hostel-amalienau.ru/payment/usps/
301 Moved Permanently 169 B URL HTTP/1.1 hostel-amalienau.ru/payment/usps/
IP
ASN #39134 United Network LLC
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 9527755784f5014d2c94dcabdf6ae892
941126eba6b0b049b4a09fb846ebd943e894e068
5b111ef9f2dbaf8e8870567dc8e2302efe2b0feb9d4ba62ce74c1039ab663523
Analyzer Verdict Alert fortinet Phishing
GET /payment/usps/ HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx/1.20.2
Date: Fri, 02 Dec 2022 16:57:53 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://hostel-amalienau.ru:443/payment/usps/
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8274
Expires: Fri, 02 Dec 2022 19:15:48 GMT
Date: Fri, 02 Dec 2022 16:57:54 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 7439fb99a444b66db1e68ffbfaa38451
4b7742d7956485906f1c392c478515ff89a46184
636327ce88f733e5a1d39af212f97242717a39ce20edaef330fafea238e3a309
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 360
Cache-Control: max-age=149961
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 16:57:54 GMT
Etag: "6389d3f3-1d7"
Expires: Sun, 04 Dec 2022 10:37:15 GMT
Last-Modified: Fri, 02 Dec 2022 10:31:15 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6258
Expires: Fri, 02 Dec 2022 18:42:12 GMT
Date: Fri, 02 Dec 2022 16:57:54 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 02 Dec 2022 16:19:57 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2277
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: f7rSynDqOEjsW05PMGrJg/9vIuZ5w+oJ7o/AQbmW5LJ51ZtCButFmhysxjTNbhlvAN123/1B1jc=
x-amz-request-id: 3W5GXSD3GJ4XGSBH
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 02 Dec 2022 16:46:11 GMT
age: 703
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 16:57:54 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e3c0d8733e908fcf19ca7388e301c9b2
310dbfd8b7c58cf011b0e7c321ac3d65f0e31269
c89d53daec6d61ee1a5f51f7570f970f37d8c084c2cf0d8897c1188e1652cb2c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C89D53DAEC6D61EE1A5F51F7570F970F37D8C084C2CF0D8897C1188E1652CB2C"
Last-Modified: Fri, 02 Dec 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21582
Expires: Fri, 02 Dec 2022 22:57:36 GMT
Date: Fri, 02 Dec 2022 16:57:54 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 02 Dec 2022 16:08:57 GMT
cache-control: public,max-age=3600
age: 2937
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 7f1f8fc556d1f7e0aea3e1208ee2fd1c
09c341a56ff876479cfc8a0505a5fef4a5d110f1
65adcf58887bcc23f73379f74ab19a61cfbb93285c95c64b44a6716eeacc1482
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 351
Cache-Control: max-age=144891
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 16:57:54 GMT
Etag: "6389c02e-1d7"
Expires: Sun, 04 Dec 2022 09:12:45 GMT
Last-Modified: Fri, 02 Dec 2022 09:06:54 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ntlAAT16h/yAhXQO/VnCOQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: rEroMGEOljFqADZ+Ho3QrJwc0pA=
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 05917f7542a781275c12d43562be1507
1ea730e7e2b5a84fb0341ef9a64b141a4dd469b3
2f24492a077b583bd9dfe049c16c60b219d950712879f187ff2160214df9bd0e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 16:57:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 05917f7542a781275c12d43562be1507
1ea730e7e2b5a84fb0341ef9a64b141a4dd469b3
2f24492a077b583bd9dfe049c16c60b219d950712879f187ff2160214df9bd0e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 16:57:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hostel-amalienau.ru/wp-includes/css/dist/block-library/style.min.css?ver=6.0.3
200 OK 89 kB URL HTTP/2 hostel-amalienau.ru/wp-includes/css/dist/block-library/style.min.css?ver=6.0.3
IP
ASN #39134 United Network LLC
File type ASCII text, with very long lines (43771)
Hash b7915926fe42d76e9c802353ab01dae4
3a8192a4312f25f53de25b100d62829c0f14d67c
d7705700d24d5919255576642ad2c28bfc790390b7183a369038ff5c1e814d51
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.3 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:55 GMT
content-type: text/css
content-length: 88932
last-modified: Mon, 05 Sep 2022 07:33:07 GMT
etag: "6315a633-15b64"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3
200 OK 19 kB URL HTTP/2 hostel-amalienau.ru/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3
IP
ASN #39134 United Network LLC
File type ASCII text, with very long lines (15660)
Hash 32beb68a374e3aeac00abdf9e12b84ea
b5d18aa625e8696dd9d07cd0869337717b211ae0
5aad5fbd4238981a9ff5e2772ff1353dfe1a801fb49542fe157418c1438f7782
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.3 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:55 GMT
content-type: application/javascript; charset=UTF-8
content-length: 18617
last-modified: Mon, 05 Sep 2022 07:33:07 GMT
etag: "6315a633-48b9"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.3
200 OK 2.7 kB URL HTTP/2 hostel-amalienau.ru/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.3
IP
ASN #39134 United Network LLC
Hash e6fae855021a88a0067fcc58121c594f
6299ac3987b5e81725781799dad361d19ac3b99d
e50f9ccd2d6582a58ba1879fa578e60d25fea4c5eedc07deafd14482b2403181
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.3 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:55 GMT
content-type: text/css
content-length: 2731
last-modified: Mon, 05 Sep 2022 07:47:10 GMT
etag: "6315a97e-aab"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 05917f7542a781275c12d43562be1507
1ea730e7e2b5a84fb0341ef9a64b141a4dd469b3
2f24492a077b583bd9dfe049c16c60b219d950712879f187ff2160214df9bd0e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 16:57:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hostel-amalienau.ru/wp-content/plugins/gdlr-hostel/gdlr-hotel.css?ver=6.0.3
200 OK 30 kB URL HTTP/2 hostel-amalienau.ru/wp-content/plugins/gdlr-hostel/gdlr-hotel.css?ver=6.0.3
IP
ASN #39134 United Network LLC
File type ASCII text, with CRLF line terminators
Hash c09b7dd72db59661e2a856764e1b413d
76d93e5b9a5ff949adcac39ce37f385bbaccb47a
fcfa9facd226e9b6386a82d367850b614744152c7fd13d5931902d80168bcfca
GET /wp-content/plugins/gdlr-hostel/gdlr-hotel.css?ver=6.0.3 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:55 GMT
content-type: text/css
content-length: 30094
last-modified: Mon, 05 Sep 2022 07:23:25 GMT
etag: "6315a3ed-758e"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a6ad57d839c4b452d7118cf2052f9d35
50afdbe46f04c7611c1a0111bce3a76775e50272
4c5c20573601bde0f5c3567e02d02d74ab22d4ffe12f632e1def1b87dc86ad3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 16:57:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hostel-amalienau.ru/wp-content/plugins/master-popups/assets/public/css/master-popups.min.css?ver=3.8.5
200 OK 175 kB URL HTTP/2 hostel-amalienau.ru/wp-content/plugins/master-popups/assets/public/css/master-popups.min.css?ver=3.8.5
IP
ASN #39134 United Network LLC
File type Unicode text, UTF-8 text, with very long lines (36639)
Size 175 kB (174960 bytes)
Hash f49fbd60a67c7d3964dc4774f8d98260
af744ce90ad17401d3b3284ad68f0af61ebf3793
99ce09873adf4a2461882f9a5fc21803534f2dbea54f2ccf74f2788502fde80f
GET /wp-content/plugins/master-popups/assets/public/css/master-popups.min.css?ver=3.8.5 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:55 GMT
content-type: text/css
content-length: 174960
last-modified: Mon, 05 Sep 2022 07:23:25 GMT
etag: "6315a3ed-2ab70"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
maps.google.com/maps/api/js?libraries=geometry%2Cplaces%2Cweather%2Cpanoramio%2Cdrawing&language=en&ver=6.0.3
200 OK 59 kB URL HTTP/2 maps.google.com/maps/api/js?libraries=geometry%2Cplaces%2Cweather%2Cpanoramio%2Cdrawing&language=en&ver=6.0.3
IP
File type ASCII text, with very long lines (2534)
Hash 5aed181bbf04fd468765fbab9f07ffdb
fafc8ccbef9bfcffd768a55edf8920ebf9fba015
1e93c92dc9f212c2a987ef53298aac67107e10976f2d52fbaa480e4c8ff62ecf
GET /maps/api/js?libraries=geometry%2Cplaces%2Cweather%2Cpanoramio%2Cdrawing&language=en&ver=6.0.3 HTTP/1.1
Host: maps.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 59227
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=14
date: Fri, 02 Dec 2022 16:34:15 GMT
expires: Fri, 02 Dec 2022 17:04:15 GMT
cache-control: public, max-age=1800
content-type: text/javascript; charset=UTF-8
age: 1421
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/plugins/master-popups/assets/public/css/font-awesome.css?ver=3.8.5
200 OK 39 kB URL HTTP/2 hostel-amalienau.ru/wp-content/plugins/master-popups/assets/public/css/font-awesome.css?ver=3.8.5
IP
ASN #39134 United Network LLC
File type Unicode text, UTF-8 text, with CRLF, LF line terminators
Hash a8b11b7cdf50a42858f7e4c15c8add70
caea77bdb93ea6c26138e05c64cf15e95d6ee142
ee2a67f581d95b0adca6ed5587e3e035559b1cec956c7f8456873f1df1150ff8
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/master-popups/assets/public/css/font-awesome.css?ver=3.8.5 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:55 GMT
content-type: text/css
content-length: 38984
last-modified: Mon, 05 Sep 2022 07:23:25 GMT
etag: "6315a3ed-9848"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/plugins/master-popups/assets/public/css/mpp-fontface-fontawesome.css?ver=3.8.5
200 OK 553 B URL HTTP/2 hostel-amalienau.ru/wp-content/plugins/master-popups/assets/public/css/mpp-fontface-fontawesome.css?ver=3.8.5
IP
ASN #39134 United Network LLC
File type ASCII text, with CRLF line terminators
Hash 3b9b7c2edb106b66b43ebbd4cea15698
ddcf815daca94192ee456c82f79bcdc1e783b198
c947c502ffe6b487369d8b013afed413e4c32290f2fdfc9ff54dd74b6523357d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/master-popups/assets/public/css/mpp-fontface-fontawesome.css?ver=3.8.5 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:55 GMT
content-type: text/css
content-length: 553
last-modified: Mon, 05 Sep 2022 07:23:25 GMT
etag: "6315a3ed-229"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/themes/hotelmaster/style.css?ver=6.0.3
200 OK 103 kB URL HTTP/2 hostel-amalienau.ru/wp-content/themes/hotelmaster/style.css?ver=6.0.3
IP
ASN #39134 United Network LLC
Size 103 kB (103066 bytes)
Hash 424ac44870f9e89bda4cbd2d28370114
0d1a9c85c7d78ddf29abc903bb4a50c25d997ca9
7cc7fef893c2f0c31beae56d94288e2b43a3321cb0d522c4b4802cdc5117f87b
GET /wp-content/themes/hotelmaster/style.css?ver=6.0.3 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:55 GMT
content-type: text/css
content-length: 103066
last-modified: Mon, 05 Sep 2022 07:23:25 GMT
etag: "6315a3ed-1929a"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 05917f7542a781275c12d43562be1507
1ea730e7e2b5a84fb0341ef9a64b141a4dd469b3
2f24492a077b583bd9dfe049c16c60b219d950712879f187ff2160214df9bd0e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 16:57:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/superfish/css/superfish.css?ver=6.0.3
200 OK 4.5 kB URL HTTP/2 hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/superfish/css/superfish.css?ver=6.0.3
IP
ASN #39134 United Network LLC
Hash 179e2b5d5b02bfce739929c806c211bb
1299154bc2bfae5b5eedb45ce85039f46d906e58
1a22ced0f900ea26adf607c2e9b0b564a5d29442a2d93fbb705bca6d3682dc06
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/hotelmaster/plugins/superfish/css/superfish.css?ver=6.0.3 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:55 GMT
content-type: text/css
content-length: 4548
last-modified: Mon, 05 Sep 2022 07:23:25 GMT
etag: "6315a3ed-11c4"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/dl-menu/component.css?ver=6.0.3
200 OK 16 kB URL HTTP/2 hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/dl-menu/component.css?ver=6.0.3
IP
ASN #39134 United Network LLC
Hash 3ae97c6f35704437ee0e91409f84a912
8a6318fa38d61f5f85dfeb9895a4062200f1d0dc
f6c8499d9641ec1c76a4d0cedbc648c62eccadb2db12fc2eb0a2659dce013f07
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/hotelmaster/plugins/dl-menu/component.css?ver=6.0.3 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: text/css
content-length: 15900
last-modified: Mon, 05 Sep 2022 07:23:25 GMT
etag: "6315a3ed-3e1c"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/font-awesome-new/css/font-awesome.min.css?ver=6.0.3
200 OK 29 kB URL HTTP/2 hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/font-awesome-new/css/font-awesome.min.css?ver=6.0.3
IP
ASN #39134 United Network LLC
File type ASCII text, with very long lines (28900)
Hash bb53ad7bffecc0014d64553e96501dce
7cd5a3384333f95c3d37d9488ad82cd6c4b03761
7bc15c522a05ce0e56b8cb3fff83bc6e770130afdd840d469869db69663d78fe
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/hotelmaster/plugins/font-awesome-new/css/font-awesome.min.css?ver=6.0.3 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: text/css
content-length: 29062
last-modified: Mon, 05 Sep 2022 07:23:25 GMT
etag: "6315a3ed-7186"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/fancybox/jquery.fancybox.css?ver=6.0.3
200 OK 5.6 kB URL HTTP/2 hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/fancybox/jquery.fancybox.css?ver=6.0.3
IP
ASN #39134 United Network LLC
Hash 6c815d8d7c9e3f930ebc181aaaef92de
a8b2e36b6748be2b38dc655d3e966a1fd2846d18
648916919fbbddb0c733182c03526ccb05e88ff0071b2cb32cfe36a66b9a6219
GET /wp-content/themes/hotelmaster/plugins/fancybox/jquery.fancybox.css?ver=6.0.3 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: text/css
content-length: 5633
last-modified: Mon, 05 Sep 2022 07:23:25 GMT
etag: "6315a3ed-1601"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/flexslider/flexslider.css?ver=6.0.3
200 OK 3.6 kB URL HTTP/2 hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/flexslider/flexslider.css?ver=6.0.3
IP
ASN #39134 United Network LLC
Hash ee57bc5fe086de568926e5fb460f4f7b
82b4773351829aba8a3a57e219edf27dc591a1f1
0e1bf5be381c013bbca269c903340e10d30aa76bab7a30b7f6afd10551fe6362
GET /wp-content/themes/hotelmaster/plugins/flexslider/flexslider.css?ver=6.0.3 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: text/css
content-length: 3632
last-modified: Mon, 05 Sep 2022 07:23:25 GMT
etag: "6315a3ed-e30"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a6ad57d839c4b452d7118cf2052f9d35
50afdbe46f04c7611c1a0111bce3a76775e50272
4c5c20573601bde0f5c3567e02d02d74ab22d4ffe12f632e1def1b87dc86ad3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 16:57:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hostel-amalienau.ru/wp-content/themes/hotelmaster/stylesheet/style-responsive.css?ver=6.0.3
200 OK 8.0 kB URL HTTP/2 hostel-amalienau.ru/wp-content/themes/hotelmaster/stylesheet/style-responsive.css?ver=6.0.3
IP
ASN #39134 United Network LLC
Hash 0c1e92cb1aa55fe0d1087440bfc3559a
4983d0b28baa5ec1f6752f332e41600221c86b56
a84553811056083cef52a812fbb1c2c29875df3faba74623fdf890ad001cfcce
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/hotelmaster/stylesheet/style-responsive.css?ver=6.0.3 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: text/css
content-length: 7974
last-modified: Mon, 05 Sep 2022 07:23:25 GMT
etag: "6315a3ed-1f26"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/themes/hotelmaster/stylesheet/style-custom.css?1663596489&ver=6.0.3
200 OK 50 kB URL HTTP/2 hostel-amalienau.ru/wp-content/themes/hotelmaster/stylesheet/style-custom.css?1663596489&ver=6.0.3
IP
ASN #39134 United Network LLC
File type Unicode text, UTF-8 text, with very long lines (2590)
Hash 1eecf515b0d435eab77d511bce51c39e
740ce08345147c7f22cdf6bf5d3708455843a5c6
6032e5294bb580609e2a4b08d55170ea3177959fbfd7e011bd5322721a342cc7
GET /wp-content/themes/hotelmaster/stylesheet/style-custom.css?1663596489&ver=6.0.3 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: text/css
content-length: 49697
last-modified: Mon, 19 Sep 2022 14:08:09 GMT
etag: "632877c9-c221"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/plugins/wp-google-map-plugin/assets/css/frontend.css?ver=6.0.3
200 OK 4.2 kB URL HTTP/2 hostel-amalienau.ru/wp-content/plugins/wp-google-map-plugin/assets/css/frontend.css?ver=6.0.3
IP
ASN #39134 United Network LLC
File type ASCII text, with CRLF line terminators
Hash bad8534a65980c82285b650f02403bd0
19327faa38b54034e825287e621af06a007413ed
297ebb311b8eeff8d8d1fa4bfe26a420ffdd7694b83119aef5ce799189fedc7d
GET /wp-content/plugins/wp-google-map-plugin/assets/css/frontend.css?ver=6.0.3 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: text/css
content-length: 4181
last-modified: Mon, 05 Sep 2022 07:47:41 GMT
etag: "6315a99d-1055"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/plugins/easy-fancybox/css/jquery.fancybox.min.css?ver=1.3.24
200 OK 4.1 kB URL HTTP/2 hostel-amalienau.ru/wp-content/plugins/easy-fancybox/css/jquery.fancybox.min.css?ver=1.3.24
IP
ASN #39134 United Network LLC
File type ASCII text, with very long lines (4058), with no line terminators
Hash bc588054d45f910494ceba6455ac77f2
59c47f34f56e8a5ff2434ff6e339a5b4e0badebd
f34bb7d9c8f2db0e78e5d7b226bc169182f8c22e7cd1a3e7b5767519b709c1bc
GET /wp-content/plugins/easy-fancybox/css/jquery.fancybox.min.css?ver=1.3.24 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: text/css
content-length: 4058
last-modified: Mon, 05 Sep 2022 07:47:26 GMT
etag: "6315a98e-fda"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
hostel-amalienau.ru/payment/usps/
404 Not Found 155 kB URL HTTP/2 hostel-amalienau.ru/payment/usps/
IP
ASN #39134 United Network LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (16043), with CRLF, LF line terminators
Size 155 kB (155246 bytes)
Hash e05122105c65f32a19bc47cb172a22b6
dac6427c6bb2e519abb5e20acd30f569d1bf2d48
fffadb405242bddfe44819f57f4b1d4197fb01120eb3a01fa07ff6d3c0d9a8a5
Analyzer Verdict Alert fortinet Phishing
GET /payment/usps/ HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 404 Not Found
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:55 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.32
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://hostel-amalienau.ru/wp-json/>; rel="https://api.w.org/"
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/uploads/masterslider/custom.css?ver=4.9
200 OK 21 kB URL HTTP/2 hostel-amalienau.ru/wp-content/uploads/masterslider/custom.css?ver=4.9
IP
ASN #39134 United Network LLC
File type ASCII text, with very long lines (13730)
Hash 2bab61184dc2cb4096f70ab5cfedcc5e
6fcf6d95004264445b37407fa9a7a2f86d48c126
39f78f02f92d52a98917a1de6ab97752e12293c3f897567e3687340ed6fa4ef6
GET /wp-content/uploads/masterslider/custom.css?ver=4.9 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: text/css
content-length: 20882
last-modified: Wed, 07 Sep 2022 15:25:46 GMT
etag: "6318b7fa-5192"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2964
Expires: Fri, 02 Dec 2022 17:47:20 GMT
Date: Fri, 02 Dec 2022 16:57:56 GMT
Connection: keep-alive
hostel-amalienau.ru/wp-content/plugins/enable-jquery-migrate-helper/js/jquery/jquery-1.12.4-wp.js?ver=1.12.4-wp
200 OK 97 kB URL HTTP/2 hostel-amalienau.ru/wp-content/plugins/enable-jquery-migrate-helper/js/jquery/jquery-1.12.4-wp.js?ver=1.12.4-wp
IP
ASN #39134 United Network LLC
File type ASCII text, with very long lines (31997)
Hash 455f4240b81915ea051b23d783291b6b
6750ac2287aa2f28c6125bec29af18b8a620d0c6
3bb2621a4c0c710f6e78404473aebff8e115a28f8d53f44339b867c63ad93b26
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/enable-jquery-migrate-helper/js/jquery/jquery-1.12.4-wp.js?ver=1.12.4-wp HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: application/javascript; charset=UTF-8
content-length: 96854
last-modified: Mon, 05 Sep 2022 11:50:40 GMT
etag: "6315e290-17a56"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/plugins/enable-jquery-migrate-helper/js/jquery-migrate/jquery-migrate-1.4.1-wp.js?ver=1.4.1-wp
200 OK 24 kB URL HTTP/2 hostel-amalienau.ru/wp-content/plugins/enable-jquery-migrate-helper/js/jquery-migrate/jquery-migrate-1.4.1-wp.js?ver=1.4.1-wp
IP
ASN #39134 United Network LLC
Hash 8bd074658806c4a7fe21e04cd60aef4f
fc41316c88cc93fca469e18a99614ad318a34ed4
708883a21754b3f7e1653d1d358663d65309e97d673a5934990c73f46df22d4c
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/enable-jquery-migrate-helper/js/jquery-migrate/jquery-migrate-1.4.1-wp.js?ver=1.4.1-wp HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: application/javascript; charset=UTF-8
content-length: 23673
last-modified: Mon, 05 Sep 2022 11:50:40 GMT
etag: "6315e290-5c79"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Merriweather%3A300%2C300italic%2Cregular%2Citalic%2C700%2C700italic%2C900%2C900italic&subset=latin%2Clatin-ext&ver=6.0.3
200 OK 1.3 kB URL HTTP/2 fonts.googleapis.com/css?family=Merriweather%3A300%2C300italic%2Cregular%2Citalic%2C700%2C700italic%2C900%2C900italic&subset=latin%2Clatin-ext&ver=6.0.3
IP
Hash cac757966aa662c4a45b24452e9f1eac
dbd56d9557d90e58f13772dfc53752c4807a88d3
0b6345bbd775a5e298a87c2768c163e2709d1395b1de90953dc997f816af0d84
GET /css?family=Merriweather%3A300%2C300italic%2Cregular%2Citalic%2C700%2C700italic%2C900%2C900italic&subset=latin%2Clatin-ext&ver=6.0.3 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 02 Dec 2022 16:57:56 GMT
date: Fri, 02 Dec 2022 16:57:56 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/plugins/wp-post-modal/public/js/wp-post-modal-public.js?ver=1.0.0
200 OK 13 kB URL HTTP/2 hostel-amalienau.ru/wp-content/plugins/wp-post-modal/public/js/wp-post-modal-public.js?ver=1.0.0
IP
ASN #39134 United Network LLC
File type ASCII text, with very long lines (325)
Hash d77585a261acf4ed45aa2c02d6076d58
42406a44dac6cf012f53db8a526466d35fcc8e36
a07282ce679949fd1161dcc5cbc0bebc4907c4bbe8275ec1a109309905e1f1be
GET /wp-content/plugins/wp-post-modal/public/js/wp-post-modal-public.js?ver=1.0.0 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: application/javascript; charset=UTF-8
content-length: 13170
last-modified: Mon, 05 Sep 2022 07:47:48 GMT
etag: "6315a9a4-3372"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/uploads/%D0%BB%D0%BE%D0%B3%D0%BE.png
200 OK 45 kB URL HTTP/2 hostel-amalienau.ru/wp-content/uploads/%D0%BB%D0%BE%D0%B3%D0%BE.png
IP
ASN #39134 United Network LLC
File type PNG image data, 364 x 115, 8-bit/color RGBA, non-interlaced\012- data
Hash 1af1d28fa308571300609cf3e08dffd0
e82cc83c0149d92d3b123de9a465f204b1eada5c
71aef725cc7f787d30a665cb064e39432be36c9064eda9fa4fb929ca27ec3225
GET /wp-content/uploads/%D0%BB%D0%BE%D0%B3%D0%BE.png HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: image/png
content-length: 45229
last-modified: Wed, 07 Sep 2022 06:29:28 GMT
etag: "63183a48-b0ad"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b986f9fcbeca91ed5c8d58fbfaf47d19
6e6c8bd2bce144cc4da1cd7be375b046b60dca79
07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6174
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZ0iyH2WoAMFQdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 06:00:48 GMT
age: 39428
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3
200 OK 9.7 kB URL HTTP/2 hostel-amalienau.ru/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3
IP
ASN #39134 United Network LLC
File type ASCII text, with very long lines (9680), with no line terminators
Hash 490c29d6776fc430c23403fd845b34b0
817129906b7fef1011895a76f047c7693a852e21
29e8de26576208c07ba0845f604e65c9273b93f9f4d1d66214eb4c586f9938c4
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: application/javascript; charset=UTF-8
content-length: 9680
last-modified: Mon, 05 Sep 2022 07:47:10 GMT
etag: "6315a97e-25d0"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb30f254-1327-487b-a297-00361bfd5c02.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb30f254-1327-487b-a297-00361bfd5c02.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cd78aa69439c995167f32b8a41a1f4f6
d07d6145182f312f3ed86ecf96b4ffa175416fa0
3b08cf3fad31ee0cf3ee25abc2484fb4283543865a42dfc568b14f9856fd3bb5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb30f254-1327-487b-a297-00361bfd5c02.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7722
x-amzn-requestid: 8d7c4800-6c06-43ed-afa1-94840d42f591
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGy2Gr1IAMFWeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e78-429ae3135d47e3b020c4c7a1;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:36:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Z8thSamrCRejcAcQEGAp4WpSMzMEvstuZtVpKAjiCH4dyJyf1yihBA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:50:11 GMT
age: 68865
etag: "d07d6145182f312f3ed86ecf96b4ffa175416fa0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2964
Expires: Fri, 02 Dec 2022 17:47:20 GMT
Date: Fri, 02 Dec 2022 16:57:56 GMT
Connection: keep-alive
hostel-amalienau.ru/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3
200 OK 12 kB URL HTTP/2 hostel-amalienau.ru/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3
IP
ASN #39134 United Network LLC
File type HTML document, ASCII text, with very long lines (12211), with no line terminators
Hash 3f3fc23f477a3849aa5677c585b2a2b4
ccf0865ebd37f76c450c7a377a86ff2448288db3
985fdd42398281348ca133a44750a56fe4909a806b9c075c9443a5d0bd6d2e51
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: application/javascript; charset=UTF-8
content-length: 12211
last-modified: Mon, 05 Sep 2022 07:47:10 GMT
etag: "6315a97e-2fb3"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/plugins/enable-jquery-migrate-helper/js/jquery-ui/core.min.js?ver=1.11.4-wp
200 OK 3.9 kB URL HTTP/2 hostel-amalienau.ru/wp-content/plugins/enable-jquery-migrate-helper/js/jquery-ui/core.min.js?ver=1.11.4-wp
IP
ASN #39134 United Network LLC
File type ASCII text, with very long lines (3706)
Hash 96ff65c925bbaf3e4e7891a7ca1f2b1f
b22797b271f3add237e38a48064acf3c685685a2
46e6f42a22054a793841935920cbbc723856e339fead50fa33c1f1bb3ec5a251
GET /wp-content/plugins/enable-jquery-migrate-helper/js/jquery-ui/core.min.js?ver=1.11.4-wp HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: application/javascript; charset=UTF-8
content-length: 3931
last-modified: Mon, 05 Sep 2022 11:50:40 GMT
etag: "6315e290-f5b"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2964
Expires: Fri, 02 Dec 2022 17:47:20 GMT
Date: Fri, 02 Dec 2022 16:57:56 GMT
Connection: keep-alive
hostel-amalienau.ru/wp-content/plugins/enable-jquery-migrate-helper/js/jquery-ui/datepicker.min.js?ver=1.11.4-wp
200 OK 36 kB URL HTTP/2 hostel-amalienau.ru/wp-content/plugins/enable-jquery-migrate-helper/js/jquery-ui/datepicker.min.js?ver=1.11.4-wp
IP
ASN #39134 United Network LLC
File type ASCII text, with very long lines (36155)
Hash 70b4930dc8e018f851f8530c330b1456
45e5b2927e248e37a7fa762bfaa2be33755e32a8
79d249bab4461fa4adc1fab32de3371bf64689f83b9d77929279fc7e4af7d929
GET /wp-content/plugins/enable-jquery-migrate-helper/js/jquery-ui/datepicker.min.js?ver=1.11.4-wp HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: application/javascript; charset=UTF-8
content-length: 36380
last-modified: Mon, 05 Sep 2022 11:50:40 GMT
etag: "6315e290-8e1c"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: ad2d9243-5e32-4faf-8ff3-b9abd3af1e89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cb1_hEJJIAMF4Vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387d063-596f5833509112ee6cbedf54;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:51:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PIC-TIeTFK_Y2AiqowYT4_8tMuzIKO23lAwx18fYepTf4PIWkmLqkQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 05:20:15 GMT
age: 41861
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/plugins/gdlr-hostel/gdlr-hotel.js?ver=1.0.0
200 OK 22 kB URL HTTP/2 hostel-amalienau.ru/wp-content/plugins/gdlr-hostel/gdlr-hotel.js?ver=1.0.0
IP
ASN #39134 United Network LLC
Hash 2204e43d653133c33804ee2dc022243d
47dbda76973c47e23fbe928bdb426006c9533700
259ff19ed2d2814419f29f6d2b800917e4ebf51a7e542c2cb303f8804acfcbce
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/gdlr-hostel/gdlr-hotel.js?ver=1.0.0 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: application/javascript; charset=UTF-8
content-length: 22297
last-modified: Mon, 05 Sep 2022 07:23:25 GMT
etag: "6315a3ed-5719"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F937deb9c-e12c-486f-bf82-4833aed00836.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F937deb9c-e12c-486f-bf82-4833aed00836.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d08081e2dd562ef50e4e98ebc0136698
b5118bca37feda2ada3001199dc1d80ac6d2aacc
5160333e0cfd338b3887972d0a5c0f817ef88b70b7eb78e4e25d153a85e3478f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F937deb9c-e12c-486f-bf82-4833aed00836.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11443
x-amzn-requestid: 21469d81-ee4b-47f3-8877-b6658b3ea8b8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfHDHE4zoAMFvfw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891ee0-5b39eddd703ea04e6a1355f8;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:38:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: nPuZoyOu_QAqbZvTUaNy1J3BOqnR2ttrIhv9BwRmWnKeba-e6MZWKA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:55:34 GMT
age: 68542
etag: "b5118bca37feda2ada3001199dc1d80ac6d2aacc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/plugins/master-popups/assets/public/js/master-popups.min.js?ver=3.8.5
200 OK 65 kB URL HTTP/2 hostel-amalienau.ru/wp-content/plugins/master-popups/assets/public/js/master-popups.min.js?ver=3.8.5
IP
ASN #39134 United Network LLC
File type Unicode text, UTF-8 text, with very long lines (31986)
Hash 404a663264cddb3e2941640bb4632f71
d3ee39c27fe1b7334f8bf902eb05f32a4d1bf8fd
24e168353bb7fe7eab5046198a6411965b1c35b921a4be1412411fa0c493f00e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/master-popups/assets/public/js/master-popups.min.js?ver=3.8.5 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: application/javascript; charset=UTF-8
content-length: 64963
last-modified: Mon, 05 Sep 2022 07:23:25 GMT
etag: "6315a3ed-fdc3"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb582f62c-d1ce-4054-b87e-36be40dadfa4.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb582f62c-d1ce-4054-b87e-36be40dadfa4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 156e9ea97b774cbd8361072e4041b6c8
fc71ae3cae92ed6011904bb2367f23bf4e69fab4
58d953c19ebbbdfc3965bbe3f52308d4702deaf4d0c029f4674bcb862da138af
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb582f62c-d1ce-4054-b87e-36be40dadfa4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8863
x-amzn-requestid: 798d014b-0f9c-4787-a676-8f5e8fae3d11
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdG14HBNIAMFdWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851bf-7549feac6d476a8512676412;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: r_0F64VpyutAOJ9IcTWrs3Sv--fhKiwKsV1FW0fOMSRt1QLLPxvJzg==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 10:51:17 GMT
age: 21999
etag: "fc71ae3cae92ed6011904bb2367f23bf4e69fab4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/plugins/master-popups/assets/public/js/master-popups-libs.min.js?ver=3.8.5
200 OK 12 kB URL HTTP/2 hostel-amalienau.ru/wp-content/plugins/master-popups/assets/public/js/master-popups-libs.min.js?ver=3.8.5
IP
ASN #39134 United Network LLC
File type ASCII text, with very long lines (11754), with no line terminators
Hash d554f24f69af8b9702c5476ca25970a0
d29deaf5146d2b19754e5ae0146340266e5945f2
c6032db65e05ab35fa32720f43a727354dc9b05daf7caa54f602f1214c24ac04
GET /wp-content/plugins/master-popups/assets/public/js/master-popups-libs.min.js?ver=3.8.5 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: application/javascript; charset=UTF-8
content-length: 11754
last-modified: Mon, 05 Sep 2022 07:23:25 GMT
etag: "6315a3ed-2dea"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/superfish/js/superfish.js?ver=1.0
200 OK 7.1 kB URL HTTP/2 hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/superfish/js/superfish.js?ver=1.0
IP
ASN #39134 United Network LLC
Hash 87f2cb581200d4eff34a902572696978
10c739a4b96d6b909bafd8b9ae22b5e163313752
59efaaf0426fa7701b45afa875bed86f118ea3605a2216f7c80137bccd379256
GET /wp-content/themes/hotelmaster/plugins/superfish/js/superfish.js?ver=1.0 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: application/javascript; charset=UTF-8
content-length: 7145
last-modified: Mon, 05 Sep 2022 07:23:25 GMT
etag: "6315a3ed-1be9"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/dl-menu/modernizr.custom.js?ver=1.0
200 OK 9.2 kB URL HTTP/2 hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/dl-menu/modernizr.custom.js?ver=1.0
IP
ASN #39134 United Network LLC
File type HTML document text\012- HTML document, ASCII text, with very long lines (8963)
Hash 3ad7bc528408307bbba6f4c01a1ca04d
def18f2d7d0282415f7af9637864038753bc14a3
5bed074367042548e1f1ce7d18ba273b797a7a142899b5fdafabf24aa17bb645
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/hotelmaster/plugins/dl-menu/modernizr.custom.js?ver=1.0 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: application/javascript; charset=UTF-8
content-length: 9174
last-modified: Mon, 05 Sep 2022 07:23:25 GMT
etag: "6315a3ed-23d6"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcca8556b-b044-489f-bc74-086aad62b062.webp
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcca8556b-b044-489f-bc74-086aad62b062.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d147ccb10bda82b153a596c3c967cd6a
ffd0763f997e71a8c1458523fc17cafe8849dfdf
1cfeb90a4ba027195f903d938d4a0aac418a1c2f0b52215ec023263f15905971
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcca8556b-b044-489f-bc74-086aad62b062.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7591
x-amzn-requestid: e179862e-f840-4e50-a9dc-09f325479b9a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGgMFRZIAMFl7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e01-676a1571459f2d83488f2765;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: oB5K_ZCWWwCltMx8FQSjDdXRMzSTSyRLSYSLAooQXuCrUxadLUiWkA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:48:51 GMT
age: 68945
etag: "ffd0763f997e71a8c1458523fc17cafe8849dfdf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/dl-menu/jquery.dlmenu.js?ver=1.0
200 OK 7.0 kB URL HTTP/2 hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/dl-menu/jquery.dlmenu.js?ver=1.0
IP
ASN #39134 United Network LLC
File type HTML document, ASCII text
Hash 631e96de0fc88f972f86c6ae225e6b22
9c48e0e93d7aae8dadec47a97e75a36451606609
9050447b6bc6fb9234a230d3b7c88d2e1aad7003fb4360f0d60c4794806519b3
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/hotelmaster/plugins/dl-menu/jquery.dlmenu.js?ver=1.0 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: application/javascript; charset=UTF-8
content-length: 7002
last-modified: Mon, 05 Sep 2022 07:23:25 GMT
etag: "6315a3ed-1b5a"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/jquery.easing.js?ver=1.0
200 OK 8.1 kB URL HTTP/2 hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/jquery.easing.js?ver=1.0
IP
ASN #39134 United Network LLC
Hash 6516449ed5089677ed3d7e2f11fc8942
82e40d060bc269a6dde20c3990ca5a4fea6ca754
0757f7ff6e5f6a581922a5e2d42c5e0cf7475d880885a9802e8bdd5e4188dd34
GET /wp-content/themes/hotelmaster/plugins/jquery.easing.js?ver=1.0 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: application/javascript; charset=UTF-8
content-length: 8097
last-modified: Mon, 05 Sep 2022 07:23:25 GMT
etag: "6315a3ed-1fa1"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/jquery.transit.min.js?ver=1.0
200 OK 7.5 kB URL HTTP/2 hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/jquery.transit.min.js?ver=1.0
IP
ASN #39134 United Network LLC
File type ASCII text, with very long lines (7281)
Hash d6464b7f9ac79e1e183e014803462d5b
f45dc7eccf5323268e969c3d0db092b16114323d
584aa695461f177cf311034f7e02cf280c16c36a7a299d58e22ef9c23a98867d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/hotelmaster/plugins/jquery.transit.min.js?ver=1.0 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: application/javascript; charset=UTF-8
content-length: 7507
last-modified: Mon, 05 Sep 2022 07:23:25 GMT
etag: "6315a3ed-1d53"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/fancybox/jquery.fancybox.pack.js?ver=1.0
200 OK 24 kB URL HTTP/2 hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/fancybox/jquery.fancybox.pack.js?ver=1.0
IP
ASN #39134 United Network LLC
File type ASCII text, with very long lines (645)
Hash 69a2d16103c8196211d772e7e6e3d438
28b7f71b775af547b0b475b8cda38a20f06561d0
fa1a9b6c00fd37d1fb6bdda7ae116d62efbbaf17fe5b0241db52aedcfefee68a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/hotelmaster/plugins/fancybox/jquery.fancybox.pack.js?ver=1.0 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: application/javascript; charset=UTF-8
content-length: 23997
last-modified: Mon, 05 Sep 2022 07:23:25 GMT
etag: "6315a3ed-5dbd"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/fancybox/helpers/jquery.fancybox-media.js?ver=1.0
200 OK 5.3 kB URL HTTP/2 hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/fancybox/helpers/jquery.fancybox-media.js?ver=1.0
IP
ASN #39134 United Network LLC
Hash c017067f48d97ec4a077ccdf056e6a2e
3bdf69ed2469e4fb57f5a95f17300eef891ff90d
e53e650a83dbce1ab8d93c365299f2e8f5070c414c9ea302f2422ca65f5fdab4
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/hotelmaster/plugins/fancybox/helpers/jquery.fancybox-media.js?ver=1.0 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: application/javascript; charset=UTF-8
content-length: 5305
last-modified: Mon, 05 Sep 2022 07:23:25 GMT
etag: "6315a3ed-14b9"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/fancybox/helpers/jquery.fancybox-thumbs.js?ver=1.0
200 OK 3.8 kB URL HTTP/2 hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/fancybox/helpers/jquery.fancybox-thumbs.js?ver=1.0
IP
ASN #39134 United Network LLC
Hash cf1fc1df534eede4cb460c5cbd71aba6
53e194f4a72e649c04fb586dd57762b8c022800b
0ba02b924fc5beeb370ed64d478401e94a513e970cac2c46266c708348135cf2
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/hotelmaster/plugins/fancybox/helpers/jquery.fancybox-thumbs.js?ver=1.0 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: application/javascript; charset=UTF-8
content-length: 3836
last-modified: Mon, 05 Sep 2022 07:23:25 GMT
etag: "6315a3ed-efc"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/flexslider/jquery.flexslider.js?ver=1.0
200 OK 52 kB URL HTTP/2 hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/flexslider/jquery.flexslider.js?ver=1.0
IP
ASN #39134 United Network LLC
Hash a36a6139458eaac21a3f784b93abbe01
b202d6a728897682a1666f46279d2d0a1692b519
1e9f0de26ead7af27674f564ba819415400dce8b34cede4a974dd2254727f7db
GET /wp-content/themes/hotelmaster/plugins/flexslider/jquery.flexslider.js?ver=1.0 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: application/javascript; charset=UTF-8
content-length: 52434
last-modified: Mon, 05 Sep 2022 07:23:25 GMT
etag: "6315a3ed-ccd2"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/themes/hotelmaster/javascript/gdlr-script.js?ver=1.0
200 OK 27 kB URL HTTP/2 hostel-amalienau.ru/wp-content/themes/hotelmaster/javascript/gdlr-script.js?ver=1.0
IP
ASN #39134 United Network LLC
Hash f62780021f8b271fbf1dd09f4e24cd0e
75b84bda2c8a17051f2799b95f9b7ac9692d6909
13f98423ff1c3cc2892ade81cf6f9310e771e49e508b3b9f0b972fdc27564fe1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/hotelmaster/javascript/gdlr-script.js?ver=1.0 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: application/javascript; charset=UTF-8
content-length: 26869
last-modified: Mon, 05 Sep 2022 07:23:25 GMT
etag: "6315a3ed-68f5"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 27002fde234e78c7bde340bc621e933f
1bdbe4f1861601b9300101a1e6b3c143ce077e03
48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 16:57:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hostel-amalienau.ru/wp-content/plugins/wp-google-map-plugin/assets/js/maps.js?ver=2.3.4
200 OK 56 kB URL HTTP/2 hostel-amalienau.ru/wp-content/plugins/wp-google-map-plugin/assets/js/maps.js?ver=2.3.4
IP
ASN #39134 United Network LLC
Hash 040c1f92c67c7ea4346b9c3ad901dfbc
152340f59d4359a5b8d43db8cafba6395b48264a
1b7fc39482d4eb18e8d9db6f596d4699c2f20d9191c727e9545137cd45e6b157
GET /wp-content/plugins/wp-google-map-plugin/assets/js/maps.js?ver=2.3.4 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: application/javascript; charset=UTF-8
content-length: 56069
last-modified: Mon, 05 Sep 2022 07:47:41 GMT
etag: "6315a99d-db05"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 27002fde234e78c7bde340bc621e933f
1bdbe4f1861601b9300101a1e6b3c143ce077e03
48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 16:57:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hostel-amalienau.ru/wp-content/uploads/%D1%82%D1%80%D0%B0%D0%BD%D1%81%D0%BF%D0%B0%D1%80%D0%B0%D0%BD%D1%82.jpg
200 OK 274 kB URL HTTP/2 hostel-amalienau.ru/wp-content/uploads/%D1%82%D1%80%D0%B0%D0%BD%D1%81%D0%BF%D0%B0%D1%80%D0%B0%D0%BD%D1%82.jpg
IP
ASN #39134 United Network LLC
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=13, manufacturer=NIKON CORPORATION, model=NIKON D7000, orientation=upper-left, xresolution=200, yresolution=208, resolutionunit=2, software=ACDSee Ultimate 2019, datetime=2022:09:07 16:31:35], baseline, precision 8, 1600x400, components 3\012- data
Size 274 kB (274465 bytes)
Hash 962d237c52adba946fe1d56a2d6b0763
555b20350d20e5b405644265b0a77fd477e9951c
80ce7a447a66d494f9d7a244e1cfcffc2a623ad2ad6826381c10fd697c3d435b
GET /wp-content/uploads/%D1%82%D1%80%D0%B0%D0%BD%D1%81%D0%BF%D0%B0%D1%80%D0%B0%D0%BD%D1%82.jpg HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/wp-content/themes/hotelmaster/stylesheet/style-custom.css?1663596489&ver=6.0.3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: image/jpeg
content-length: 274465
last-modified: Wed, 07 Sep 2022 12:31:44 GMT
etag: "63188f30-43021"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/themes/hotelmaster/images/light/icon-search.png
200 OK 3.0 kB URL HTTP/2 hostel-amalienau.ru/wp-content/themes/hotelmaster/images/light/icon-search.png
IP
ASN #39134 United Network LLC
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash df3501266cbe55b596835326b06e217f
7ea0e602dce6697d2b042a734e8849c91249e27a
807b89921b6f417f3a4416bf7edcd23225b001a4ffc1cad972741c3b280ec1a6
GET /wp-content/themes/hotelmaster/images/light/icon-search.png HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/wp-content/themes/hotelmaster/style.css?ver=6.0.3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: image/png
content-length: 3023
last-modified: Mon, 05 Sep 2022 07:23:25 GMT
etag: "6315a3ed-bcf"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 27002fde234e78c7bde340bc621e933f
1bdbe4f1861601b9300101a1e6b3c143ce077e03
48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 16:57:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 27002fde234e78c7bde340bc621e933f
1bdbe4f1861601b9300101a1e6b3c143ce077e03
48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 16:57:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/font-awesome-new/fonts/fontawesome-webfont.woff2?v=4.6.3
200 OK 72 kB URL HTTP/2 hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/font-awesome-new/fonts/fontawesome-webfont.woff2?v=4.6.3
IP
ASN #39134 United Network LLC
File type Web Open Font Format (Version 2), TrueType, length 71896, version 4.393\012- data
Hash e6cf7c6ec7c2d6f670ae9d762604cb0b
97e438cc545714309882fbceadbf344fcaddcec5
7dacf83f51179de8d7980a513e67ab3a08f2c6272bb5946df8fd77c0d1763b73
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/hotelmaster/plugins/font-awesome-new/fonts/fontawesome-webfont.woff2?v=4.6.3 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://hostel-amalienau.ru/wp-content/themes/hotelmaster/plugins/font-awesome-new/css/font-awesome.min.css?ver=6.0.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-length: 71896
last-modified: Mon, 05 Sep 2022 07:23:25 GMT
etag: "118d8-5e7e8f49a13db"
accept-ranges: bytes
strict-transport-security: max-age=31536000;
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://hostel-amalienau.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 18:52:41 GMT
expires: Tue, 28 Nov 2023 18:52:41 GMT
cache-control: public, max-age=31536000
age: 338715
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 27002fde234e78c7bde340bc621e933f
1bdbe4f1861601b9300101a1e6b3c143ce077e03
48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 16:57:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2
200 OK 26 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 26240, version 1.0\012- data
Hash 4a90976686fcbd8296c7d7fccc04c273
bcb82e93ac7ad1fa2af6a37009a200f79f4cb4e5
59bd288e64c57e034672999e33ebda6eb5ad1575945eb563dbfb5b44f226e1e1
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://hostel-amalienau.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 26240
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 18:56:02 GMT
expires: Tue, 28 Nov 2023 18:56:02 GMT
cache-control: public, max-age=31536000
age: 338514
last-modified: Mon, 15 Aug 2022 18:14:37 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-fCZM.woff2
200 OK 20 kB URL HTTP/2 fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-fCZM.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 20028, version 1.0\012- data
Hash 2bfde17b9a1384ce64af78db1b87a82f
8effd23e482511e249c3f8e91cdc503729b93598
5c2d662e92bcbf1a5970b97040f901031295e79a96314db8302f549003022087
GET /s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-fCZM.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://hostel-amalienau.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 17:12:16 GMT
expires: Wed, 29 Nov 2023 17:12:16 GMT
cache-control: public, max-age=31536000
age: 258340
last-modified: Tue, 26 Apr 2022 16:41:08 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR71Wvf4jvw.woff2
200 OK 20 kB URL HTTP/2 fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR71Wvf4jvw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 19900, version 1.0\012- data
Hash bac4e4fc860f0a92beb62a776048f7c0
26eb7089b1050997d371be35946a12ae0cc7218f
3642df12f0d930d5846a96652080908eb2f383b602a95cf80d1e6227e66e1c46
GET /s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR71Wvf4jvw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://hostel-amalienau.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19900
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 18:27:23 GMT
expires: Wed, 29 Nov 2023 18:27:23 GMT
cache-control: public, max-age=31536000
age: 253833
last-modified: Tue, 26 Apr 2022 15:46:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/plugins/master-popups/assets/images/covid-19.png
200 OK 20 kB URL HTTP/2 hostel-amalienau.ru/wp-content/plugins/master-popups/assets/images/covid-19.png
IP
ASN #39134 United Network LLC
File type Web Open Font Format (Version 2), TrueType, length 19740, version 1.0\012- data
Hash 101cf2a65d64322878605fa8472bb025
6dffc15e38c321e4bb567b4bd8107a2e8d97c61d
273c8613cdd2852dd5318f224d804ae6d2fc717c48d3f1dab587b6d396fb4fc8
GET /wp-content/plugins/master-popups/assets/images/covid-19.png HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: image/png
content-length: 188277
last-modified: Mon, 05 Sep 2022 07:23:25 GMT
etag: "6315a3ed-2df75"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-eCZMZ-Y.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-eCZMZ-Y.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15240, version 1.0\012- data
Hash cf40598b1eb2a76672c2e704901b59d6
39211ffcdc881ee6bc0f15df4334da7667f5a35c
c46bbc4f04b1b0c5db8e7234740d474affcff42acd092f58b9e99ea863d36326
GET /s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-eCZMZ-Y.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://hostel-amalienau.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15240
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 21:31:18 GMT
expires: Wed, 29 Nov 2023 21:31:18 GMT
cache-control: public, max-age=31536000
age: 242798
last-modified: Tue, 26 Apr 2022 15:45:28 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 27002fde234e78c7bde340bc621e933f
1bdbe4f1861601b9300101a1e6b3c143ce077e03
48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 16:57:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hostel-amalienau.ru/wp-content/uploads/cropped-%D0%BB%D0%BE%D0%B3%D0%BE-192x192.png
200 OK 34 kB URL HTTP/2 hostel-amalienau.ru/wp-content/uploads/cropped-%D0%BB%D0%BE%D0%B3%D0%BE-192x192.png
IP
ASN #39134 United Network LLC
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash cdaf11c73ad78022eb08aea22e253446
1f09c454a5063e4ff4bf704cf5a16b46b91a95f2
2b09cef560636444272f9ccc2bcc0cc67d2ddd20d24933f285edfeebaebaf6bd
GET /wp-content/uploads/cropped-%D0%BB%D0%BE%D0%B3%D0%BE-192x192.png HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: image/png
content-length: 34200
last-modified: Wed, 07 Sep 2022 07:09:21 GMT
etag: "631843a1-8598"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-content/uploads/cropped-%D0%BB%D0%BE%D0%B3%D0%BE-32x32.png
200 OK 1.8 kB URL HTTP/2 hostel-amalienau.ru/wp-content/uploads/cropped-%D0%BB%D0%BE%D0%B3%D0%BE-32x32.png
IP
ASN #39134 United Network LLC
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 2e18b89efa2aca4e2aedfe647b4ce5ea
a8902050684b888f51292f5d3b015604962729aa
89747ff7ec8d291e654a36b737af405e1f5a7b8dad1922eb380455e22bbdfd07
GET /wp-content/uploads/cropped-%D0%BB%D0%BE%D0%B3%D0%BE-32x32.png HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: image/png
content-length: 1803
last-modified: Wed, 07 Sep 2022 07:09:21 GMT
etag: "631843a1-70b"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
200 OK 23 B URL HTTP/2 maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
IP
File type JSON data\012- , ASCII text
Hash e3981ca10169a319d5aa062bf43a5fa1
2c6ed584767b65688ce99b1ebe1a3b7448a67421
8b0b8749aba12de93f3cf5d86f9fac9d6de7cac400a17473718f182a34ebb7e9
GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hostel-amalienau.ru
Connection: keep-alive
Referer: https://hostel-amalienau.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 02 Dec 2022 16:57:56 GMT
server: scaffolding on HTTPServer2
cache-control: private
content-length: 23
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://hostel-amalienau.ru
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6edb00ee-3888-4974-ae1a-52ef18e62d0d.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6edb00ee-3888-4974-ae1a-52ef18e62d0d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1c80b8025242ddfcc816ec612456b99e
aa944d10fe4a44b790b01ef62edc0f85a6d558e3
a9f060bc15738a3fe257e0c81a29e4611a89c273bcbb2765ce856d4e854a5f1f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6edb00ee-3888-4974-ae1a-52ef18e62d0d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 11402
x-amzn-requestid: 20c2c359-1e43-40c0-885d-1c90e76ea12b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGzJHu-IAMFbYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e7a-1d89722e767daa014b174a39;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:36:58 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: OJBnbjJB_kvPuJcePGnno3zI0CTWAzV-Osb2L1hPZZhlNYhFHWmLsA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:51:33 GMT
age: 68790
etag: "aa944d10fe4a44b790b01ef62edc0f85a6d558e3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
hostel-amalienau.ru/payment/usps/wp-content/uploads/%D0%BB%D0%BE%D0%B3%D0%BE.png
404 Not Found 0 B URL HTTP/2 hostel-amalienau.ru/payment/usps/wp-content/uploads/%D0%BB%D0%BE%D0%B3%D0%BE.png
IP
ASN #39134 United Network LLC
GET /payment/usps/wp-content/uploads/%D0%BB%D0%BE%D0%B3%D0%BE.png HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:57 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.32
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://hostel-amalienau.ru/wp-json/>; rel="https://api.w.org/"
X-Firefox-Spdy: h2
hostel-amalienau.ru/wp-includes/js/hoverIntent.min.js?ver=1.10.2
200 OK 0 B URL HTTP/2 hostel-amalienau.ru/wp-includes/js/hoverIntent.min.js?ver=1.10.2
IP
ASN #39134 United Network LLC
GET /wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.1
Host: hostel-amalienau.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/payment/usps/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.2
date: Fri, 02 Dec 2022 16:57:56 GMT
content-type: application/javascript; charset=UTF-8
content-length: 1499
last-modified: Mon, 05 Sep 2022 07:33:07 GMT
etag: "6315a633-5db"
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans%3A300%2C300italic%2Cregular%2Citalic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic&subset=greek%2Ccyrillic-ext%2Ccyrillic%2Clatin%2Clatin-ext%2Cvietnamese%2Cgreek-ext&ver=6.0.3
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans%3A300%2C300italic%2Cregular%2Citalic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic&subset=greek%2Ccyrillic-ext%2Ccyrillic%2Clatin%2Clatin-ext%2Cvietnamese%2Cgreek-ext&ver=6.0.3
IP
GET /css?family=Open+Sans%3A300%2C300italic%2Cregular%2Citalic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic&subset=greek%2Ccyrillic-ext%2Ccyrillic%2Clatin%2Clatin-ext%2Cvietnamese%2Cgreek-ext&ver=6.0.3 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 02 Dec 2022 16:57:56 GMT
date: Fri, 02 Dec 2022 16:57:56 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:400&subset=latin,latin-ext,greek,greek-ext,cyrillic,cyrillic-ext,vietnamese
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:400&subset=latin,latin-ext,greek,greek-ext,cyrillic,cyrillic-ext,vietnamese
IP
GET /css?family=Roboto:400&subset=latin,latin-ext,greek,greek-ext,cyrillic,cyrillic-ext,vietnamese HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hostel-amalienau.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 02 Dec 2022 16:57:56 GMT
date: Fri, 02 Dec 2022 16:57:56 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
88.212.207.125
35.163.114.208
93.184.220.29
23.36.76.226
0.0.0.0