| meragamou.com/ |  72.10.36.24 | 301 Moved Permanently | 162 B |
IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET / HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 12 Nov 2022 01:18:27 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://meragamou.com/
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash3d0727e32cd103ddd4b73f28c81758aa 197a7bf43d63723fc532c23c6dced68d5cc36652 d3f75d03561d6a47d19370292e821a86e58381466f0c69386a21175de55882ff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D3F75D03561D6A47D19370292E821A86E58381466F0C69386A21175DE55882FF"
Last-Modified: Fri, 11 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7845
Expires: Sat, 12 Nov 2022 03:29:12 GMT
Date: Sat, 12 Nov 2022 01:18:27 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash4edf853c470fcec0ab277c78527f3c2d de93530ce15337e671c488d9fe05e7091d4956f0 b9d7976b398b1243ff8a571ddd3975d3a1317d69101061bdb1a755b3b56620e6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2587
Cache-Control: max-age=122167
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 01:18:27 GMT
Etag: "636e247f-1d7"
Expires: Sun, 13 Nov 2022 11:14:34 GMT
Last-Modified: Fri, 11 Nov 2022 10:31:27 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hasha8391107bfc5e4673e8a706f90f63768 5295ed0b1cb8bad4d3e851049acc7f0270937d12 ed5c27510100ffc4481be474ebcb020d147c645beb110604d5284eeeb8b97c02
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "ED5C27510100FFC4481BE474EBCB020D147C645BEB110604D5284EEEB8B97C02"
Last-Modified: Fri, 11 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6929
Expires: Sat, 12 Nov 2022 03:13:56 GMT
Date: Sat, 12 Nov 2022 01:18:27 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ | 34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash4736bac84ca28f2b1e961159fb4ea098 1319612979f53896fcfeacd4215c2715d4951e4c 5e81213e111ddf68c7f884f72b4e06fc4dc95eb902c3cf0762236b2418840dba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 12 Nov 2022 00:44:06 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2061
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash67d5a988edcda47bc3b3b3f65d32b4b6 d4f0e0da8b3690cc7da925026d3414b68c7d954f 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: BNheqmMNNy6yyfb9nnoeCCgM8AG39NhudphaeUlTDeOi4DhYqedW/T9E1enM389vjVEHj0ooVQo=
x-amz-request-id: NHFPJWH0SZVHNAJN
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 12 Nov 2022 01:12:47 GMT
age: 340
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:27 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hasha110bb190bb51d127aa1570f99ae8ba5 97e6534bd78fec10e43b5c77a5735b8a6dd7adbd dac18fe5230a84dcced38e2ae18e7ca74090c3449e3a9a41482cedbc06619bda
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DAC18FE5230A84DCCED38E2AE18E7CA74090C3449E3A9A41482CEDBC06619BDA"
Last-Modified: Sat, 12 Nov 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21577
Expires: Sat, 12 Nov 2022 07:18:05 GMT
Date: Sat, 12 Nov 2022 01:18:28 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 34.102.187.140 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Cache-Control, Pragma, Last-Modified, ETag, Alert, Backoff, Content-Type, Retry-After, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 12 Nov 2022 00:24:58 GMT
cache-control: public,max-age=3600
age: 3210
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashf7ff606fbc8634c858bbc04b69f55cf6 2441de2cba649239efd0dae7a878d7ef2245c0b4 95154e0dbb7e827b8f893cc141f986c29634ead618256470d753429aa65a0548
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 914
Cache-Control: max-age=115418
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 01:18:28 GMT
Etag: "636e10ac-1d7"
Expires: Sun, 13 Nov 2022 09:22:06 GMT
Last-Modified: Fri, 11 Nov 2022 09:06:52 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 35.161.148.163 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP35.161.148.163:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: K2OU3jP9qwefvy+5miDtPA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: AOFbquXI9fnp/L4LOKQFwDYxiFc=
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash06d7d61a20669050493c3fd5d2b9798e 5d2d51f23582ef785072cdd0ca9ccf859b563b2d 653662665ea3298734fa313f693216a3932a64ac2903986d7415f60f97bcf27f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 01:18:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hasha7d7a5379a732fc5eadab78de886cc31 6df8c63644e97bf57262415f24e270c718e1758b c355159cc937a19485f62cc446530f319749237e147adbb2c5784d1d2c20ed64
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 01:18:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash06d7d61a20669050493c3fd5d2b9798e 5d2d51f23582ef785072cdd0ca9ccf859b563b2d 653662665ea3298734fa313f693216a3932a64ac2903986d7415f60f97bcf27f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 01:18:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ajax.googleapis.com/ajax/libs/jqueryui/1.11.4/themes/smoothness/jquery-ui.css | 216.58.211.10 | 200 OK | 8.1 kB |
URL HTTP/2ajax.googleapis.com/ajax/libs/jqueryui/1.11.4/themes/smoothness/jquery-ui.css IP216.58.211.10:0
File typeASCII text, with very long lines (2363) Hashf82cf2fcc0d83528c760595267f4b13c 6ceabb58082f73c764dc15636f38de0e3ad31935 90a65ba22d8ab66098ba901006963f75f54be465bd2df2dd11c434e483fd3a75
GET /ajax/libs/jqueryui/1.11.4/themes/smoothness/jquery-ui.css HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 8060
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 07 Nov 2022 05:29:26 GMT
expires: Tue, 07 Nov 2023 05:29:26 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 416942
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/css; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api.js | 142.250.74.132 | 200 OK | 555 B |
URL HTTP/2www.google.com/recaptcha/api.js IP142.250.74.132:0
File typeASCII text, with very long lines (850), with no line terminators Hash943813f35a1dbbd894b0d7374f237a45 c0792c161486e285df11f930aab2cea60f0ba0bc 980e6e154794480b95f8c394ef9f38cde239e4bcee366e3b12fb693318f3dd1e
GET /recaptcha/api.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Sat, 12 Nov 2022 01:18:28 GMT
date: Sat, 12 Nov 2022 01:18:28 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 555
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jqueryui/1.11.4/jquery-ui.min.js | 216.58.211.10 | 200 OK | 64 kB |
URL HTTP/2ajax.googleapis.com/ajax/libs/jqueryui/1.11.4/jquery-ui.min.js IP216.58.211.10:0
File typeASCII text, with very long lines (32035) Hashd42e0db378c3b7ae639f482be65ca7e0 febb6ba0cb20fbf345e42afbb194f557de4fdb3b 9a978650fc7920f6ce184b5febda53dfadb49086ee56326e0f7ca999b7e802ef
GET /ajax/libs/jqueryui/1.11.4/jquery-ui.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 64481
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 09 Nov 2022 03:56:03 GMT
expires: Thu, 09 Nov 2023 03:56:03 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 249745
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash06d7d61a20669050493c3fd5d2b9798e 5d2d51f23582ef785072cdd0ca9ccf859b563b2d 653662665ea3298734fa313f693216a3932a64ac2903986d7415f60f97bcf27f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 01:18:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash05bb9af901ca5b651e88fcbe236711f5 18412da7fc2d868fc74bc3e7c44b4add4bbbdef9 9b87e90e4f5356da47fd562f7d06c8fbdef90d011e8c20e5687afbeaf6e7d29b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 01:18:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| meragamou.com/wp-content/uploads/2016/06/wdmockup.jpg | 72.10.36.24 | 301 Moved Permanently | 162 B |
URL HTTP/1.1meragamou.com/wp-content/uploads/2016/06/wdmockup.jpg IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /wp-content/uploads/2016/06/wdmockup.jpg HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 12 Nov 2022 01:18:28 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://meragamou.com/wp-content/uploads/2016/06/wdmockup.jpg
|
|
| meragamou.com/assets/images/logo.png | 72.10.36.24 | 200 OK | 4.5 kB |
URL HTTP/2meragamou.com/assets/images/logo.png IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
File typePNG image data, 277 x 86, 8-bit/color RGBA, non-interlaced\012- data Hash79463afd17e70c72d3ec5ca4a81b009c 6068f800d4ed889b550b6c61f918bee831525ed4 1ac8a9e6643039b48c3f64d29eefcab2ad40f5506cc6835f59e0ae6865ab5f50
GET /assets/images/logo.png HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: image/png
content-length: 4465
last-modified: Mon, 06 Jun 2016 08:18:27 GMT
etag: "575531d3-1171"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-includes/js/jquery/ui/progressbar.min.js?ver=1.11.4 | 72.10.36.24 | 200 OK | 1.3 kB |
URL HTTP/2meragamou.com/wp-includes/js/jquery/ui/progressbar.min.js?ver=1.11.4 IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
File typeASCII text, with very long lines (2241) Hash9c231887316d2ec6f276d8f50b7b5d3c daf5d98ae3a4febfed51ee9c5f386ac41185ba94 91b32ac32c81380f97a508308cdfe9b186d8437a368df406c1ba04993c9cc0c0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/jquery/ui/progressbar.min.js?ver=1.11.4 HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: application/javascript
last-modified: Sat, 21 Dec 2019 08:58:50 GMT
etag: W/"5dfddeca-9a4"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-includes/js/jquery/ui/sortable.min.js?ver=1.11.4 | 72.10.36.24 | 200 OK | 6.6 kB |
URL HTTP/2meragamou.com/wp-includes/js/jquery/ui/sortable.min.js?ver=1.11.4 IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
File typeHTML document, ASCII text, with very long lines (24607) Hash13eb835be0fb752f354fdeff270d485d 8322cd93d63074bfc9821344f6fcfe85a354a958 5a42caa7f25deb50bf1bf33247d9029436817172b85430fce41f37e7c25b150a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/jquery/ui/sortable.min.js?ver=1.11.4 HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: application/javascript
last-modified: Thu, 15 Apr 2021 15:36:28 GMT
etag: W/"60785d7c-60fc"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-content/themes/weddingday/js/skip-link-focus-fix.js?ver=20151215 | 72.10.36.24 | 200 OK | 853 B |
URL HTTP/2meragamou.com/wp-content/themes/weddingday/js/skip-link-focus-fix.js?ver=20151215 IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
Hash65b016c87c261bca122d22f98ef07549 77e6af1168d17dfe7c04487145647c3977ae2f1c f05a59b72819d86c23e9a0378c5ba691113ee9e2fa00a3197e8d77211db6feba
GET /wp-content/themes/weddingday/js/skip-link-focus-fix.js?ver=20151215 HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: application/javascript
x-accel-version: 0.01
last-modified: Wed, 25 May 2016 08:12:36 GMT
etag: W/"370-533a63c7d8500"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-includes/js/wp-embed.min.js?ver=5.3.14 | 72.10.36.24 | 200 OK | 1.1 kB |
URL HTTP/2meragamou.com/wp-includes/js/wp-embed.min.js?ver=5.3.14 IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
File typeASCII text, with very long lines (1391), with no line terminators Hash10451c98138e1991bf2c88dd6784dee8 ff8762c1627054c6a51aa3b631b2c8b6ee271059 67f216e87d21cbe5ba4d7650162be65736b8b99cbdabe76982884b7ca65f3831
GET /wp-includes/js/wp-embed.min.js?ver=5.3.14 HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: application/javascript
last-modified: Thu, 15 Apr 2021 15:36:28 GMT
etag: W/"60785d7c-56f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash50b7ad7d0cb47a73140b0c340b5b72b4 5b7fd8d7d4a5fb963c33d52675ef3be152f4e7e3 494e1c3410c113871960bd9b35b3d89c0d404ecb836c03669a8522d159391cd9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 01:18:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| meragamou.com/assets/css/owl.carousel.css | 72.10.36.24 | 200 OK | 17 kB |
URL HTTP/2meragamou.com/assets/css/owl.carousel.css IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
Hash5a5bd6d3eddabad68937dbfb2b37eaab c5da998914995e7ccb3abe488baaf7fb4a54acf8 d758ccea3913d43a652a45f7d959ea01a880c3a50981c180724a5f6b86e4cab4
GET /assets/css/owl.carousel.css HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/assets/css/style.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: text/css
last-modified: Tue, 31 May 2016 12:26:02 GMT
etag: W/"574d82da-ea7"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/assets/js/app.js | 72.10.36.24 | 200 OK | 36 kB |
URL HTTP/2meragamou.com/assets/js/app.js IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
File typeASCII text, with very long lines (32018) Hash34c37c210ac33647a60e1a6199c6f05f 7100f2ee496607e60d1f437caf30770a4ce81178 7060538ccbed23a20245d8b914f72f257c8895a9a978b93e621d8de98055f7f0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /assets/js/app.js HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: application/javascript
last-modified: Tue, 21 Jun 2016 07:16:55 GMT
etag: W/"5768e9e7-12c2c"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Playfair+Display:400,700|Roboto:400,100,300,700,500&subset=latin,greek | 142.250.74.10 | 200 OK | 37 kB |
URL HTTP/2fonts.googleapis.com/css?family=Playfair+Display:400,700|Roboto:400,100,300,700,500&subset=latin,greek IP142.250.74.10:0
Hashb05bc2a5a85a4a03c28d99c1831f89ac 060d944f2974abdfa81f4747b99c0feeeaa55d92 fa68b8c983d36d53d66fcf70e857057095fe3afd510147b9a7f3f67ee6931548
GET /css?family=Playfair+Display:400,700|Roboto:400,100,300,700,500&subset=latin,greek HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 12 Nov 2022 01:18:28 GMT
date: Sat, 12 Nov 2022 01:18:28 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| meragamou.com/assets/css/seedsocial.css | 72.10.36.24 | 200 OK | 7.9 kB |
URL HTTP/2meragamou.com/assets/css/seedsocial.css IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
Hashc36cc8dfdd58b9d3d33352e9caf78ed0 1a5ea473821c676700c249b790d75bb27b4c37f5 b8101cfa5e0cbcf26341b9b715da64c588dda46ea0103af111a245db1f3aa04c
GET /assets/css/seedsocial.css HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/assets/css/style.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: text/css
last-modified: Thu, 09 Jun 2016 09:11:42 GMT
etag: W/"575932ce-c0a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2 | 216.58.207.195 | 200 OK | 6.9 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 6936, version 1.0\012- data Hash3f8b2aa43c439ca2c8930c198320c231 e616fd3ee33ea9971dd71c7d667c5b4e146e8e95 1c9cc76fd52238330f0aabac35acd2cac0f04b7890862e61e013ebbb8513fb5b
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://meragamou.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 6936
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 09 Nov 2022 21:02:58 GMT
expires: Thu, 09 Nov 2023 21:02:58 GMT
cache-control: public, max-age=31536000
age: 188131
last-modified: Wed, 11 May 2022 19:25:03 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash50b7ad7d0cb47a73140b0c340b5b72b4 5b7fd8d7d4a5fb963c33d52675ef3be152f4e7e3 494e1c3410c113871960bd9b35b3d89c0d404ecb836c03669a8522d159391cd9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 01:18:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashd84a911b820c140cf4e3da2af665b63c fbee3b2193231404844c0ecb6e8f72d02d30e997 7f0381e9de205bbe3e0cab3e7e40afced0d58bb25b8df4715d1406c702624d14
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4845
Cache-Control: max-age=98811
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 01:18:29 GMT
Etag: "636dc073-1d7"
Expires: Sun, 13 Nov 2022 04:45:20 GMT
Last-Modified: Fri, 11 Nov 2022 03:24:35 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
|
|
| graph.facebook.com/?fields=og_object{engagement}&id=https%3A%2F%2Fmeragamou.com%2F |  31.13.72.8 | 400 Bad Request | 148 B |
URL HTTP/2graph.facebook.com/?fields=og_object{engagement}&id=https%3A%2F%2Fmeragamou.com%2F IP31.13.72.8:0
File typeJSON data\012- , ASCII text Hasha6bcb072b6e3de6c86e7dd51ad179b90 dde96cd92af06be1b1df827c04f2df3596b9c4fb 36f35197145a0e767b1e4b93b7c3732742e25ab79a4fcddb89f5854503825781
GET /?fields=og_object{engagement}&id=https%3A%2F%2Fmeragamou.com%2F HTTP/1.1
Host: graph.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://meragamou.com
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 400 Bad Request
content-encoding: br
vary: Origin, Accept-Encoding
x-fb-rlafr: 0
content-type: application/json
www-authenticate: OAuth "Facebook Platform" "invalid_request" "(#2) Service temporarily unavailable"
access-control-allow-origin: *
facebook-api-version: v9.0
strict-transport-security: max-age=15552000; preload
pragma: no-cache
cache-control: no-store
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-fb-request-id: AHhDNxDqpfULTcJtHxiJ7KW
x-fb-trace-id: G0Clt3rdtyl
x-fb-rev: 1006594357
x-fb-debug: WyyqwAyvYPhSp2E7JBchhvtgZTCjQShJznTRcZ69nHlZKrt7eLV9iBOtqjz6mtSluxyRHHknllz1RHc2BCApdg==
content-length: 148
date: Sat, 12 Nov 2022 01:18:29 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashd84a911b820c140cf4e3da2af665b63c fbee3b2193231404844c0ecb6e8f72d02d30e997 7f0381e9de205bbe3e0cab3e7e40afced0d58bb25b8df4715d1406c702624d14
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4845
Cache-Control: max-age=98811
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 01:18:29 GMT
Etag: "636dc073-1d7"
Expires: Sun, 13 Nov 2022 04:45:20 GMT
Last-Modified: Fri, 11 Nov 2022 03:24:35 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
|
|
| meragamou.com/wp-content/plugins/buddypress/bp-templates/bp-legacy/js/buddypress.min.js?ver=5.1.0 | 72.10.36.24 | 200 OK | 8.3 kB |
URL HTTP/2meragamou.com/wp-content/plugins/buddypress/bp-templates/bp-legacy/js/buddypress.min.js?ver=5.1.0 IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
File typeASCII text, with very long lines (33707), with no line terminators Hashbf55efdebb02075e793f41363479bfb0 0128082724cca6fdbe7f8665cd7ff92064c1d3a2 d9da8505885f26546f1d32e775fd4c3e6de01e0fd1ceacd3ae37634b68af041d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/buddypress/bp-templates/bp-legacy/js/buddypress.min.js?ver=5.1.0 HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: application/javascript
last-modified: Sat, 21 Dec 2019 09:17:25 GMT
etag: W/"5dfde325-83ab"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-content/plugins/advanced-advertising-system/js/carouFredSel-6.2.1/jquery.carouFredSel-6.2.1-packed.js?ver=5.3.14 | 72.10.36.24 | 200 OK | 14 kB |
URL HTTP/2meragamou.com/wp-content/plugins/advanced-advertising-system/js/carouFredSel-6.2.1/jquery.carouFredSel-6.2.1-packed.js?ver=5.3.14 IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
File typeASCII text, with very long lines (32032) Hash94a38b4033951ab63c553f5830bf334f 662d1f08d43ae6ed32e78eaf2ea3379fb9f53e8a 7067a42e5be7d0f0f1286921c5059bf27baf4862fa67f06a9f6ee3ee8e36d346
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/advanced-advertising-system/js/carouFredSel-6.2.1/jquery.carouFredSel-6.2.1-packed.js?ver=5.3.14 HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: application/javascript
last-modified: Sat, 24 Nov 2018 06:07:23 GMT
etag: W/"5bf8ea9b-d5fc"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash5823b629e86542b63f4355ec5e67a126 97cbdbbb6b03e6ef7f3f45449245470ad8bd8292 96d8e39efb6eebd1413a4bc0fa6800781f636e70dc0ccadf6a546f26fa022755
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "96D8E39EFB6EEBD1413A4BC0FA6800781F636E70DC0CCADF6A546F26FA022755"
Last-Modified: Thu, 10 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7908
Expires: Sat, 12 Nov 2022 03:30:17 GMT
Date: Sat, 12 Nov 2022 01:18:29 GMT
Connection: keep-alive
|
|
| meragamou.com/wp-content/plugins/buddypress/bp-core/js/vendor/jquery-cookie.min.js?ver=5.1.0 | 72.10.36.24 | 200 OK | 1.1 kB |
URL HTTP/2meragamou.com/wp-content/plugins/buddypress/bp-core/js/vendor/jquery-cookie.min.js?ver=5.1.0 IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
File typeASCII text, with very long lines (1260), with no line terminators Hashc28b66af68529122147c7e57447e75bb 8be9adec1b9e2f5150e7eec4f0fd4a8c750e47d4 9435b59f566e79c8706138c8534de6dd4558f51ef4c0a8b10f6fe88ce728f030
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/buddypress/bp-core/js/vendor/jquery-cookie.min.js?ver=5.1.0 HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: application/javascript
last-modified: Sat, 21 Dec 2019 09:17:25 GMT
etag: W/"5dfde325-4ec"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-content/plugins/advanced-advertising-system/js/frontend.js?ver=5.3.14 | 72.10.36.24 | 200 OK | 6.6 kB |
URL HTTP/2meragamou.com/wp-content/plugins/advanced-advertising-system/js/frontend.js?ver=5.3.14 IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
Hashd7e11080ee0d4802c98d8d09d3803eb9 d6de02380f55e9b3f9592277a830a5ecb5f7cda7 46b489d1694c58506a6785d109039b6edfff10b6df67e9bd6e65d2785e4bb7f0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/advanced-advertising-system/js/frontend.js?ver=5.3.14 HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: application/javascript
last-modified: Sat, 24 Nov 2018 06:07:23 GMT
etag: W/"5bf8ea9b-71a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-content/plugins/seed-social/seed-social.css?ver=5.3.14 | 72.10.36.24 | 200 OK | 5.1 kB |
URL HTTP/2meragamou.com/wp-content/plugins/seed-social/seed-social.css?ver=5.3.14 IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
Hasha8ce98ca514fce25fbc1f38c9cff4201 2cea48060a01c1bf92c112e28effdb5243482da6 34cf9bf75ea77976e3c2353206ad770b969803c78ee77fe50fddd8537efbf7c2
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/seed-social/seed-social.css?ver=5.3.14 HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: text/css
last-modified: Sun, 07 Jul 2019 19:38:59 GMT
etag: W/"5d224a53-c00"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashcd5bdc050716bb76afe8090fc81617e7 5109c156b180727767fc03c411190ccc0d3fb5fc 9b13e7838946c6654dda17886c2ca8d42de934acb93f4bddb1008dfa1bd1ea99
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11715
x-amzn-requestid: 20e508bd-6568-4225-9bee-c683a49d44f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdMhUHkpIAMFfJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec13b-7dc726b94a37fc667e2e6646;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:40:11 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Lp5eW92D8SbFtcQLk-LRSaSKNMNFYCW7XTALdNdrJxN6ebgdH8_1Dw==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 21:42:55 GMT
age: 12934
etag: "5109c156b180727767fc03c411190ccc0d3fb5fc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-content/plugins/buddypress/bp-core/js/vendor/jquery-scroll-to.min.js?ver=5.1.0 | 72.10.36.24 | 200 OK | 7.8 kB |
URL HTTP/2meragamou.com/wp-content/plugins/buddypress/bp-core/js/vendor/jquery-scroll-to.min.js?ver=5.1.0 IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
File typeASCII text, with very long lines (2189), with no line terminators Hashf30de48724e3f35c5ce9d06071d972cc 98fe4167fd581459e21ce0ac05c53454cb93a3cf 182842ec000db48960180f44a2844f113144623620134164ffcb1c2839a1b4c5
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/buddypress/bp-core/js/vendor/jquery-scroll-to.min.js?ver=5.1.0 HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: application/javascript
last-modified: Sat, 21 Dec 2019 09:17:25 GMT
etag: W/"5dfde325-88d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp | 72.10.36.24 | 200 OK | 41 kB |
URL HTTP/2meragamou.com/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
File typeASCII text, with very long lines (31997) Hash484ca774881cdea393a7b52fdf71daeb 35a5e39e53bab77c2aad29adac1398f33a281bbe 7238646c263622b2d00fdf2e5680d91a30935c2a9f87a06924eb0d95f09e42fe
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/jquery/jquery.js?ver=1.12.4-wp HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: application/javascript
last-modified: Sat, 21 Dec 2019 08:43:55 GMT
etag: W/"5dfddb4b-17a69"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-content/themes/weddingday/style.css?ver=5.3.14 | 72.10.36.24 | 200 OK | 9.4 kB |
URL HTTP/2meragamou.com/wp-content/themes/weddingday/style.css?ver=5.3.14 IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
Hash72da3c0eafd4f19764f75a9a9781e926 0cd2a18d220a3b14bf9beeb5fa81c876e79e674e 51c7dcdad04f08ac0ee080871898df3b785886a49bccd96e46fa8db93a06e937
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/weddingday/style.css?ver=5.3.14 HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: text/css
x-accel-version: 0.01
last-modified: Sat, 02 Mar 2019 18:53:39 GMT
etag: W/"323-583210aad22e9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-content/plugins/mailchimp-for-wp/assets/js/forms-api.min.js?ver=4.7.4 | 72.10.36.24 | 200 OK | 368 kB |
URL HTTP/2meragamou.com/wp-content/plugins/mailchimp-for-wp/assets/js/forms-api.min.js?ver=4.7.4 IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
File typeASCII text, with very long lines (10234) Size368 kB (367599 bytes) Hash7895fea37814520cecb4553558424fbd a810e9fe662781ebb550310f9d280ab50b879230 c3924ed959fb63be9529afb2b7ff0aed443f267fb96b9ebdb9b6afc8b5e3e64e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/mailchimp-for-wp/assets/js/forms-api.min.js?ver=4.7.4 HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: application/javascript
last-modified: Sat, 21 Dec 2019 09:00:37 GMT
etag: W/"5dfddf35-2825"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-content/uploads/2016/06/wdmockup.jpg | 72.10.36.24 | 200 OK | 95 kB |
URL HTTP/2meragamou.com/wp-content/uploads/2016/06/wdmockup.jpg IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1600x347, components 3\012- data Hashcf2a274a5f465b92fcaf55185b17cb63 c73892b7e20ff688508aa08ee0696214beb5dc57 fa3b50c835a524cb3d68c5878550490e116dbe77936076556f40d85ff11300be
GET /wp-content/uploads/2016/06/wdmockup.jpg HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:29 GMT
content-type: image/jpeg
content-length: 94722
last-modified: Mon, 20 Jun 2016 08:46:50 GMT
etag: "5767ad7a-17202"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-content/uploads/2016/06/first-dance.jpg | 72.10.36.24 | 200 OK | 184 kB |
URL HTTP/2meragamou.com/wp-content/uploads/2016/06/first-dance.jpg IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x600, components 3\012- data Size184 kB (183664 bytes) Hash6331c26f88626ecd52f8989bfe6f9a62 00bbbbb786113cefcbd1c29b6da989ad16e00c3b eb66bf213958762c0ecbc85de9b6bcd791aabdd921b78dd2e816f9b63642e59c
GET /wp-content/uploads/2016/06/first-dance.jpg HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: image/jpeg
content-length: 183664
last-modified: Fri, 15 Jul 2016 16:09:25 GMT
etag: "57890ab5-2cd70"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-content/uploads/2016/06/maxresdefault.jpg | 72.10.36.24 | 200 OK | 238 kB |
URL HTTP/2meragamou.com/wp-content/uploads/2016/06/maxresdefault.jpg IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x675, components 3\012- data Size238 kB (238407 bytes) Hash9d2f1f90fd944a35d3f8efec9c6a8ebe 1f19eb8d5d5476225a1bfb7c101be37be82259d5 7e075a4848f26114ccd2ca7a5d55374414fb08c4d874c615e45362bbd28c18e3
GET /wp-content/uploads/2016/06/maxresdefault.jpg HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: image/jpeg
content-length: 238407
last-modified: Mon, 27 Jun 2016 20:11:37 GMT
etag: "57718879-3a347"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-content/uploads/2016/07/violin.jpg | 72.10.36.24 | 200 OK | 380 kB |
URL HTTP/2meragamou.com/wp-content/uploads/2016/07/violin.jpg IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2016:07:06 17:37:17], baseline, precision 8, 1200x600, components 3\012- data Size380 kB (380203 bytes) Hash4e99d8449d8dca1eb239bf1c4207e102 b8111958d03fa1b5a86506a23a69555067dd66e8 3df7264dab37c3b9db33bf7f09f4b0ed90c28caf95ed8f575136ef247721c5b3
GET /wp-content/uploads/2016/07/violin.jpg HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: image/jpeg
content-length: 380203
last-modified: Wed, 06 Jul 2016 14:37:51 GMT
etag: "577d17bf-5cd2b"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-content/uploads/2016/06/wedding-song-dance.jpg | 72.10.36.24 | 200 OK | 431 kB |
URL HTTP/2meragamou.com/wp-content/uploads/2016/06/wedding-song-dance.jpg IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2016:06:28 19:47:20], baseline, precision 8, 1200x600, components 3\012- data Size431 kB (431088 bytes) Hashe86094ce2aa194876072d2ab5e60557c af7f73117352d8a4aab371db599c994aa0a420b1 e10a6577765faa6bcb1481c751b89cfc62d543ded9302a5a941d33d6fa7a0d26
GET /wp-content/uploads/2016/06/wedding-song-dance.jpg HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: image/jpeg
content-length: 431088
last-modified: Tue, 28 Jun 2016 16:47:52 GMT
etag: "5772aa38-693f0"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-content/uploads/2016/06/gamilio-papoutsi.jpg | 72.10.36.24 | 200 OK | 468 kB |
URL HTTP/2meragamou.com/wp-content/uploads/2016/06/gamilio-papoutsi.jpg IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2016:06:25 08:24:05], baseline, precision 8, 1200x600, components 3\012- data Size468 kB (468309 bytes) Hashc96477c6e658c8311ac58c447e29ee34 466f70fe3d8bea71a760f994bd8f5c3cdf99b47e 40f089cf0acea0a8db4d2ee73caf90e28412278b2c1e85ff351bd55c966b5a80
GET /wp-content/uploads/2016/06/gamilio-papoutsi.jpg HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: image/jpeg
content-length: 468309
last-modified: Sat, 25 Jun 2016 05:25:00 GMT
etag: "576e15ac-72555"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-content/uploads/2016/06/alfa.jpg | 72.10.36.24 | 200 OK | 476 kB |
URL HTTP/2meragamou.com/wp-content/uploads/2016/06/alfa.jpg IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2016:06:28 21:32:56], baseline, precision 8, 1200x600, components 3\012- data Size476 kB (476213 bytes) Hash606991a97763e337d2d5110ef1f7cd90 27e6b2579c8d36715d5ad84d9b51e281ae0ace11 f008e04be633a2418e2a0d2f1ad0b9734570beb2f306ea9211ed2cedec9189c5
GET /wp-content/uploads/2016/06/alfa.jpg HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: image/jpeg
content-length: 476213
last-modified: Tue, 28 Jun 2016 18:33:29 GMT
etag: "5772c2f9-74435"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashb474f74278f0bc7d8a7d6a66c3dcc2dd 6aad727d11a42fefbcabe6af4f0d32c42c946043 db18a18706d236333a7e8671728aea6adbe89e54905799cb5dc8d32feadf2e53
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 01:18:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google-analytics.com/analytics.js | 142.250.74.174 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.174:0
File typeASCII text, with very long lines (1325) Hash47e6f374ca946fddd5b59871b325736c baa9282efc8785e84d247c3bff518eaa45f101c4 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sat, 12 Nov 2022 00:41:09 GMT
expires: Sat, 12 Nov 2022 02:41:09 GMT
cache-control: public, max-age=7200
age: 2241
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/jF-AgDWy8ih0GfLx4Semh9UK/recaptcha__en.js | 142.250.74.163 | 200 OK | 163 kB |
URL HTTP/2www.gstatic.com/recaptcha/releases/jF-AgDWy8ih0GfLx4Semh9UK/recaptcha__en.js IP142.250.74.163:0
File typeASCII text, with very long lines (668) Size163 kB (162590 bytes) Hash70dc760a0efad09d703883a39f7683b2 2bc70f2a100ff27d27a89d563dfe279590c8336b 2bc59eab94309c59fba62afa40dfd841fb83760714e9ec7248ce3e10ae05fd19
GET /recaptcha/releases/jF-AgDWy8ih0GfLx4Semh9UK/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://meragamou.com
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162590
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 11 Nov 2022 23:25:44 GMT
expires: Sat, 11 Nov 2023 23:25:44 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 07 Nov 2022 23:32:29 GMT
content-type: text/javascript
age: 6766
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashb474f74278f0bc7d8a7d6a66c3dcc2dd 6aad727d11a42fefbcabe6af4f0d32c42c946043 db18a18706d236333a7e8671728aea6adbe89e54905799cb5dc8d32feadf2e53
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 01:18:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google-analytics.com/j/collect?v=1&_v=j98&a=842960606&t=pageview&_s=1&dl=https%3A%2F%2Fmeragamou.com%2F&ul=en-us&de=UTF-8&dt=%CE%93%CE%AC%CE%BC%CE%BF%CF%82%3A%20%CE%97%20%CE%BF%CF%81%CE%B3%CE%AC%CE%BD%CF%89%CF%83%CE%B7%20%CF%84%CE%BF%CF%85%20%CE%B3%CE%AC%CE%BC%CE%BF%CF%85%20%CF%83%CE%BF%CF%85%20%CE%BE%CE%B5%CE%BA%CE%B9%CE%BD%CE%AC%CE%B5%CE%B9%20%CE%B1%CF%80%CF%8C%20%CE%B5%CE%B4%CF%8E!&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=1425752654&gjid=1400106788&cid=1517640445.1668215910&tid=UA-79257208-1&_gid=1567980273.1668215910&_r=1&_slc=1&z=346281125 | 142.250.74.174 | 200 OK | 2 B |
URL HTTP/2www.google-analytics.com/j/collect?v=1&_v=j98&a=842960606&t=pageview&_s=1&dl=https%3A%2F%2Fmeragamou.com%2F&ul=en-us&de=UTF-8&dt=%CE%93%CE%AC%CE%BC%CE%BF%CF%82%3A%20%CE%97%20%CE%BF%CF%81%CE%B3%CE%AC%CE%BD%CF%89%CF%83%CE%B7%20%CF%84%CE%BF%CF%85%20%CE%B3%CE%AC%CE%BC%CE%BF%CF%85%20%CF%83%CE%BF%CF%85%20%CE%BE%CE%B5%CE%BA%CE%B9%CE%BD%CE%AC%CE%B5%CE%B9%20%CE%B1%CF%80%CF%8C%20%CE%B5%CE%B4%CF%8E!&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=1425752654&gjid=1400106788&cid=1517640445.1668215910&tid=UA-79257208-1&_gid=1567980273.1668215910&_r=1&_slc=1&z=346281125 IP142.250.74.174:0
File typeASCII text, with no line terminators Hash38684612f0c6bb6dfa16da92f4a6878f 6fe62d0dd7db314b7f9bb945672f078e01d27f0f a048e640908046be06e00eab37742b5d5ff80964af58cfd22f7cb2de4dfe375f
POST /j/collect?v=1&_v=j98&a=842960606&t=pageview&_s=1&dl=https%3A%2F%2Fmeragamou.com%2F&ul=en-us&de=UTF-8&dt=%CE%93%CE%AC%CE%BC%CE%BF%CF%82%3A%20%CE%97%20%CE%BF%CF%81%CE%B3%CE%AC%CE%BD%CF%89%CF%83%CE%B7%20%CF%84%CE%BF%CF%85%20%CE%B3%CE%AC%CE%BC%CE%BF%CF%85%20%CF%83%CE%BF%CF%85%20%CE%BE%CE%B5%CE%BA%CE%B9%CE%BD%CE%AC%CE%B5%CE%B9%20%CE%B1%CF%80%CF%8C%20%CE%B5%CE%B4%CF%8E!&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=1425752654&gjid=1400106788&cid=1517640445.1668215910&tid=UA-79257208-1&_gid=1567980273.1668215910&_r=1&_slc=1&z=346281125 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://meragamou.com
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://meragamou.com
date: Sat, 12 Nov 2022 01:18:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| meragamou.com/favicon.ico | 72.10.36.24 | 200 OK | 0 B |
URL HTTP/2meragamou.com/favicon.ico IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Cookie: bp-activity-oldestpage=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:31 GMT
content-type: image/vnd.microsoft.icon
content-length: 0
x-powered-by: PHP/7.3.33, PleskLin
X-Firefox-Spdy: h2
|
|
| meragamou.com/assets/css/unsemantic.css | 72.10.36.24 | 200 OK | 25 kB |
URL HTTP/2meragamou.com/assets/css/unsemantic.css IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
File typeASCII text, with very long lines (1492) Hashd70439949a8c5c22d6bc3c10b560150e 4bb3a1f426869052734788ce2f20020619f792a6 15a00da98357b03653c0891fd68087568b5a04daac727e56ab6f4ecfeae9de24
GET /assets/css/unsemantic.css HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/assets/css/style.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: text/css
last-modified: Mon, 06 Jun 2016 10:51:19 GMT
etag: W/"575555a7-ff2e"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-content/plugins/buddypress-like/assets/js/bp-like.js?ver=0.3.0 | 72.10.36.24 | 200 OK | 0 B |
URL HTTP/2meragamou.com/wp-content/plugins/buddypress-like/assets/js/bp-like.js?ver=0.3.0 IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/buddypress-like/assets/js/bp-like.js?ver=0.3.0 HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: application/javascript
last-modified: Tue, 12 Jul 2016 05:39:04 GMT
etag: W/"57848278-139f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/ | 72.10.36.24 | 200 OK | 0 B |
IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET / HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: text/html; charset=UTF-8
link: <https://meragamou.com/wp-json/>; rel="https://api.w.org/", <https://meragamou.com/>; rel=shortlink
x-powered-by: PHP/7.3.33, PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-content/plugins/post-hit-counter/assets/css/frontend.css?ver=1.3.2 | 72.10.36.24 | 200 OK | 0 B |
URL HTTP/2meragamou.com/wp-content/plugins/post-hit-counter/assets/css/frontend.css?ver=1.3.2 IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/post-hit-counter/assets/css/frontend.css?ver=1.3.2 HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: text/css
x-accel-version: 0.01
last-modified: Thu, 09 Jun 2016 08:55:14 GMT
etag: W/"42-534d494942080"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.6 | 72.10.36.24 | 200 OK | 0 B |
URL HTTP/2meragamou.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.6 IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.6 HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: application/javascript
last-modified: Sat, 14 Dec 2019 08:07:00 GMT
etag: W/"5df49824-3868"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.11.4 | 72.10.36.24 | 200 OK | 0 B |
URL HTTP/2meragamou.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.11.4 IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/jquery/ui/mouse.min.js?ver=1.11.4 HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: application/javascript
last-modified: Thu, 15 Apr 2021 15:36:28 GMT
etag: W/"60785d7c-c46"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-includes/js/comment-reply.min.js?ver=5.3.14 | 72.10.36.24 | 200 OK | 0 B |
URL HTTP/2meragamou.com/wp-includes/js/comment-reply.min.js?ver=5.3.14 IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/comment-reply.min.js?ver=5.3.14 HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: application/javascript
last-modified: Thu, 15 Apr 2021 15:36:28 GMT
etag: W/"60785d7c-921"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-content/plugins/buddypress/bp-templates/bp-legacy/css/buddypress.min.css?ver=5.1.0 | 72.10.36.24 | 200 OK | 0 B |
URL HTTP/2meragamou.com/wp-content/plugins/buddypress/bp-templates/bp-legacy/css/buddypress.min.css?ver=5.1.0 IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
GET /wp-content/plugins/buddypress/bp-templates/bp-legacy/css/buddypress.min.css?ver=5.1.0 HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: text/css
last-modified: Sat, 21 Dec 2019 09:17:25 GMT
etag: W/"5dfde325-900b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-content/plugins/post-hit-counter/assets/css/widget.css?ver=1.3.2 | 72.10.36.24 | 200 OK | 0 B |
URL HTTP/2meragamou.com/wp-content/plugins/post-hit-counter/assets/css/widget.css?ver=1.3.2 IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
GET /wp-content/plugins/post-hit-counter/assets/css/widget.css?ver=1.3.2 HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: text/css
x-accel-version: 0.01
last-modified: Thu, 09 Jun 2016 08:55:14 GMT
etag: W/"2e-534d494942080"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-includes/js/jquery/ui/core.min.js?ver=1.11.4 | 72.10.36.24 | 200 OK | 0 B |
URL HTTP/2meragamou.com/wp-includes/js/jquery/ui/core.min.js?ver=1.11.4 IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.11.4 HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: application/javascript
last-modified: Thu, 15 Apr 2021 15:36:28 GMT
etag: W/"60785d7c-f59"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| use.fontawesome.com/340c15902a.js | 172.64.132.15 | 200 OK | 0 B |
URL HTTP/2use.fontawesome.com/340c15902a.js IP172.64.132.15:0
GET /340c15902a.js HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: text/javascript
x-amz-id-2: hsWRh5NBWR2aEYiHhIJXa2DvkkcIJJqujfSzb1fjdU2hvtBGORGjv9WqHG3sqL7dA7gdD9VHLEA=
x-amz-request-id: SZVPYE4C5KEFGRD3
last-modified: Thu, 01 Jul 2021 19:04:45 GMT
etag: W/"278589f5c62cbfa1fb1adc7f345c9be0"
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KaNuSo0EnE6FFqJPZ0%2BDQWyM9dUy6nJdc5CuHTJTsUbrrk89XomRDNYrFrFd7r02DNPWFsII%2B0pef0pFWlI%2FzfOf7FM%2FgmUgOjEFf9cN8MsioSQFF61LaHEz%2B7rCkyDt97GMsszf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 768b6f15ebe775e1-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-includes/js/jquery/ui/widget.min.js?ver=1.11.4 | 72.10.36.24 | 200 OK | 0 B |
URL HTTP/2meragamou.com/wp-includes/js/jquery/ui/widget.min.js?ver=1.11.4 IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/jquery/ui/widget.min.js?ver=1.11.4 HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: application/javascript
last-modified: Thu, 15 Apr 2021 15:36:28 GMT
etag: W/"60785d7c-1aab"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/assets/css/buddy.css | 72.10.36.24 | 200 OK | 0 B |
URL HTTP/2meragamou.com/assets/css/buddy.css IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
GET /assets/css/buddy.css HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/assets/css/style.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: text/css
last-modified: Mon, 13 Jun 2016 19:37:59 GMT
etag: W/"575f0b97-1194d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-content/plugins/buddypress/bp-core/js/confirm.min.js?ver=5.1.0 | 72.10.36.24 | 200 OK | 0 B |
URL HTTP/2meragamou.com/wp-content/plugins/buddypress/bp-core/js/confirm.min.js?ver=5.1.0 IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/buddypress/bp-core/js/confirm.min.js?ver=5.1.0 HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: application/javascript
x-accel-version: 0.01
last-modified: Sat, 21 Dec 2019 09:17:25 GMT
etag: W/"87-59a334334f1fc"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-content/plugins/buddypress/bp-core/js/jquery-query.min.js?ver=5.1.0 | 72.10.36.24 | 200 OK | 0 B |
URL HTTP/2meragamou.com/wp-content/plugins/buddypress/bp-core/js/jquery-query.min.js?ver=5.1.0 IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
GET /wp-content/plugins/buddypress/bp-core/js/jquery-query.min.js?ver=5.1.0 HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: application/javascript
x-accel-version: 0.01
last-modified: Sat, 21 Dec 2019 09:17:24 GMT
etag: W/"77-59a33432d319c"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-content/themes/weddingday/js/navigation.js?ver=20151215 | 72.10.36.24 | 200 OK | 0 B |
URL HTTP/2meragamou.com/wp-content/themes/weddingday/js/navigation.js?ver=20151215 IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
GET /wp-content/themes/weddingday/js/navigation.js?ver=20151215 HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: application/javascript
last-modified: Wed, 25 May 2016 08:12:35 GMT
etag: W/"57455e73-900"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-content/plugins/seed-social/seed-social.js?ver=2016-1 | 72.10.36.24 | 200 OK | 0 B |
URL HTTP/2meragamou.com/wp-content/plugins/seed-social/seed-social.js?ver=2016-1 IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
GET /wp-content/plugins/seed-social/seed-social.js?ver=2016-1 HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: application/javascript
last-modified: Sun, 07 Jul 2019 19:38:59 GMT
etag: W/"5d224a53-10f1"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-includes/css/dist/block-library/style.min.css?ver=5.3.14 | 72.10.36.24 | 200 OK | 0 B |
URL HTTP/2meragamou.com/wp-includes/css/dist/block-library/style.min.css?ver=5.3.14 IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.3.14 HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: text/css
last-modified: Thu, 11 Jun 2020 03:35:40 GMT
etag: W/"5ee1a68c-a055"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-content/plugins/buddypress/bp-core/js/widget-members.min.js?ver=5.1.0 | 72.10.36.24 | 200 OK | 0 B |
URL HTTP/2meragamou.com/wp-content/plugins/buddypress/bp-core/js/widget-members.min.js?ver=5.1.0 IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/buddypress/bp-core/js/widget-members.min.js?ver=5.1.0 HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: application/javascript
last-modified: Sat, 21 Dec 2019 09:17:25 GMT
etag: W/"5dfde325-4be"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 | 72.10.36.24 | 200 OK | 0 B |
URL HTTP/2meragamou.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: application/javascript
last-modified: Thu, 05 Apr 2018 01:14:35 GMT
etag: W/"5ac5787b-2748"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/assets/css/owl.theme.default.css | 72.10.36.24 | 200 OK | 0 B |
URL HTTP/2meragamou.com/assets/css/owl.theme.default.css IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
GET /assets/css/owl.theme.default.css HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/assets/css/style.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: text/css
last-modified: Tue, 31 May 2016 13:19:47 GMT
etag: W/"574d8f73-55a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/assets/css/style.css | 72.10.36.24 | 200 OK | 0 B |
URL HTTP/2meragamou.com/assets/css/style.css IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
GET /assets/css/style.css HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: text/css
last-modified: Sat, 21 Dec 2019 09:31:52 GMT
etag: W/"5dfde688-6d93"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| meragamou.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.1.6 | 72.10.36.24 | 200 OK | 0 B |
URL HTTP/2meragamou.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.1.6 IP72.10.36.24:0 ASN#398110 GO-DADDY-COM-LLC
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.1.6 HTTP/1.1
Host: meragamou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://meragamou.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 01:18:28 GMT
content-type: text/css
last-modified: Sat, 14 Dec 2019 08:07:00 GMT
etag: W/"5df49824-66d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
0.0.0.0