| www.zoompretty.com/ |  188.114.96.1 | 301 Moved Permanently | 0 B |
IP188.114.96.1:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET / HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 31 Jan 2023 17:49:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 31 Jan 2023 18:49:37 GMT
Location: https://www.zoompretty.com/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a%2BycsaRG6tAqHc7uOh6p3SG7eipoE6sUfj4QDbwWpyYdUP4GRpWuXTvADsW2mJ6fSaDpr0yeOGcBGTaX535JaGd%2FEejFKQ6bRWEZ80wsnHYXCvNSwiS9Q4N16T1zSNsd3t0xgYk%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792448f5b92a0b02-OSL
alt-svc: h2=":443"; ma=60
|
|
| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashd2e72d45afe3d391c204b5391599607c 149d68b9d00a720b6f380fa2324779dca9dbe26d f6f1c295c68dfebadacb1fc812b44e01c7ede0e203615ef3e2cced2ce2251e7e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F6F1C295C68DFEBADACB1FC812B44E01C7EDE0E203615EF3E2CCED2CE2251E7E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9697
Expires: Tue, 31 Jan 2023 20:31:14 GMT
Date: Tue, 31 Jan 2023 17:49:37 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash0c35c3ec659d3a26ea97e68d787bb043 d97e3672244efec5b7814f2d8a734cd1a9387854 4c946a026114ff05316d92277750facf3d5f5d162839149da0b7fb1a4cff6b5e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4C946A026114FF05316D92277750FACF3D5F5D162839149DA0B7FB1A4CFF6B5E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12181
Expires: Tue, 31 Jan 2023 21:12:38 GMT
Date: Tue, 31 Jan 2023 17:49:37 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hasha8d45deaa7ebfcd996c2055dae592ab8 55befe074589fe7b39757c145968058162a8fc6b 50d7d516f446458145a304b288a0a39d391cd37ea50dabea36ae48d291c65ba7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "50D7D516F446458145A304B288A0A39D391CD37EA50DABEA36AE48D291C65BA7"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6299
Expires: Tue, 31 Jan 2023 19:34:36 GMT
Date: Tue, 31 Jan 2023 17:49:37 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash30db107dcf4380cef05efea409c2e6a3 96e6a306fbc07299aba64e5c14e2bfca35872fa9 b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Retry-After, Content-Length, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 31 Jan 2023 17:43:18 GMT
content-type: application/json
age: 379
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash7b922915ebf1fa3639b333f994c74f24 144a3f80b98fd0652d4614f24cf6cbbee40f8938 adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: G1ZkLt9qLnOCPEt2BnpKPzgVcSP1mxoJnG9Tf6Rl5mxvVfO1GjpS8A20lqzIzU9xBd4T0J3g/qU=
x-amz-request-id: DYHJ4AJ3WPZYDZAV
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 31 Jan 2023 16:51:14 GMT
age: 3503
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 17:49:37 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/s/gts1p5/ils6VYN8wjI | 142.250.74.131 | 200 OK | 471 B |
URL HTTP/1.1ocsp.pki.goog/s/gts1p5/ils6VYN8wjI IP142.250.74.131:0
Hash3254fc7127eb53be0e1bf2ea0a511f56 63bd2ad5cb247566f446807680d0487f5c628637 c8fe3f6261a3b7d9523ebadcac5c74cb7d56d28de756721b69875b7a9cbaa7be
POST /s/gts1p5/ils6VYN8wjI HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 17:49:38 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Backoff, Retry-After, Content-Length, Last-Modified, Expires, Cache-Control, ETag, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 31 Jan 2023 17:41:42 GMT
age: 476
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash22b9916fc1fafc9bdc9bb37f9eac8a9a 86f640e134a741a0f906a8e3a0f5c6659dd0e394 a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5226
Expires: Tue, 31 Jan 2023 19:16:44 GMT
Date: Tue, 31 Jan 2023 17:49:38 GMT
Connection: keep-alive
|
|
| push.services.mozilla.com/ | 52.12.67.61 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.12.67.61:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: mhQYQYM3pj5MdA86ZRT5LQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Wk33NG4isjF7eHMUrVd26CgREwQ=
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash43bc5afe1d7330aa521e0efc78185a92 f53e9daa0a32e0acf7a10d9494fb383c1d039305 429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2966
Expires: Tue, 31 Jan 2023 18:39:06 GMT
Date: Tue, 31 Jan 2023 17:49:40 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash43bc5afe1d7330aa521e0efc78185a92 f53e9daa0a32e0acf7a10d9494fb383c1d039305 429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2966
Expires: Tue, 31 Jan 2023 18:39:06 GMT
Date: Tue, 31 Jan 2023 17:49:40 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash43bc5afe1d7330aa521e0efc78185a92 f53e9daa0a32e0acf7a10d9494fb383c1d039305 429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2966
Expires: Tue, 31 Jan 2023 18:39:06 GMT
Date: Tue, 31 Jan 2023 17:49:40 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash43bc5afe1d7330aa521e0efc78185a92 f53e9daa0a32e0acf7a10d9494fb383c1d039305 429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2966
Expires: Tue, 31 Jan 2023 18:39:06 GMT
Date: Tue, 31 Jan 2023 17:49:40 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash43bc5afe1d7330aa521e0efc78185a92 f53e9daa0a32e0acf7a10d9494fb383c1d039305 429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2966
Expires: Tue, 31 Jan 2023 18:39:06 GMT
Date: Tue, 31 Jan 2023 17:49:40 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55e9b24d-3c7c-46d8-89b7-084483cc3d1d.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55e9b24d-3c7c-46d8-89b7-084483cc3d1d.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash5190c0bdc6abe0ee258e9f8c20ddaf51 d60f280f8a742480527dbc32d08f321f972d4fcf 874b38a04aa3736e65aaef72da2cc2efceb208618267107a495bdfe51ec58e58
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55e9b24d-3c7c-46d8-89b7-084483cc3d1d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12507
x-amzn-requestid: 85c9adcd-b997-48ca-bbfb-ccdeaf3e8cfb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhklyFaJoAMFqKA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e7be-2bcdd8c353d8429d2b1e95f6;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:40:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UDJKl99GiUxTW_EgWFDjLaJZbKFhfaJR-XRLsbQphwHuCXczDlxrDA==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 21:55:07 GMT
age: 71673
etag: "d60f280f8a742480527dbc32d08f321f972d4fcf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash2c4934be94898028e2ab696561b51462 6cf734e2d29938688913daacfb75506d8e004a94 239adcbb538b7a6d1483c65c7694d4a9f9fa9cadf456ab5681c4b764185e3596
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9987
x-amzn-requestid: 67109f87-6073-4991-b540-cdeedc2d7b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: flYlPF9uIAMFXMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d86e21-60ac2c7b37c72e6e54a5c69d;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 01:25:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hDjKAMYoVwHdCqS8t08PrWyfQQLiWaosXbi3FOJY8BeV0yAFCGziGw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 01:58:16 GMT
age: 57084
etag: "6cf734e2d29938688913daacfb75506d8e004a94"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1295ec36-f5b2-4db1-83c7-667fa373f592.jpeg | 34.120.237.76 | 200 OK | 14 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1295ec36-f5b2-4db1-83c7-667fa373f592.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashd957012d3e2b8c3bc0eefe11d66e8554 1959fdd94846fa3791c4890578dd15336b909dcc a97e81ec5eb2eda6a603bf4bfd4fa4ef4fab762747479489e99e6c713258a736
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1295ec36-f5b2-4db1-83c7-667fa373f592.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13853
x-amzn-requestid: ca6ea6e7-3e13-4194-87f5-20a07b813e21
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fk3zzF4hIAMFwWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d839b1-772487cb1b7495c52c552d36;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 21:42:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: T5CaUojMEG8x8vki59UdIhI8IbbBRY_7w3xgiW3RCZlHTyeHPLIy2Q==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 21:47:13 GMT
age: 72147
etag: "1959fdd94846fa3791c4890578dd15336b909dcc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F43ae4cd9-2533-48ae-8086-f8fea8a4e269.jpeg | 34.120.237.76 | 200 OK | 6.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F43ae4cd9-2533-48ae-8086-f8fea8a4e269.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash976dda397f9292a498ca9db5599c0378 dad9e9c3462907a2475046aee36d57f8309cd44e 7ed9ccf2ff75ca53f5ba56a1d2127e0f09b0ae941cad8b042e8df01ad01e614b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F43ae4cd9-2533-48ae-8086-f8fea8a4e269.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6844
x-amzn-requestid: 0542cf46-5045-459f-a35f-f6c0d3f5f7b7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: flZsxH0YIAMF9ew=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d86feb-692d50f710a131df2ee49aa8;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 01:33:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 6bbFjAsd03GN8zzBnAFBm7xA8igZ_xHJsOHzw7nwNgRxiWUDLPGjpQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 01:53:29 GMT
age: 57371
etag: "dad9e9c3462907a2475046aee36d57f8309cd44e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37e3fb86-3315-41fd-97cb-ac82604d8869.jpeg | 34.120.237.76 | 200 OK | 8.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37e3fb86-3315-41fd-97cb-ac82604d8869.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashe6f9ffb8f9e99229b45ca5fdb84ce7d5 04577ad69ee9749b14382254eb5bbf0e1edcd7fa 6111acf3f363123b39d13cd3d23ab39b8c8d00379874f19231d1cd3da17c52c2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37e3fb86-3315-41fd-97cb-ac82604d8869.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8558
x-amzn-requestid: 2841cd36-22e6-4ecb-b56a-bfadce3197c7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffB_BFA8IAMFyvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d5e393-3fd03bd14de762b0738a3b0a;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 03:10:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ZP2Mar8l3QoPH733_vv3hUuQjWvaN4_TgfYwme2-6WIxGi55BoSchg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 04:26:31 GMT
age: 48189
etag: "04577ad69ee9749b14382254eb5bbf0e1edcd7fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67cbd807-4e92-4ddb-a8c5-864884d25e99.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67cbd807-4e92-4ddb-a8c5-864884d25e99.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash2797bfd35b7ec24888de84be14f7f2ec 8e315ac5856967286eaa8769e081d827fb4ca39e b99f3bd73eb4395194bc7bb6a1b801750182239e5b70f3207f99e494b60b72ab
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67cbd807-4e92-4ddb-a8c5-864884d25e99.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11129
x-amzn-requestid: 74f2a4dd-7d5d-4839-90a8-d2e74f6d785d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffDBZGRPoAMFedg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d5e53b-3de444596550bb41188ada5b;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 03:17:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9Fga247EZZqiGmdMJ72resdBZR2KLgflGDBPESmuw9cFVs4hSzMzTw==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 03:40:17 GMT
age: 50963
etag: "8e315ac5856967286eaa8769e081d827fb4ca39e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/s/gts1p5/ils6VYN8wjI | 142.250.74.131 | 200 OK | 471 B |
URL HTTP/1.1ocsp.pki.goog/s/gts1p5/ils6VYN8wjI IP142.250.74.131:0
Hash3254fc7127eb53be0e1bf2ea0a511f56 63bd2ad5cb247566f446807680d0487f5c628637 c8fe3f6261a3b7d9523ebadcac5c74cb7d56d28de756721b69875b7a9cbaa7be
POST /s/gts1p5/ils6VYN8wjI HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 17:49:41 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash40bac282ee9730b7a7fde839fcf58736 be00063ec5c760560f34663d0a6a9cad87cfebe4 45b83537d8621d3c4a7c046a9b78f6745977c359db2868d720f19dbb0eb80d3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 17:49:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash40bac282ee9730b7a7fde839fcf58736 be00063ec5c760560f34663d0a6a9cad87cfebe4 45b83537d8621d3c4a7c046a9b78f6745977c359db2868d720f19dbb0eb80d3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 17:49:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash40bac282ee9730b7a7fde839fcf58736 be00063ec5c760560f34663d0a6a9cad87cfebe4 45b83537d8621d3c4a7c046a9b78f6745977c359db2868d720f19dbb0eb80d3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 17:49:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.zoompretty.com/wp-content/uploads/language/de_DE.png | 188.114.97.1 | 200 OK | 125 B |
URL HTTP/2www.zoompretty.com/wp-content/uploads/language/de_DE.png IP188.114.97.1:0
File typePNG image data, 21 x 16, 8-bit/color RGBA, non-interlaced\012- data Hash842a76722a2c495132c7e8eb56017d01 26e08df5b5f92d6970b3f333de38882e609c26a6 715770e91a5f40046d6cb8c3fe550166119bea97aff94842cad947c162e0011d
GET /wp-content/uploads/language/de_DE.png HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: image/png
content-length: 125
vary: cf-ipcountry,user-agent, Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:29 GMT
etag: "7d-5eed267701e90"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=scCIcSYXrPJHo8zQYAk3O6%2B37jokuL3LGxbIiNESMVfmxe%2BD6ezGAaiCiKMBcp%2BgItTD%2FpZ4DAFs%2B5rgEzWZb7AHLGZwSaKmsyT5oVy9vdA2cjsQgY5hb8wXbQZMpWcJxFa8BAI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d5b8afab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/uploads/logo/br7.png | 188.114.97.1 | 200 OK | 4.1 kB |
URL HTTP/2www.zoompretty.com/wp-content/uploads/logo/br7.png IP188.114.97.1:0
File typePNG image data, 89 x 70, 8-bit/color RGBA, non-interlaced\012- data Hash0061ae659fb270eca0997d48d15dbec5 9eeedade51e60fcedca5478d843d3cc9b8a74182 b9989df7a52280dd4fd02c04f60c0504f5ef152acd869ae86c1c2dcc7cf3e0c1
GET /wp-content/uploads/logo/br7.png HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: image/png
content-length: 4094
vary: cf-ipcountry,user-agent, Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:29 GMT
etag: "ffe-5eed267702278"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3vYIXpqQvhdlUm0CfL9ajgmJeHsshib5oDkD2qkcEtWNixBwrLUymo%2F2wsv%2BvEP%2FN4Hu4ISHEkYFXlRtL86EoKlnTRyrqPPvncA%2FU92okccazdfBm19iZQThAgyQspr2XI8ifec%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d6bb0fab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/uploads/logo/br6.png | 188.114.97.1 | 200 OK | 4.0 kB |
URL HTTP/2www.zoompretty.com/wp-content/uploads/logo/br6.png IP188.114.97.1:0
File typePNG image data, 105 x 67, 8-bit/color RGBA, non-interlaced\012- data Hash69211bd5edf52b35141755d50f89c29f d5fdb7f22e59def0a3f81ae5ea094f551dc45a2c 196c7456efbe463b5ed92ea5a3289411c64a7403d7b2ffa2b0da09e41e77a940
GET /wp-content/uploads/logo/br6.png HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: image/png
content-length: 3950
vary: cf-ipcountry,user-agent, Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:29 GMT
etag: "f6e-5eed267701e90"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Tq3i1stAlY0ocitAq7HRGHY83t2icKWpezHgjtPwV1KThLcmO17L9JfZgKf5LVE5JOyT7XvfY6jiI0j93ZnN3y5VS1flfaJaWA740UsTjLfgoRuSgN0Y22WDg86tdESeIbMzk0w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d6baffab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/themes/hono/css/opt_css.css | 188.114.97.1 | 200 OK | 0 B |
URL HTTP/2www.zoompretty.com/wp-content/themes/hono/css/opt_css.css IP188.114.97.1:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/themes/hono/css/opt_css.css HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: text/css
content-length: 0
vary: cf-ipcountry,user-agent, Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:29 GMT
etag: "0-5eed2676a1f71"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dkt%2FXgdgqU%2F%2BmfyN22NU0RgGi6ojCg%2BD%2BeL3rVriOYNZKX0e15MzZ5TjGK%2B538AzUJUzFHylHzh7vPZo1%2BtN01bj34i016ffmFJCLJGOSOVcQdcLaOsUXYa%2BekL3%2Bwg2MUxkm6A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d4b78fab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/plugins/revslider/public/assets/assets/dummy.png | 188.114.97.1 | 200 OK | 68 B |
URL HTTP/2www.zoompretty.com/wp-content/plugins/revslider/public/assets/assets/dummy.png IP188.114.97.1:0
File typePNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data Hash2a637d3d825673c0e3462fa4ed9a1c5c 81668d396da22832d75a986407ff10035e0d5899 69539b5b3777cffda28a66d7f2aa9b17c91ee1ec8fd50c00c442af91753a60f7
GET /wp-content/plugins/revslider/public/assets/assets/dummy.png HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: image/png
content-length: 68
vary: cf-ipcountry,user-agent, Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:28 GMT
etag: "44-5eed2675ed8c9"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PoDph3xUwXX8zkYTAwRdtaZDLAxS1vJOxyHeNgFEWoTzHJ%2BR88Dj8HF6LG3mo4UFY3LvWh1nRb6OWmy88ChIbBfAHaB1%2FmsGbVIzHYct5O7QNgbFAIEde4R2IGBdVdWKkNquCzc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d6ba3fab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/uploads/logo/br1.png | 188.114.97.1 | 200 OK | 3.7 kB |
URL HTTP/2www.zoompretty.com/wp-content/uploads/logo/br1.png IP188.114.97.1:0
File typePNG image data, 101 x 57, 8-bit/color RGBA, non-interlaced\012- data Hashac2ceca9f92b18c5c26e4a6885a9fd5c dc46f3f0bc76c05e445b34f964eb5d5967367bda cdb5b4f0a2d4575e0d1539bbb03073a64d70183295400c8d22c83f77d6cbc68a
GET /wp-content/uploads/logo/br1.png HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: image/png
content-length: 3681
vary: cf-ipcountry,user-agent, Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:29 GMT
etag: "e61-5eed267701e90"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9QD8Hb2DiQ7MYB085LZT3d1xo9P8nfYemwJdijqUdGgLjLhhqgqHrNsJgyYrlYKe81vEMfod0JOjyVWEoAYIQ6KB2CFEUKoGVE9Esg1KtCJvZRVm98Hq4yB%2Fjo297FLvwy%2FyhlM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d6ba5fab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/uploads/logo/br2.png | 188.114.97.1 | 200 OK | 3.8 kB |
URL HTTP/2www.zoompretty.com/wp-content/uploads/logo/br2.png IP188.114.97.1:0
File typePNG image data, 90 x 65, 8-bit/color RGBA, non-interlaced\012- data Hash2c7ae7814e38ec54345e618492d90422 e86d15872d5f20c5bf36db0289068f061f8e4149 c0f619ddb861faf60ef0537251b4d97f3500ac82440b8d09bcf7b41cbc3db2fa
GET /wp-content/uploads/logo/br2.png HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: image/png
content-length: 3800
vary: cf-ipcountry,user-agent, Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:29 GMT
etag: "ed8-5eed267701e90"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ylmNbE%2FBJ%2F%2FrQcwp1glUg0Qt%2FXNoY1f89s6xmuvL%2FZpltsKZajWxZGhuX7YnUepFO7QfdG1%2FdSoMV0BFikHqCH7vWyX9Kp%2BFriK4MMMv1WiHyVd1uTI%2FtPwnReVQ8TWEeIjYGso%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d6ba6fab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/uploads/logo/br5.png | 188.114.97.1 | 200 OK | 3.9 kB |
URL HTTP/2www.zoompretty.com/wp-content/uploads/logo/br5.png IP188.114.97.1:0
File typePNG image data, 102 x 74, 8-bit/color RGBA, non-interlaced\012- data Hashe5f5a46a77fabd8b43371c959e8b833a 94d89872c1b6a841ec81f13b278aec345cede23c 95c051cebf40312b1d4246f6c65e46ca117ff286a725329c991076db58f83b00
GET /wp-content/uploads/logo/br5.png HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: image/png
content-length: 3944
vary: cf-ipcountry,user-agent, Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:29 GMT
etag: "f68-5eed267701e90"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BrI0JecAlwU9QzWDsYEB3b%2FxPdWxIN%2BsHtl6HB6Nr1pUxJZYF%2FY8TPxmNGJ9Vuo28LsJzqqfjeKWsk%2BXhVh%2F3u%2BUf3MUglaZrrFu45kWyDWYi98%2B7Eybk1y%2BfTeaN23MoIueQn4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d6badfab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/uploads/language/en_US.png | 188.114.97.1 | 200 OK | 394 B |
URL HTTP/2www.zoompretty.com/wp-content/uploads/language/en_US.png IP188.114.97.1:0
File typePNG image data, 30 x 16, 8-bit/color RGBA, non-interlaced\012- data Hasha55f66bce7335e52b1bc11b32c1ce632 26739981256fae20acf617f7e627e1f1a8fceb07 8c80664aa64f4877f4a60089900b990df22db2eb92dca1a01de7f4abe944c4c0
GET /wp-content/uploads/language/en_US.png HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: image/png
content-length: 394
vary: cf-ipcountry,user-agent, Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:29 GMT
etag: "18a-5eed267701e90"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e82htX30Fo0J5hS%2FZkVCXg1adVqOEQpHih%2BY4Wcp7oWw122xo%2B0QTNMKcJIpcalP7ZUHKk%2FZrN8Y%2FcjlTpgnwR6dmLmUjcsU%2FOpJAzlSwxOR0jxIDewP1Cgrr%2Bdq0e1uy%2F%2B7PmY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d5ba1fab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/uploads/language/fr_FR.png | 188.114.97.1 | 200 OK | 122 B |
URL HTTP/2www.zoompretty.com/wp-content/uploads/language/fr_FR.png IP188.114.97.1:0
File typePNG image data, 21 x 16, 8-bit/color RGBA, non-interlaced\012- data Hash1ea25108fe6b2b024305800fe86724b5 63142ec079314fc7fdce5fa316aea79e388ec0ea 82a5f6e70a8d7c0330366f5c50d2ab525d485b02874941abf4d21d64653fb546
GET /wp-content/uploads/language/fr_FR.png HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: image/png
content-length: 122
vary: cf-ipcountry,user-agent, Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:29 GMT
etag: "7a-5eed267701e90"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ItClbeADObJKQU%2FyGe1hXcMT5Xa8UZkPHMIzmQi4JI1i3JC4eOx9NYdc2GnfPyenoqWUy79OuWezByUovKPZL7CWA0scNRZuXMmdPtQGvqFMbYgo%2BNVXRJkUlkXU6pjvbpf8G%2F0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d5b8dfab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/uploads/language/es_ES.png | 188.114.97.1 | 200 OK | 439 B |
URL HTTP/2www.zoompretty.com/wp-content/uploads/language/es_ES.png IP188.114.97.1:0
File typePNG image data, 24 x 16, 8-bit/color RGBA, non-interlaced\012- data Hashe3802529f5b0f0ab4f308f30001c4c82 4c42b6660eb7b464168f093eb0e951af0b419fca c130516bc826fd2c82a768598c76eb3386dc1d4d99c8b32b815ddc65c18e102a
GET /wp-content/uploads/language/es_ES.png HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: image/png
content-length: 439
vary: cf-ipcountry,user-agent, Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:29 GMT
etag: "1b7-5eed267701e90"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SdRgjnkSKmCgtW5n9qFXsVf4%2Fr0sVMPpVIIvYlaSotGJW1Xz1%2FJl%2B20gFsfJi0mn3riMdXSzgdgZ%2F7amtI1AWjUbahO31%2F2%2FAmqaKuCoNOgu5F0AG8lzRjATNRx2BqG%2BNw2fhhI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d5b8bfab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/uploads/logo/br4.png | 188.114.97.1 | 200 OK | 4.4 kB |
URL HTTP/2www.zoompretty.com/wp-content/uploads/logo/br4.png IP188.114.97.1:0
File typePNG image data, 105 x 68, 8-bit/color RGBA, non-interlaced\012- data Hash8a6dcc8ce4a948592cf39f294dfc4d59 9573852ba997c09ddf371677c0886770a1cc9bce a1a6a44f01b57e9b4a0da2ce51704fba30621e933b1aa88d965c7b4d475d7aa9
GET /wp-content/uploads/logo/br4.png HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: image/png
content-length: 4390
vary: cf-ipcountry,user-agent, Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:29 GMT
etag: "1126-5eed267701e90"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3XQ63lTMgBiUzmzvqMGv0F94PlsXh6OrRHRA0CiFEnKKVjag4Y6iyBSQSqdStDHhXGuDmBeBda0EC1xvRHGHuWy7PdAMTkLFsHz%2FX8JrfRsHETFXo690EL4IReJ1OALDWARUGN8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d6bacfab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/uploads/language/nl_NL_formal.png | 188.114.97.1 | 200 OK | 150 B |
URL HTTP/2www.zoompretty.com/wp-content/uploads/language/nl_NL_formal.png IP188.114.97.1:0
File typePNG image data, 21 x 16, 8-bit/color RGBA, non-interlaced\012- data Hash13bb06980a32e43772267638ae9ab540 09cc5aeff73cc12697401089cc9e7cbaaa76c270 780def5181c1f99e71979a45f7c58025abc4b21d54027224b6ecf01a3735f8ac
GET /wp-content/uploads/language/nl_NL_formal.png HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: image/png
content-length: 150
vary: cf-ipcountry,user-agent, Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:29 GMT
etag: "96-5eed267701e90"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bK%2FZs%2B%2BXk1I4Hr4jJM5dDXlrCKlan8wyqSenrV%2F6hk7%2BEgRi1vQjezz6bMRLnEmEFxDzNsUcckQ%2FeBm1uMV2%2FAr2fASqG2OrbwTPhJ%2FB7pbW0zPLOOpcUMOq23TaqFmLhuS4KZU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d5ba0fab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/uploads/logo/br3.png | 188.114.97.1 | 200 OK | 4.3 kB |
URL HTTP/2www.zoompretty.com/wp-content/uploads/logo/br3.png IP188.114.97.1:0
File typePNG image data, 103 x 67, 8-bit/color RGBA, non-interlaced\012- data Hash5ea04eb08c05a3ba846319ae8341af83 bd0891ffab71e27f5d9079efb55be1c748fa08bb 00d89a42ae0ad8363479d9ee4aef70beb331e3134eecbbfd06097e4041ebe66a
GET /wp-content/uploads/logo/br3.png HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: image/png
content-length: 4250
vary: cf-ipcountry,user-agent, Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:29 GMT
etag: "109a-5eed267701e90"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QgiWhOksEH28xq4GpLE07NYBDlN66RhmNMpHX6jUso5mfVzZPHdhNdLqbnuApIrj5nFG53TYp8I0OSaweoQC7YD0hjTf4QAiZeOO0shv91SKOxMgNZ%2FxMVAe8akGpgn5%2BLnBUPU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d6ba7fab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/uploads/language/it_IT.png | 188.114.97.1 | 200 OK | 125 B |
URL HTTP/2www.zoompretty.com/wp-content/uploads/language/it_IT.png IP188.114.97.1:0
File typePNG image data, 21 x 16, 8-bit/color RGBA, non-interlaced\012- data Hashc3488126c7b6249048a59769381dfe44 133fdcc1faec93e2806f50044f924dae33c5dea8 b79f370b1361060d3538a41431e1ad56c4631e23450e62a9ecc9fab6cb53669f
GET /wp-content/uploads/language/it_IT.png HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: image/png
content-length: 125
vary: cf-ipcountry,user-agent, Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:29 GMT
etag: "7d-5eed267701e90"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jUu47giSPsfLBULxMMFEZtgbXIsgIgiuoLwQXQAH3B%2B2aGDSYGvPH5p2plfCg2JS7wT%2B7KUw%2FMT2t5%2B698mP6p6HiZKiu83DOLzzdJ%2BxE4k8U941KJKvXfp6Ag42bm%2Fki1jF0UA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d5b9efab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/static/5394/6117429585ba2dd5681ee342.jpg | 188.114.97.1 | 200 OK | 14 kB |
URL HTTP/2www.zoompretty.com/static/5394/6117429585ba2dd5681ee342.jpg IP188.114.97.1:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "Processed By eBay with ImageMagick, z1.1.0. ||B2", progressive, precision 8, 274x400, components 3\012- data Hashc68fb801f3e7bd78f4e691e69a639ee3 569d5b21e3dddf909e2fa90b15397bc701e795fb eb3368af5be9d904644152c10b7635558e7f7f0b5b8ad3c170ec7d58d39f0809
GET /static/5394/6117429585ba2dd5681ee342.jpg HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:42 GMT
content-type: image/jpeg
content-length: 13538
last-modified: Sat, 14 Aug 2021 04:12:05 GMT
etag: "61174295-34e2"
expires: Thu, 02 Mar 2023 02:32:49 GMT
cache-control: public, max-age=2678400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FMx2fQfhQGtzPK78oSN1%2Fe83ZX9uqgtxquKcnvyj0%2B3EnxRtTCzqNPuqeBAtxuNlwaqZtLiKfoBUPyh2B%2FDxZLYTHK8%2FPCsJesCTV%2FFC%2BxZlEhCFfT217C6p4RvwLrf0o2J3kLyQmMY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 7924490d6bb2fab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/uploads/logo/home_logo.png | 188.114.97.1 | 200 OK | 51 kB |
URL HTTP/2www.zoompretty.com/wp-content/uploads/logo/home_logo.png IP188.114.97.1:0
File typePNG image data, 760 x 328, 8-bit/color RGBA, non-interlaced\012- data Hash4307d65b33ac2758b854b074b120a480 18ed355188ec13ba0d0633ab831083d44b8ec48f 9c3b31786f333f8b9744d5b72b326afdfc398291934f55ae604927ec36a3db5f
GET /wp-content/uploads/logo/home_logo.png HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:42 GMT
content-type: image/png
content-length: 50942
vary: cf-ipcountry,user-agent, Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:29 GMT
etag: "c6fe-5eed267702278"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1POx0TXKezOYpKeowIXkxhMOMDlz%2Fdd0JEVcdBr8NRmCFLROF2ii8KianbieZGSbpDkc2OGRlli1c%2Ff2vEKjsewSMi81dgpx4PU78hvXE1xmolsXfXUbwOFep8cBR%2BJe2aSK9%2Fg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d5b88fab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/static/1247/611742ec85ba2dd5681f6cff.jpg | 188.114.97.1 | 200 OK | 11 kB |
URL HTTP/2www.zoompretty.com/static/1247/611742ec85ba2dd5681f6cff.jpg IP188.114.97.1:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "Processed By eBay with ImageMagick, z1.1.0. ||B2", progressive, precision 8, 400x214, components 3\012- data Hash2ad312c007c3d9cea2f3dab5e12eb105 60a0d4686fda0ab2521211fca2a0a323cf017ecd 38fb7d0e28b0019490034f68030e0f27edea2bbca1fd4f82fcd42f4b7722771d
GET /static/1247/611742ec85ba2dd5681f6cff.jpg HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:42 GMT
content-type: image/jpeg
content-length: 10553
last-modified: Sat, 14 Aug 2021 04:13:33 GMT
etag: "611742ed-2939"
expires: Thu, 02 Mar 2023 17:49:42 GMT
cache-control: public, max-age=2678400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9cmMO%2BlY7TVMRf1a7I3FH%2BBxYkYB1xTHo34xAA7nVlTaw%2FeHaL4Kpv9F3S2e7LadgrjydC7d56TVEimboejULLSHOV4xe3buUYlKISAyDM6djVHuP%2BUi0b5w%2FsfrhyVfp4tRI0ne4ac%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 7924490d6bb1fab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 1.5 kB |
IP142.250.74.131:0
Hash5ec092e8ffa7a3592dac155a1426abba f1ccb30169cdb55c28566257a09446e591b62136 6d3dfd977904a64f6edfdc8eaa4e6311e8d58b6ede3102bb482f20c169143d38
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 17:49:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hashf075625a67cefc01c034a3c732ec8023 c3ef563fbf1cf30f75fc931f82426a0f859ccb6d 75ce941806680157fcca91d6074496cbbc7cdcf6da28fa35384273bf9a76d588
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 17:49:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 5.2 kB |
IP142.250.74.131:0
Hash6a51c95094a9710c2649a27159751602 f6c46141c95ec30ece64be696e05e212d1516a6e ae06b13a229e589ac52c6be3b520cda2a56792046b7bb45525f0f7ddeda1a7e9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 17:49:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.227 | 200 OK | 93 kB |
URL HTTP/2fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP216.58.207.227:0
Hashdc58473d57e79d35282d19c29afa6a67 f1675c811a16e959c6719f7b058276635a816fea ebd48795a11bea5112a78701fbba3d3b0be310c64e76c42a355419ec90e7daf7
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.zoompretty.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Jan 2023 18:52:41 GMT
expires: Tue, 30 Jan 2024 18:52:41 GMT
cache-control: public, max-age=31536000
age: 82621
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/static/2202/6117405185ba2dd5681b70ca.jpg | 188.114.97.1 | 200 OK | 17 kB |
URL HTTP/2www.zoompretty.com/static/2202/6117405185ba2dd5681b70ca.jpg IP188.114.97.1:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, comment: "Processed By eBay with ImageMagick, z1.1.0. ||B2", progressive, precision 8, 400x353, components 3\012- data Hashe33bec9447ed1584c183c51b9e3a4400 99ad61cc63545496fa4f2fed1b96a52d2ab1c74d 84f7a3944a19db3a159392b2b853d33c1cf2d155d8318474e471243d9b2b48ce
GET /static/2202/6117405185ba2dd5681b70ca.jpg HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:42 GMT
content-type: image/jpeg
content-length: 16797
last-modified: Sat, 14 Aug 2021 04:02:25 GMT
etag: "61174051-419d"
expires: Thu, 02 Mar 2023 17:49:42 GMT
cache-control: public, max-age=2678400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UeKMXDnMkvGFiL3amaUsTDQV8lGXuAIwXfnIH8wgGUZ4SzUZk8cAw7WTLugMDL1OWR7w%2FLhidyBEJm6nevzdrHyEdIJt0u9lsLE0OvkHRjpb%2FQ96BnOwTk7P1l6Pi3SATQuq6hIn3io%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 7924490d6bbdfab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 | 216.58.207.227 | 200 OK | 52 kB |
URL HTTP/2fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 IP216.58.207.227:0
Hash9cdc9b09be550ebe08a94f03fca0982c 0b18fd8b27d4c30326a4b34e8340886aa832265a 9230210febb170d2ba55ff1006467ba59d3388694c101956e80cd19e30f5a5d4
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.zoompretty.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 31320
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 29 Jan 2023 10:24:40 GMT
expires: Mon, 29 Jan 2024 10:24:40 GMT
cache-control: public, max-age=31536000
age: 199502
last-modified: Mon, 15 Aug 2022 18:11:37 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/static/9526/60ef26226854b6d1fcde9746.jpg | 188.114.97.1 | 200 OK | 17 kB |
URL HTTP/2www.zoompretty.com/static/9526/60ef26226854b6d1fcde9746.jpg IP188.114.97.1:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, comment: "Processed By eBay with ImageMagick, z1.1.0. ||B2", progressive, precision 8, 400x268, components 3\012- data Hashb3690f9b45ed10277a8638c521ac39eb 49408bb711ec2121053d6e802756238a376d3a8b 84cc462624b2f490c2fd89080aa5b82598fdc83756651a56845f45d06aa81c99
GET /static/9526/60ef26226854b6d1fcde9746.jpg HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:42 GMT
content-type: image/jpeg
content-length: 16633
last-modified: Wed, 14 Jul 2021 18:00:02 GMT
etag: "60ef2622-40f9"
expires: Thu, 02 Mar 2023 17:49:42 GMT
cache-control: public, max-age=2678400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FN9NckQd2xwPYai8o8CSWbwQIj6Bays87qT491vl22E0SXaUZZH50F35nFAgdjoG5i44ccqDt8xVZ8xfjDF089Le4UQyUkSqbOUjM4yTuJfIPg%2B2rv%2B8C%2BlhNDMKt%2BjhhQ%2BSPVEjMpA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 7924490d7bc0fab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 2.6 kB |
IP142.250.74.131:0
Hash59c94addd80daf415693b5f55cc65e3e 98b80c6eca7a9afa1e2cc207b74f47e7e0ce4e29 ffdf8c09100b08354f85254aa27b11c27fe7e1561bd98d44cfff4275e17f9f8d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 17:49:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.zoompretty.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js | 188.114.97.1 | 200 OK | 23 kB |
URL HTTP/2www.zoompretty.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP188.114.97.1:0
Hash6077f87efa2a140a39cd12c2a9387553 3677368b3c5c2d4826a64221baf2f7ed2db7363e 6735c1f51dcce79fcb225bd4157ee0dc436e6bd957e4bfc06b2e8c869ed33e89
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: application/javascript
last-modified: Mon, 23 Jan 2023 11:05:52 GMT
etag: W/"63ce6a10-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OLW0SFGja60a%2BC4nd3pY5VUls%2BrRLE8DXZ9Ek1R1FTlHhlNEn2a04YLsm3u5%2Br5t8jsv%2BQP4pbLQWPpfkfl2xjJMuvorrGraUoXDjarwYsz74Q8pJn%2F8UUG47p9DQM30jtueZ04%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7924490d6ba4fab8-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Thu, 02 Feb 2023 17:49:41 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/static/5014/6117431685ba2dd5681fab16.jpg | 188.114.97.1 | 200 OK | 42 kB |
URL HTTP/2www.zoompretty.com/static/5014/6117431685ba2dd5681fab16.jpg IP188.114.97.1:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Processed By eBay with ImageMagick, z1.1.0. ||B2", progressive, precision 8, 608x1080, components 3\012- data Hash91648060158c375a30431ad7813b6ab9 05c2529669c574779812c675a76a0f7e4ff0fa3d 21fdb3e59189566c72dad42b8f614f83649e573f65272c17f58c5a8273c9b9c3
GET /static/5014/6117431685ba2dd5681fab16.jpg HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:42 GMT
content-type: image/jpeg
content-length: 42128
last-modified: Sat, 14 Aug 2021 04:14:15 GMT
etag: "61174317-a490"
expires: Thu, 02 Mar 2023 17:49:42 GMT
cache-control: public, max-age=2678400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zBZeWTi5uXBMOjEuRdfqYbOB%2BksUu49986UTF5SNqngHwrM9dX0%2F%2FH7vPS9xsSK4uPC1SF1ZqtJnTmhxiZNkmnqIA3FjmV%2BznDGvxw1zt5OH0QLedeCaWVeRFmNPmIPZIREOXs0hIGM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 7924490d6bb7fab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/static/7331/60e5c7d8e9f4224eb5e92123.jpg | 188.114.97.1 | 200 OK | 357 kB |
URL HTTP/2www.zoompretty.com/static/7331/60e5c7d8e9f4224eb5e92123.jpg IP188.114.97.1:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, comment: "Processed By eBay with ImageMagick, z1.1.0. ||B2", progressive, precision 8, 1200x1600, components 3\012- data Size357 kB (356618 bytes) Hash14b280572888f9c4b143a1dde122d7b1 3b953b6597d20d356c210c218d8dd0ea3e4e74dc c27dd7504b4be21ab0b6f36c0a50c847bd5e687e32d09364a3cd2ca91f72ad26
GET /static/7331/60e5c7d8e9f4224eb5e92123.jpg HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:42 GMT
content-type: image/jpeg
content-length: 356618
last-modified: Wed, 07 Jul 2021 15:27:20 GMT
etag: "60e5c7d8-5710a"
expires: Thu, 02 Mar 2023 17:49:42 GMT
cache-control: public, max-age=2678400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TdLevBWD93DYdzFGPRKWQNmWDsXRm6S4gU3TeV3ENn9Gid0c%2BxAUBnHBh23v40z%2BpA6954sIdtRXurBlLbnfv86TX9sb21zy4wni4sk71vbZhUinaU6YwahJfKergUzloufMBzoO7pY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 7924490d6bb4fab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=5.7.0 | 188.114.97.1 | 200 OK | 195 kB |
URL HTTP/2www.zoompretty.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=5.7.0 IP188.114.97.1:0
File typeUnicode text, UTF-8 text, with very long lines (532) Size195 kB (194601 bytes) Hash1ac4da2b080687919696a1309272d882 c4c8e6f97a80f7bbfab055fa277ec3f831b1a758 98e36734ba1bcd6cb00d1d22656c10dcbc199f84f97c2d1140be5ed460566f57
GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=5.7.0 HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: text/css
vary: cf-ipcountry,user-agent,Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:28 GMT
etag: W/"4e76-5eed267618075-gzip"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fqy8gZBgdq%2FJFGOCPXSS1G7bTCvDW1TaCtF8ePLLnkrL8W3l91cBQMvbjSuHslx0oCL2DgtgcxbL%2FiKurXu1TuNOVaJAHVhCsPoGIJnCLf0e93OBiGIaOdvvBjQnvb2zFTRlC%2BE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d2b60fab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 280 B |
IP93.184.220.29:0
Hasha209955757cb269147dbca0401220b61 a009f4a493015e9a7b3f7a816469a4e78e1ae0bd 4931d8b4f29cad4fcf75bcf35b16a6112a9f191dad33fb642f07c07a9cc452a5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2760
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 17:49:45 GMT
Etag: "63d86142-118"
Last-Modified: Tue, 31 Jan 2023 17:03:45 GMT
Server: ECS (amb/6B8A)
X-Cache: HIT
Content-Length: 280
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 385 B |
IP93.184.220.29:0
Hashefc232a59c2934bc093ac4007a18ba3e 902789a0ae1fccb03bd2ccc45e26318d0d4e14d8 f2da804fdd126bb49892273e892a555d1f8b1437559073d4234fa9a9aad13a9f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2761
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 17:49:46 GMT
Last-Modified: Tue, 31 Jan 2023 17:03:45 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 280
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg | 34.120.237.76 | 200 OK | 15 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg IP34.120.237.76:0
Hashd7cf193cb8d344f469b88d2dd7a268ad b95de9b34023df75286d7bef77d7bedde5b95314 0d303d7d08c8e3c7d46c97b51d8052e51636dd01de900b5fa66c7daad3164ed2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9600
x-amzn-requestid: 48094e1a-d550-4a91-b87c-4a08505f7cce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVsWcFN7IAMF2pg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d2275c-5ced593a7e2126c9494563df;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:10:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: v9Wphg34UGE5kkZ9RKBcphcpPuCn54oVyepzTW5rZ3J9nkL9J501PA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 22:03:23 GMT
age: 71184
etag: "7da46843b6d885f38a4759a08e6c899906ab7b97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | 188.114.97.1 | 200 OK | 0 B |
URL HTTP/2www.zoompretty.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 IP188.114.97.1:0
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: application/javascript
vary: cf-ipcountry,user-agent,Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:29 GMT
etag: W/"2bd8-5eed267743d3a-gzip"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xrsJhJhzxg8XntidFUTekYOjkz2w40IpKPXwZ23hetuE3ufQZUNt4zSRTE7oXpveDG%2BmnaeffI6APH5NKM02Jsgbo%2BVER8M9w%2FDaboU%2FP0wuyPCnJ0oyzMJcx8k3z167W41%2FqKQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d4b7ffab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.5.7.0 | 188.114.97.1 | 200 OK | 0 B |
URL HTTP/2www.zoompretty.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.5.7.0 IP188.114.97.1:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.5.7.0 HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: application/javascript
vary: cf-ipcountry,user-agent,Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:28 GMT
etag: W/"2549-5eed26761ce95-gzip"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eFlDUGWN2xd3h7jATy2pCvePokPlkuU8OSEQWGSGVrLgHlyRfiBcgPWiQ%2BaBz3rc9aguTO7SV7njOz4piW7mqWnPjhzEcNHRSU7T1bCGQRAJUH7Jl3ZpHKYB0jcPRjX%2F15YdWXY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d4b80fab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/ | 188.114.97.1 | 200 OK | 0 B |
IP188.114.97.1:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET / HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: text/html; charset=UTF-8
link: <https://www.zoompretty.com/>; rel="alternate"; hreflang="en-us", <https://www.zoompretty.com/>; rel="alternate"; hreflang="en-gb" , <https://www.zoompretty.com/>; rel="alternate"; hreflang="en-ca" , <https://www.zoompretty.com/>; rel="alternate"; hreflang="en-au" , <https://www.zoompretty.com/>; rel="alternate"; hreflang="en-nz" , <https://www.zoompretty.com/>; rel="alternate"; hreflang="en-ie" , <https://www.zoompretty.com/>; rel="alternate"; hreflang="en" , <https://www.zoompretty.com/>; rel="alternate"; hreflang="x-default"
content-language: en
vary: cf-ipcountry,user-agent,Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Tue, 31 Jan 2023 17:49:41 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LsZR57ameaAO08G9QxYXU9KrLbHB8SGYqVzsuIsytp6ELYqFKatrwG%2BOjgSA8wpRymy3pn5FUTkJ689ndvwgnN7E29NmJh32SB6I5uJtuag%2Fjo7VfVoI9OptBCk9Bx32uLoVLx8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 792448f959f5fab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.7.0 | 188.114.97.1 | 200 OK | 0 B |
URL HTTP/2www.zoompretty.com/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.7.0 IP188.114.97.1:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.7.0 HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: application/javascript
vary: cf-ipcountry,user-agent,Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:27 GMT
etag: W/"3e0-5eed2675631fe-gzip"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HzgKmgZih0EPzGVT32YiW5inxVvL97BbI8TppaW2vTlkyD0Af%2FYgzhqzYdiqBPsbLv%2F0kIxmyRQVkaayCULTX0dhQ5MMKHKbwHazgdqsg3o03aE8J%2BNqjb99VASTvopDe9tU8%2F0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d4b82fab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/themes/hono/js/ebay/graph.js?ver=5.9-alpha-51632 | 188.114.97.1 | 200 OK | 0 B |
URL HTTP/2www.zoompretty.com/wp-content/themes/hono/js/ebay/graph.js?ver=5.9-alpha-51632 IP188.114.97.1:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/hono/js/ebay/graph.js?ver=5.9-alpha-51632 HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: application/javascript
vary: cf-ipcountry,user-agent,Accept-Encoding
last-modified: Sat, 14 Jan 2023 07:02:41 GMT
etag: W/"6af-5f233efa6e351-gzip"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ABQw%2BC0zWVDJ7O7GLoEDhLlHJWMKiHtAkPToC406yGYFSc4vxXIcKsNTBes%2FEd8PWqT3tmwx1YcmP9Y3IKA0%2BdgNiz3pYcp3spcB3x%2FkJ0PuCc6AI4v5GJJTBl67gycIRA7UcAg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d5b87fab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=5.7.0 | 188.114.97.1 | 200 OK | 0 B |
URL HTTP/2www.zoompretty.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=5.7.0 IP188.114.97.1:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=5.7.0 HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: text/css
vary: cf-ipcountry,user-agent,Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:28 GMT
etag: W/"118d6-5eed26761845d-gzip"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YYCSEVHqgd%2FU%2B9bL0SmoPsijpZp6FBvkV%2Fqj%2FudWvQOSgowlzLIaxwTbmXfnGOKjzuTbrSWIL8ma5P57erkuQsve23xPQL%2BmJnnyxGeUtWIOilMgF0vckpFiaBEWE3hFO59B6zQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d3b61fab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/themes/hono/js/ebay/seo_ajax.js?ver=5.9-alpha-51632 | 188.114.97.1 | 200 OK | 0 B |
URL HTTP/2www.zoompretty.com/wp-content/themes/hono/js/ebay/seo_ajax.js?ver=5.9-alpha-51632 IP188.114.97.1:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/hono/js/ebay/seo_ajax.js?ver=5.9-alpha-51632 HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: application/javascript
vary: cf-ipcountry,user-agent,Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:29 GMT
etag: W/"6fc5-5eed2676ac768-gzip"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SGThrQpfLDhKinE1ERUubQNejmrlFdif84DZEKwgd4kbUe0ivREsUyvc5%2BirKfh7tRgJnGs1GaYD39lcGc3Nh4LobbrKF%2B63MAQt%2Bk5yEHB4r84Dyf5d%2BBnwLT7iockRrBf2FqE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d4b83fab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/plugins/mega_main_menu/src/css/cache.skin.css?ver=1634782354 | 188.114.97.1 | 200 OK | 0 B |
URL HTTP/2www.zoompretty.com/wp-content/plugins/mega_main_menu/src/css/cache.skin.css?ver=1634782354 IP188.114.97.1:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/mega_main_menu/src/css/cache.skin.css?ver=1634782354 HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:42 GMT
content-type: text/css
vary: cf-ipcountry,user-agent,Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:28 GMT
etag: W/"35409-5eed2675afc87-gzip"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uxx8hFu1Er1%2BRF4GldhmZqVRVI72YTOEOPOILY%2Fv4jBM0Ae7DarEdrunkWwNXgbX0nlcXzkK8EiPFAXug1A4orwbnfgZX325mopYgQZtaWa4QqYTpe3Z9gCvAdY09DR2jIguUMc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d4b7bfab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.7.0 | 188.114.97.1 | 200 OK | 0 B |
URL HTTP/2www.zoompretty.com/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.7.0 IP188.114.97.1:0
GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.7.0 HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:42 GMT
content-type: text/css
vary: cf-ipcountry,user-agent,Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:27 GMT
etag: W/"76878-5eed2675566df-gzip"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OwmFx2PMKWiuSn8Of4YqCV9ChupPnWH2bi7lZYKNDwISwG83jQkMAI%2BTUbVFNFN%2FKGohJB0SFI%2BYqSnMImFkb6bQBkeYyLyk5CzMuEOSrTqCAKsmjblTOHhvVHwQPHLH3alW46A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d4b7cfab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/themes/hono/css/simple-line-icons.css?ver=2.4.0 | 188.114.97.1 | 200 OK | 0 B |
URL HTTP/2www.zoompretty.com/wp-content/themes/hono/css/simple-line-icons.css?ver=2.4.0 IP188.114.97.1:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/hono/css/simple-line-icons.css?ver=2.4.0 HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: text/css
vary: cf-ipcountry,user-agent,Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:29 GMT
etag: W/"329e-5eed2676a1f71-gzip"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n5cHnUpscy95CPeFf05R%2BehuWgNsXars1OYKuJTY6kxmPIa7c9sf0jaJnJ2N0k7jDxrXNEPyPDD%2FkEJpZgUR9W80OxT0N%2FotshbOHIklD8uI6i%2BVfqYSKisHjsJpjZ6DFapl0DI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d3b6efab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/themes/hono/style.css?ver=5.9-alpha-51632 | 188.114.97.1 | 200 OK | 0 B |
URL HTTP/2www.zoompretty.com/wp-content/themes/hono/style.css?ver=5.9-alpha-51632 IP188.114.97.1:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/hono/style.css?ver=5.9-alpha-51632 HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: text/css
vary: cf-ipcountry,user-agent,Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:29 GMT
etag: W/"12ff-5eed2676c3e66-gzip"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vjoI3ZPGgHwo%2FcGf66tpM27Q1nyQ5TUS5F0VwdWMfVX%2BJC1YHiSbAGhbaXswbq2Vk%2BqvGAQ%2Br6us1N8jDf8yDarvJsQdFhAPSFciwe%2B3SO%2F2MI42Ro2GEDUuUbFddD5niDKRBPQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d3b69fab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.3.1 | 188.114.97.1 | 200 OK | 0 B |
URL HTTP/2www.zoompretty.com/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.3.1 IP188.114.97.1:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.3.1 HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: text/css
vary: cf-ipcountry,user-agent,Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:27 GMT
etag: W/"41b7-5eed267551ca7-gzip"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NEkHHyitlRuEy8Se1F0KpUXS6dljGFK9%2FsQhhG%2BofvmMAfnYxG1piUVE8u1Dxs1dqDToIpWgAPAoSCRukmSctj%2BoIoPtzTwstWVVt2WCU9xmhikg%2FJjQ%2B8xm0FyyJfWs77mi9ew%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d2b53fab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/themes/hono/js/ebay/language-currency.js?ver=5.9-alpha-51632 | 188.114.97.1 | 200 OK | 0 B |
URL HTTP/2www.zoompretty.com/wp-content/themes/hono/js/ebay/language-currency.js?ver=5.9-alpha-51632 IP188.114.97.1:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/hono/js/ebay/language-currency.js?ver=5.9-alpha-51632 HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: application/javascript
vary: cf-ipcountry,user-agent,Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:29 GMT
etag: W/"146c-5eed2676ac768-gzip"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2ByUoOu1bPQS2gJiKquNqgsi%2FzHCqk6dlbBM%2BBFBVc4Y12J333fkGzMIDPJfmLGlcFc4R%2B84PYwozf3WV5A1qsR5Pw4VFnB25eqaE4TGHemFchvBWJ8ZTam8mJtMZLDgWxdX5%2FRw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d5b86fab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/themes/hono/css/owl.carousel.min.css?ver=2.3.4 | 188.114.97.1 | 200 OK | 0 B |
URL HTTP/2www.zoompretty.com/wp-content/themes/hono/css/owl.carousel.min.css?ver=2.3.4 IP188.114.97.1:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/hono/css/owl.carousel.min.css?ver=2.3.4 HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: text/css
vary: cf-ipcountry,user-agent,Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:29 GMT
etag: W/"d17-5eed2676a1f71-gzip"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fWhFPMtxN0VMqOgr%2B3R%2FtxEkQiRrPaDDR6BZLPFqYmcJe8hGT8xXLP6hedKKOpX0JvXRuDBL6oPHs5uBWzhevC8JWt4PQOBy42pnyp9N2WidT5q%2BVNYDFmeLP6fkMPCXTzWbTH4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d3b64fab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/themes/hono/css/font-awesome.min.css?ver=4.7.0 | 188.114.97.1 | 200 OK | 0 B |
URL HTTP/2www.zoompretty.com/wp-content/themes/hono/css/font-awesome.min.css?ver=4.7.0 IP188.114.97.1:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/hono/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: text/css
vary: cf-ipcountry,user-agent,Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:29 GMT
etag: W/"792a-5eed2676a1b89-gzip"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uD2wMIp9F4BxoDQUzbgvEFBzcp74NznB8tXkm6K1fHoGjfN1tNNriQ%2Bbbn1hhWjLy4p5FE8hzPrtMK2ex8TWSWFJJTENOFrgVhZeLF4voIyINOzRxVrk86%2B%2BDXknFiwQMHKB47Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d3b6cfab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/themes/hono/css/theme2.css | 188.114.97.1 | 200 OK | 0 B |
URL HTTP/2www.zoompretty.com/wp-content/themes/hono/css/theme2.css IP188.114.97.1:0
GET /wp-content/themes/hono/css/theme2.css HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:42 GMT
content-type: text/css
vary: cf-ipcountry,user-agent,Accept-Encoding
last-modified: Tue, 31 Jan 2023 17:49:39 GMT
etag: W/"5ed7c-5f392f4b14cbe-gzip"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ipiN1%2FXUp%2Bx5ONgbyyXYuCTOwiCAZgUqCND9%2FSy%2Fb1mJ6BTg45CCmBU5vqXikOEec0k5DnGHY6j6X3TrKOqtnG%2BLHeJ6r4jqFc2YyLe8%2B72b4nnQO3C%2Bvgt4fj%2BhITXPIy2dCnU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d4b76fab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-includes/css/dist/block-library/style.min.css?ver=5.9-alpha-51632 | 188.114.97.1 | 200 OK | 0 B |
URL HTTP/2www.zoompretty.com/wp-includes/css/dist/block-library/style.min.css?ver=5.9-alpha-51632 IP188.114.97.1:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.9-alpha-51632 HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:42 GMT
content-type: text/css
vary: cf-ipcountry,user-agent,Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:29 GMT
etag: W/"13ab6-5eed26771ff05-gzip"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dOninODccmR1SIRWMlbHEA0JSsz99qf3GkSooMu5vHxXcNjwZIfgiCN6rD%2FWoqFtD3EOoJZHtcUBGLjy1n71W4QVKiM73HLV%2B0EXWNnmW6VfNzwWrFSfN6Ep%2Fxj%2Fr9F7ZlhB974%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d2b58fab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| dog.theurl.fun/dog.js | 188.114.97.1 | 200 OK | 0 B |
IP188.114.97.1:0
GET /dog.js HTTP/1.1
Host: dog.theurl.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:46 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, POST, PATCH, OPTIONS
access-control-allow-headers: Content-Type, Authorization, Time-Zone
access-control-allow-credentials: true
access-control-max-age: 3600
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Tue, 31 Jan 2023 15:47:07 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BAuoZCa1D4EOt%2FEfvkrSQjPW5zc1zzlwvXJfC%2FHbf1bBSBng15op66RBv2FZzq%2B9z5077NN3QsaqV89mNHtUJ9T7X6XMhgKZ6QJ1fJfvR0rqNHUPnhkaaYgtMkkQoM%2BqSA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79244929df280b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| unpkg.com/mathjs@7.0.1/dist/math.min.js?ver=5.9-alpha-51632 |  104.16.123.175 | 302 Found | 0 B |
URL HTTP/2unpkg.com/mathjs@7.0.1/dist/math.min.js?ver=5.9-alpha-51632 IP104.16.123.175:0
GET /mathjs@7.0.1/dist/math.min.js?ver=5.9-alpha-51632 HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
location: /mathjs@7.0.1/dist/math.min.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GR4F5S4HKDZYZ7RBXMZTKBB7-fra
cf-cache-status: EXPIRED
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7924490d9854b518-OSL
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Open%20Sans:300,400,600,700,800,300italic,400italic,600italic,700italic,800italic&display=swap&ver=1675132372 | 142.250.74.106 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Open%20Sans:300,400,600,700,800,300italic,400italic,600italic,700italic,800italic&display=swap&ver=1675132372 IP142.250.74.106:0
GET /css?family=Open%20Sans:300,400,600,700,800,300italic,400italic,600italic,700italic,800italic&display=swap&ver=1675132372 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 31 Jan 2023 17:49:41 GMT
date: Tue, 31 Jan 2023 17:49:41 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/plugins/mega_main_menu/framework/src/css/icomoon.css?ver=2.2.1 | 188.114.97.1 | 200 OK | 0 B |
URL HTTP/2www.zoompretty.com/wp-content/plugins/mega_main_menu/framework/src/css/icomoon.css?ver=2.2.1 IP188.114.97.1:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/mega_main_menu/framework/src/css/icomoon.css?ver=2.2.1 HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:42 GMT
content-type: text/css
vary: cf-ipcountry,user-agent,Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:28 GMT
etag: W/"fc97-5eed26759a4c9-gzip"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JExXYBjJifSkpi%2FHzgQmgf%2BV3kGeU7DBLhSeGTZcV2n%2BOpizfS5GQcPR6MYQ9U1w6zkqmlDx05N5jvtHXiQDUo1h4Y1K4ocZJmH0908KUrcqervPrjppLAD4iD%2BBN5l5jM%2FM27w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d4b7afab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/themes/hono/css/bootstrap.min.css?ver=4.1.1 | 188.114.97.1 | 200 OK | 0 B |
URL HTTP/2www.zoompretty.com/wp-content/themes/hono/css/bootstrap.min.css?ver=4.1.1 IP188.114.97.1:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/hono/css/bootstrap.min.css?ver=4.1.1 HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:42 GMT
content-type: text/css
vary: cf-ipcountry,user-agent,Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:29 GMT
etag: W/"22682-5eed2676a0fd1-gzip"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sJMbEJAu4wM31ERTK1CGWgAKqN1IZxRJjm6DldqIP4Hc11CttJ8CI8rBijK49HYkzQ5WYbr4Vhq10%2BtQWflIjO25VaE6CCwoIX695PoVLU0cRTbWT084ST5s9XJu03sO20KWwOA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d3b72fab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.4.2 | 188.114.97.1 | 200 OK | 0 B |
URL HTTP/2www.zoompretty.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.4.2 IP188.114.97.1:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.4.2 HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: text/css
vary: cf-ipcountry,user-agent,Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:27 GMT
etag: W/"a50-5eed26754f1b0-gzip"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=abs1ECMOC6BhrkU3zvbzmqIbTUy4l4fs49Kyr752k8QIA36ac7PhT7h1rcaLCIS7s7naC8j3F88UmxUvbDbn2%2ByvMycEyBbSpNaGSkP0PxeahtiM1MxD3boLWsU0CDctR%2B4w55Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d2b5efab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/themes/hono/css/ionicons.css?ver=2.4.0 | 188.114.97.1 | 200 OK | 0 B |
URL HTTP/2www.zoompretty.com/wp-content/themes/hono/css/ionicons.css?ver=2.4.0 IP188.114.97.1:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/hono/css/ionicons.css?ver=2.4.0 HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:42 GMT
content-type: text/css
vary: cf-ipcountry,user-agent,Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:29 GMT
etag: W/"cf23-5eed2676a1b89-gzip"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LUoBGcs0L1%2BqaBfSC%2BjBMu6j65VXXiaV8k9xr26jCPGDNlp0vtNkL%2FVy0%2FtKUTFlpqGh0OOooS4dy6enlvRIWaPW%2BmmLtZ%2F8pwr%2BTbtMZHvRuwMnx2KbnufTpwrfsEea8X7lXN8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d3b6dfab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0 | 188.114.97.1 | 200 OK | 0 B |
URL HTTP/2www.zoompretty.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0 IP188.114.97.1:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:42 GMT
content-type: application/javascript
vary: cf-ipcountry,user-agent,Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:29 GMT
etag: W/"15db1-5eed267744cda-gzip"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NIMB9qFWqNSWRV191RPU4i%2BG9uQ3IzfLdUhIR%2BHg2CTIY2K%2BdMVvhuOxvqPKra0KgB8SB0lkQsgv%2BNuIrUCxJCoJRL8lL7oQ9IApIgcPXVcL90N71y0tkVHswZOBXxVWlIu8taM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d4b7dfab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/themes/hono/css/megamenu_style.css?ver=2.0.4 | 188.114.97.1 | 200 OK | 0 B |
URL HTTP/2www.zoompretty.com/wp-content/themes/hono/css/megamenu_style.css?ver=2.0.4 IP188.114.97.1:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/hono/css/megamenu_style.css?ver=2.0.4 HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:42 GMT
content-type: text/css
vary: cf-ipcountry,user-agent,Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:29 GMT
etag: W/"166f3-5eed2676a1f71-gzip"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i59%2BKqo%2F2tO85J1hw%2BYA%2Fk2k3Kqq%2BZ2JygeW2dFTNf7vM63zjLZQHg9iEvsQtzdDnsVJe0T9LmiXo%2BODNuxQBgz%2FCOLBgDH3smilrJCyLiuaymFVb43KueMibO%2BVCQcNDM6kGIA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d3b6bfab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=5.7.0 | 188.114.97.1 | 200 OK | 0 B |
URL HTTP/2www.zoompretty.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=5.7.0 IP188.114.97.1:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=5.7.0 HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: application/javascript
vary: cf-ipcountry,user-agent,Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:28 GMT
etag: W/"f74-5eed26761c6c5-gzip"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T%2BwNWsBc1U3BtCju4DogrYJQVtj4e0IDTSyPe5fWwqitBittjC3f3G72k5gUEAavYJLYt%2BUN%2F69BaHvqAU9LpQ25Ry0tpgvuUMwX8MFGjpBvXYjEU7r%2FnslCYlhsA4w30eZBGOI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d4b81fab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=5.7.1 | 188.114.97.1 | 200 OK | 0 B |
URL HTTP/2www.zoompretty.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=5.7.1 IP188.114.97.1:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=5.7.1 HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:42 GMT
content-type: text/css
vary: cf-ipcountry,user-agent,Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:28 GMT
etag: W/"2f230-5eed26765ba77-gzip"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9nQbrBk0xsEtjxWKgFUFEXvirPmjBztRHuLJg4dFRt%2BSXcRsl96Ipd56Ue0yJmOG52Wg4rM0RA377o%2F6cl44q53RBvFnD6fZEOzFjgEZvJLE%2FFiRYahVRDKph%2B5TJfgOe1SAETA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d2b5dfab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Open+Sans%3A300%2C400%2C600%2C700&subset=latin%2Clatin-ext | 142.250.74.106 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Open+Sans%3A300%2C400%2C600%2C700&subset=latin%2Clatin-ext IP142.250.74.106:0
GET /css?family=Open+Sans%3A300%2C400%2C600%2C700&subset=latin%2Clatin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 31 Jan 2023 17:49:41 GMT
date: Tue, 31 Jan 2023 17:49:41 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto:400&display=swap | 142.250.74.106 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Roboto:400&display=swap IP142.250.74.106:0
GET /css?family=Roboto:400&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 31 Jan 2023 17:49:41 GMT
date: Tue, 31 Jan 2023 17:49:41 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.zoompretty.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=5.7.1 | 188.114.97.1 | 200 OK | 0 B |
URL HTTP/2www.zoompretty.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=5.7.1 IP188.114.97.1:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=5.7.1 HTTP/1.1
Host: www.zoompretty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.zoompretty.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 17:49:41 GMT
content-type: text/css
vary: cf-ipcountry,user-agent,Accept-Encoding
last-modified: Fri, 02 Dec 2022 06:25:28 GMT
etag: W/"14d2-5eed26765ba77-gzip"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KIH%2Bnmq70mDQH%2FrfE%2FBOMtEcbNpcQzhsHb2lH7uCWcTOXA%2FFYV1CxMAlN3Y2TOyqZSHHeBc%2BWAlv0o9f60dtVnzlBkKsOOji6znv3KycfPTTa1CBQTH8DWKIdZ5i984dXX1XHJ4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7924490d2b5afab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|