b5b592b55bef6489c3ed
331386fb1eaa6c9016043db52d1c0cb907a5213c063da2db9ababc09564c3401
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/pinterest-for-woocommerce/assets/js/pinterest-for-woocommerce-tracking.min.js?ver=1.2.2 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Wed, 07 Sep 2022 00:48:25 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 216
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.7.1
198.187.31.172200 OK 2.2 kB URL HTTP/2 notnice.club/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.7.1
IP 198.187.31.172:0
File type ASCII text, with very long lines (5118)
Hash 01c7a66a9e4efe2f8f7a4a7baa4b189b
d77d59d40b70efbf17a6a7165e49546d1e91f083
8da1103b91a9b8e935070a6c7daf1e6057e78b9604cc2930d22ca7b3a8274eb8
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.7.1 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Fri, 17 Jun 2022 18:06:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2180
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
198.187.31.172200 OK 2.9 kB URL HTTP/2 notnice.club/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
IP 198.187.31.172:0
File type ASCII text, with very long lines (12198), with no line terminators
Hash 869caa171b68cbec9fee5abbfb944ee8
f237e485e41f88b77384cfdb880f9d5a8f46eac8
25c2896e2790fb0e52f6b6ba1ce97bd87eb40463b4bb65ba16ad434c1d7a36dc
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Thu, 15 Sep 2022 22:32:39 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2867
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.7.4
198.187.31.172200 OK 1.0 kB URL HTTP/2 notnice.club/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.7.4
IP 198.187.31.172:0
File type ASCII text, with very long lines (2620), with no line terminators
Hash 906c4decdcd32482c1cf583b07925d30
30e726b9febb4b651544266df656a21251f0e8e3
53f86e9641d0e35772d6b54294cc6dd685fb9a376a1baad151da120fef609423
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.7.4 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Thu, 15 Sep 2022 22:32:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1047
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.7.4
198.187.31.172200 OK 12 kB URL HTTP/2 notnice.club/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.7.4
IP 198.187.31.172:0
File type ASCII text, with very long lines (40474)
Hash eb90e28c7cb1f6ae7368b245bafd9d88
e2d77fd95196a030a36bf7ce0d591d7ed2a4c916
f657379d98ad79fee528527f9718178c98fadd48a47ef9f6be56e6d22b658418
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.7.4 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Thu, 15 Sep 2022 22:32:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 11703
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.7.1
198.187.31.172200 OK 1.3 kB URL HTTP/2 notnice.club/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.7.1
IP 198.187.31.172:0
File type ASCII text, with very long lines (3235)
Hash 91194abbabb66c22700e71f20e1e6044
38c55fe048913b6bb019340944be577d045c42cc
cd144b8d1080b1c8e61c85a9357fea64c7b5be3ccbcef5c8f5301fab8eab999a
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.7.1 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Fri, 17 Jun 2022 18:06:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1254
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.7.4
198.187.31.172200 OK 12 kB URL HTTP/2 notnice.club/wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.7.4
IP 198.187.31.172:0
File type ASCII text, with very long lines (43101)
Hash 48ba86a88fe5c088ecf32018d1ee4c63
33476c84c46407b501a76ba3caeb7e9ce176b7dc
3e2ed132c616f6a1217a083ff6cc6387ddb8d18c722780fc0da03b8b8bed1719
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.7.4 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Thu, 15 Sep 2022 22:32:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 12548
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
198.187.31.172200 OK 4.6 kB URL HTTP/2 notnice.club/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
IP 198.187.31.172:0
File type ASCII text, with very long lines (15660)
Hash 0232689bd203f330529b36a437f41a68
9046583f7469ad38297969f10a9513eb895d5316
feea9f30a6e454579bbeabf236b7abdb0c7de84dd2852422555ad67348c5e886
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Tue, 12 Apr 2022 09:56:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4619
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0
198.187.31.172200 OK 3.3 kB URL HTTP/2 notnice.club/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0
IP 198.187.31.172:0
File type ASCII text, with very long lines (10544)
Hash 3821415a39954c48c7927e661467c6b8
dfe1116a0efc9898cb6caf094213880da83d6990
5f7f5b28f47c366a0bb70435dc3b2253278222c92429f013084f71fd7d29a32e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Thu, 15 Sep 2022 22:32:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3268
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
198.187.31.172200 OK 30 kB URL HTTP/2 notnice.club/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP 198.187.31.172:0
File type ASCII text, with very long lines (65447)
Hash 34f918ada1fe4f01c5a4b90065bbc37a
a731f6ce2d413805e39ae45994012b1bd5ea1e2b
eba158d5ab26a5a54a3dcfcea1072c636f44e92fc2eb30a3f27cd5be3f891dfc
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Wed, 10 Mar 2021 20:07:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 30273
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 35f3deb94b2a985eb02f5a14f033c44f
2076e4cb6faf9a7bf1cbfc8947db9a8550f556bd
1d5c76a54a4ab121ccf5f456516ec99fb7f5129a491e078d97c749b94060970a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1D5C76A54A4AB121CCF5F456516EC99FB7F5129A491E078D97C749B94060970A"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16628
Expires: Sat, 17 Sep 2022 12:32:48 GMT
Date: Sat, 17 Sep 2022 07:55:40 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 35f3deb94b2a985eb02f5a14f033c44f
2076e4cb6faf9a7bf1cbfc8947db9a8550f556bd
1d5c76a54a4ab121ccf5f456516ec99fb7f5129a491e078d97c749b94060970a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1D5C76A54A4AB121CCF5F456516EC99FB7F5129A491E078D97C749B94060970A"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16628
Expires: Sat, 17 Sep 2022 12:32:48 GMT
Date: Sat, 17 Sep 2022 07:55:40 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcaf888ee-3a5f-426b-9b83-8ea161780db3.jpeg
34.120.237.76200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcaf888ee-3a5f-426b-9b83-8ea161780db3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9c807387d303abb2bca1ef14b14c9e26
428fe80d3f35758433a6b2cf25e6bcb5f63a6a63
277a74204dc8bec8a227ca43cdb840b5dda71f74e8aec56606e862e70a5ba19c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcaf888ee-3a5f-426b-9b83-8ea161780db3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5234
x-amzn-requestid: 55e23e9a-f85c-42f2-87b6-aff3646bf1fc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yknn_EFzoAMF2Ag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6324ec99-62f023426230c7b46116d4b7;Sampled=0
x-amzn-remapped-date: Fri, 16 Sep 2022 21:37:29 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: fb2wN0gTI9OKgDghf1u4DKwrADkYcS5_7LIxaLxmbo0OciwezGh_LA==
via: 1.1 95785220a566cd050f3ad80928463374.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Sep 2022 21:37:55 GMT
age: 37065
etag: "428fe80d3f35758433a6b2cf25e6bcb5f63a6a63"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37eff517-f8c4-4e04-9fb6-e9a22aa4d8bf.jpeg
34.120.237.76200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37eff517-f8c4-4e04-9fb6-e9a22aa4d8bf.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e0c4155f7b9f8a4a31780ea86e50e398
50ae5dbe015dc8b9ad022cb5b11cb2c4c8086368
598683a93574a8418e19decdbfc5bcae2f028c6e1791c192f98425bd8e339ad4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37eff517-f8c4-4e04-9fb6-e9a22aa4d8bf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7788
x-amzn-requestid: c570654d-569c-4faf-9690-5ffab5eaceed
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YR5sREScIAMF5RA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d6fe7-3ed179845a3e9ede478e6dfa;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 05:19:35 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: kkko85Peg1nRJNE9WmrID7GfTrqjOuXZHDAcPRS6ZXIdEQF4YOMBVw==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Sep 2022 21:38:59 GMT
age: 37001
etag: "50ae5dbe015dc8b9ad022cb5b11cb2c4c8086368"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd5675c7-5120-4f61-bd91-8c4d9af84130.jpeg
34.120.237.76200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd5675c7-5120-4f61-bd91-8c4d9af84130.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7a22ab7dcdf50f4a297b8e117d336eae
e139a0974317212f094fdbe59e26ca5cf6b9e56d
9b4c23c1bb2e4fcd140ce34bf83f315f09b45202c569cb74113c2e65c4031dcd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd5675c7-5120-4f61-bd91-8c4d9af84130.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7788
x-amzn-requestid: 2cb48f87-8b72-4ff7-b041-a6e704b854a8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YIP2-HFHoAMFssA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6319935f-693e2f2e5a0bcd9f690f21fa;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 07:01:51 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 4-H_LbXRjS1PJkVz9OIhwsaPfu8ZlL98zTZG--hdmij9Tc6KtmNSFQ==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Sep 2022 21:51:13 GMT
age: 36267
etag: "e139a0974317212f094fdbe59e26ca5cf6b9e56d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F35fd8af4-6883-4fbd-bf72-19167284c2ad.jpeg
34.120.237.76200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F35fd8af4-6883-4fbd-bf72-19167284c2ad.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2815dd402ec758d2088a6f360d29847b
5b7e4c16a2083e189a40790dca647280a3a3665b
5dd6aa9a36e6a18a66dfd7e444cbcfce8088b0eab648d784d2e554958d64edea
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F35fd8af4-6883-4fbd-bf72-19167284c2ad.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7644
x-amzn-requestid: 9e035566-625b-4b9f-ad72-3266f8cde01b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YfIiDGINoAMFTKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322bad9-28ac917b20ca2ef64fbff2d4;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 05:40:41 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: dvViUCjTvbcwSof4SAlARDnD7nUDzGUZJk1PqLi6IsuIVOEZngXtSw==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Sep 2022 21:52:08 GMT
age: 36212
etag: "5b7e4c16a2083e189a40790dca647280a3a3665b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2223b64d-7436-4cd8-9633-fc79069394d6.jpeg
34.120.237.76200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2223b64d-7436-4cd8-9633-fc79069394d6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2efd7ea9edbfe7d4d2cf6685dc60f571
dfb08910372586148c4e1fbea598818bf65cdbdb
a731494ee4cfd1d6d8642dc837f6731d55b84033f0f88a3e45fd82b07d137b28
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2223b64d-7436-4cd8-9633-fc79069394d6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9486
x-amzn-requestid: eb3622e4-3ac9-4148-8da1-0eb73e24e798
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YRYP8HkYIAMF4mg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d3a65-418ddfed5fe892af4998abc0;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 01:31:17 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 13i5a3uLuTga4_H4-lf1qT3dTznuh2i2TRK9mUGJuUii-WPADgG1Sg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Sep 2022 21:52:19 GMT
age: 36201
etag: "dfb08910372586148c4e1fbea598818bf65cdbdb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F965c1f46-ea3e-498e-b9dd-07a252ce51c2.jpeg
34.120.237.76200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F965c1f46-ea3e-498e-b9dd-07a252ce51c2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6656c96d31803728c2fcd707289bcd27
5139023bb709d865d26a9b2fac4b02260966c347
41c958a36909953f47208de41fb76081ce2c5bb80afec7c15b7c544b464880b7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F965c1f46-ea3e-498e-b9dd-07a252ce51c2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6991
x-amzn-requestid: 799f17de-b856-4be7-abbf-0d444f605a94
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YXe-WE9toAMF41A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631fab8e-6f2639d75967c1d2213d2d8b;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 21:58:38 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: MJBgizrudIYLP4pd1G5uvwD27fRA5unGEjbfDTZVz-TdtBrrlG49Hw==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Sep 2022 22:01:38 GMT
age: 35642
etag: "5139023bb709d865d26a9b2fac4b02260966c347"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js?ver=3.7.1
198.187.31.172200 OK 30 kB URL HTTP/2 notnice.club/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js?ver=3.7.1
IP 198.187.31.172:0
File type ASCII text, with very long lines (65493)
Hash 18983a01a7e8626e646c126b1691a5c5
7129c2faf63e307adc70b510d8ffc36af954bc8d
3740f072a52369f629cb0e90b556fc091d679dcefaac3394c6761f7e1c4c830e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js?ver=3.7.1 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Fri, 17 Jun 2022 18:06:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 30048
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
198.187.31.172200 OK 6.9 kB URL HTTP/2 notnice.club/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP 198.187.31.172:0
File type Unicode text, UTF-8 text, with very long lines (19138), with no line terminators
Hash 1f5152610686781567fb3008c4429792
d0c0bddf5fb8603ed8e55c32f3093c2207f72471
75806ece853d0d76e655a433bd03548d3be6237ea1e4cacd5963f528bbe0d192
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Mon, 11 Apr 2022 16:04:30 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6872
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/woo-category-slider-for-elementor/asset/js/owl.carousel.js
198.187.31.172200 OK 19 kB URL HTTP/2 notnice.club/wp-content/plugins/woo-category-slider-for-elementor/asset/js/owl.carousel.js
IP 198.187.31.172:0
File type ASCII text, with very long lines (360)
Hash 99a8369ecd24972f983566159675f002
35b59bd03209d4dd6456514bd173896a829549c4
017da8f552bb8a40c7f61b303c0b4edfb41bd473c1d8c921edbbdc84bfdec016
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woo-category-slider-for-elementor/asset/js/owl.carousel.js HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Mon, 13 Jun 2022 11:43:04 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 19365
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1
198.187.31.172200 OK 6.9 kB URL HTTP/2 notnice.club/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1
IP 198.187.31.172:0
File type ASCII text, with very long lines (25115)
Hash e8d8c6e4997a420abc51e5fa8c1caa8b
39ae930f057de725cff8549eed82f31f8d0816c1
730b8265b47a7f9bf014b64fb5c27f9f1cff1051dbf53e60ceb3cc16def732cc
GET /wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Fri, 17 Jun 2022 18:06:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6935
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.7.4
198.187.31.172200 OK 10 kB URL HTTP/2 notnice.club/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.7.4
IP 198.187.31.172:0
File type Unicode text, UTF-8 text, with very long lines (32889)
Hash 87e8f6e78b4755752a637315bd3dbbdd
8892777c69598d01d798558ce38f8ce593be195a
027ecf5450b0630d94bb1809b8fc99a54eb34ad39f3857ac74bd34287552bf89
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.7.4 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Thu, 15 Sep 2022 22:32:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 10420
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.7.1
198.187.31.172200 OK 5.4 kB URL HTTP/2 notnice.club/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.7.1
IP 198.187.31.172:0
File type ASCII text, with very long lines (20991)
Hash 2fb9de03ee842948ca805253b172b485
9339b0fa885b816f9c41aef0cf31f6c7c18df2d0
e9842e285d587fa4094e28b239aed57c23f916aeb9efb68e132c5aca0dae953d
GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.7.1 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Fri, 17 Jun 2022 18:06:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5355
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
198.187.31.172200 OK 6.6 kB URL HTTP/2 notnice.club/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
IP 198.187.31.172:0
File type Unicode text, UTF-8 text, with very long lines (8189)
Hash 139a41f01d192d239e7dce15ca307983
62a3e7c0c77209832dc649bc5583e5e0b4918bf5
d796462a5d212cd93b315b43dafb6e77dbe1c3aa567964dc40c1ab0e2c28f405
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Sat, 09 Apr 2022 00:07:18 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6637
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6
198.187.31.172200 OK 34 kB URL HTTP/2 notnice.club/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6
IP 198.187.31.172:0
File type ASCII text, with very long lines (65280)
Hash 83a90323ac82b98062b4b2c8ac8c5051
d7d376677e3546b756b4fec6219be72b85c4f8f5
7fd68e9ea0ebd35958da46d7373113d1a3646a671217cf2cf471c65c3d710613
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: application/javascript
last-modified: Thu, 15 Sep 2022 22:32:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 34004
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 8fb510c0e0fbff6302a68eb385520e3f
cd5149c6ffc7ee3d90e9e6884af8e02f44c7ab00
2b9cd0f540eb0916ad5c3ee63dbc8ee57570c3eaae7aeabca5c8cb03a3c73c32
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 07:55:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
notnice.club/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=6.8.2
198.187.31.172200 OK 1.1 kB URL HTTP/2 notnice.club/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=6.8.2
IP 198.187.31.172:0
File type ASCII text, with very long lines (7043), with no line terminators
Hash 398489038b789364a5c83f044e11974d
d5caf5f64c45693de65b5c0a801bfbf83a325485
32365dde0c909abbb02d8b6a8d9938056ba47f325d51e75082e3d265ce5f76d5
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=6.8.2 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:40 GMT
content-type: text/css
last-modified: Thu, 15 Sep 2022 22:32:45 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1058
date: Sat, 17 Sep 2022 07:55:40 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
142.250.74.163200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://notnice.club
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 17 Sep 2022 02:02:22 GMT
expires: Sun, 17 Sep 2023 02:02:22 GMT
cache-control: public, max-age=31536000
age: 21198
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 8fb510c0e0fbff6302a68eb385520e3f
cd5149c6ffc7ee3d90e9e6884af8e02f44c7ab00
2b9cd0f540eb0916ad5c3ee63dbc8ee57570c3eaae7aeabca5c8cb03a3c73c32
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 07:55:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
assets.mailerlite.com/js/universal.js
104.18.34.106200 OK 49 kB URL HTTP/2 assets.mailerlite.com/js/universal.js
IP 104.18.34.106:0
File type ASCII text, with very long lines (38782)
Hash d7f47eed8762b88a0090ff377bd9172a
a5cef32b78378086289bfeecea6971830d16e796
a25e5645d0d46a9b7d70949ff26674b81ea2532670e9e81b447613b66d39d7f1
GET /js/universal.js HTTP/1.1
Host: assets.mailerlite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 17 Sep 2022 07:55:40 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 16 Sep 2022 06:06:07 GMT
etag: W/"6324124f-97a4"
cache-control: public, max-age=432000
age: 453
x-cache: HIT
x-cache-hits: 56
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Thu, 22 Sep 2022 07:55:40 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 74c047e98bd01bfe-OSL
content-encoding: br
X-Firefox-Spdy: h2
notnice.club/wp-content/uploads/2020/03/HelveticaNeueMed.ttf
198.187.31.172200 OK 40 kB URL HTTP/2 notnice.club/wp-content/uploads/2020/03/HelveticaNeueMed.ttf
IP 198.187.31.172:0
File type TrueType Font data, 15 tables, 1st "OS/2", 24 names, Unicode\012- data
Hash 9f25b1f8c62ddd2ad699a89aaaf11a59
012639f9a4ed9f209ee31d2adc81734e941f64f3
7d8c329264275748c586498a45884c20faa1f726a5fc694c6303c72258c3f5a6
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2020/03/HelveticaNeueMed.ttf HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:40 GMT
content-type: font/ttf
last-modified: Tue, 30 Mar 2021 05:56:49 GMT
accept-ranges: bytes
content-length: 39656
date: Sat, 17 Sep 2022 07:55:40 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
pixel.wp.com/g.gif?v=ext&j=1%3A11.3.1&blog=191476157&post=1173&tz=0&srv=notnice.club&host=notnice.club&ref=&fcp=2686&rand=0.9699096179925024
192.0.76.3200 OK 50 B URL HTTP/2 pixel.wp.com/g.gif?v=ext&j=1%3A11.3.1&blog=191476157&post=1173&tz=0&srv=notnice.club&host=notnice.club&ref=&fcp=2686&rand=0.9699096179925024
IP 192.0.76.3:0
File type GIF image data, version 89a, 6 x 5\012- data
Hash e4d673a55c5656f19ef81563fb10884c
1f2d8ed221d39329251ad3a6ff1edb20b7219443
f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1
GET /g.gif?v=ext&j=1%3A11.3.1&blog=191476157&post=1173&tz=0&srv=notnice.club&host=notnice.club&ref=&fcp=2686&rand=0.9699096179925024 HTTP/1.1
Host: pixel.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Sep 2022 07:55:40 GMT
content-type: image/gif
content-length: 50
cache-control: no-cache
access-control-allow-origin: *
X-Firefox-Spdy: h2
notnice.club/wp-content/uploads/2022/06/IMG_9932.jpg
198.187.31.172200 OK 179 kB URL HTTP/2 notnice.club/wp-content/uploads/2022/06/IMG_9932.jpg
IP 198.187.31.172:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x1500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 179 kB (178860 bytes)
Hash 8a898ae0226d543f8fa030d4759765ea
de9b83a9b955766e3b4c288ff1a00c5f41b18f85
1c2e3f78a1f6d8d8e1b1a6bf3e7796a4cdcb3dd4fe235bb39b6e211836e1d5eb
GET /wp-content/uploads/2022/06/IMG_9932.jpg HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Sun, 17 Sep 2023 07:55:40 GMT
content-type: image/webp
last-modified: Fri, 01 Jul 2022 02:38:04 GMT
accept-ranges: bytes
content-length: 178860
date: Sat, 17 Sep 2022 07:55:40 GMT
server: LiteSpeed
vary: Accept
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/uploads/2021/04/notnicelogo.png
198.187.31.172200 OK 123 kB URL HTTP/2 notnice.club/wp-content/uploads/2021/04/notnicelogo.png
IP 198.187.31.172:0
File type PNG image data, 4919 x 5584, 8-bit colormap, non-interlaced\012- data
Size 123 kB (123108 bytes)
Hash 5e0a3ae5d6d219c0a1f12741578214e4
1b84a72687da095e46a7a5ea57f1fc2eb1915c2f
dfc263c47bc3c18edfde4a633c874ff82264386609329d4cdbe98da7b59cd6f1
GET /wp-content/uploads/2021/04/notnicelogo.png HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:40 GMT
content-type: image/png
last-modified: Fri, 17 Jun 2022 17:13:49 GMT
accept-ranges: bytes
content-length: 123108
date: Sat, 17 Sep 2022 07:55:40 GMT
server: LiteSpeed
vary: Accept
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js
104.17.25.14200 OK 6.6 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js
IP 104.17.25.14:0
File type ASCII text, with very long lines (20831)
Hash 368c425fc94c424e1688caadefbed981
13d24c22c199ef6668d758434819f44307a65094
ed9c7a83e1c1300a93ecd08807a736ebe7b87ab8262a40bc7e3859d00a46a102
GET /ajax/libs/popper.js/1.14.7/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://assets.mailerlite.com
Connection: keep-alive
Referer: https://assets.mailerlite.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 17 Sep 2022 07:55:41 GMT
content-type: application/javascript; charset=utf-8
content-length: 6646
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-520c"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 208704
expires: Thu, 07 Sep 2023 07:55:41 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nGKfdoGQbE3MqEWWkddiGR6EbChdUkUdU6qviNv8cfXt70Rtvg2ixPzfMqDU9QULUhXDBdHX0WtwU22KqaHU5pcJNWMLh241VRKjxm2qOFSVteDWEaOqn1z%2FdWzGvkh20syDUszs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 74c047edf955b500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
assets.mlcdn.com/ml/logo/created-with-mailerlite.png
104.22.7.203200 OK 2.6 kB URL HTTP/2 assets.mlcdn.com/ml/logo/created-with-mailerlite.png
IP 104.22.7.203:0
File type PNG image data, 300 x 120, 8-bit colormap, non-interlaced\012- data
Hash 26ba507bbde03e26d728f167364b10df
2c47134255577b41ca6d025171e53a8e2c0c02d0
63966fc6b5d82ed7b606f3251cc45047f06af17d6d1b92dcac3f8369b76a7867
GET /ml/logo/created-with-mailerlite.png HTTP/1.1
Host: assets.mlcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://assets.mailerlite.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Sep 2022 07:55:41 GMT
content-type: image/png
content-length: 2560
cf-ray: 74c047edffb7b523-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 5407
cache-control: public, max-age=691200
last-modified: Sat, 17 Sep 2022 06:25:34 GMT
vary: Origin, Accept-Encoding
cf-cache-status: HIT
access-control-allow-methods: HEAD,GET,OPTIONS
cf-bgj: imgq:85,h2pri
cf-polished: status=not_needed
server: cloudflare
X-Firefox-Spdy: h2
cdn.mailerlite.com/images/icons/default/round/black/instagram.png
104.18.34.106200 OK 1.7 kB URL HTTP/2 cdn.mailerlite.com/images/icons/default/round/black/instagram.png
IP 104.18.34.106:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash b5f304740f0544c3a73675c54a1cbf12
5d9d6c8dc41576230db8332191116b8532346cbe
140eae4de20f4ce0c102828d54fa61813b9fb30077d0e4a235b2691cc0cf0285
GET /images/icons/default/round/black/instagram.png HTTP/1.1
Host: cdn.mailerlite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://assets.mailerlite.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Sep 2022 07:55:41 GMT
content-type: image/webp
content-length: 1658
access-control-allow-methods: GET
access-control-allow-origin: *
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=2852
content-disposition: inline; filename="instagram.webp"
etag: "6245ae9f-b24"
last-modified: Thu, 31 Mar 2022 13:37:35 GMT
strict-transport-security: max-age=15724800; includeSubDomains
vary: Accept
cf-cache-status: HIT
age: 450
expires: Thu, 22 Sep 2022 07:55:41 GMT
cache-control: public, max-age=432000
accept-ranges: bytes
server: cloudflare
cf-ray: 74c047ee2f7b1bfe-OSL
X-Firefox-Spdy: h2
cdn.mailerlite.com/images/icons/default/round/black/facebook.png
104.18.34.106200 OK 1.0 kB URL HTTP/2 cdn.mailerlite.com/images/icons/default/round/black/facebook.png
IP 104.18.34.106:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash de23f7a5654830c03ea0fbd6fdae516c
5b885646986cfcdba304109c5c5596d0215ef82b
8039588c370a21d9f69a0e34d7e31859756147ab0ac34dc7de5889366346d1ba
GET /images/icons/default/round/black/facebook.png HTTP/1.1
Host: cdn.mailerlite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://assets.mailerlite.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Sep 2022 07:55:41 GMT
content-type: image/webp
content-length: 1004
access-control-allow-methods: GET
access-control-allow-origin: *
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=1973
content-disposition: inline; filename="facebook.webp"
etag: "6245ae9f-7b5"
last-modified: Thu, 31 Mar 2022 13:37:35 GMT
strict-transport-security: max-age=15724800; includeSubDomains
vary: Accept
cf-cache-status: HIT
age: 6826
expires: Thu, 22 Sep 2022 07:55:41 GMT
cache-control: public, max-age=432000
accept-ranges: bytes
server: cloudflare
cf-ray: 74c047ee2f7c1bfe-OSL
X-Firefox-Spdy: h2
cdn.mailerlite.com/images/icons/default/round/black/discord.png
104.18.34.106200 OK 1.8 kB URL HTTP/2 cdn.mailerlite.com/images/icons/default/round/black/discord.png
IP 104.18.34.106:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 34cb7e40205d55e1795ec53225a43944
ff10c57f58fc27351c3c901668fcd5b35216e08a
5e50855ea3eeea383b7a1c2d68e02e2e7a1c14c7514012d46d191268f5078806
GET /images/icons/default/round/black/discord.png HTTP/1.1
Host: cdn.mailerlite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://assets.mailerlite.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Sep 2022 07:55:41 GMT
content-type: image/webp
content-length: 1786
access-control-allow-methods: GET
access-control-allow-origin: *
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=3211
content-disposition: inline; filename="discord.webp"
etag: "6245ae9f-c8b"
last-modified: Thu, 31 Mar 2022 13:37:35 GMT
strict-transport-security: max-age=15724800; includeSubDomains
vary: Accept
cf-cache-status: HIT
age: 6566
expires: Thu, 22 Sep 2022 07:55:41 GMT
cache-control: public, max-age=432000
accept-ranges: bytes
server: cloudflare
cf-ray: 74c047ee2f7d1bfe-OSL
X-Firefox-Spdy: h2
notnice.club/wp-content/uploads/2022/06/Group-76.png
198.187.31.172200 OK 205 kB URL HTTP/2 notnice.club/wp-content/uploads/2022/06/Group-76.png
IP 198.187.31.172:0
File type PNG image data, 9976 x 3940, 8-bit colormap, non-interlaced\012- data
Size 205 kB (204837 bytes)
Hash c0decbf35085fedb833e932ade881ebd
8fd4c3d10ef99319c5eb6d8251743d224768b72f
60ef856f1c3a59c0281922edd70908f161eb04f6e5e4abb00d3e6d002289c56f
GET /wp-content/uploads/2022/06/Group-76.png HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:40 GMT
content-type: image/png
last-modified: Fri, 17 Jun 2022 16:43:39 GMT
accept-ranges: bytes
content-length: 204837
date: Sat, 17 Sep 2022 07:55:40 GMT
server: LiteSpeed
vary: Accept
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/uploads/2022/06/IMG_9943-1.jpg
198.187.31.172200 OK 262 kB URL HTTP/2 notnice.club/wp-content/uploads/2022/06/IMG_9943-1.jpg
IP 198.187.31.172:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1300x1625, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 262 kB (262320 bytes)
Hash d119cc320e2cfee14271127f4fed73fc
1ccb27fa9be628cb09e6612a778eaa3449f4f475
dc7c079cce07160fac3e947a1eb6181f55f2365c8fc492ba9347f3beb302169a
GET /wp-content/uploads/2022/06/IMG_9943-1.jpg HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Sun, 17 Sep 2023 07:55:40 GMT
content-type: image/webp
last-modified: Sat, 18 Jun 2022 06:45:43 GMT
accept-ranges: bytes
content-length: 262320
date: Sat, 17 Sep 2022 07:55:40 GMT
server: LiteSpeed
vary: Accept
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
198.187.31.172200 OK 78 kB URL HTTP/2 notnice.club/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
IP 198.187.31.172:0
File type Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261\012- data
Hash e8a427e15cc502bef99cfd722b37ea98
a9922842a120a7f1eaced667480c5e185a106d69
d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://notnice.club/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
Cookie: tk_or=%22%22; tk_r3d=%22%22; tk_lr=%22%22; _ga_4JCF5RZ0HK=GS1.1.1663401323.1.0.1663401323.60.0.0; _ga=GA1.1.1266201560.1663401324
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:40 GMT
content-type: font/woff2
last-modified: Thu, 15 Sep 2022 22:32:38 GMT
accept-ranges: bytes
content-length: 78196
date: Sat, 17 Sep 2022 07:55:40 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-4JCF5RZ0HK>m=2oe9e0&_p=1117627104&_gaz=1&cid=1266201560.1663401324&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663401323&sct=1&seg=0&dl=https%3A%2F%2Fnotnice.club%2F&dt=Not%20Nice%20Club%20%E2%80%93%20%E3%83%A4%E3%83%B3%E3%83%81%E3%83%A3%E3%81%8F%E3%82%89%E3%81%B6&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
216.239.34.36204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-4JCF5RZ0HK>m=2oe9e0&_p=1117627104&_gaz=1&cid=1266201560.1663401324&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663401323&sct=1&seg=0&dl=https%3A%2F%2Fnotnice.club%2F&dt=Not%20Nice%20Club%20%E2%80%93%20%E3%83%A4%E3%83%B3%E3%83%81%E3%83%A3%E3%81%8F%E3%82%89%E3%81%B6&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP 216.239.34.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-4JCF5RZ0HK>m=2oe9e0&_p=1117627104&_gaz=1&cid=1266201560.1663401324&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663401323&sct=1&seg=0&dl=https%3A%2F%2Fnotnice.club%2F&dt=Not%20Nice%20Club%20%E2%80%93%20%E3%83%A4%E3%83%B3%E3%83%81%E3%83%A3%E3%81%8F%E3%82%89%E3%81%B6&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://notnice.club
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://notnice.club
date: Sat, 17 Sep 2022 07:55:41 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s.pinimg.com/ct/core.js
151.101.84.84200 OK 1.2 kB IP 151.101.84.84:0
File type ASCII text, with very long lines (1182), with no line terminators
Hash 7cac7e5d9e2b15cdc4ae76549dde174b
41a5b48387aef7bef116d52da64af00c504c7f86
d8261c0f4ae314e710ac7b15aa6bd0cf371de5b1cec41331ca12a1c392742ce6
GET /ct/core.js HTTP/1.1
Host: s.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "7cac7e5d9e2b15cdc4ae76549dde174b"
content-type: application/javascript
fastly-restarts: 1
x-cdn: fastly
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 86400
access-control-expose-headers: X-CDN
vary: Accept-Encoding, Origin
cache-control: max-age=7200
date: Sat, 17 Sep 2022 07:55:41 GMT
content-length: 1182
X-Firefox-Spdy: h2
assets.pinterest.com/js/pinit_main.js?0.6287578004361192
151.101.84.84200 OK 19 kB URL HTTP/2 assets.pinterest.com/js/pinit_main.js?0.6287578004361192
IP 151.101.84.84:0
File type Unicode text, UTF-8 text, with very long lines (32016)
Hash 3725764cf05d1a0938de73d398772331
abdc742d760ca9c8f28c8d44ca9796d9ad6c0bc7
f8c41f2f59fc9e9d088bc9002eef583c3cf256b4cd371619b18107b4abd92812
GET /js/pinit_main.js?0.6287578004361192 HTTP/1.1
Host: assets.pinterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "3725764cf05d1a0938de73d398772331"
content-encoding: br
content-type: application/javascript; charset=utf-8
x-cdn: fastly
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 86400
access-control-expose-headers: X-CDN
vary: Accept-Encoding, Origin
cache-control: max-age=300
date: Sat, 17 Sep 2022 07:55:41 GMT
content-length: 18679
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash fa86a62c870c1ce23fd85f73e99d7964
81af6fd2507bb58c6b040fd5f494de01d22e7102
76bc6fffeb8593064820e909edc5e4991cb4a5c1b609916a6021974665b5286f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 07:55:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 924cca70f1f5ba02eb6af21a65e0bdd1
3baa75b1ea32068f96cfd5060e4e1eda71c61da8
e55036d990bb7071b7e51e739b8650538ce67d821cc966b0baa99ff40220973b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1756
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 07:55:41 GMT
Last-Modified: Sat, 17 Sep 2022 07:26:25 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
stats.g.doubleclick.net/g/collect?v=2&tid=G-4JCF5RZ0HK&cid=1266201560.1663401324>m=2oe9e0&aip=1
142.251.1.156204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-4JCF5RZ0HK&cid=1266201560.1663401324>m=2oe9e0&aip=1
IP 142.251.1.156:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-4JCF5RZ0HK&cid=1266201560.1663401324>m=2oe9e0&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://notnice.club
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://notnice.club
date: Sat, 17 Sep 2022 07:55:41 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 13fec77b59dae4bb9410a06357423a2f
086b7b536283f0a18742c3e43397762f78cdccf8
66b85a264ec591ece4c49e1f6a5da676436319845540139888e0b5e4906c5f16
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 07:55:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/en_US/fbevents.js
31.13.72.12200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP 31.13.72.12:0
File type ASCII text, with very long lines (64348)
Hash 9ecd89752214ef749272eef344b9089a
70a58a49c08934265ee34c74efb01d6b3124095d
f76c51487e348977288fcaf83984cd8fe4e73758cc352402774d9eb94680d528
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: /Q6+H6eXodt7w2qGyaJtG2GCRSuMEiBVloFboFoP1MIOHj5TbrlAjfdlgt1qHeGiqycnNgiYXqmkVSlaNk4aAg==
content-length: 26839
x-fb-trip-id: 1904183273
date: Sat, 17 Sep 2022 07:55:41 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-4JCF5RZ0HK&cid=1266201560.1663401324>m=2oe9e0&aip=1&z=597052798
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-4JCF5RZ0HK&cid=1266201560.1663401324>m=2oe9e0&aip=1&z=597052798
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-4JCF5RZ0HK&cid=1266201560.1663401324>m=2oe9e0&aip=1&z=597052798 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 17 Sep 2022 07:55:41 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 924cca70f1f5ba02eb6af21a65e0bdd1
3baa75b1ea32068f96cfd5060e4e1eda71c61da8
e55036d990bb7071b7e51e739b8650538ce67d821cc966b0baa99ff40220973b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1756
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 07:55:41 GMT
Last-Modified: Sat, 17 Sep 2022 07:26:25 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash fa86a62c870c1ce23fd85f73e99d7964
81af6fd2507bb58c6b040fd5f494de01d22e7102
76bc6fffeb8593064820e909edc5e4991cb4a5c1b609916a6021974665b5286f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 07:55:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 13fec77b59dae4bb9410a06357423a2f
086b7b536283f0a18742c3e43397762f78cdccf8
66b85a264ec591ece4c49e1f6a5da676436319845540139888e0b5e4906c5f16
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 07:55:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
notnice.club/wp-content/uploads/2022/06/cropped-Webp.net-resizeimage-3-192x192.png
198.187.31.172200 OK 6.8 kB URL HTTP/2 notnice.club/wp-content/uploads/2022/06/cropped-Webp.net-resizeimage-3-192x192.png
IP 198.187.31.172:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 694d0881a908233ca2a1adec2db88a64
c8df4f82e18027c35fc262d2fd05266deb9d4091
5accdd26b955c909a6aee9740748c700f10a57cbd30faa3d59ecf1451f87e627
GET /wp-content/uploads/2022/06/cropped-Webp.net-resizeimage-3-192x192.png HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Cookie: tk_or=%22%22; tk_r3d=%22%22; tk_lr=%22%22; _ga_4JCF5RZ0HK=GS1.1.1663401323.1.0.1663401323.60.0.0; _ga=GA1.1.1266201560.1663401324
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Sun, 17 Sep 2023 07:55:41 GMT
content-type: image/webp
last-modified: Sun, 19 Jun 2022 13:28:41 GMT
accept-ranges: bytes
content-length: 6764
date: Sat, 17 Sep 2022 07:55:41 GMT
server: LiteSpeed
vary: Accept
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
notnice.club/wp-content/uploads/2022/06/cropped-Webp.net-resizeimage-3-32x32.png
198.187.31.172200 OK 944 B URL HTTP/2 notnice.club/wp-content/uploads/2022/06/cropped-Webp.net-resizeimage-3-32x32.png
IP 198.187.31.172:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8068cb58d7fd231a99be15d6842bba77
9a4e5cc3d47c72100883e69e0889cebb39deb378
f25d0f11bda7afe75ea31c27135147cde76a14253b14f4c8c7010c606b1af3c9
GET /wp-content/uploads/2022/06/cropped-Webp.net-resizeimage-3-32x32.png HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Cookie: tk_or=%22%22; tk_r3d=%22%22; tk_lr=%22%22; _ga_4JCF5RZ0HK=GS1.1.1663401323.1.0.1663401323.60.0.0; _ga=GA1.1.1266201560.1663401324
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Sun, 17 Sep 2023 07:55:41 GMT
content-type: image/webp
last-modified: Sun, 19 Jun 2022 13:28:45 GMT
accept-ranges: bytes
content-length: 944
date: Sat, 17 Sep 2022 07:55:41 GMT
server: LiteSpeed
vary: Accept
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
s.pinimg.com/ct/lib/main.55e552f9.js
151.101.84.84200 OK 19 kB URL HTTP/2 s.pinimg.com/ct/lib/main.55e552f9.js
IP 151.101.84.84:0
File type Unicode text, UTF-8 text, with very long lines (54284), with no line terminators
Hash 84c1602180f73853dc1e35f7296bdf7d
40aea44ea928e8d539381759b791f5c70f6d4c82
6b2faea09b5d5015a36ab4300e1034e1907895b40249e5fd11b42a66fbd21dac
GET /ct/lib/main.55e552f9.js HTTP/1.1
Host: s.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "84c1602180f73853dc1e35f7296bdf7d"
content-encoding: gzip
content-type: application/javascript
fastly-restarts: 1
x-cdn: fastly
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 86400
access-control-expose-headers: X-CDN
vary: Accept-Encoding, Origin
cache-control: max-age=1209600
date: Sat, 17 Sep 2022 07:55:41 GMT
content-length: 18601
X-Firefox-Spdy: h2
ct.pinterest.com/user/?tid=2612761368834&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&cb=1663401324634
23.38.200.197200 OK 377 B URL HTTP/2 ct.pinterest.com/user/?tid=2612761368834&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&cb=1663401324634
IP 23.38.200.197:0
File type JSON data\012- , ASCII text, with very long lines (534), with no line terminators
Hash c549367f59c0235632eb3a01e1b9f898
52c09aa9bdade171507f4c2edf895efd5e98b3b9
cb27fea7556642110c0368a1fbc03c3aaa2ed590a642d0b46daab252a284adee
GET /user/?tid=2612761368834&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&cb=1663401324634 HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://notnice.club
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-expose-headers: Epik,Pin-Unauth
pin-unauth: dWlkPU1qUTBNamhqWVdRdE0yWmlOQzAwWWpjMExUZzJZakF0TmpFM05XSXhZelExWldVeA
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
access-control-allow-origin: https://notnice.club
content-type: application/json; charset=utf-8
content-encoding: gzip
content-length: 377
x-envoy-upstream-service-time: 5
referrer-policy: origin
x-pinterest-rid: 4339825538489537
date: Sat, 17 Sep 2022 07:55:41 GMT
vary: Accept-Encoding
akamai-grn: 0.274f2417.1663401341.2892b749
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
ct.pinterest.com/v3/?tid=2612761368834&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fnotnice.club%2F%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%2255e552f9%22%2C%22ecm_enabled%22%3Afalse%7D&cb=1663401324637
23.38.200.197200 OK 35 B URL HTTP/2 ct.pinterest.com/v3/?tid=2612761368834&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fnotnice.club%2F%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%2255e552f9%22%2C%22ecm_enabled%22%3Afalse%7D&cb=1663401324637
IP 23.38.200.197:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9b8d19f4310c758344e40bf17fbc7e85
2290ef058812d5f5e398736e2316cba8cf8093cf
37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
GET /v3/?tid=2612761368834&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fnotnice.club%2F%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%2255e552f9%22%2C%22ecm_enabled%22%3Afalse%7D&cb=1663401324637 HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-type: image/gif
content-length: 35
access-control-allow-origin: *
x-envoy-upstream-service-time: 2
referrer-policy: origin
x-pinterest-rid: 5358037991543014
date: Sat, 17 Sep 2022 07:55:41 GMT
akamai-grn: 0.274f2417.1663401341.2892b779
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
assets.mlcdn.com/ml/jquery/jquery-3.3.1.slim.min.js
104.22.7.203200 OK 24 kB URL HTTP/2 assets.mlcdn.com/ml/jquery/jquery-3.3.1.slim.min.js
IP 104.22.7.203:0
Hash 359bf001b8e6079bd1016c345c2da067
3e76da402141732acef53bdfc527defabc4bffcc
075c2b45ff5dc1bbebc9745e105640803a50efbeb56132ee3d9bd03e28c372e0
GET /ml/jquery/jquery-3.3.1.slim.min.js HTTP/1.1
Host: assets.mlcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://assets.mailerlite.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 17 Sep 2022 07:55:41 GMT
content-type: text/javascript
cf-ray: 74c047ee0fc9b523-OSL
access-control-allow-origin: *
age: 6603
cache-control: public, max-age=691200
last-modified: Sat, 17 Sep 2022 06:05:38 GMT
vary: Origin, Accept-Encoding
cf-cache-status: HIT
access-control-allow-methods: HEAD,GET,OPTIONS
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
ct.pinterest.com/v3/?tid=2612761368834&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22np%22%3A%22woocommerce%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fnotnice.club%2F%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%2255e552f9%22%2C%22ecm_enabled%22%3Afalse%7D&cb=1663401324638
23.38.200.197200 OK 35 B URL HTTP/2 ct.pinterest.com/v3/?tid=2612761368834&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22np%22%3A%22woocommerce%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fnotnice.club%2F%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%2255e552f9%22%2C%22ecm_enabled%22%3Afalse%7D&cb=1663401324638
IP 23.38.200.197:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9b8d19f4310c758344e40bf17fbc7e85
2290ef058812d5f5e398736e2316cba8cf8093cf
37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
GET /v3/?tid=2612761368834&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22np%22%3A%22woocommerce%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fnotnice.club%2F%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%2255e552f9%22%2C%22ecm_enabled%22%3Afalse%7D&cb=1663401324638 HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-type: image/gif
content-length: 35
access-control-allow-origin: *
x-envoy-upstream-service-time: 2
referrer-policy: origin
x-pinterest-rid: 1483895661092098
date: Sat, 17 Sep 2022 07:55:41 GMT
akamai-grn: 0.274f2417.1663401341.2892b780
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=408346140977959&ev=PageView&dl=https%3A%2F%2Fnotnice.club%2F&rl=&if=false&ts=1663401324872&cd[source]=woocommerce&cd[version]=6.8.2&cd[pluginVersion]=2.6.22&sw=1280&sh=1024&v=2.9.83&r=stable&a=woocommerce-6.8.2-2.6.22&ec=0&o=30&par[0]=%7B%22extractorID%22%3A%22899324524085206%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22CAD%22%7D%7D%7D&par[1]=%7B%22extractorID%22%3A%22355613839339692%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22CAD%22%7D%7D%7D&par[2]=%7B%22extractorID%22%3A%22489999455794665%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22CAD%22%7D%7D%7D&par[3]=%7B%22extractorID%22%3A%22690600195285006%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22price%22%3A%22%240.00%22%7D%7D%7D&par[4]=%7B%22extractorID%22%3A%22979229446310505%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&par[5]=%7B%22extractorID%22%3A%22623681678651253%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&fbp=fb.1.1663401324871.2136316819&it=1663401324502&coo=false&rqm=GET
31.13.72.36200 OK 86 kB URL HTTP/2 www.facebook.com/tr/?id=408346140977959&ev=PageView&dl=https%3A%2F%2Fnotnice.club%2F&rl=&if=false&ts=1663401324872&cd[source]=woocommerce&cd[version]=6.8.2&cd[pluginVersion]=2.6.22&sw=1280&sh=1024&v=2.9.83&r=stable&a=woocommerce-6.8.2-2.6.22&ec=0&o=30&par[0]=%7B%22extractorID%22%3A%22899324524085206%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22CAD%22%7D%7D%7D&par[1]=%7B%22extractorID%22%3A%22355613839339692%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22CAD%22%7D%7D%7D&par[2]=%7B%22extractorID%22%3A%22489999455794665%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22CAD%22%7D%7D%7D&par[3]=%7B%22extractorID%22%3A%22690600195285006%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22price%22%3A%22%240.00%22%7D%7D%7D&par[4]=%7B%22extractorID%22%3A%22979229446310505%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&par[5]=%7B%22extractorID%22%3A%22623681678651253%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&fbp=fb.1.1663401324871.2136316819&it=1663401324502&coo=false&rqm=GET
IP 31.13.72.36:0
File type gzip compressed data, from Unix\012- data
Hash cf069c6a1e2a3810c65954b1709c1acb
40e70cc8db079e39728314573d6733ab4af4b7f1
87009ba76d774b50a027d8b12404226c967210bbc2db9cb278b21f2602d93c6e
GET /tr/?id=408346140977959&ev=PageView&dl=https%3A%2F%2Fnotnice.club%2F&rl=&if=false&ts=1663401324872&cd[source]=woocommerce&cd[version]=6.8.2&cd[pluginVersion]=2.6.22&sw=1280&sh=1024&v=2.9.83&r=stable&a=woocommerce-6.8.2-2.6.22&ec=0&o=30&par[0]=%7B%22extractorID%22%3A%22899324524085206%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22CAD%22%7D%7D%7D&par[1]=%7B%22extractorID%22%3A%22355613839339692%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22CAD%22%7D%7D%7D&par[2]=%7B%22extractorID%22%3A%22489999455794665%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22CAD%22%7D%7D%7D&par[3]=%7B%22extractorID%22%3A%22690600195285006%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22price%22%3A%22%240.00%22%7D%7D%7D&par[4]=%7B%22extractorID%22%3A%22979229446310505%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&par[5]=%7B%22extractorID%22%3A%22623681678651253%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&fbp=fb.1.1663401324871.2136316819&it=1663401324502&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Sat, 17 Sep 2022 07:55:42 GMT
expires: Sat, 17 Sep 2022 07:55:42 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ct.pinterest.com/ct.html
23.38.200.197200 OK 323 B IP 23.38.200.197:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (565), with no line terminators
Hash b49b45b63051915a8c657060651eb07f
acaddf8021f220d0e4d30e7c8b3d8330ff781af9
4b00fbca5db49c6e4b29a0c873c43671880bcea1b7b3007655183382a318c2dc
GET /ct.html HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=86400
content-type: text/html; charset=utf-8
content-encoding: gzip
content-length: 323
x-envoy-upstream-service-time: 0
referrer-policy: origin
x-pinterest-rid: 1766613649576064
date: Sat, 17 Sep 2022 07:55:42 GMT
vary: Accept-Encoding
akamai-grn: 0.274f2417.1663401342.2892bb4e
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
log.pinterest.com/?type=pidget&guid=00tc4qGudbvG&tv=2021110201&event=init&sub=www&button_count=0&follow_count=0&pin_count=0&profile_count=0&board_count=0§ion_count=0&lang=en&nvl=en-US&via=https%3A%2F%2Fnotnice.club%2F&viaSrc=canonical
151.101.84.84200 OK 0 B URL HTTP/2 log.pinterest.com/?type=pidget&guid=00tc4qGudbvG&tv=2021110201&event=init&sub=www&button_count=0&follow_count=0&pin_count=0&profile_count=0&board_count=0§ion_count=0&lang=en&nvl=en-US&via=https%3A%2F%2Fnotnice.club%2F&viaSrc=canonical
IP 151.101.84.84:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?type=pidget&guid=00tc4qGudbvG&tv=2021110201&event=init&sub=www&button_count=0&follow_count=0&pin_count=0&profile_count=0&board_count=0§ion_count=0&lang=en&nvl=en-US&via=https%3A%2F%2Fnotnice.club%2F&viaSrc=canonical HTTP/1.1
Host: log.pinterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-envoy-upstream-service-time: 2
server: envoy
x-pinterest-rid: 5025668874217977
accept-ranges: bytes
date: Sat, 17 Sep 2022 07:55:42 GMT
via: 1.1 varnish
x-served-by: cache-bma1637-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1663401343.549778,VS0,VE93
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
content-length: 0
X-Firefox-Spdy: h2
assets.mailerlite.com/jsonp/96991/forms?callback=ml.fn.renderPopupsAndPromotions
104.18.34.106200 OK 10 kB URL HTTP/2 assets.mailerlite.com/jsonp/96991/forms?callback=ml.fn.renderPopupsAndPromotions
IP 104.18.34.106:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (62871), with no line terminators
Hash c3cde2dd052d1e0a02b70cbcda54492e
2764da925b3bba550f40c040feb2006d11314b33
e97039400247f835088969397ca4ef135f2ea45093f95e9981326ce112733d75
GET /jsonp/96991/forms?callback=ml.fn.renderPopupsAndPromotions HTTP/1.1
Host: assets.mailerlite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Sep 2022 07:55:40 GMT
content-type: text/javascript; charset=UTF-8
cache-control: immutable, max-age=60, public, s-maxage=60
x-cacheable: 1
access-control-allow-origin: *
x-cache: HIT
x-cache-hits: 1
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: MISS
last-modified: Sat, 17 Sep 2022 07:55:40 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 74c047eb0cd71bfe-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
142.250.74.163200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://notnice.club
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 19:34:08 GMT
expires: Thu, 14 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 217295
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.mailerlite.com/fonts/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
104.18.34.106200 OK 7.8 kB URL HTTP/2 fonts.mailerlite.com/fonts/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
IP 104.18.34.106:0
File type Web Open Font Format (Version 2), TrueType, length 7816, version 1.0\012- data
Hash 25b0e113ca7cce3770d542736db26368
cb726212d5d525021752a1d8470a0fb593e0c49e
9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /fonts/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.mailerlite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://assets.mailerlite.com
Connection: keep-alive
Referer: https://fonts.mailerlite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Sep 2022 07:55:45 GMT
content-type: font/woff2
content-length: 7816
cf-ray: 74c0480b8ab51bfe-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 2063392
cache-control: public, max-age=31536000
expires: Sun, 17 Sep 2023 07:55:45 GMT
last-modified: Wed, 27 Apr 2022 16:11:40 GMT
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2
fonts.mailerlite.com/fonts/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
104.18.34.106200 OK 7.9 kB URL HTTP/2 fonts.mailerlite.com/fonts/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
IP 104.18.34.106:0
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /fonts/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.mailerlite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://assets.mailerlite.com
Connection: keep-alive
Referer: https://fonts.mailerlite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Sep 2022 07:55:45 GMT
content-type: font/woff2
content-length: 7884
cf-ray: 74c0480b8ab81bfe-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 2063392
cache-control: public, max-age=31536000
expires: Sun, 17 Sep 2023 07:55:45 GMT
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2
fonts.mailerlite.com/fonts/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
104.18.34.106200 OK 16 kB URL HTTP/2 fonts.mailerlite.com/fonts/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 104.18.34.106:0
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /fonts/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.mailerlite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://assets.mailerlite.com
Connection: keep-alive
Referer: https://fonts.mailerlite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Sep 2022 07:55:45 GMT
content-type: font/woff2
content-length: 15744
cf-ray: 74c0480b9ac31bfe-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 2061783
cache-control: public, max-age=31536000
expires: Sun, 17 Sep 2023 07:55:45 GMT
last-modified: Wed, 11 May 2022 19:24:48 GMT
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2
groot.mailerlite.com/js/w/webforms.min.js?v491724307ca3b85c1c754857e93994e5
104.18.34.106200 OK 19 kB URL HTTP/2 groot.mailerlite.com/js/w/webforms.min.js?v491724307ca3b85c1c754857e93994e5
IP 104.18.34.106:0
File type ASCII text, with very long lines (10874), with no line terminators
Hash 5710707c7926305aefcda38a8b12aae3
a7db114729dc082b3e85351359fd0e412cefa9db
9c34d57a5c117a173a1972d22f1827473554f26e719b934347a093c2ae0dd58c
GET /js/w/webforms.min.js?v491724307ca3b85c1c754857e93994e5 HTTP/1.1
Host: groot.mailerlite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://assets.mailerlite.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Sep 2022 07:55:41 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 09 Sep 2022 11:06:58 GMT
etag: W/"631b1e52-2a7a"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,X-MailerLite-Account,X-MailerLite-Token
strict-transport-security: max-age=15724800; includeSubDomains
access-control-max-age: 1728000
cf-cache-status: HIT
age: 5989
expires: Thu, 22 Sep 2022 07:55:41 GMT
cache-control: public, max-age=432000
vary: Accept-Encoding
server: cloudflare
cf-ray: 74c047edef291bfe-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/XtIg8EYpgzo
142.250.74.3200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/XtIg8EYpgzo
IP 142.250.74.3:0
Hash 883737be266df875a1783ca02d359d1d
9a4bcc3185a2b89c3e804319e03f02477367c17c
a18e35e835495b8059aa70702233ef5507bf0bc7c0a7b03639c68728e999c395
POST /s/gts1d4/XtIg8EYpgzo HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 07:55:45 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/XtIg8EYpgzo
142.250.74.3200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/XtIg8EYpgzo
IP 142.250.74.3:0
Hash 883737be266df875a1783ca02d359d1d
9a4bcc3185a2b89c3e804319e03f02477367c17c
a18e35e835495b8059aa70702233ef5507bf0bc7c0a7b03639c68728e999c395
POST /s/gts1d4/XtIg8EYpgzo HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 07:55:46 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
storage.mlcdn.com/account_image/96991/x0lh4SGJagKxCkUfn2sclCVgm7QiUOcoVo89NEZF.jpg
34.120.241.29200 OK 1.9 MB URL HTTP/2 storage.mlcdn.com/account_image/96991/x0lh4SGJagKxCkUfn2sclCVgm7QiUOcoVo89NEZF.jpg
IP 34.120.241.29:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, progressive, precision 8, 4160x6240, components 3\012- data
Size 1.9 MB (1859305 bytes)
Hash f37a6df2d0a8530d76f2aeacd6154b3b
7667ce08ac36af587b50d187de5fa4130c0b5374
b5af7fd78f7fdbf8f26fe7bb070cfde589d0b70f858afdc4ae2d26e5f47ba4da
GET /account_image/96991/x0lh4SGJagKxCkUfn2sclCVgm7QiUOcoVo89NEZF.jpg HTTP/1.1
Host: storage.mlcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://assets.mailerlite.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtpm73vc1p-F1Wsqfv2kKjYEgeP49yccNV8djDdE0lhqJsgfwgGQquUnIwG7GQTmo6ceBYor9mY0gnV41kRzVeXTA
x-goog-generation: 1662511020309996
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 1859305
x-goog-hash: crc32c=cHbn+A==, md5=83pt8tCoUw128q6s1hVLOw==
x-goog-storage-class: REGIONAL
accept-ranges: bytes
server: UploadServer
date: Sat, 17 Sep 2022 07:55:45 GMT
expires: Sat, 17 Sep 2022 08:55:45 GMT
cache-control: public, max-age=3600
last-modified: Wed, 07 Sep 2022 00:37:00 GMT
etag: "f37a6df2d0a8530d76f2aeacd6154b3b"
content-type: image/jpeg
content-length: 1859305
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
assets.mailerlite.com/jsonp/96991/forms/60292639580227242/track-view?cache=1663401329326838588070658317
104.18.34.106204 No Content 0 B URL HTTP/2 assets.mailerlite.com/jsonp/96991/forms/60292639580227242/track-view?cache=1663401329326838588070658317
IP 104.18.34.106:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /jsonp/96991/forms/60292639580227242/track-view?cache=1663401329326838588070658317 HTTP/1.1
Host: assets.mailerlite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 17 Sep 2022 07:55:46 GMT
cache-control: no-cache, private
access-control-allow-origin: *
x-cache: MISS
x-cache-hits: 0
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 74c0480e8cef1bfe-OSL
X-Firefox-Spdy: h2
stats.wp.com/s-202237.js
192.0.76.3200 OK 0 B IP 192.0.76.3:0
GET /s-202237.js HTTP/1.1
Host: stats.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 17 Sep 2022 07:55:39 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"6197c5cf-2494"
content-encoding: br
expires: Mon, 11 Sep 2023 14:14:22 GMT
cache-control: max-age=31536000
x-nc: HIT arn
X-Firefox-Spdy: h2
notnice.club/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.7.1
198.187.31.172200 OK 0 B URL HTTP/2 notnice.club/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.7.1
IP 198.187.31.172:0
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.7.1 HTTP/1.1
Host: notnice.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 24 Sep 2022 07:55:39 GMT
content-type: text/css
last-modified: Fri, 17 Jun 2022 18:06:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 39863
date: Sat, 17 Sep 2022 07:55:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
assets.mlcdn.com/ml/bootstrap/css/bootstrap-4.3.1.min.css
104.22.7.203200 OK 0 B URL HTTP/2 assets.mlcdn.com/ml/bootstrap/css/bootstrap-4.3.1.min.css
IP 104.22.7.203:0
GET /ml/bootstrap/css/bootstrap-4.3.1.min.css HTTP/1.1
Host: assets.mlcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://assets.mailerlite.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 17 Sep 2022 07:55:41 GMT
content-type: text/css
cf-ray: 74c047edffafb523-OSL
access-control-allow-origin: *
age: 6650
cache-control: public, max-age=691200
last-modified: Sat, 17 Sep 2022 06:04:51 GMT
vary: Origin, Accept-Encoding
cf-cache-status: HIT
access-control-allow-methods: HEAD,GET,OPTIONS
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
assets.mlcdn.com/ml/bootstrap/js/bootstrap-4.3.1.min.js
104.22.7.203200 OK 0 B URL HTTP/2 assets.mlcdn.com/ml/bootstrap/js/bootstrap-4.3.1.min.js
IP 104.22.7.203:0
GET /ml/bootstrap/js/bootstrap-4.3.1.min.js HTTP/1.1
Host: assets.mlcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://assets.mailerlite.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 17 Sep 2022 07:55:41 GMT
content-type: text/javascript
cf-ray: 74c047ee0fc6b523-OSL
access-control-allow-origin: *
age: 6650
cache-control: public, max-age=691200
last-modified: Sat, 17 Sep 2022 06:04:51 GMT
vary: Origin, Accept-Encoding
cf-cache-status: HIT
access-control-allow-methods: HEAD,GET,OPTIONS
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.0.2
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.0.2
IP 142.250.74.10:0
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.0.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 17 Sep 2022 07:55:39 GMT
date: Sat, 17 Sep 2022 07:55:39 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.wp.com/e-202237.js
192.0.76.3200 OK 0 B IP 192.0.76.3:0
GET /e-202237.js HTTP/1.1
Host: stats.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 17 Sep 2022 07:55:39 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"62f6b688-3508"
content-encoding: br
expires: Sun, 03 Sep 2023 22:56:03 GMT
cache-control: max-age=31536000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn
X-Firefox-Spdy: h2
assets.mailerlite.com/css/universal.css
104.18.34.106200 OK 0 B URL HTTP/2 assets.mailerlite.com/css/universal.css
IP 104.18.34.106:0
GET /css/universal.css HTTP/1.1
Host: assets.mailerlite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://notnice.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Sep 2022 07:55:40 GMT
content-type: text/css
last-modified: Fri, 16 Sep 2022 06:06:08 GMT
etag: W/"63241250-3a3"
cache-control: public, max-age=432000
age: 453
x-cache: HIT
x-cache-hits: 42
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Thu, 22 Sep 2022 07:55:40 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 74c047eb0cd21bfe-OSL
content-encoding: br
X-Firefox-Spdy: h2
assets.mlcdn.com/fonts.css?version=1662379
104.22.7.203200 OK 0 B URL HTTP/2 assets.mlcdn.com/fonts.css?version=1662379
IP 104.22.7.203:0
GET /fonts.css?version=1662379 HTTP/1.1
Host: assets.mlcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://assets.mailerlite.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 17 Sep 2022 07:55:41 GMT
content-type: text/css
cf-ray: 74c047ee1fdab523-OSL
access-control-allow-origin: *
age: 7601
cache-control: public, max-age=691200
last-modified: Sat, 17 Sep 2022 05:49:00 GMT
vary: Origin, Accept-Encoding
cf-cache-status: HIT
access-control-allow-methods: HEAD,GET,OPTIONS
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.mailerlite.com/css?family=Roboto:400,400i,700,700i|Merriweather:400,900i,900,700i,700,300,300i,400i|Lato:400,400i,700,700i|Montserrat:400,400i,700,700i|Montserrat+Alternates:400,400i,700,700i|Open+Sans:400,400i,700,700i|PT+Sans:400,400i,700,700i|Source+Sans+Pro:400,400i,700,700i|Roboto+Slab:400,700|Ubuntu:400,400i,700,700i|Titillium+Web:400,400i,700,700i|Nunito:400,400i,700,700i|Cabin:400,400i,700,700i|Oswald:400,700|Work+Sans:400,700|Exo:400,400i,700,700i|Comfortaa:400,700|Raleway:400,400i,700,700i|Oxygen:400,700|Poppins:400,400i,700,700i|Playfair+Display:400,400i,700,700i|Shadows+Into+Light+Two|PT+Serif:400,400italic,700,700italic|Josefin+Slab:400,400italic,700,700italic|Arvo:400,700,700italic,400italic|Vollkorn:400,400italic,700,700italic|Karla:400,400italic,700,700italic|Noto+Sans:400,400italic,700,700italic|Barlow+Condensed:400,400italic,700,700italic|Anton|Inter:400,700|Abril+Fatface|Yeseva+One|Poiret+One|Marck+Script|Pacifico|Fira+Sans|Rubik&subset=cyrillic,cyrillic-ext,latin-ext
104.18.34.106200 OK 0 B URL HTTP/2 fonts.mailerlite.com/css?family=Roboto:400,400i,700,700i|Merriweather:400,900i,900,700i,700,300,300i,400i|Lato:400,400i,700,700i|Montserrat:400,400i,700,700i|Montserrat+Alternates:400,400i,700,700i|Open+Sans:400,400i,700,700i|PT+Sans:400,400i,700,700i|Source+Sans+Pro:400,400i,700,700i|Roboto+Slab:400,700|Ubuntu:400,400i,700,700i|Titillium+Web:400,400i,700,700i|Nunito:400,400i,700,700i|Cabin:400,400i,700,700i|Oswald:400,700|Work+Sans:400,700|Exo:400,400i,700,700i|Comfortaa:400,700|Raleway:400,400i,700,700i|Oxygen:400,700|Poppins:400,400i,700,700i|Playfair+Display:400,400i,700,700i|Shadows+Into+Light+Two|PT+Serif:400,400italic,700,700italic|Josefin+Slab:400,400italic,700,700italic|Arvo:400,700,700italic,400italic|Vollkorn:400,400italic,700,700italic|Karla:400,400italic,700,700italic|Noto+Sans:400,400italic,700,700italic|Barlow+Condensed:400,400italic,700,700italic|Anton|Inter:400,700|Abril+Fatface|Yeseva+One|Poiret+One|Marck+Script|Pacifico|Fira+Sans|Rubik&subset=cyrillic,cyrillic-ext,latin-ext
IP 104.18.34.106:0
GET /css?family=Roboto:400,400i,700,700i|Merriweather:400,900i,900,700i,700,300,300i,400i|Lato:400,400i,700,700i|Montserrat:400,400i,700,700i|Montserrat+Alternates:400,400i,700,700i|Open+Sans:400,400i,700,700i|PT+Sans:400,400i,700,700i|Source+Sans+Pro:400,400i,700,700i|Roboto+Slab:400,700|Ubuntu:400,400i,700,700i|Titillium+Web:400,400i,700,700i|Nunito:400,400i,700,700i|Cabin:400,400i,700,700i|Oswald:400,700|Work+Sans:400,700|Exo:400,400i,700,700i|Comfortaa:400,700|Raleway:400,400i,700,700i|Oxygen:400,700|Poppins:400,400i,700,700i|Playfair+Display:400,400i,700,700i|Shadows+Into+Light+Two|PT+Serif:400,400italic,700,700italic|Josefin+Slab:400,400italic,700,700italic|Arvo:400,700,700italic,400italic|Vollkorn:400,400italic,700,700italic|Karla:400,400italic,700,700italic|Noto+Sans:400,400italic,700,700italic|Barlow+Condensed:400,400italic,700,700italic|Anton|Inter:400,700|Abril+Fatface|Yeseva+One|Poiret+One|Marck+Script|Pacifico|Fira+Sans|Rubik&subset=cyrillic,cyrillic-ext,latin-ext HTTP/1.1
Host: fonts.mailerlite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://assets.mlcdn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Sep 2022 07:55:41 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: private, max-age=86400, stale-while-revalidate=604800
vary: Accept-Encoding
server: cloudflare
cf-ray: 74c047ee5fa51bfe-OSL
content-encoding: br
X-Firefox-Spdy: h2