perfectwoodart.com/baroleb
301 Moved Permanently 242 B URL HTTP/1.1 perfectwoodart.com/baroleb
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash d11e25c022e8c7008c9aa94b1b26c041
6857bcb6cb94809bed7d4d47520c74580b4a8e1b
9835e3437514a35711f4c4a86a3bf8a7b6b909a66c4db278ce9646d599476475
Analyzer Verdict Alert fortinet Phishing
GET /baroleb HTTP/1.1
Host: perfectwoodart.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 08 Dec 2022 20:27:30 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://perfectwoodart.com/baroleb/
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vZYwMCzgo%2F6s3AAFSU5eHVvezXxUC3%2Bdea1DMlQcnGVQ6Of50V4YnhD2J%2BcC7Gvyq1ACmHq2UoEpStYm5Z2BkdVIymCGBvOZH2ktWDi%2BJmcSzZNTxSIY0sVGaTjUqltBf5ZJsd4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77683dfb9b22b527-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7181eff9c60e83eb0004ece591e47dca
0fd8cd0c9d10b0547938982e57d2c43e2d98679f
89c5c0e2d6890798644174a8e31976aec03a1b3deb03812afbb520e5ed68f522
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "89C5C0E2D6890798644174A8E31976AEC03A1B3DEB03812AFBB520E5ED68F522"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2920
Expires: Thu, 08 Dec 2022 21:16:10 GMT
Date: Thu, 08 Dec 2022 20:27:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aea93551fa9deb76ae49a3b4019d64fe
e3b8862057ebe839959228e42246d7b1807fc90c
7e210f03b140418085e94ec20c1d27d6ecf7a404cbd323e16476ae5ae95d6dac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7E210F03B140418085E94EC20C1D27D6ECF7A404CBD323E16476AE5AE95D6DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17854
Expires: Fri, 09 Dec 2022 01:25:04 GMT
Date: Thu, 08 Dec 2022 20:27:30 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 08 Dec 2022 20:08:13 GMT
content-type: application/json
age: 1157
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 00e7703bd74975689fc9050356aaca6b
9788fe6a36d6f278e8da329ebc5dd87bcd212317
593bc437ff8a8233516c62613d50220fcb25b9f967ed5fb384c253f0db135103
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "593BC437FF8A8233516C62613D50220FCB25B9F967ED5FB384C253F0DB135103"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2382
Expires: Thu, 08 Dec 2022 21:07:12 GMT
Date: Thu, 08 Dec 2022 20:27:30 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ai4/LX7Fz2srzSUoLCPvAepmWZqHvsbk/bhco266GKlqsb0mXAYXUnYMwGm02Y4v7SclrNkWRPM=
x-amz-request-id: T1NN6FMNPBEQKGRH
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 08 Dec 2022 19:49:56 GMT
age: 2254
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 20:27:30 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Last-Modified, ETag, Cache-Control, Alert, Content-Length, Pragma, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 08 Dec 2022 20:07:55 GMT
age: 1176
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash fd55f4aaaab6ec40bc7dc10252cd819a
a72523f60be265a391fa9edc43e0a93418ad1fd0
bae354b3db14f4fd115311a0c412c9b5e436dd9e0a151afd8b9c18831dd8c2dd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3312
Cache-Control: max-age=135273
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:27:31 GMT
Etag: "6391a92c-1d7"
Expires: Sat, 10 Dec 2022 10:02:04 GMT
Last-Modified: Thu, 08 Dec 2022 09:06:52 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: NAFDGkmU3VbtrFHn34T5ow==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: gI+qNCK8ZwMWJUUs5FaNZ2GIf0E=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16217
Expires: Fri, 09 Dec 2022 00:57:49 GMT
Date: Thu, 08 Dec 2022 20:27:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16217
Expires: Fri, 09 Dec 2022 00:57:49 GMT
Date: Thu, 08 Dec 2022 20:27:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16217
Expires: Fri, 09 Dec 2022 00:57:49 GMT
Date: Thu, 08 Dec 2022 20:27:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16217
Expires: Fri, 09 Dec 2022 00:57:49 GMT
Date: Thu, 08 Dec 2022 20:27:32 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F079bc299-d390-4250-a91a-db3c535c9ca3.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F079bc299-d390-4250-a91a-db3c535c9ca3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 98d2cf29c710d25bd2f03ff216fdd369
b8eb2e11f9655f19334befc036f21489a6473827
614c9b4a7ace908c1ef807964709cb292b33b48ce1d81ccbd2959c2c0ee156ac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F079bc299-d390-4250-a91a-db3c535c9ca3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8351
x-amzn-requestid: 607d07ab-6833-4001-82ed-699ea91f84c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvlitFk9oAMFakQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb611-3e5f14f833b332647ef7358d;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:37:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 0w5Usq-LJMNHxw9UrwUqSslSVROXVHTmY_UhSHNaGh4k4xqh-FSa0A==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 20:33:10 GMT
age: 86062
etag: "b8eb2e11f9655f19334befc036f21489a6473827"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b87d6543345f73653ed4a49b37d7c959
c4f26846b8b72293368ff16915d49297cf12bbb9
aee6aa42e4b5b83b81f74801ff8f0039fc6d38036f42ee81875813c856cf5eef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8659
x-amzn-requestid: 6f420d07-65d5-4bb2-9f1f-e56025de497b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFSYFArIAMF46w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911c0f-0a295e5c48228d5806b4f107;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:04:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: TSh1BNzzIPhWCfYEiqvQJckSPAyhHobe-HK6msEVeEJ1ruX-_rMSSA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:35:32 GMT
age: 75120
etag: "c4f26846b8b72293368ff16915d49297cf12bbb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9301ee5-df75-4967-a2c7-597f869e557b.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9301ee5-df75-4967-a2c7-597f869e557b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 57be99ac898a37d73f2ba4a24f56248f
04e32eb45581201a6a1863200e4d139df48285e6
a20081b64fc019372843360b15aa3461ec9dd3deb50ab398bca0a5e74d5468c2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9301ee5-df75-4967-a2c7-597f869e557b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12534
x-amzn-requestid: 2a01f2ba-cf3a-4f59-8339-214c66bcc0d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czDbyGTcoAMF_TQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911918-5d3eba8d01e4175a71acc6cd;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 22:52:08 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NoZlZ8WFfOuIbkWaC2pJPJQrWtjzz2gCHJWr-u-nMNYmu8MkTf6_PA==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:03:58 GMT
age: 77014
etag: "04e32eb45581201a6a1863200e4d139df48285e6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4119e239-0c3b-4175-bfe0-f5d42729d743.jpeg
200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4119e239-0c3b-4175-bfe0-f5d42729d743.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8c94003641bb5a7595e7004f80f95d22
3446450df60d732f9021d5bfd5f5f7c6c870d9ec
4d782dbf94b2163e9bc18028cd0c1a391fdcfcb019f23c4c26ea0b44432039ff
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4119e239-0c3b-4175-bfe0-f5d42729d743.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7801
x-amzn-requestid: cb8d5aab-409f-4b39-b498-b1ba84f34e06
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFRNHX4oAMFvoQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911c07-7c6e3bfa3f81082b48f43fa9;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:04:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 8QHhEAFHTHd-5UqS1S5qwJj_h4WNfix2CgS4MO4zR_psrzgMP3SZ5g==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:16:35 GMT
age: 76257
etag: "3446450df60d732f9021d5bfd5f5f7c6c870d9ec"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbba0eea-a6f1-4374-a9c7-dab84270023b.jpeg
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbba0eea-a6f1-4374-a9c7-dab84270023b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 24d89b69ba37bf23c5d576aff4063caf
3d46a21b4da571d7e4962e335c18a28ca5f81ecf
09b52cdab278805c6e7282f469a02768ee62fc9ef09a6623a337e3d3aaa446fd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbba0eea-a6f1-4374-a9c7-dab84270023b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7268
x-amzn-requestid: ae5c231c-b1be-498a-a242-e8d641f3fe8e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFDgEzUoAMFgyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911baf-10f06dc37cac69631c823fd9;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:03:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wFqXeAYHSBcj85PiuqhV790clAMWg_NHMCO5Q5WARXDaohFWZdeCig==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:19:17 GMT
age: 76095
etag: "3d46a21b4da571d7e4962e335c18a28ca5f81ecf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74e98e03-fa9f-4e56-a8ba-5411568d88c8.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74e98e03-fa9f-4e56-a8ba-5411568d88c8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c408efaa98ac2ce63bb1618368d10c15
a51bbb49ebd862d04eaee465d0a35b22dcd21391
077eb8c8739f527828c71c25a1c3aaae46afead3aac093ec11a6d5488ef2f0ec
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74e98e03-fa9f-4e56-a8ba-5411568d88c8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9596
x-amzn-requestid: e5e6ceb2-5bad-4146-a9de-92a859716029
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy3_qH63oAMFfLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639106ca-678bed1b7729b8aa2645688d;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 21:34:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: dcHU93cetsY4-vWHpT2xXozH1T7J3_1X8n6Yjd6lOuF8HbkpTQDerg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 22:13:24 GMT
etag: "a51bbb49ebd862d04eaee465d0a35b22dcd21391"
content-type: image/jpeg
age: 80048
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
perfectwoodart.com/baroleb/
200 OK 2.6 kB URL HTTP/1.1 perfectwoodart.com/baroleb/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (407)
Hash 77b45ba8e072d6e95efdc44bd8a863c3
f6b687cd932ebda8ae0c9ff7b2c998855b867d1e
faf2f79dfe9098f7b181f9ced5e64813008bfcb36c33958f36dde8a628905717
Analyzer Verdict Alert fortinet Phishing
GET /baroleb/ HTTP/1.1
Host: perfectwoodart.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 20:27:33 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding,User-Agent
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6Gqbf87DdD5WCiwUWHZsy4xC3qBaoh%2FmkmFmNWx772yePOp%2B4bCr1MBiyS3bX%2BUegUsNQSTOt5oS5P2hwCfyklZekdopZxEyAp%2BYSOQ7ZZtDXryI1ZfFFW%2FsuK7HXd3F8U0JxKU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77683dfc8c38b527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
perfectwoodart.com/baroleb/front/login/senses2-styling.css
200 OK 2.1 kB URL HTTP/1.1 perfectwoodart.com/baroleb/front/login/senses2-styling.css
IP
Hash c67ecf0caac15a75efe20ddc010b1398
6c01de38abf143bf1f19df29fe61d82cc1aba29f
d005925120c6f94741169a8098e91caa6fe2e59303aa4d87c42b39b491a6af5d
GET /baroleb/front/login/senses2-styling.css HTTP/1.1
Host: perfectwoodart.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://perfectwoodart.com/baroleb/
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 20:27:33 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 28 Apr 2020 16:15:12 GMT
Vary: User-Agent, Accept-Encoding
Cache-Control: max-age=1800
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FKHsocE0mAtJjbjsN4IMESWPnBRYBSCPbJZrkymfJ1scGgB88Y7V%2B71z%2FK%2BcWrg7cM2y3GpxluLZ9UMlw748uToQh4D8BBAGaoRlXkcP9SSCRZIQIuZLMUSfVcfVyUhy4wDEdf4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77683e0da8070b41-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
perfectwoodart.com/baroleb/front/login/fonts/myriad/force-myriad.css
200 OK 123 B URL HTTP/1.1 perfectwoodart.com/baroleb/front/login/fonts/myriad/force-myriad.css
IP
Hash 4ba77399fa1f60709295820211bca8f4
c734145eb9ad15d8ab03ccf9824a64fe3a1084c4
528ea3d5a43f28d4d8fc440d807f0f9b0c7499c12c0a8aced02a3b216ced74ee
GET /baroleb/front/login/fonts/myriad/force-myriad.css HTTP/1.1
Host: perfectwoodart.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://perfectwoodart.com/baroleb/
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 20:27:33 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 28 Apr 2020 16:15:12 GMT
Vary: User-Agent, Accept-Encoding
Cache-Control: max-age=1800
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=McYizvjvmuL4L%2FewgdhHNQhZfpvMDfozoEPVXvxTY0rK9TFldhXPR22z4ZmB8OAnnkO%2Bq0OHrxCEmUdepmvpR3z%2BXmAJ9qR9Ea0GqAYZ943cs7PMTakrsfWyOM%2Fw7ewO2%2FK55ZQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77683e0d9e95b527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
perfectwoodart.com/baroleb/front/login/fonts/myriad/default.css
200 OK 1.5 kB URL HTTP/1.1 perfectwoodart.com/baroleb/front/login/fonts/myriad/default.css
IP
File type ASCII text, with very long lines (408)
Hash 33240986f5a3bd887c29c1af71bb7f2e
a485b43618e5b5ca98e065622a48bf9451b0056e
77fbb53d0b504703f643f3d3f9854d18c5580cf65790e44ffd82dbea6468f242
GET /baroleb/front/login/fonts/myriad/default.css HTTP/1.1
Host: perfectwoodart.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://perfectwoodart.com/baroleb/
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 20:27:33 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 28 Apr 2020 16:15:12 GMT
Vary: User-Agent, Accept-Encoding
Cache-Control: max-age=1800
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HZxXvluaJ14w8mbgUCw2m0DnIlevUtU%2BcWprFz%2FAb4qhf0XdTosRSTcwgLVZc1%2B6bHfduUvg2WVut%2BWLH3mP13C5y161qnh2uodB65%2F0h3EstmWGrLlO%2BQRCkPffd0hrdmC0kW4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77683e0da9fd0b49-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
perfectwoodart.com/baroleb/front/login/brwcook.js
200 OK 806 B URL HTTP/1.1 perfectwoodart.com/baroleb/front/login/brwcook.js
IP
Hash 71a09a43ed4b781a5a389e4e8c9cbdbe
cd618803c699bb6c3c62a8808d8282335973fe2d
f2a8252d761dc2c97198f9f2cb256d26b5e948e9c49c647f903bc52ab24203dd
Analyzer Verdict Alert fortinet Phishing
GET /baroleb/front/login/brwcook.js HTTP/1.1
Host: perfectwoodart.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://perfectwoodart.com/baroleb/
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 20:27:33 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 28 Apr 2020 16:15:10 GMT
Vary: User-Agent, Accept-Encoding
Cache-Control: max-age=1800
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L1IzvoBsxKtFhDLeGsEz3e0wVq5gB6tz1T%2BFm0dy4CwS00gcBBuRR3VgeutPNGOMNG9Uvgpo%2BgKOEyD58htksIK717AZSfDNxkouUmx%2FlMYDanZtRmPXXIyJxcMbr2v%2BGVpebHQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77683e0e088d0b41-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
perfectwoodart.com/baroleb/front/login/x12.js
200 OK 13 kB URL HTTP/1.1 perfectwoodart.com/baroleb/front/login/x12.js
IP
File type ASCII text, with very long lines (43786)
Hash 50dea0645dccd5662e69bf5b30fc01a8
aa9360e2dbe8d0206c33bd6fe2a0159a7eacf889
b819f08ac839d3217388fe222b7963858cce22e46f65f346f8b1794e29c7d357
Analyzer Verdict Alert fortinet Phishing
GET /baroleb/front/login/x12.js HTTP/1.1
Host: perfectwoodart.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://perfectwoodart.com/baroleb/
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 20:27:33 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 06 Oct 2015 11:12:18 GMT
Vary: User-Agent, Accept-Encoding
Cache-Control: max-age=1800
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PROf1ocrg%2F%2FWeihYw54q8mX2bOjmLTJ7P%2FAewABhU46tqFq20xAkYhODQclMjk4Fu%2FgWtmR2igis4S1NCTGhJlQYqLRCSP8d%2BtMCNQ1%2B6f9b%2FigSsnSAljpt9JRoJgngcvQKDBw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77683e0da8420b69-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
perfectwoodart.com/baroleb/front/login/www-extension.css
200 OK 5.2 kB URL HTTP/1.1 perfectwoodart.com/baroleb/front/login/www-extension.css
IP
File type ASCII text, with very long lines (622)
Hash b036e34bb626c818d65ec2ee72b95c31
c95c819114dccd0887213682bcc9fab38b429785
c3788787e87d5b170c3d2bbd0d0cc34ddb48224a74a225573c71c887c905d733
GET /baroleb/front/login/www-extension.css HTTP/1.1
Host: perfectwoodart.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://perfectwoodart.com/baroleb/
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 20:27:33 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 28 Apr 2020 16:15:12 GMT
Vary: User-Agent, Accept-Encoding
Cache-Control: max-age=1800
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DE%2BSzT0NnxeOalZBaOqn6Rvqr92ZlA0f%2B5Tj%2BiiFPyHU7FKbEmtvLR9jq1r8PoDa5hHSON8y8aOtjoHsh2uCeIJ28WVdqZg%2FyMw6MGqRESyTXypOFHu5Z7wNBPMWRxj3EovaKSA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77683e0dac2a1c0a-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
perfectwoodart.com/baroleb/front/login/device.min.js
200 OK 1.1 kB URL HTTP/1.1 perfectwoodart.com/baroleb/front/login/device.min.js
IP
File type ASCII text, with very long lines (3272)
Hash 1a057aabbdc509bca8d632d370bd4034
134fb2227fbd34ee4095efad018565e32ced7f40
8a4ade44776fdac7de16083402e9d9a13a88f5c9a8cc05bb2b50f09cc891c98e
Analyzer Verdict Alert fortinet Phishing
GET /baroleb/front/login/device.min.js HTTP/1.1
Host: perfectwoodart.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://perfectwoodart.com/baroleb/
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 20:27:33 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 28 Apr 2020 16:15:12 GMT
Vary: User-Agent, Accept-Encoding
Cache-Control: max-age=1800
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v0AxiDqmytARlpSAWGDvIri%2FWZpUsAEVjKWkUsQQmOLDwYZx4zXMwGMFt2LAnndanUmFvaiUjrmzFeHsFgkEYIg7X1nDLuKoxVxzl1Rlbp3UWdxkwoAVpYBEo2mLk6yn3Z4k854%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77683e0e3a6f0b49-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
perfectwoodart.com/baroleb/front/login/rass-proto.css
200 OK 82 kB URL HTTP/1.1 perfectwoodart.com/baroleb/front/login/rass-proto.css
IP
File type ASCII text, with very long lines (30865)
Hash 8c4762195d3eb9ad0622a48d8e69631e
30a719be6e2a941f7c3c2cb1c792e93a5e7a7fa0
e464ee43709499f09afe053e38d5845180225272f72359e4517237c15ea84801
GET /baroleb/front/login/rass-proto.css HTTP/1.1
Host: perfectwoodart.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://perfectwoodart.com/baroleb/
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 20:27:33 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 28 Apr 2020 16:15:12 GMT
Vary: User-Agent, Accept-Encoding
Cache-Control: max-age=1800
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LrIdBtHRDiy3Lx%2BSF8egmKX4HkjlS1pSJ3jvqUKgbQCITlMRkCUUqKoTxsBcgb6RmztWuC2ItdK%2F16qhHAV8ed9izA%2Bt5s%2BdOYm3gvU5avUQvVSwWudVCxO0ViEBC2yXdox17Fs%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77683e0dae451c0e-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
perfectwoodart.com/baroleb/front/login/brwfunc.js
200 OK 5.2 kB URL HTTP/1.1 perfectwoodart.com/baroleb/front/login/brwfunc.js
IP
File type ASCII text, with very long lines (15077), with no line terminators
Hash a384bf155daecf341488b5cfe16069e2
3f6ce6ae57b150b372c4e18e454110fc24040014
bacf8df14d535533a3ad0faa2529db8840c0f570bb26b0fb736ff77434003036
Analyzer Verdict Alert fortinet Phishing
GET /baroleb/front/login/brwfunc.js HTTP/1.1
Host: perfectwoodart.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://perfectwoodart.com/baroleb/
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 20:27:33 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 17 Oct 2019 08:20:26 GMT
Vary: User-Agent, Accept-Encoding
Cache-Control: max-age=1800
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Fby4zZO3zjBKGwmfHqABMj0JLuRIfYL6UkjKa6yw6rhVifA0iVt307Q%2FFVVfBqoYFBeve9Dup8Z0alqZfGVEqfNlOtfEhN8jjGuejIqlPApZXUYRHCaRmCMHLV3SleQLyLjUnzc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77683e0e2f6db527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
perfectwoodart.com/baroleb/front/login/images/icon_supercirkel_kruisje.svg
200 OK 694 B URL HTTP/1.1 perfectwoodart.com/baroleb/front/login/images/icon_supercirkel_kruisje.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash bfdf66a52946e9b31697164db2b9e7e3
084e042203c0814031ef024519d8ebe22ba7f41d
0edae8852fd4ada5448348c686819be2087841c3c09ccd882fb7ddf1d24ca2aa
Analyzer Verdict Alert fortinet Phishing
GET /baroleb/front/login/images/icon_supercirkel_kruisje.svg HTTP/1.1
Host: perfectwoodart.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://perfectwoodart.com/baroleb/front/login/www-extension.css
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 20:27:33 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 28 Apr 2020 16:04:54 GMT
Vary: User-Agent, Accept-Encoding
Cache-Control: max-age=1800
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZsGqARpJ2Wb2Cc9GarnGR35qLXy59B6ZlJ1YLiscYHPqnmLPhsQ4HzPXCnbtK9GWeEKU5Gmc7gv%2F0SztTsScAweHSxx9CguF9AI3SloGawtSKkvHpkubTZ0YB3ck2kBrEbNFk0M%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77683e0f0b080b49-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
perfectwoodart.com/baroleb/front/login/images/rabobank_logo.png
404 Not Found 238 B URL HTTP/1.1 perfectwoodart.com/baroleb/front/login/images/rabobank_logo.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f5945c4d5e4298d818d50d70865f2857
f35c3593933af2db1933093809ef78f45b9b7144
d2a3f46998410a6fa09375f2813da63aa04bbc6caae20e770da12530ba881b38
GET /baroleb/front/login/images/rabobank_logo.png HTTP/1.1
Host: perfectwoodart.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://perfectwoodart.com/baroleb/
HTTP/1.1 404 Not Found
Date: Thu, 08 Dec 2022 20:27:33 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=1800
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PegUFH0vuBMOfjcu6%2FM1BcpDFVmV1QoYm9sOCXaDvbghKoz1uYzt5s7A7ZP3Trl7L%2FF7r6EAh1pqvF6IekgNS9Ra%2F3S4hPi0NPS2jA64PzHrF0RnVJrjTgMOjaUvqtnCu3kICoM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77683e0ed94a0b69-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
perfectwoodart.com/baroleb/front/login/rass-proto.js
200 OK 13 kB URL HTTP/1.1 perfectwoodart.com/baroleb/front/login/rass-proto.js
IP
File type ASCII text, with very long lines (2050)
Hash 6818753341d675b8341aedf79a0b0a22
bbef0e8554d1aee458013da8cb6fb0cb0a1b46d1
a904d985046451084a9460e28e989aa325a3fd4fbd3e58e5caee14a5c74e6ba9
Analyzer Verdict Alert fortinet Phishing
GET /baroleb/front/login/rass-proto.js HTTP/1.1
Host: perfectwoodart.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://perfectwoodart.com/baroleb/
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 20:27:33 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 28 Apr 2020 16:15:12 GMT
Vary: User-Agent, Accept-Encoding
Cache-Control: max-age=1800
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W2MO1VvQvVBYHVWiEET2PmTizfn8QIjfPSg2eYnFhSxNT2HpLZlmiW0QLvHWm3QnXGS1j1JPmtaw2iLyJPsx1Zm6sEp0oUbp0VYvT%2FpNavPGQpUZfusggH8SnzfqqeLz3%2B126is%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77683e0e99290b41-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
perfectwoodart.com/baroleb/front/login/images/grayed-out-vc-nl.png
200 OK 15 kB URL HTTP/1.1 perfectwoodart.com/baroleb/front/login/images/grayed-out-vc-nl.png
IP
File type PNG image data, 315 x 315, 8-bit/color RGBA, non-interlaced\012- data
Hash 106423b2ca130a77c97219c12727f5ec
886366d9c42fe58114c04ec4e59701b7c30ae92c
cf59560647e49f765aa01b63bff1950159fc806bc2e82bb6154393f6502a18e1
GET /baroleb/front/login/images/grayed-out-vc-nl.png HTTP/1.1
Host: perfectwoodart.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://perfectwoodart.com/baroleb/
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 20:27:33 GMT
Content-Type: image/png
Content-Length: 15354
Connection: keep-alive
Last-Modified: Tue, 28 Apr 2020 16:04:54 GMT
Cache-Control: max-age=1800
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BFwoF7D3OhOh%2F%2BNa0%2FbWvcbzIgWduQ9i4%2F4zPw0uBjQRTGl5Ye0ucDGiiztSkeGzkoodNkeXMgmrGDWjR5s%2FkjJgRcnM3VUnLYAKkhsJKMCMrzRyf2gWdihuj1cErvBU8MYKrFI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77683e0eddbf1c0a-OSL
alt-svc: h2=":443"; ma=60
perfectwoodart.com/baroleb/front/login/images/icon_supercirkel_vraagteken.svg
200 OK 745 B URL HTTP/1.1 perfectwoodart.com/baroleb/front/login/images/icon_supercirkel_vraagteken.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 122d750058926438e72a7acdd55852e4
2848318637167ef171f56d7f97f9262b2924d3c7
87cecf1d6e16db203903d2d8f741739c24e8411aae16ccfbe1298f08102cec26
Analyzer Verdict Alert fortinet Phishing
GET /baroleb/front/login/images/icon_supercirkel_vraagteken.svg HTTP/1.1
Host: perfectwoodart.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://perfectwoodart.com/baroleb/front/login/www-extension.css
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 20:27:33 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 28 Apr 2020 16:04:54 GMT
Vary: User-Agent, Accept-Encoding
Cache-Control: max-age=1800
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x%2FqNrV%2FJAKqn5rJYtOlYtXE5a96ARrAJFNdN%2BSkSROhsXagwAPZThM73chQOX76%2FQho5BqmKPSrWvwVP2FB5oW3egw2yEEWSr6l%2BiJGIoFq8tu%2BCYbfVZWHavq3XCbENg5idVPc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77683e0f08b2b527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
perfectwoodart.com/baroleb/front/login/images/checkbox_off.svg
200 OK 777 B URL HTTP/1.1 perfectwoodart.com/baroleb/front/login/images/checkbox_off.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text
Hash 1f541ebdb49819aa90100969956c592b
e8a8655c668340c2752ad62341c886766c61bdbe
c5620a34aaf7df5d49271e194aedb2d0dbab2f840c7e2482cb6c42f824549fa8
Analyzer Verdict Alert fortinet Phishing
GET /baroleb/front/login/images/checkbox_off.svg HTTP/1.1
Host: perfectwoodart.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://perfectwoodart.com/baroleb/front/login/www-extension.css
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 20:27:33 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 28 Apr 2020 16:04:54 GMT
Vary: User-Agent, Accept-Encoding
Cache-Control: max-age=1800
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pvHeQQvyvG%2F5s5%2FVp4HNPS%2F0FfESl%2BAC702R3UcxdBOCqij1ZY9nYggsgVYbI2Rbwd9uOJDcrP%2F7rD%2FtNLdAk4fNlt8Q1i3NevweBgZqbu21CRAZHJsQ89YivJxytCQZElqT6dk%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77683e0f08061c0e-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
perfectwoodart.com/baroleb/front/login/fonts/myriad/files/0b6110f9-6072-46b9-98af-7d09f7c895b8.woff2
200 OK 16 kB URL HTTP/1.1 perfectwoodart.com/baroleb/front/login/fonts/myriad/files/0b6110f9-6072-46b9-98af-7d09f7c895b8.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16356, version 1.0\012- data
Hash dcb5812d0cda70ffa90ea868e642bef6
716d56c3ba9698291126a80e57ef1b247714702b
2aa2c3139fe0f3233bbab4e43ef2885af045555933aef6570046e6df2f7f57f3
Analyzer Verdict Alert fortinet Phishing
GET /baroleb/front/login/fonts/myriad/files/0b6110f9-6072-46b9-98af-7d09f7c895b8.woff2 HTTP/1.1
Host: perfectwoodart.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://perfectwoodart.com/baroleb/front/login/fonts/myriad/default.css
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 20:27:33 GMT
Content-Type: font/woff2
Content-Length: 16356
Connection: keep-alive
Last-Modified: Tue, 28 Apr 2020 16:04:54 GMT
Vary: User-Agent, Accept-Encoding
Cache-Control: max-age=1800
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ciz94WlDo449%2FoJtYcDZ65tfTogM6qrIVDsi9kLc%2BvW2kMHJz75mBAZBbTKW%2Bfmgx4oPI%2Fxy3J%2FdXRCPZqxx8W9D7wvj5voTZJ1djFwcwRYwPm1sUkODq%2FTh%2FfveVHAK4PousuA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77683e0f69d60b69-OSL
alt-svc: h2=":443"; ma=60
perfectwoodart.com/baroleb/front/login/images/icon_supercirkel_pijl.svg
200 OK 653 B URL HTTP/1.1 perfectwoodart.com/baroleb/front/login/images/icon_supercirkel_pijl.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash f55cdf35e02eed74b69c032984dddd4a
8db46b6ae898df6b4e02046f07e89b590612d7a3
c87ebdf954a5e4416910c058e31fb57c72829e689d63b06a773302cee594fc6e
Analyzer Verdict Alert fortinet Phishing
GET /baroleb/front/login/images/icon_supercirkel_pijl.svg HTTP/1.1
Host: perfectwoodart.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://perfectwoodart.com/baroleb/front/login/www-extension.css
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 20:27:33 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 28 Apr 2020 16:04:54 GMT
Vary: User-Agent, Accept-Encoding
Cache-Control: max-age=1800
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z0qSl4kQ9CiwaboFRnMbFC9i7vzq7jh1OpiP%2F8sQhlAEjQCCS1P4HS25BbeTduv20Pr0TMDPc3MhZu0YRcnb4%2FXLk2vueBhE%2BYMWsPBiUHjx1ILE4UUI92nwB%2BKl7JHy%2F3KnzbU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77683e0f9e881c0a-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
perfectwoodart.com/baroleb/front/login/fonts/myriad/files/fd5daa3f-a61a-4aed-93cd-54bc94bb59b6.woff2
200 OK 17 kB URL HTTP/1.1 perfectwoodart.com/baroleb/front/login/fonts/myriad/files/fd5daa3f-a61a-4aed-93cd-54bc94bb59b6.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16696, version 1.0\012- data
Hash d30827b823fbcc46ae577287d9958a85
f66f0cb0ca05cfa5b4c96750225478febf1f110a
1a35e85545a55eb7a307543de45c5a73588d63d9b08fd571c22ae6ec1a2f78d9
Analyzer Verdict Alert fortinet Phishing
GET /baroleb/front/login/fonts/myriad/files/fd5daa3f-a61a-4aed-93cd-54bc94bb59b6.woff2 HTTP/1.1
Host: perfectwoodart.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://perfectwoodart.com/baroleb/front/login/fonts/myriad/default.css
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 20:27:33 GMT
Content-Type: font/woff2
Content-Length: 16696
Connection: keep-alive
Last-Modified: Tue, 28 Apr 2020 16:04:54 GMT
Vary: User-Agent, Accept-Encoding
Cache-Control: max-age=1800
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8qh2BfjCxoFKnjEypzZLGWTr0kQJdvtR1d2S%2FGDWfNoB1k5%2F9tT17eHhj6vMZm28RcOJd%2Bpw8U9lAjvtQe%2BHve4NNavcbHvPDTTCmpNqn6DPffnngSviSY3vwUq%2Fk3gxPoj0Pw4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77683e0f6b760b49-OSL
alt-svc: h2=":443"; ma=60
perfectwoodart.com/baroleb/front/login/fonts/myriad/files/3b0f1c67-c2e4-4df6-976f-49d52e45aba1.woff2
200 OK 16 kB URL HTTP/1.1 perfectwoodart.com/baroleb/front/login/fonts/myriad/files/3b0f1c67-c2e4-4df6-976f-49d52e45aba1.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16376, version 1.0\012- data
Hash 66cc04b61a823c9138869b61b173f21d
7608f8d3ef9e55e0f8284a923dc33bfd961f95b6
49be0df2d6bfe51dc29e0f5cebd2b99b6b1e4463c2d1250f1b1ae3ac36d0ce41
Analyzer Verdict Alert fortinet Phishing
GET /baroleb/front/login/fonts/myriad/files/3b0f1c67-c2e4-4df6-976f-49d52e45aba1.woff2 HTTP/1.1
Host: perfectwoodart.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://perfectwoodart.com/baroleb/front/login/fonts/myriad/default.css
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 20:27:33 GMT
Content-Type: font/woff2
Content-Length: 16376
Connection: keep-alive
Last-Modified: Tue, 28 Apr 2020 16:04:54 GMT
Vary: User-Agent, Accept-Encoding
Cache-Control: max-age=1800
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cDtVFMRVy3rmvNM8jKHnd8eTr63tc7qJ6sxiLBLtIIZj%2BS5mO79b7FA1mdB82Iz5No8Q2%2FW4vfZfexsrfr%2FzjcFMLUqpNrC3oDvrcAVL8gcfDpMcp65BTGcR6V4bOIzvTpQpQnQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77683e0f7a3f0b41-OSL
alt-svc: h2=":443"; ma=60
perfectwoodart.com/qsl/trans.gif?30010=0f8c5ae3132b41d990a9e6a3abd0c801_1588296122296&40020=%2Fbaroleb%2F&40030=1280&40040=939&40050=1280&40060=1024&40070=Netscape&40080=false&40090=Mozilla&20100=248&40110=831&40120=5.0%20(X11)&20130=9563&20140=146&40150=Linux%20x86_64&40160=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&40170=true&40200=00V1L44Y1701V14F4W1702JX144X1703W14N4W1704YD144Y1705Y1L44U1706U1P44X1707JX144W1708UL144U170N9V144Y1710V14L4Y171R1Y144U171P2U144V1713Y14R4W1714W14B4V1715NV144Y1716FU144W1717Y1L44V1718RU144U17&20210=&30220=Thu%20Dec%2008%202022%2020%3A27%3A32%20GMT%2B0000%20(Coordinated%20Universal%20Time)&20230=False&40250=1.5&40260=en-US&20270=http%3A%2F%2Fperfectwoodart.com%2Fbaroleb%2Ffront%2Flogin%2Fimages%2Frabobank_logo.png|0|0|undefined&20270=http%3A%2F%2Fperfectwoodart.com%2Fbaroleb%2Ffront%2Flogin%2Fimages%2Fgrayed-out-vc-nl.png|250|250|undefined&40280=undefined&30290=6&40300=undefined&99320=false&20310=http%3A&40330=undefined&20350=%14U%00%1CT(%1B-%23F%0C%16%00%03%147-%5D%07%01%11%0FUtff%03%11%1B%03%147-&30360=1&20370=w%07&20380=t%05%1EC%08Q&20390=%15W%0B%17%08Q%13a%25%01%03%16GPFk%24%00S%17MXE8%7FQT%12G%00%17%3DvWZCE%3EDl~%0CPJBPGkt%0DT%0F%07)%07%1E%23V%100%1C%0A%09%3F%27X%11%16%08%20%00-.%7D%06%0F%08%20%00-.v%12%12%07%2F%07%25%3AX%03%1D%13%14%14%3E%23H%0C%1F%082%160%22HR%15L%02%408%23%07S%40F%03Ah%22%0D%5BC%15X%10o%27%07%03%11%10Q%16av%05%3DBAYMk%7F%02SAFSLo%3Au%17%07%1C(%11%25%3Au%17%07%1C%23%0585z%10%0F%08%12%3D%2B%01Q%00%017%09%1E%25)Z%1E%07%17%0E%1964W%0D%17%11%1D%3E5%23A%10%10%1B%05%10y)D%0A%12%18%04%1B%25%15W%0B%17%08Q%13a%25%01%03%16GPFk%24%00S%17MXE8%7FQT%12G%00%17%3DvWZCE%3EDl~%0CPJBPGkt%0DT%0F%07)%07%1E%23V%100%1C%0A%09%3F%27X%11%16%08%20%00-.w%06%0F%08%12%00%3B%2B%5D%16%0F%3D%0F%196!S%07%1D%08%02%147%25Q%0E%0F5%0F%1B%2C*Q%10%16%1A%1D%26%3A%2FP%1EC%12Y%16l%27QQBGS%17mwP%5BJD%00L%3CpUQ%12%16%05E%3A~%04S%2CETMat%0DTBFSG%60pH%11%3B%06%26%10%3B4w%0A%18%08%07%1455Q%1E2%01%15%1D%10%22H%1E2%01%15%1D%1B6U%11%3D%06%1D%09%3A2Q%06!%11%00%11%3C4H%10%01%08%08%01%3A.F%07%12%10%04%07%25%0FZ%0E%1C%13%06%107fY%07%07T3%147%22%5B%0FS%26%04%14%3D%23F%1E&20400=w%02UCARDks%06RCD&20410=&99420=F4bstauY&10430=
404 Not Found 238 B URL HTTP/1.1 perfectwoodart.com/qsl/trans.gif?30010=0f8c5ae3132b41d990a9e6a3abd0c801_1588296122296&40020=%2Fbaroleb%2F&40030=1280&40040=939&40050=1280&40060=1024&40070=Netscape&40080=false&40090=Mozilla&20100=248&40110=831&40120=5.0%20(X11)&20130=9563&20140=146&40150=Linux%20x86_64&40160=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&40170=true&40200=00V1L44Y1701V14F4W1702JX144X1703W14N4W1704YD144Y1705Y1L44U1706U1P44X1707JX144W1708UL144U170N9V144Y1710V14L4Y171R1Y144U171P2U144V1713Y14R4W1714W14B4V1715NV144Y1716FU144W1717Y1L44V1718RU144U17&20210=&30220=Thu%20Dec%2008%202022%2020%3A27%3A32%20GMT%2B0000%20(Coordinated%20Universal%20Time)&20230=False&40250=1.5&40260=en-US&20270=http%3A%2F%2Fperfectwoodart.com%2Fbaroleb%2Ffront%2Flogin%2Fimages%2Frabobank_logo.png|0|0|undefined&20270=http%3A%2F%2Fperfectwoodart.com%2Fbaroleb%2Ffront%2Flogin%2Fimages%2Fgrayed-out-vc-nl.png|250|250|undefined&40280=undefined&30290=6&40300=undefined&99320=false&20310=http%3A&40330=undefined&20350=%14U%00%1CT(%1B-%23F%0C%16%00%03%147-%5D%07%01%11%0FUtff%03%11%1B%03%147-&30360=1&20370=w%07&20380=t%05%1EC%08Q&20390=%15W%0B%17%08Q%13a%25%01%03%16GPFk%24%00S%17MXE8%7FQT%12G%00%17%3DvWZCE%3EDl~%0CPJBPGkt%0DT%0F%07)%07%1E%23V%100%1C%0A%09%3F%27X%11%16%08%20%00-.%7D%06%0F%08%20%00-.v%12%12%07%2F%07%25%3AX%03%1D%13%14%14%3E%23H%0C%1F%082%160%22HR%15L%02%408%23%07S%40F%03Ah%22%0D%5BC%15X%10o%27%07%03%11%10Q%16av%05%3DBAYMk%7F%02SAFSLo%3Au%17%07%1C(%11%25%3Au%17%07%1C%23%0585z%10%0F%08%12%3D%2B%01Q%00%017%09%1E%25)Z%1E%07%17%0E%1964W%0D%17%11%1D%3E5%23A%10%10%1B%05%10y)D%0A%12%18%04%1B%25%15W%0B%17%08Q%13a%25%01%03%16GPFk%24%00S%17MXE8%7FQT%12G%00%17%3DvWZCE%3EDl~%0CPJBPGkt%0DT%0F%07)%07%1E%23V%100%1C%0A%09%3F%27X%11%16%08%20%00-.w%06%0F%08%12%00%3B%2B%5D%16%0F%3D%0F%196!S%07%1D%08%02%147%25Q%0E%0F5%0F%1B%2C*Q%10%16%1A%1D%26%3A%2FP%1EC%12Y%16l%27QQBGS%17mwP%5BJD%00L%3CpUQ%12%16%05E%3A~%04S%2CETMat%0DTBFSG%60pH%11%3B%06%26%10%3B4w%0A%18%08%07%1455Q%1E2%01%15%1D%10%22H%1E2%01%15%1D%1B6U%11%3D%06%1D%09%3A2Q%06!%11%00%11%3C4H%10%01%08%08%01%3A.F%07%12%10%04%07%25%0FZ%0E%1C%13%06%107fY%07%07T3%147%22%5B%0FS%26%04%14%3D%23F%1E&20400=w%02UCARDks%06RCD&20410=&99420=F4bstauY&10430=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f5945c4d5e4298d818d50d70865f2857
f35c3593933af2db1933093809ef78f45b9b7144
d2a3f46998410a6fa09375f2813da63aa04bbc6caae20e770da12530ba881b38
GET /qsl/trans.gif?30010=0f8c5ae3132b41d990a9e6a3abd0c801_1588296122296&40020=%2Fbaroleb%2F&40030=1280&40040=939&40050=1280&40060=1024&40070=Netscape&40080=false&40090=Mozilla&20100=248&40110=831&40120=5.0%20(X11)&20130=9563&20140=146&40150=Linux%20x86_64&40160=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&40170=true&40200=00V1L44Y1701V14F4W1702JX144X1703W14N4W1704YD144Y1705Y1L44U1706U1P44X1707JX144W1708UL144U170N9V144Y1710V14L4Y171R1Y144U171P2U144V1713Y14R4W1714W14B4V1715NV144Y1716FU144W1717Y1L44V1718RU144U17&20210=&30220=Thu%20Dec%2008%202022%2020%3A27%3A32%20GMT%2B0000%20(Coordinated%20Universal%20Time)&20230=False&40250=1.5&40260=en-US&20270=http%3A%2F%2Fperfectwoodart.com%2Fbaroleb%2Ffront%2Flogin%2Fimages%2Frabobank_logo.png|0|0|undefined&20270=http%3A%2F%2Fperfectwoodart.com%2Fbaroleb%2Ffront%2Flogin%2Fimages%2Fgrayed-out-vc-nl.png|250|250|undefined&40280=undefined&30290=6&40300=undefined&99320=false&20310=http%3A&40330=undefined&20350=%14U%00%1CT(%1B-%23F%0C%16%00%03%147-%5D%07%01%11%0FUtff%03%11%1B%03%147-&30360=1&20370=w%07&20380=t%05%1EC%08Q&20390=%15W%0B%17%08Q%13a%25%01%03%16GPFk%24%00S%17MXE8%7FQT%12G%00%17%3DvWZCE%3EDl~%0CPJBPGkt%0DT%0F%07)%07%1E%23V%100%1C%0A%09%3F%27X%11%16%08%20%00-.%7D%06%0F%08%20%00-.v%12%12%07%2F%07%25%3AX%03%1D%13%14%14%3E%23H%0C%1F%082%160%22HR%15L%02%408%23%07S%40F%03Ah%22%0D%5BC%15X%10o%27%07%03%11%10Q%16av%05%3DBAYMk%7F%02SAFSLo%3Au%17%07%1C(%11%25%3Au%17%07%1C%23%0585z%10%0F%08%12%3D%2B%01Q%00%017%09%1E%25)Z%1E%07%17%0E%1964W%0D%17%11%1D%3E5%23A%10%10%1B%05%10y)D%0A%12%18%04%1B%25%15W%0B%17%08Q%13a%25%01%03%16GPFk%24%00S%17MXE8%7FQT%12G%00%17%3DvWZCE%3EDl~%0CPJBPGkt%0DT%0F%07)%07%1E%23V%100%1C%0A%09%3F%27X%11%16%08%20%00-.w%06%0F%08%12%00%3B%2B%5D%16%0F%3D%0F%196!S%07%1D%08%02%147%25Q%0E%0F5%0F%1B%2C*Q%10%16%1A%1D%26%3A%2FP%1EC%12Y%16l%27QQBGS%17mwP%5BJD%00L%3CpUQ%12%16%05E%3A~%04S%2CETMat%0DTBFSG%60pH%11%3B%06%26%10%3B4w%0A%18%08%07%1455Q%1E2%01%15%1D%10%22H%1E2%01%15%1D%1B6U%11%3D%06%1D%09%3A2Q%06!%11%00%11%3C4H%10%01%08%08%01%3A.F%07%12%10%04%07%25%0FZ%0E%1C%13%06%107fY%07%07T3%147%22%5B%0FS%26%04%14%3D%23F%1E&20400=w%02UCARDks%06RCD&20410=&99420=F4bstauY&10430= HTTP/1.1
Host: perfectwoodart.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://perfectwoodart.com/baroleb/
HTTP/1.1 404 Not Found
Date: Thu, 08 Dec 2022 20:27:33 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=1800
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i%2BAhLbPyi8DA3y6peVNCXEwdpi3KlB5zogauEvCCBY9swqCgiCbWsy5iR063tY1M7LfYlya7TYhd%2FSCbTLpX1wv175UGOrnOCBO%2BBUb3PV7UEFsrhjPwqjlaDSCyttciXE%2BP4tU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77683e0fa9a7b527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 471 B IP
Hash da956e057260390fdb0f031611642013
9a6e98aab555fffbb13725ed243d0710de42946f
bde9720713f98ab261e1c89c5981a26ae8120ba67a48d7e0c7214ebeca9529c8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6567
Cache-Control: max-age=110479
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:27:33 GMT
Etag: "63913b9d-1d7"
Expires: Sat, 10 Dec 2022 03:08:52 GMT
Last-Modified: Thu, 08 Dec 2022 01:19:25 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
bankieren.rabobank.nl/rabo/sam/staticcontent/vrs_13_6_12_5_202004281602/newdesign/images/rabobank.svg
404 Not Found 277 B URL HTTP/1.1 bankieren.rabobank.nl/rabo/sam/staticcontent/vrs_13_6_12_5_202004281602/newdesign/images/rabobank.svg
IP
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a8af6ab180afbfd7d737257520539dec
f76818ee1b83f3a6c25a1ebed48a86ab628df9f5
a1a8660c4995972d9b67243e5e9e3360652424b776c897e138d1dab4567226fe
GET /rabo/sam/staticcontent/vrs_13_6_12_5_202004281602/newdesign/images/rabobank.svg HTTP/1.1
Host: bankieren.rabobank.nl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectwoodart.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 404 Not Found
Server: Apache
Content-Length: 277
Content-Type: text/html; charset=iso-8859-1
X-Frame-Options: SAMEORIGIN
Date: Thu, 08 Dec 2022 20:27:33 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=15768000
Set-Cookie: BIGipServerpl_bankieren-rabo.rabobank.nl-80=!jzQRTfy3rTu9fovjA4pmO9EQrEtox1BcybyPR2xeCsIjEQ3asRd4p8UukmG5rcftx++zih0fiz5zuw==; path=/; Httponly; Secure
ak_bmsc=BE7EF04C69C343743321F76BDD7275E2~000000000000000000000000000000~YAAQDk8kFysOgKWEAQAAvwZs8xI65m137ZAo90ZCD+E9L+6fCmBICfSRWbbTfa3V3KM2i0xlV+ikYpMHkKLcCNsmu1rAiXGqwZs4C+kBilrXLHgNYXQ1m6+Hd8dZGke65gSgcqmi/RA3M9AQ77u7oAqO/LxDdDkRUQDdu+KDVBgGy48hF+uYvSHhRmkiEuxqoc3LTo2QXog/cfX3v84Xtm932u+sQALwA59oibSsWvpxjFOQ/dcnlUDcuWOv54/s/s6zNMZO2IyhXSQW4dMCjhS32HNCE91pNYG40uewJU3esRmyEhg81TY/f1X15GIsTDxI/ssK5E+1Bx5Emr/qVJqvEE8zM37agr5eXE8KMmknvGusJEGLOkekbRyTcNPk; Domain=.rabobank.nl; Path=/; Expires=Thu, 08 Dec 2022 22:27:33 GMT; Max-Age=7200; HttpOnly
perfectwoodart.com/baroleb/front/login/images/favicon.ico
404 Not Found 238 B URL HTTP/1.1 perfectwoodart.com/baroleb/front/login/images/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f5945c4d5e4298d818d50d70865f2857
f35c3593933af2db1933093809ef78f45b9b7144
d2a3f46998410a6fa09375f2813da63aa04bbc6caae20e770da12530ba881b38
GET /baroleb/front/login/images/favicon.ico HTTP/1.1
Host: perfectwoodart.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://perfectwoodart.com/baroleb/
HTTP/1.1 404 Not Found
Date: Thu, 08 Dec 2022 20:27:33 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=1800
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dxsBBLnJ711XbH7eAjYPZvt2YjsuGbTHfVIT3CHfqi8ttRM9Covc1I5EihQCwuCsq3h1dDjtaw%2BprAC7iPSBc0VcOR9ZYdXWNaZQJ4inPc9Ia%2FmSfIgy4my8L5k5fS0gbH3s05s%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77683e10e9db1c0e-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
104.21.24.22
104.21.24.22
93.184.220.29
23.36.79.18
35.241.9.150