Overview

URL fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
IP50.87.146.64
ASNUNIFIEDLAYER-AS-1
Location United States
Report completed2022-10-04 15:39:25 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-10-04 2 fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip Malware
2022-10-04 2 fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip Malware
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

URL maps.google.com/maps/gen_204?target=api&ev=api_maprft&cad=host:www.google.c (...)
IP  216.58.211.14
Magic gzip compressed data, max compression\012- data
Size 258
MD5 d2f944aac738db63d5417c464b85f1e6
SHA1 fac0cd07fb24a363fdf096cc6e6479de4e997675
SHA256 20a3beccf2e94d82042de5a827a4218e884524c7cb2cf71edfc15bcf4ea3f80f
Analyzer Analysed Verdict Comment
VirusTotal 0/0


Passive DNS (20)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS fundaciondarydarse.org (67) 0 2020-05-04 04:44:19 UTC 2022-10-04 15:34:43 UTC 50.87.146.64 Unknown ranking
mnemonic passive DNS ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-10-04 15:17:25 UTC 93.184.220.29
mnemonic passive DNS stats.g.doubleclick.net (1) 96 2013-06-02 22:47:44 UTC 2022-10-04 05:06:06 UTC 74.125.131.154
mnemonic passive DNS fonts.googleapis.com (1) 8877 2013-06-10 20:14:26 UTC 2022-10-04 11:55:48 UTC 142.250.74.10
mnemonic passive DNS stats.wp.com (2) 2711 2017-01-30 05:06:59 UTC 2022-10-04 04:26:46 UTC 192.0.76.3
mnemonic passive DNS maps.gstatic.com (1) 0 2016-01-11 16:55:17 UTC 2022-10-04 05:38:13 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
mnemonic passive DNS www.google-analytics.com (1) 40 2012-10-03 01:04:21 UTC 2022-10-04 08:39:57 UTC 142.250.74.174
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-10-04 04:29:41 UTC 143.204.55.110
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-10-04 04:16:51 UTC 34.117.237.239
mnemonic passive DNS www.googletagmanager.com (1) 75 2012-12-25 14:52:06 UTC 2022-10-04 09:37:43 UTC 142.250.74.168
mnemonic passive DNS www.google.com (1) 7 2016-08-04 12:36:31 UTC 2022-10-04 04:25:35 UTC 142.250.74.164
mnemonic passive DNS r3.o.lencr.org (7) 344 2020-12-02 08:52:13 UTC 2022-10-04 04:17:22 UTC 23.36.76.226
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-10-04 04:45:06 UTC 52.38.146.2
mnemonic passive DNS img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-10-04 04:18:32 UTC 34.120.237.76
mnemonic passive DNS pixel.wp.com (1) 2545 2017-01-30 05:31:40 UTC 2022-10-04 04:26:51 UTC 192.0.76.3
mnemonic passive DNS www.gstatic.com (1) 0 2016-07-26 09:37:06 UTC 2022-10-04 09:46:17 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
mnemonic passive DNS maps.google.com (2) 1899 2016-05-21 18:40:38 UTC 2022-10-04 13:18:57 UTC 216.58.211.14
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-05-27 20:08:30 UTC 2022-10-04 15:06:58 UTC 143.204.55.115
mnemonic passive DNS ocsp.pki.goog (11) 175 2017-06-14 07:23:31 UTC 2022-10-04 04:17:09 UTC 142.250.74.3
mnemonic passive DNS fonts.gstatic.com (4) 0 2014-08-29 13:43:22 UTC 2022-10-04 09:46:16 UTC 216.58.207.195 Domain (gstatic.com) ranked at: 540


Recent reports on same IP/ASN/Domain/Screenshot

Last 3 reports on IP: 50.87.146.64

Date UQ / IDS / BL URL IP
2022-10-04 17:52:59 +0000
0 - 0 - 2 fundaciondarydarse.org/dora-bayer/williambrow (...) 50.87.146.64
2022-10-04 15:40:47 +0000
0 - 0 - 2 fundaciondarydarse.org/dora-bayer/sisley_gete (...) 50.87.146.64
2022-10-04 15:39:25 +0000
0 - 0 - 2 fundaciondarydarse.org/dora-bayer/priscilla_m (...) 50.87.146.64

Last 5 reports on ASN: UNIFIEDLAYER-AS-1

Date UQ / IDS / BL URL IP
2022-11-28 04:47:41 +0000
0 - 0 - 5 find-imaps.com/au3v30/?p7o6xesdkqefianbkv9vuw (...) 162.241.127.96
2022-11-28 04:47:24 +0000
0 - 0 - 2 find-imaps.com/expire/ 162.241.127.96
2022-11-28 04:47:02 +0000
0 - 0 - 3 find-imaps.com/?i=au3v30 162.241.127.96
2022-11-28 04:46:49 +0000
0 - 0 - 5 jaipurkala.com/im/siapepvlutreataom 162.241.68.118
2022-11-28 04:34:41 +0000
6 - 0 - 8 gw.calcgrid.com/BETA/sso/login.php 50.116.93.211

Last 3 reports on domain: fundaciondarydarse.org

Date UQ / IDS / BL URL IP
2022-10-04 17:52:59 +0000
0 - 0 - 2 fundaciondarydarse.org/dora-bayer/williambrow (...) 50.87.146.64
2022-10-04 15:40:47 +0000
0 - 0 - 2 fundaciondarydarse.org/dora-bayer/sisley_gete (...) 50.87.146.64
2022-10-04 15:39:25 +0000
0 - 0 - 2 fundaciondarydarse.org/dora-bayer/priscilla_m (...) 50.87.146.64

Last 1 reports with similar screenshot

Date UQ / IDS / BL URL IP
2022-10-04 17:52:59 +0000
0 - 0 - 2 fundaciondarydarse.org/dora-bayer/williambrow (...) 50.87.146.64


JavaScript

Executed Scripts (69)


Executed Evals (6)

#1 JavaScript::Eval (size: 22, repeated: 1) - SHA256: eb3a140c9b84b3b5c69ed2966cf442240e63fc12aaf1e79d0c35aec5b237d9d7

                                        0,
function(C) {
    Lw(C, 1)
}
                                    

#2 JavaScript::Eval (size: 24123, repeated: 1) - SHA256: 9427b28bccd70e88ae216329d97b400e65432ac4f65058d19e7f713c9a5007d8

                                        var kc_front = (function($) {
    jQuery.extend(jQuery.easing, {
        easeInOutQuart: function(x, t, b, c, d) {
            if ((t /= d / 2) < 1) return c / 2 * t * t * t * t + b;
            return -c / 2 * ((t -= 2) * t * t * t - 2) + b
        },
    });
    var v = $(window);
    var w = v.height();
    v.resize(function() {
        w = v.height();
        kc_front.row_action(true)
    });
    $.fn.kc_parallax = function() {
        var c = $(this),
            el_top;
        c.each(function() {
            el_top = c.offset().top
        });

        function update() {
            var b = v.scrollTop();
            c.each(function() {
                var a = $(this),
                    top = a.offset().top,
                    height = a.outerHeight(true);
                if (top + height < b || top > b + w || c.data('kc-parallax') !== true) return;
                c.css('backgroundPosition', "50% " + Math.round((el_top - b) * 0.4) + "px")
            })
        }
        v.on('scroll resize', update).trigger('update')
    };
    $.fn.viewportChecker = function(d) {
        var f = {
            classToAdd: 'visible',
            offset: 100,
            callbackFunction: function(a) {}
        };
        $.extend(f, d);
        var g = this,
            w = $(window).height();
        this.checkElements = function() {
            var c = ((navigator.userAgent.toLowerCase().indexOf('webkit') != -1) ? window : 'html'),
                viewportTop = $(c).scrollTop(),
                viewportBottom = (viewportTop + w);
            g.each(function() {
                var a = $(this);
                if (a.hasClass(f.classToAdd) && f.classToAdd != '') {
                    return
                }
                var b = Math.round(a.offset().top) + f.offset,
                    elemBottom = b + (a.height());
                if ((b < viewportBottom) && (elemBottom > viewportTop) && this.done != true) {
                    a.addClass(f.classToAdd);
                    f.callbackFunction(a)
                }
            })
        };
        $(window).scroll(this.checkElements);
        this.checkElements();
        $(window).resize(function(e) {
            w = e.currentTarget.innerHeight
        })
    };
    $(document).ready(function($) {
        kc_front.init($)
    });
    return {
        win_height: 0,
        win_width: 0,
        body: $('body'),
        init: function() {
            $('section[data-kc-parallax="true"]').each(function() {
                $(this).kc_parallax()
            });
            this.accordion();
            this.tabs();
            this.youtube_row_background.init();
            if (window.location.href.indexOf('#') > -1) {
                $('a[href="#' + window.location.href.split('#')[1] + '"]').trigger('click')
            }
            $('.kc_button').add('.kc_tooltip').kcTooltip();
            $('.kc-close-but').on('click', function() {
                $(this).parent().parent().hide('slow', function() {
                    $(this).remove()
                })
            });
            this.google_maps();
            this.blog.masonry();
            this.image_gallery.masonry();
            this.carousel_images();
            this.carousel_post();
            this.countdown_timer();
            this.piechar.init();
            this.progress_bar.run();
            this.ajax_action();
            this.pretty_photo();
            this.tooltips();
            this.image_fade();
            this.smooth_scroll();
            this.animate();
            this.row_action(true)
        },
        refresh: function(b) {
            setTimeout(function(a) {
                kc_front.piechar.update(a);
                kc_front.progress_bar.update(a);
                kc_front.image_gallery.masonry(a);
                if ($('.kc_video_play').length > 0) {
                    kc_video_play.refresh(a)
                }
            }, 100, b)
        },
        viewport: function(a) {
            var d = document;
            if (d.compatMode === 'BackCompat') {
                if (a == 'height') return d.body.clientHeight;
                else return d.body.clientWidth
            } else {
                if (a == 'height') return d.documentElement.clientHeight;
                else return d.documentElement.clientWidth
            }
        },
        row_action: function(c) {
            var d = document;
            [].forEach.call(d.querySelectorAll('section[data-kc-fullwidth]'), function(a) {
                var b = d.querySelectorAll('.kc_clfw')[0],
                    rect;
                if (typeof b === 'undefined') return;
                rect = b.getBoundingClientRect();
                a.style.left = (-rect.left) + 'px';
                if (a.getAttribute('data-kc-fullwidth') == 'row') {
                    a.style.paddingLeft = rect.left + 'px';
                    a.style.paddingRight = (kc_front.viewport('width') - rect.width - rect.left) + 'px';
                    a.style.width = rect.width + 'px'
                } else {
                    a.style.paddingLeft = '0px';
                    a.style.width = kc_front.viewport('width') + 'px'
                }
                if (a.nextElementSibling !== null && a.nextElementSibling.tagName == 'SCRIPT') {
                    if (a.nextElementSibling.innerHTML == 'kc_front.row_action(true);') {
                        a.parentNode.removeChild(a.nextElementSibling)
                    }
                }
            })
        },
        google_maps: function(b) {
            $('.kc_google_maps').each(function() {
                if ($(this).data('loaded') === true) return;
                else $(this).data({
                    'loaded': true
                });
                var a = $(this);
                if (a.data('wheel') == 'disable') {
                    a.click(function() {
                        a.find('iframe').css("pointer-events", "auto")
                    });
                    a.mouseleave(function() {
                        a.find('iframe').css("pointer-events", "none")
                    })
                }
                a.find('.close').on('click', function() {
                    a.find('.map_popup_contact_form').toggleClass("hidden");
                    a.find('.show_contact_form').fadeIn('slow')
                });
                a.find('.show_contact_form').on('click', function() {
                    a.find('.map_popup_contact_form').toggleClass("hidden");
                    a.find('.show_contact_form').fadeOut('slow')
                })
            })
        },
        accordion: function(d) {
            $('.kc_accordion_wrapper').each(function() {
                if ($(this).data('loaded') === true) return;
                else $(this).data({
                    'loaded': true
                });
                var c = $(this).data('tab-active') !== undefined ? ($(this).data('tab-active') - 1) : 0;
                if ($(this).data('closeall') == true) c = '100000';
                $(this).find('>div.kc_accordion_section>h3.kc_accordion_header>a, >div.kc_accordion_section>h3.kc_accordion_header>.ui-accordion-header-icon').off('click').on('click', function(e) {
                    var a = $(this).closest('.kc_accordion_wrapper'),
                        section = $(this).closest('.kc_accordion_section'),
                        allowopenall = (true === a.data('allowopenall')) ? true : false,
                        closeall = (true === a.data('closeall')) ? true : false,
                        changed = section.find('>h3.kc_accordion_header').hasClass('ui-state-active'),
                        clickitself = false;
                    if (allowopenall === false) {
                        if (!section.find('>h3.kc_accordion_header').hasClass('ui-state-active')) {
                            a.find('>.kc_accordion_section>.kc_accordion_content').slideUp();
                            a.find('>.kc_accordion_section>h3.kc_accordion_header').removeClass('ui-state-active');
                            a.find('>.kc_accordion_section.kc-section-active').removeClass('kc-section-active');
                            section.find('>.kc_accordion_content').stop().slideDown('normal', function() {
                                $(this).css({
                                    height: ''
                                })
                            });
                            section.find('>h3.kc_accordion_header').addClass('ui-state-active');
                            section.addClass('kc-section-active')
                        } else {
                            a.find('>.kc_accordion_section>.kc_accordion_content').slideUp();
                            a.find('>.kc_accordion_section>h3.kc_accordion_header').removeClass('ui-state-active');
                            a.find('>.kc_accordion_section>.kc-section-active').removeClass('kc-section-active');
                            section.removeClass('kc-section-active')
                        }
                    } else {
                        if (section.find('>h3.kc_accordion_header').hasClass('ui-state-active')) {
                            section.find('>.kc_accordion_content').stop().slideUp();
                            section.find('>h3.kc_accordion_header').removeClass('ui-state-active');
                            section.removeClass('kc-section-active')
                        } else {
                            section.find('>.kc_accordion_content').stop().slideDown('normal', function() {
                                $(this).css({
                                    height: ''
                                })
                            });
                            section.find('>h3.kc_accordion_header').addClass('ui-state-active');
                            section.addClass('kc-section-active')
                        }
                    }
                    if (changed != section.find('>h3.kc_accordion_header').hasClass('ui-state-active')) kc_front.refresh(section.find('>.kc_accordion_content'));
                    e.preventDefault();
                    var b = $(this).closest('.kc_accordion_section');
                    b = b.parent().find('>.kc_accordion_section').index(b.get(0));
                    $(this).closest('.kc_accordion_wrapper').data({
                        'tab-active': (b + 1)
                    })
                }).eq(c).trigger('click')
            })
        },
        tabs: function(d) {
            $('.kc_tabs > .kc_wrapper').each(function(b) {
                if ($(this).data('loaded') === true) return;
                else $(this).data({
                    'loaded': true
                });
                var c = $(this),
                    tab_group = c.parent('.kc_tabs.group'),
                    tab_event = ('yes' === tab_group.data('open-on-mouseover')) ? 'mouseover' : 'click',
                    effect_option = ('yes' === tab_group.data('effect-option')) ? true : false,
                    active_section = parseInt(tab_group.data('tab-active')) - 1;
                $(this).find('>.ui-tabs-nav>li').off('click').on('click', function(e) {
                    e.preventDefault()
                }).off(tab_event).on(tab_event, function(e) {
                    if ($(this).hasClass('ui-tabs-active')) {
                        e.preventDefault();
                        return
                    }
                    var a = $(this).closest('.kc_tabs_nav,.ui-tabs-nav').find('>li'),
                        b = a.index(this),
                        tab_list = $(this).closest('.kc_wrapper').find('>.kc_tab'),
                        new_panel = tab_list.eq(b);
                    a.removeClass('ui-tabs-active');
                    $(this).addClass('ui-tabs-active');
                    tab_list.removeClass('ui-tabs-body-active').removeClass('kc-section-active');
                    new_panel.addClass('ui-tabs-body-active').addClass('kc-section-active');
                    if (effect_option === true) new_panel.css({
                        'opacity': 0
                    }).animate({
                        opacity: 1
                    });
                    e.preventDefault();
                    $(this).closest('.kc_tabs').data({
                        'tab-active': (b + 1)
                    })
                }).eq(active_section).trigger(tab_event)
            });
            $('.kc_tabs.kc-tabs-slider').each(function() {
                if ($(this).data('loaded') === true) return;
                else $(this).data({
                    'loaded': true
                });
                $(this).find('.kc-tabs-slider-nav li').each(function(a) {
                    if ($(this).data('loaded') === true) return;
                    else $(this).data({
                        'loaded': true
                    });
                    $(this).on('click', a, function(e) {
                        $(this).parent().find('.kc-title-active').removeClass('kc-title-active');
                        $(this).addClass('kc-title-active');
                        console.log(e.data);
                        $(this).closest('.kc-tabs-slider').find('.owl-carousel').trigger('owl.goTo', e.data);
                        e.preventDefault();
                        $(this).closest('.kc_tabs').data({
                            'active': e.data
                        })
                    });
                    if (a === 0) $(this).addClass('kc-title-active')
                })
            });
            kc_front.owl_slider()
        },
        counterup: function() {
            $('.counterup').each(function(a) {
                if ($(this).data('loaded') === true) return;
                else $(this).data({
                    'loaded': true
                });
                $(this).counterUp({
                    delay: 100,
                    time: 2000
                })
            })
        },
        youtube_row_background: {
            init: function() {
                $('.kc_row, .kc_column').each(function() {
                    var a = $(this),
                        youtubeUrl, youtubeId;
                    if (a.data('kc-video-bg')) {
                        youtubeUrl = a.data('kc-video-bg');
                        youtubeId = kc_front.youtube_row_background.getID(youtubeUrl);
                        if (youtubeId) {
                            a.find('.kc_wrap-video-bg').remove();
                            kc_front.youtube_row_background.add(a, youtubeId)
                        }
                    } else {
                        a.find('.kc_wrap-video-bg').remove()
                    }
                })
            },
            getID: function(a) {
                if ('undefined' === typeof(a)) {
                    return false
                }
                var b = a.match(/(?:https?:\/{2})?(?:w{3}\.)?youtu(?:be)?\.(?:com|be)(?:\/watch\?v=|\/)([^\s&]+)/);
                if (null !== b) {
                    return b[1]
                }
                return false
            },
            add: function(c, d, f) {
                if (YT === undefined) return;
                if ('undefined' === typeof(YT.Player)) {
                    f = 'undefined' === typeof(f) ? 0 : f;
                    if (f > 100) {
                        console.warn('Too many attempts to load YouTube api');
                        return
                    }
                    setTimeout(function() {
                        kc_front.youtube_row_background.add(c, d, f++)
                    }, 100);
                    return
                }
                var g, $container = c.prepend('<div class="kc_wrap-video-bg"><div class="ifr_inner"></div></div>').find('.ifr_inner'),
                    options = c.data('kc-video-options'),
                    playerVars = {
                        playlist: d,
                        iv_load_policy: 3,
                        enablejsapi: 1,
                        disablekb: 1,
                        autoplay: 1,
                        controls: 0,
                        showinfo: 0,
                        rel: 0,
                        loop: 1
                    };
                options = options ? JSON.parse('{"' + options.replace(/&/g, '","').replace(/=/g, '":"') + '"}', function(a, b) {
                    return a === "" ? b : decodeURIComponent(b)
                }) : {};
                if (typeof options == 'object') playerVars = $.extend(playerVars, options);
                g = new YT.Player($container[0], {
                    width: '100%',
                    height: '100%',
                    videoId: d,
                    playerVars: playerVars,
                    events: {
                        onReady: function(e) {
                            if (c.data('kc-video-mute') == 'yes') e.target.mute().setLoop(true);
                            e.target.playVideo()
                        }
                    }
                });
                kc_front.youtube_row_background.resize(c);
                $(window).on('resize', function() {
                    kc_front.youtube_row_background.resize(c)
                })
            },
            resize: function(a) {
                var b = 1.77,
                    ifr_w, ifr_h, marginLeft, marginTop, inner_width = a.innerWidth(),
                    inner_height = a.innerHeight();
                if ((inner_width / inner_height) < b) {
                    ifr_w = inner_height * b;
                    ifr_h = inner_height
                } else {
                    ifr_w = inner_width;
                    ifr_h = inner_width * (1 / b)
                }
                marginLeft = -Math.round((ifr_w - inner_width) / 2) + 'px';
                marginTop = -Math.round((ifr_h - inner_height) / 2) + 'px';
                ifr_w += 'px';
                ifr_h += 'px';
                a.find('.kc_wrap-video-bg iframe').css({
                    maxWidth: '1000%',
                    marginLeft: marginLeft,
                    marginTop: marginTop,
                    width: ifr_w,
                    height: ifr_h
                })
            }
        },
        single_img: {
            refresh: function(a) {
                kc_front.pretty_photo()
            }
        },
        blog: {
            masonry: function() {
                $('.kc_blog_masonry').each(function() {
                    if ($(this).data('loaded') === true) return;
                    else $(this).data({
                        'loaded': true
                    });
                    var c = $(this),
                        imgs = c.find('img'),
                        total = imgs.length,
                        ready = 0;
                    if (total > 0) {
                        imgs.each(function(a) {
                            var b = new Image();
                            b.onload = function() {
                                ready++;
                                if (ready == total) {
                                    new Masonry(c.get(0), {
                                        itemSelector: '.post-grid',
                                        columnWidth: '.post-grid',
                                    })
                                }
                            };
                            b.src = $(this).attr('src')
                        })
                    } else {
                        new Masonry(c.get(0), {
                            itemSelector: '.post-grid',
                            columnWidth: '.post-grid',
                        })
                    }
                })
            },
        },
        image_gallery: {
            masonry: function() {
                $('.kc_image_gallery').each(function() {
                    if ($(this).data('loaded') === true) return;
                    else $(this).data({
                        'loaded': true
                    });
                    if (('yes' === $(this).data('image_masonry'))) {
                        var c = $(this).find('img'),
                            total = c.length,
                            ready = 0,
                            el = $(this);
                        $(this).data({
                            'total': total
                        });
                        c.each(function(a) {
                            var b = new Image();
                            b.onload = function() {
                                ready++;
                                if (ready == total) {
                                    new Masonry(el.get(0), {
                                        itemSelector: '.item-grid',
                                        columnWidth: '.item-grid',
                                    })
                                }
                            };
                            b.src = $(this).attr('src')
                        })
                    }
                });
                kc_front.pretty_photo()
            },
        },
        image_fade: function() {
            $('.image_fadein_slider .image_fadein').each(function() {
                if ($(this).data('loaded') !== true) $(this).data({
                    'loaded': true
                });
                else return;
                var a = $(this).data('delay') ? $(this).data('delay') : '3000';
                window.kc_front.image_fade_delay(a, $(this).find('img').first())
            })
        },
        image_fade_delay: function(a, b) {
            if (b === undefined) return;
            b.parent().find('.active').removeClass('active');
            b.addClass('active');
            if (b.next().length > 0) b = b.next();
            else b = b.parent().find('img').first();
            var c = setTimeout(window.kc_front.image_fade_delay, a, a, b)
        },
        carousel_images: function(u) {
            $('.kc-carousel-images').each(function(f) {
                if ($(this).data('loaded') === true) return;
                else $(this).data({
                    'loaded': true
                });
                var g = $(this).data('owl-i-options'),
                    _auto_play = ('yes' === g.autoplay) ? true : false,
                    _delay = (g.delay !== undefined) ? g.delay : 8,
                    _navigation = ('yes' === g.navigation) ? true : false,
                    _pagination = ('yes' === g.pagination) ? true : false,
                    _speed = g.speed,
                    _items = g.items,
                    _auto_height = ('yes' === g.autoheight) ? true : false,
                    _num_thumb = (g.num_thumb !== undefined) ? g.num_thumb : 5,
                    _show_thumb = ('yes' === g.showthumb) ? true : false,
                    _progress_bar = ('yes' === g.progressbar) ? true : false,
                    _singleItem = false,
                    _tablet = false,
                    _mobile = false;
                if (g.tablet > 0) {
                    _tablet = [999, g.tablet]
                }
                if (g.mobile > 0) {
                    _mobile = [479, g.mobile]
                }
                var h = function() {};
                var j = function() {};
                var k = function() {};
                if (true === _auto_height || true === _progress_bar || true === _show_thumb) _singleItem = true;
                if (_auto_play) _auto_play = parseInt(_delay) * 1000;
                if (true === _progress_bar) {
                    var l = _delay;
                    var m, $bar, $elem, isPause, tick, percentTime;
                    h = function(a) {
                        $elem = a;
                        n();
                        o()
                    };
                    var n = function() {
                        m = $("<div>", {
                            class: "progressBar"
                        });
                        $bar = $("<div>", {
                            class: "bar"
                        });
                        m.append($bar).prependTo($elem)
                    };
                    var o = function() {
                        percentTime = 0;
                        isPause = false;
                        tick = setInterval(p, 10)
                    };
                    var p = function() {
                        if (isPause === false) {
                            percentTime += 1 / l;
                            $bar.css({
                                width: percentTime + "%"
                            });
                            if (percentTime >= 100) {
                                $elem.trigger('owl.next')
                            }
                        }
                    };
                    k = function() {
                        isPause = true
                    };
                    j = function() {
                        clearTimeout(tick);
                        o()
                    }
                }
                if (true !== _show_thumb) {
                    $(this).owlCarousel({
                        autoPlay: _auto_play,
                        navigation: _navigation,
                        pagination: _pagination,
                        slideSpeed: _speed,
                        paginationSpeed: _speed,
                        singleItem: _singleItem,
                        autoHeight: _auto_height,
                        items: _items,
                        itemsDesktop: false,
                        itemsDesktopSmall: false,
                        itemsTablet: _tablet,
                        itemsTabletSmall: _tablet,
                        itemsMobile: _mobile,
                        afterInit: h,
                        afterMove: j,
                        startDragging: k
                    })
                } else {
                    var q = $(this);
                    var r = q.next('.kc-sync2');
                    var s = function(a) {
                        var b = this.currentItem;
                        $(r).find(".owl-item").removeClass("synced").eq(b).addClass("synced");
                        if ($(r).data("owlCarousel") !== undefined) {
                            t(b)
                        }
                    };
                    r.on("click", ".owl-item", function(e) {
                        e.preventDefault();
                        var a = $(this).data("owlItem");
                        q.trigger("owl.goTo", a)
                    });
                    var t = function(a) {
                        var b = r.data("owlCarousel").owl.visibleItems;
                        var c = a;
                        var d = false;
                        for (var i in b) {
                            if (c === b[i]) {
                                d = true
                            }
                        }
                        if (d === false) {
                            if (c > b[b.length - 1]) {
                                r.trigger("owl.goTo", c - b.length + 2)
                            } else {
                                if (c - 1 === -1) {
                                    c = 0
                                }
                                r.trigger("owl.goTo", c)
                            }
                        } else if (c === b[b.length - 1]) {
                            r.trigger("owl.goTo", b[1])
                        } else if (c === b[0]) {
                            r.trigger("owl.goTo", c - 1)
                        }
                    };
                    q.owlCarousel({
                        autoPlay: _auto_play,
                        singleItem: _singleItem,
                        slideSpeed: _speed,
                        paginationSpeed: _speed,
                        navigation: _navigation,
                        pagination: _pagination,
                        afterAction: s,
                        responsiveRefreshRate: 200,
                        autoHeight: _auto_height,
                        afterInit: h,
                        afterMove: j,
                        startDragging: k
                    });
                    r.owlCarousel({
                        items: _num_thumb,
                        itemsDesktop: [1199, 15],
                        itemsDesktopSmall: [979, 12],
                        itemsTablet: [768, 6],
                        itemsMobile: [479, 5],
                        pagination: _pagination,
                        responsiveRefreshRate: 100,
                        afterInit: function(a) {
                            a.find(".owl-item").eq(0).addClass("synced")
                        }
                    })
                }
            });
            kc_front.pretty_photo()
        },
        update_option: function(b) {
            $.post(top.kc_ajax_url, {
                'security': top.kc_ajax_nonce,
                'action': 'kc_update_option',
                'options': top.kc.tools.base64.encode(JSON.stringify(b))
            }, function(a) {})
        },
        carousel_post: function(a) {
            kc_front.owl_slider('.kc-owl-post-carousel')
        },
        tooltips: function() {
            $('.kc_tooltip').each(function() {
                if ($(this).data('kc-loaded') !== true) $(this).data({
                    'kc-loaded': true
                });
                else return;
                $(this).kcTooltip()
            })
        },
        countdown_timer: function() {
            $('.kc-countdown-timer').each(function(b) {
                var c = $(this).data('countdown');
                $(this).countdown(c.date, function(a) {
                    $(this).html(a.strftime(c.template))
                })
            })
        },
        piechar: {
            init: function() {
                $('.kc_piechart').each(function(b) {
                    $(this).viewportChecker({
                        callbackFunction: function(a) {
                            kc_front.piechar.load(a)
                        },
                        classToAdd: 'kc-pc-loaded'
                    })
                })
            },
            load: function(d) {
                if (d.parent('div').width() < 10) return 0;
                var e = d.data('size'),
                    _linecap = ('yes' === d.data('linecap')) ? 'round' : 'square',
                    _barColor = d.data('barcolor'),
                    _trackColor = d.data('trackcolor'),
                    _autowidth = d.data('autowidth'),
                    _linewidth = d.data('linewidth');
                if ('yes' === _autowidth) {
                    e = d.parent('div').width();
                    d.data('size', e)
                }
                var f = d.find('.percent').width() + d.find('.percent:after').width();
                var g = d.find('.percent').height();
                d.easyPieChart({
                    barColor: _barColor,
                    trackColor: _trackColor,
                    lineCap: _linecap,
                    easing: 'easeOutBounce',
                    onStep: function(a, b, c) {
                        $(this.el).find('.percent').text(Math.round(c));
                        $(this.el).find('.percent').show();
                        $(this.el).css({
                            'width': e,
                            'height': e
                        })
                    },
                    scaleLength: 0,
                    lineWidth: _linewidth,
                    size: e,
                })
            },
            update: function(a) {
                a.find('.kc_piechart').each(function() {
                    if ($(this).data('loaded') === true) return;
                    else $(this).data({
                        'loaded': true
                    });
                    kc_front.piechar.load($(this))
                })
            }
        },
        progress_bar: {
            run: function() {
                $('.kc_progress_bars').each(function() {
                    $(this).viewportChecker({
                        callbackFunction: function(a) {
                            kc_front.progress_bar.update(a)
                        },
                        classToAdd: 'kc-pb-loaded'
                    })
                })
            },
            update: function(c) {
                $('.kc-progress-bar .kc-ui-progress').each(function() {
                    if ($(this).data('loaded') === true) return;
                    else $(this).data({
                        'loaded': true
                    });
                    $(this).css({
                        width: '5%'
                    }).stop().animate({
                        width: this.getAttribute('data-value') + '%'
                    }, {
                        duration: parseInt(this.getAttribute('data-speed')),
                        easing: 'easeInOutQuart',
                        step: function(a, b) {
                            if (b.now / b.end > 0.3) this.getElementsByClassName('ui-label')[0].style.opacity = b.now / b.end
                        }
                    }).find('.ui-label').css({
                        opacity: 0
                    })
                })
            }
        },
        ajax_action: function() {
            $('.kc_facebook_recent_post').each(function() {
                if (this.getAttribute('data-cfg') === null || this.getAttribute('data-cfg') === undefined || this.getAttribute('data-cfg') === '') return;
                var b = $(this),
                    data_send = {
                        action: 'kc_facebook_recent_post',
                        cfg: $(this).data('cfg')
                    };
                this.removeAttribute('data-cfg');
                $.ajax({
                    url: kc_script_data.ajax_url,
                    method: 'POST',
                    dataType: 'json',
                    data: data_send,
                    success: function(a) {
                        b.find('ul').html(a.html).before(a.header_html)
                    }
                })
            });
            $('.kc_wrap_instagram').each(function(b) {
                if (this.getAttribute('data-cfg') === null || this.getAttribute('data-cfg') === undefined || this.getAttribute('data-cfg') === '') return;
                var c = $(this),
                    data_send = {
                        action: 'kc_instagrams_feed',
                        cfg: $(this).data('cfg')
                    };
                this.removeAttribute('data-cfg');
                $.ajax({
                    url: kc_script_data.ajax_url,
                    method: 'POST',
                    dataType: 'json',
                    data: data_send,
                    success: function(a) {
                        c.find('ul').html(a.html)
                    }
                })
            });
            $('.kc_twitter_feed').each(function(d) {
                if (this.getAttribute('data-cfg') === null || this.getAttribute('data-cfg') === undefined || this.getAttribute('data-cfg') === '') return;
                var e = $(this),
                    atts_data = {
                        action: 'kc_twitter_timeline',
                        cfg: $(this).data('cfg')
                    };
                this.removeAttribute('data-cfg');
                var f = $(this).data('owl_option');
                $.ajax({
                    url: kc_script_data.ajax_url,
                    method: 'POST',
                    dataType: 'json',
                    data: atts_data,
                    success: function(a) {
                        var b = e.data('display_style');
                        e.find('.result_twitter_feed').html(a.html);
                        e.find('.result_twitter_feed').before('<div class="button_follow_wrap">' + a.header_data + '</div>');
                        var c = ('yes' === f.show_navigation) ? true : false,
                            _pagination = ('yes' === f.show_pagination) ? true : false,
                            _autoHeight = ('yes' === f.auto_height) ? true : false;
                        if (2 === b) {
                            e.find('.kc-tweet-owl').owlCarousel({
                                navigation: c,
                                pagination: _pagination,
                                slideSpeed: 300,
                                paginationSpeed: 400,
                                singleItem: true,
                                items: 1,
                                autoHeight: _autoHeight
                            })
                        }
                    }
                })
            })
        },
        owl_slider: function() {
            if (typeof $().owlCarousel != 'function') return;
            $('[data-owl-options]').each(function(a) {
                var b = $(this).data('owl-options');
                if (typeof b !== 'object') return;
                if ($(this).data('loaded') === true) return;
                else $(this).data({
                    'loaded': true
                });
                $(this).attr({
                    'data-owl-options': null
                });
                var c = ('yes' === b.autoplay) ? true : false,
                    _navigation = ('yes' === b.navigation) ? true : false,
                    _pagination = ('yes' === b.pagination) ? true : false,
                    _speed = (b.speed !== undefined) ? b.speed : 450,
                    _items = (b.items !== undefined) ? b.items : 1,
                    _tablet = (b.tablet !== undefined) ? b.tablet : 1,
                    _mobile = (b.mobile !== undefined) ? b.mobile : 1,
                    _autoheight = ('yes' === b.autoheight) ? true : false,
                    _showthumb = ('yes' === b.showthumb) ? true : false,
                    _singleItem = false;
                if (_autoheight === true) {
                    _singleItem = true;
                    _items = 1
                }
                $(this).owlCarousel({
                    autoPlay: c,
                    navigation: _navigation,
                    pagination: _pagination,
                    showthumb: _showthumb,
                    slideSpeed: _speed,
                    paginationSpeed: _speed,
                    singleItem: _singleItem,
                    autoHeight: _autoheight,
                    items: _items,
                    itemsCustom: false,
                    itemsDesktop: [1199, _items],
                    itemsDesktopSmall: [980, _tablet],
                    itemsTablet: [640, _mobile],
                    itemsTabletSmall: false,
                    itemsMobile: [480, _mobile],
                })
            });
            kc_front.pretty_photo()
        },
        pretty_photo: function() {
            if (typeof($.prettyPhoto) == 'object') {
                $("a.kc-pretty-photo:not(.kc-pt-loaded)").addClass('kc-pt-loaded').off('click').prettyPhoto({
                    theme: 'dark_rounded',
                    allow_resize: true,
                    allow_expand: true,
                    opacity: 0.85,
                    animation_speed: 'fast',
                    deeplinking: false,
                    counter_separator_label: ' / ',
                    show_title: true,
                    autoplay: true,
                    horizontal_padding: 0,
                    overlay_gallery: false,
                    markup: '<div class="pp_pic_holder"> 		                <div class="pp_content_container"> 		                  <div class="pp_left"> 		                  <div class="pp_right"> 		                    <div class="pp_content"> 		                      <div class="pp_loaderIcon kc-spinner"></div> 		                      <div class="pp_fade"> 		                        <div class="pp_hoverContainer"> 		                          <a class="pp_next" href="#"><i class="sl-arrow-right"></i></a> 		                          <a class="pp_previous" href="#"><i class="sl-arrow-left"></i></a> 		                        </div> 		                        <div id="pp_full_res"></div> 		                        <div class="pp_details"> 		                         <div class="ppt">&nbsp;</div> 		                          <div class="pp_nav"> 		                            <p class="currentTextHolder">0 / 0</p> 		                          </div> 		                          <p class="pp_description"></p> 		                          <a class="pp_close" href="#"><i class="sl-close"></i></a> 		                        </div> 		                      </div> 		                    </div> 		                  </div> 		                  </div> 		                </div> 		              </div> 		              <div class="pp_overlay"></div>'
                })
            }
        },
        smooth_scroll: function() {
            $('a[href^="#"]').on('click', function(e) {
                if (location.pathname.replace(/^\//, '') == this.pathname.replace(/^\//, '') && location.hostname == this.hostname && this.hash.indexOf('#!') === 0) {
                    var a = $(this.hash.replace('!', ''));
                    if (a.length) {
                        $('html,body').stop().animate({
                            scrollTop: a.offset().top - 80
                        }, 500)
                    }
                }
            })
        },
        animate: function() {
            $('.kc-animated').each(function(f) {
                $(this).viewportChecker({
                    callbackFunction: function(c) {
                        var d = c.get(0).className,
                            delay = 0,
                            speed = '2s',
                            timeout = 0;
                        if (d.indexOf('kc-animate-delay-') > -1) {
                            delay = d.split('kc-animate-delay-')[1].split(' ')[0];
                            c.css({
                                'animation-delay': delay + 'ms'
                            });
                            c.removeClass('kc-animate-delay-' + delay);
                            timeout += parseInt(delay)
                        }
                        if (d.indexOf('kc-animate-speed-') > -1) {
                            speed = d.split('kc-animate-speed-')[1].split(' ')[0];
                            c.css({
                                'animation-duration': speed
                            });
                            c.removeClass('kc-animate-speed-' + speed)
                        }
                        if (d.indexOf('kc-animate-eff-') > -1) {
                            var e = d.split('kc-animate-eff-')[1].split(' ')[0];
                            timeout += parseFloat(speed) * 1000;
                            c.removeClass('kc-animated').addClass('animated ' + e);
                            setTimeout(function(a, b) {
                                a.removeClass('animated kc-animated kc-animate-eff-' + b + ' ' + b);
                                a.css({
                                    'animation-delay': '',
                                    'animation-duration': ''
                                })
                            }, timeout, c, e)
                        }
                    },
                    classToAdd: 'kc-pc-loaded'
                })
            })
        }
    }
}(jQuery));
(function($) {
    $.fn.kcTooltip = function() {
        return this.each(function() {
            var a = this.getBoundingClientRect();
            var b = $(this).data('tooltip'),
                span_w = $(this).find('span').outerWidth(),
                span_h = $(this).find('span').outerHeight(),
                this_w = $(this).outerWidth(),
                this_h = $(this).outerHeight();
            if (typeof(b) == 'undefined') {
                $(this).find('span').css('margin-left', -span_w / 2);
                $(this).hover().find('span').css('bottom', this_h + 10)
            } else {
                var c = $(this).data('position');
                var d = -10;
                if (typeof c == 'undefined') c = 'top';
                $(this).addClass(c);
                $(this).find('span').attr({
                    'style': ''
                });
                switch (c) {
                    case 'right':
                        {
                            var e;
                            e = this_h / 2 - span_h / 2;
                            $(this).find('span').css('left', this_w + 10);
                            $(this).find('span').css('bottom', e);
                            $(this).hover().find('span').css('left', this_w - d);
                            break
                        }
                    case 'bottom':
                        {
                            $(this).find('span').css('margin-left', -span_w / 2);
                            $(this).hover().find('span').css('bottom', -span_h + d);
                            break
                        }
                    case 'left':
                        {
                            var e, ext_left = 5;
                            e = this_h / 2 - span_h / 2;
                            $(this).find('span').css('left', -span_w - ext_left);
                            $(this).find('span').css('bottom', e);
                            break
                        }
                    default:
                        {
                            $(this).find('span').css('margin-left', -span_w / 2);
                            $(this).hover().find('span').css('bottom', this_h - d)
                        }
                }
            }
        })
    }
}(jQuery));
                                    

#3 JavaScript::Eval (size: 15548, repeated: 1) - SHA256: 1bf232e3afa032afeeb821804dac4bdcfae32c16178d33975a668df67e9d0841

                                        /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */
(function() {
    var x = function(U, v) {
            if (!(U = (v = null, A.trustedTypes), U) || !U.createPolicy) return v;
            try {
                v = U.createPolicy("bg", {
                    createHTML: J,
                    createScript: J,
                    createScriptURL: J
                })
            } catch (C) {
                A.console && A.console.error(C.message)
            }
            return v
        },
        A = this || self,
        J = function(U) {
            return U
        };
    (0, eval)(function(U, v) {
        return (v = x()) && 1 === U.eval(v.createScript("1")) ? function(C) {
            return v.createScript(C)
        } : function(C) {
            return "" + C
        }
    }(A)(Array(7824 * Math.random() | 0).join("\n") + '(function(){var vF=function(U,v){if(!(U=(v=null,n.trustedTypes),U)||!U.createPolicy)return v;try{v=U.createPolicy("bg",{createHTML:UK,createScript:UK,createScriptURL:UK})}catch(A){n.console&&n.console.error(A.message)}return v},oh=function(U,v,A,x,e,C){function J(){if(v.P==v){if(v.B){var r=[M,x,U,void 0,e,C,arguments];if(2==A)var N=I(false,false,(L(r,v),v));else if(1==A){var O=!v.u.length;L(r,v),O&&I(false,false,v)}else N=Cw(v,r);return N}e&&C&&e.removeEventListener(C,J,q)}}return J},A4=function(U,v){return U[v]<<24|U[(v|0)+1]<<16|U[(v|0)+2]<<8|U[(v|0)+3]},r0=function(U,v,A,x){return(X(403,A,(xc((x=E(403,A),A.V&&x<A.H?(X(403,A,A.H),J4(v,A)):X(403,A,v),U),A),x)),E)(368,A)},Nn=function(U,v,A,x,e,C,J,r){return(v=[60,32,-94,21,71,(J=U&(r=er,7),74),v,90,56,20],C=V[A.Z](A.Px),C[A.Z]=function(N){J+=6+7*(e=N,U),J&=7},C).concat=function(N){return(e=(N=(N=(N=x%16+1,+v[J+43&7]*x*N-1184*x*e+J+37*e*e+(r()|0)*N)+3*x*x*N-111*x*x*e-N*e-3589*e,v[N]),void 0),v)[(J+21&7)+(U&2)]=N,v[J+(U&2)]=32,N},C},kc=function(U,v,A,x,e){for(e=(x=(U.Px=(U.lG=U[U.Mx=(U.pf=nw,OK),W],lX)(U.Z,{get:function(){return this.concat()}}),U.Hx=V[U.Z](U.Px,{value:{value:{}}}),0),[]);128>x;x++)e[x]=String.fromCharCode(x);I(true,true,(L((L((F(260,function(C,J,r,N,O,l,z,k,a,m,y,f){function u(D,b){for(;l<D;)r|=Q(C)<<l,l+=8;return b=r&(l-=D,(1<<D)-1),r>>=D,b}for(k=((l=(a=S(C),r=0),u(3))|0)+1,O=u(5),J=[],z=m=0;z<O;z++)y=u(1),J.push(y),m+=y?0:1;for(z=(m=((m|0)-1).toString(2).length,N=[],0);z<O;z++)J[z]||(N[z]=u(m));for(m=0;m<O;m++)J[m]&&(N[m]=S(C));for(f=[];k--;)f.push(E(S(C),C));F(a,function(D,b,w,T,t){for(w=(T=[],0),b=[];w<O;w++){if(!J[t=N[w],w]){for(;t>=T.length;)T.push(S(D));t=T[t]}b.push(t)}D.g=mv((D.i=mv(f.slice(),D),b),D)},C)},(U.zk=(X(39,(F(153,function(C,J){J4((J=E(S(C),C),J),C.P)},(F(76,((X(23,U,((F(257,(X(220,(F(203,function(C,J,r,N){J=(r=S(C),N=S(C),S(C)),C.P==C&&(J=E(J,C),N=E(N,C),E(r,C)[N]=J,495==r&&(C.l=void 0,2==N&&(C.v=Z(C,32,false),C.l=void 0)))},(F(77,function(C,J,r,N,O,l,z){for(r=(O=(l=E((N=(z=qn((J=S(C),C)),""),48),C),l.length),0);z--;)r=((r|0)+(qn(C)|0))%O,N+=e[l[r]];X(J,C,N)},(F(197,function(C,J){(J=S(C),C=E(J,C.P),C[0]).removeEventListener(C[1],C[2],q)},(F(145,function(C,J,r,N,O,l){if(!G(C,true,J,true)){if("object"==(r=(l=(r=S((O=S((J=(l=S(C),S(C)),C)),C)),J=E(J,C),E(l,C)),E(r,C)),C=E(O,C),zh(l))){for(N in O=[],l)O.push(N);l=O}for(O=(N=0,C=0<C?C:1,l).length;N<O;N+=C)J(l.slice(N,(N|0)+(C|0)),r)}},(F(204,(X(4,(F(146,(F(319,(F(247,function(C,J,r,N,O){X((J=(O=E((N=E((N=(J=(O=S((r=S(C),C)),S(C)),S(C)),N),C),O),C),E)(J,C),r),C,oh(J,C,N,O))},(X(109,U,((X(368,U,(F(42,(X(217,(F(486,(F(55,(F(226,function(C,J,r,N){!G(C,true,J,false)&&(J=Ih(C),N=J.Bx,r=J.I,C.P==C||r==C.nf&&N==C)&&(X(J.Al,C,r.apply(N,J.S)),C.Y=C.G())},(F(308,(F(436,(U.Y5=(F(483,function(C,J,r,N){if(J=C.a1.pop()){for(N=Q(C);0<N;N--)r=S(C),J[r]=C.B[r];C.B=(J[4]=C.B[J[52]=C.B[52],4],J)}else X(403,C,C.H)},(F(405,function(C){jr(4,C)},(F(475,(X(52,(F(64,function(C,J,r){(r=(r=(J=S(C),S)(C),E)(r,C),0)!=E(J,C)&&X(403,C,r)},(X(491,U,(F(460,(F(131,(X(51,U,(X(((X(403,(((U.H=0,U.V8=(U.o=[],U.B=[],U.g=(U.a1=[],U.O=(U.D=0,false),U.N=void 0,void 0),((U.i=void 0,U).A=(x=window.performance||{},void 0),U).U=(U.X=((U.uG=(U.l=void 0,U.j=false,!(U.R=0,1)),U).h=(U.P=U,U.V=(U.J=(U.W=1,null),[]),U.F=[],0),U.C=void 0,8001),U.K=(U.v=void 0,25),U.Y=0,0),0),U).nf=function(C){this.P=C},U.u=[],U).Gk=x.timeOrigin||(x.timing||{}).navigationStart||0,U),0),X)(105,U,0),208),U,U),[])),function(C,J,r,N){(r=E((N=(J=S((r=(N=S(C),S(C)),C)),E(N,C)),r),C),X)(J,C,N[r])}),U),function(C,J,r,N){r=E((J=S((N=S(C),r=S(C),C)),r),C),N=E(N,C)==r,X(J,C,+N)}),U),R(4))),F(478,function(C,J,r,N){X((r=E((J=E((r=S((J=S(C),C)),N=S(C),J),C),r),C),N),C,J in r|0)},U),U)),U),[]),function(C){Lw(C,4)}),U),U)),U)),0),function(){}),U),function(C,J,r,N,O,l){G(C,true,J,false)||(l=Ih(C.P),N=l.Bx,O=l.I,J=l.Al,l=l.S,r=l.length,N=0==r?new N[O]:1==r?new N[O](l[0]):2==r?new N[O](l[0],l[1]):3==r?new N[O](l[0],l[1],l[2]):4==r?new N[O](l[0],l[1],l[2],l[3]):2(),X(J,C,N))}),U),U)),function(C,J,r,N){X((r=S((N=(J=S(C),Q)(C),C)),r),C,E(J,C)>>>N)}),U),function(C){jr(1,C)}),U),U),[0,0,0]),function(C,J,r,N,O){0!==(J=E((N=(r=E((O=(J=(r=(N=(O=S(C),S(C)),S(C)),S)(C),E(O,C.P)),r),C),E)(N,C),J),C),O)&&(J=oh(J,C,1,r,O,N),O.addEventListener(N,J,q),X(39,C,[O,N,J]))}),U),{})),X)(16,U,n),0)),U)),function(C,J,r,N){r=(J=S(C),N=S(C),S)(C),X(r,C,E(J,C)||E(N,C))}),U),function(C,J,r){X((r=(J=(r=S(C),S(C)),r=E(r,C),zh)(r),J),C,r)}),U),U),2048),function(C,J,r){G(C,true,J,false)||(J=S(C),r=S(C),X(r,C,function(N){return eval(N)}(Mn(E(J,C.P)))))}),U),U)),U)),U)),U)),U),[160,0,0]),function(C){ah(4,C)}),U),F)(366,function(C,J,r){X((r=S(C),J=S(C),J),C,""+E(r,C))},U),426)),F)(395,function(C,J,r,N,O){for(r=(O=qn((J=S(C),C)),N=0,[]);N<O;N++)r.push(Q(C));X(J,C,r)},U),F(341,function(C){ah(3,C)},U),U.dh=0,function(C,J,r,N){r=(J=E((N=(J=S(C),S(C)),J),C),E)(N,C),X(N,C,r+J)}),U),U)),U),0),0),U)),[EK]),U),L([c,v],U),[XV,A]),U),U))},Q=function(U){return U.i?Vg(U.g,U):Z(U,8,true)},lX=function(U,v){return V[U](V.prototype,{call:v,floor:v,length:v,document:v,stack:v,replace:v,console:v,splice:v,prototype:v,pop:v,parent:v,propertyIsEnumerable:v})},R=function(U,v){for(v=[];U--;)v.push(255*Math.random()|0);return v},Cw=function(U,v,A,x,e){if(x=v[0],x==p)U.K=25,U.T(v);else if(x==W){A=v[1];try{e=U.A||U.T(v)}catch(C){K(U,C),e=U.A}A(e)}else if(x==fw)U.T(v);else if(x==c)U.T(v);else if(x==XV){try{for(e=0;e<U.o.length;e++)try{A=U.o[e],A[0][A[1]](A[2])}catch(C){}}catch(C){}(0,v[1])(function(C,J){U.s(C,true,J)},(U.o=[],function(C){L([(C=!U.u.length,D_)],U),C&&I(false,true,U)}))}else{if(x==M)return e=v[2],X(345,U,v[6]),X(368,U,e),U.T(v);x==D_?(U.F=[],U.B=null,U.V=[]):x==EK&&"loading"===n.document.readyState&&(U.J=function(C,J){function r(){J||(J=true,C())}(n.document.addEventListener("DOMContentLoaded",(J=false,r),q),n).addEventListener("load",r,q)})}},jr=function(U,v,A,x){h((A=(x=S(v),S(v)),A),v,H(U,E(x,v)))},I=function(U,v,A,x,e,C){if(A.u.length){A.uG=(A.j=!(A.j&&0(),0),v);try{x=A.G(),A.Y=x,A.N=0,A.U=x,C=yg(A,v),e=A.G()-A.U,A.R+=e,e<(U?0:10)||0>=A.K--||(e=Math.floor(e),A.F.push(254>=e?e:254))}finally{A.j=false}return C}},g,WF=function(U,v,A){if(3==U.length){for(A=0;3>A;A++)v[A]+=U[A];for(A=(U=0,[13,8,13,12,16,5,3,10,15]);9>U;U++)v[3](v,U%3,A[U])}},zh=function(U,v,A){if("object"==(v=typeof U,v))if(U){if(U instanceof Array)return"array";if(U instanceof Object)return v;if("[object Window]"==(A=Object.prototype.toString.call(U),A))return"object";if("[object Array]"==A||"number"==typeof U.length&&"undefined"!=typeof U.splice&&"undefined"!=typeof U.propertyIsEnumerable&&!U.propertyIsEnumerable("splice"))return"array";if("[object Function]"==A||"undefined"!=typeof U.call&&"undefined"!=typeof U.propertyIsEnumerable&&!U.propertyIsEnumerable("call"))return"function"}else return"null";else if("function"==v&&"undefined"==typeof U.call)return"object";return v},Vg=function(U,v){return(U=U.create().shift(),v.i.create()).length||v.g.create().length||(v.g=void 0,v.i=void 0),U},Lw=function(U,v,A,x){for(A=(x=S(U),0);0<v;v--)A=A<<8|Q(U);X(x,U,A)},Y=function(U,v,A){A=this;try{kc(this,U,v)}catch(x){K(this,x),v(function(e){e(A.A)})}},F=function(U,v,A){v[X(U,A,v),EK]=2796},J4=function(U,v){X(403,v,(v.a1.push(v.B.slice()),v.B[403]=void 0,U))},xc=function(U,v,A,x,e,C){if(!v.A){v.h++;try{for(x=(e=0,A=v.H,void 0);--U;)try{if((C=void 0,v).i)x=Vg(v.i,v);else{if(e=E(403,v),e>=A)break;x=(C=(X(105,v,e),S(v)),E)(C,v)}G(v,(x&&x[D_]&2048?x(v,U):d(0,v,[P,21,C]),false),U,false)}catch(J){E(23,v)?d(22,v,J):X(23,v,J)}if(!U){if(v.Zr){xc(335982656583,(v.h--,v));return}d(0,v,[P,33])}}catch(J){try{d(22,v,J)}catch(r){K(v,r)}}v.h--}},G=function(U,v,A,x,e,C,J,r,N){if(U.W+=(U.P=((e=(r=(J=(C=(N=(v||U.N++,0<U.D&&U.j&&U.uG&&1>=U.h&&!U.i&&!U.J&&(!v||1<U.X-A)&&0==document.hidden),4==U.N))||N?U.G():U.Y,J)-U.Y,r>>14),U).v&&(U.v^=e*(r<<2)),e)||U.P,e),C||N)U.Y=J,U.N=0;if(!N||J-U.U<U.D-(x?255:v?5:2))return false;return!(((X(403,(x=E(v?105:403,(U.X=A,U)),U),U.H),U).u.push([fw,x,v?A+1:A]),U).J=FV,0)},Sr=function(U,v,A,x,e){for(v=(e=v[3]|0,v[2]|0),x=0;14>x;x++)U=U>>>8|U<<24,U+=A|0,U^=v+3462,A=A<<3|A>>>29,A^=U,e=e>>>8|e<<24,e+=v|0,e^=x+3462,v=v<<3|v>>>29,v^=e;return[A>>>24&255,A>>>16&255,A>>>8&255,A>>>0&255,U>>>24&255,U>>>16&255,U>>>8&255,U>>>0&255]},Rh=function(U,v,A,x){try{x=U[((v|0)+2)%3],U[v]=(U[v]|0)-(U[((v|0)+1)%3]|0)-(x|0)^(1==v?x<<A:x>>>A)}catch(e){throw e;}},Qg=function(U,v){return U(function(A){A(v)}),[function(){return v}]},K=function(U,v){U.A=((U.A?U.A+"~":"E:")+v.message+":"+v.stack).slice(0,2048)},bX=function(U,v,A,x){function e(){}return x=uX(U,function(C){e&&(v&&FV(v),A=C,e(),e=void 0)},(A=void 0,!!v))[0],{invoke:function(C,J,r,N){function O(){A(function(l){FV(function(){C(l)})},r)}if(!J)return J=x(r),C&&C(J),J;A?O():(N=e,e=function(){(N(),FV)(O)})}}},E=function(U,v){if((v=v.B[U],void 0)===v)throw[P,30,U];if(v.value)return v.create();return v.create(3*U*U+32*U+97),v.prototype},UK=function(U){return U},n=this||self,Ih=function(U,v,A,x,e,C){for(x=(v=(((A=(C=U[Gh]||{},S)(U),C).Al=S(U),C).S=[],U.P)==U?(Q(U)|0)-1:1,S)(U),e=0;e<v;e++)C.S.push(S(U));for(C.Bx=E(x,U);v--;)C.S[v]=E(C.S[v],U);return C.I=E(A,U),C},Z_=function(U,v){((v.push(U[0]<<24|U[1]<<16|U[2]<<8|U[3]),v).push(U[4]<<24|U[5]<<16|U[6]<<8|U[7]),v).push(U[8]<<24|U[9]<<16|U[10]<<8|U[11])},cF=function(U,v,A){return U.s(function(x){A=x},false,v),A},h=function(U,v,A,x,e,C){if(v.P==v)for(e=E(U,v),491==U?(U=function(J,r,N,O){if(e.k5!=(r=(O=e.length,(O|0)-4>>3),r)){r=(r<<(N=[0,0,C[1],(e.k5=r,C[2])],3))-4;try{e.Q8=Sr(A4(e,(r|0)+4),N,A4(e,r))}catch(l){throw l;}}e.push(e.Q8[O&7]^J)},C=E(217,v)):U=function(J){e.push(J)},x&&U(x&255),v=0,x=A.length;v<x;v++)U(A[v])},X=function(U,v,A){if(403==U||105==U)v.B[U]?v.B[U].concat(A):v.B[U]=mv(A,v);else{if(v.O&&495!=U)return;220==U||491==U||51==U||52==U||217==U?v.B[U]||(v.B[U]=Nn(62,A,v,U)):v.B[U]=Nn(97,A,v,U)}495==U&&(v.v=Z(v,32,false),v.l=void 0)},L=function(U,v){v.u.splice(0,0,U)},qn=function(U,v){return(v=Q(U),v)&128&&(v=v&127|Q(U)<<7),v},FV=n.requestIdleCallback?function(U){requestIdleCallback(function(){U()},{timeout:4})}:n.setImmediate?function(U){setImmediate(U)}:function(U){setTimeout(U,0)},yg=function(U,v,A,x){for(;U.u.length;){U.J=null,x=U.u.pop();try{A=Cw(U,x)}catch(e){K(U,e)}if(v&&U.J){(v=U.J,v)(function(){I(true,true,U)});break}}return A},B,ah=function(U,v,A,x,e){h(((A=E((A=S((e=U&4,U&=3,v)),x=S(v),A),v),e&&(A=pw(""+A)),U)&&h(x,v,H(2,A.length)),x),v,A)},d=function(U,v,A,x,e,C){if(!v.O){if((U=(0==(x=E(52,((C=void 0,A)&&A[0]===P&&(U=A[1],C=A[2],A=void 0),v)),x.length)&&(e=E(105,v)>>3,x.push(U,e>>8&255,e&255),void 0!=C&&x.push(C&255)),""),A&&(A.message&&(U+=A.message),A.stack&&(U+=":"+A.stack)),A=E(4,v),3)<A){v.P=(C=(U=(A-=((U=U.slice(0,(A|0)-3),U).length|0)+3,pw)(U),v.P),v);try{h(491,v,H(2,U.length).concat(U),9)}finally{v.P=C}}X(4,v,A)}},H=function(U,v,A,x){for(x=(U|0)-(A=[],1);0<=x;x--)A[(U|0)-1-(x|0)]=v>>8*x&255;return A},S=function(U,v){if(U.i)return Vg(U.g,U);return(v=Z(U,8,true),v&128)&&(v^=128,U=Z(U,2,true),v=(v<<2)+(U|0)),v},q={passive:true,capture:true},uX=function(U,v,A,x){return(x=g[U.substring(0,3)+"_"])?x(U.substring(3),v,A):Qg(v,U)},pw=function(U,v,A,x,e){for(e=(U=U.replace(/\\r\\n/g,"\\n"),A=v=0,[]);A<U.length;A++)x=U.charCodeAt(A),128>x?e[v++]=x:(2048>x?e[v++]=x>>6|192:(55296==(x&64512)&&A+1<U.length&&56320==(U.charCodeAt(A+1)&64512)?(x=65536+((x&1023)<<10)+(U.charCodeAt(++A)&1023),e[v++]=x>>18|240,e[v++]=x>>12&63|128):e[v++]=x>>12|224,e[v++]=x>>6&63|128),e[v++]=x&63|128);return e},mv=function(U,v,A){return((A=V[v.Z](v.Hx),A)[v.Z]=function(){return U},A).concat=function(x){U=x},A},Z=function(U,v,A,x,e,C,J,r,N,O,l,z,k,a){if(N=E(403,U),N>=U.H)throw[P,31];for(l=(z=(r=v,x=U.lG.length,0),N);0<r;)J=l%8,a=8-(J|0),O=l>>3,a=a<r?a:r,k=U.V[O],A&&(e=U,e.l!=l>>6&&(e.l=l>>6,C=E(495,e),e.C=Sr(e.l,[0,0,C[1],C[2]],e.v)),k^=U.C[O&x]),l+=a,z|=(k>>8-(J|0)-(a|0)&(1<<a)-1)<<(r|0)-(a|0),r-=a;return X(403,(A=z,U),(N|0)+(v|0)),A},Gh=String.fromCharCode(105,110,116,101,103,67,104,101,99,107,66,121,112,97,115,115),p=((Y.prototype.mN=void 0,Y.prototype).U3=void 0,Y.prototype.Zr=false,[]),M=(Y.prototype.L="toString",[]),fw=[],P={},XV=[],EK=[],c=[],D_=[],W=[],er=((((((((Z_,function(){})(R),Rh,function(){})(WF),B=Y.prototype,B.vx=function(U,v,A){return U^((v=(v^=v<<13,v^=v>>17,(v^v<<5)&A))||(v=1),v)},B).Tk=function(U,v,A,x,e){for(e=x=0;x<U.length;x++)e+=U.charCodeAt(x),e+=e<<10,e^=e>>6;return(U=(e+=e<<3,e^=e>>11,e+(e<<15))>>>0,x=new Number(U&(1<<v)-1),x)[0]=(U>>>v)%A,x},Y.prototype).Z="create",B.s=function(U,v,A,x,e){if((A="array"===zh(A)?A:[A],this).A)U(this.A);else try{x=[],e=!this.u.length,L([p,x,A],this),L([W,U,x],this),v&&!e||I(true,v,this)}catch(C){K(this,C),U(this.A)}},B).y8=function(){return Math.floor(this.R+(this.G()-this.U))},B).ff=function(U,v,A,x,e,C){for(A=(e=C=0,[]);C<U.length;C++)for(x=x<<v|U[C],e+=v;7<e;)e-=8,A.push(x>>e&255);return A},B).G=(window.performance||{}).now?function(){return this.Gk+window.performance.now()}:function(){return+new Date},void 0),V=P.constructor;(B.gh=function(){return Math.floor(this.G())},Y.prototype).T=function(U,v){return U={},er=function(){return v==U?97:61},v={},function(A,x,e,C,J,r,N,O,l,z,k,a,m,y,f){v=(C=v,U);try{if(f=A[0],f==c){a=A[1];try{for(r=atob((x=[],a)),l=O=0;O<r.length;O++)y=r.charCodeAt(O),255<y&&(x[l++]=y&255,y>>=8),x[l++]=y;X(495,(this.H=(this.V=x,this.V.length<<3),this),[0,0,0])}catch(u){d(17,this,u);return}xc(8001,this)}else if(f==p)A[1].push(E(220,this).length,E(51,this).length,E(4,this),E(491,this).length),X(368,this,A[2]),this.B[458]&&r0(8001,E(458,this),this);else{if(f==W){this.P=(m=H(2,(E(220,(O=A[2],this)).length|0)+2),J=this.P,this);try{N=E(52,this),0<N.length&&h(220,this,H(2,N.length).concat(N),10),h(220,this,H(1,this.W),109),h(220,this,H(1,this[W].length)),r=0,r-=(E(220,this).length|0)+5,r+=E(109,this)&2047,z=E(491,this),4<z.length&&(r-=(z.length|0)+3),0<r&&h(220,this,H(2,r).concat(R(r)),15),4<z.length&&h(220,this,H(2,z.length).concat(z),156)}finally{this.P=J}if(e=(l=R(2).concat(E(220,this)),l[1]=l[0]^6,l[3]=l[1]^m[0],l[4]=l[1]^m[1],this).iG(l))e="!"+e;else for(r=0,e="";r<l.length;r++)k=l[r][this.L](16),1==k.length&&(k="0"+k),e+=k;return E(491,(E((x=e,220),this).length=O.shift(),E(51,this).length=O.shift(),X(4,this,O.shift()),this)).length=O.shift(),x}if(f==fw)r0(A[2],A[1],this);else if(f==M)return r0(8001,A[1],this)}}finally{v=C}}}();var nw,OK=(Y.prototype.hl=(Y.prototype[XV]=[0,0,1,1,0,1,1],Y.prototype.iG=function(U,v,A,x){if(x=window.btoa){for(A=(v=0,"");v<U.length;v+=8192)A+=String.fromCharCode.apply(null,U.slice(v,v+8192));U=x(A).replace(/\\+/g,"-").replace(/\\//g,"_").replace(/=/g,"")}else U=void 0;return U},Y.prototype.Jl=0,0),/./),Kw=c.pop.bind(Y.prototype[p]),Mn=(nw=lX(Y.prototype.Z,{get:(OK[Y.prototype.L]=Kw,Kw)}),Y.prototype.Su=void 0,function(U,v){return(v=vF())&&1===U.eval(v.createScript("1"))?function(A){return v.createScript(A)}:function(A){return""+A}})(n);40<(g=n.botguard||(n.botguard={}),g.m)||(g.m=41,g.bg=bX,g.a=uX),g.qBf_=function(U,v,A){return A=new Y(U,v),[function(x){return cF(A,x)}]};}).call(this);'));
}).call(this);
                                    

#4 JavaScript::Eval (size: 15446, repeated: 1) - SHA256: 9690a582573926b478b7ee1e651dabedd7d995b0f26f5cd8b99f228895c49b2a

                                        (function() {
    var vF = function(U, v) {
            if (!(U = (v = null, n.trustedTypes), U) || !U.createPolicy) return v;
            try {
                v = U.createPolicy("bg", {
                    createHTML: UK,
                    createScript: UK,
                    createScriptURL: UK
                })
            } catch (A) {
                n.console && n.console.error(A.message)
            }
            return v
        },
        oh = function(U, v, A, x, e, C) {
            function J() {
                if (v.P == v) {
                    if (v.B) {
                        var r = [M, x, U, void 0, e, C, arguments];
                        if (2 == A) var N = I(false, false, (L(r, v), v));
                        else if (1 == A) {
                            var O = !v.u.length;
                            L(r, v), O && I(false, false, v)
                        } else N = Cw(v, r);
                        return N
                    }
                    e && C && e.removeEventListener(C, J, q)
                }
            }
            return J
        },
        A4 = function(U, v) {
            return U[v] << 24 | U[(v | 0) + 1] << 16 | U[(v | 0) + 2] << 8 | U[(v | 0) + 3]
        },
        r0 = function(U, v, A, x) {
            return (X(403, A, (xc((x = E(403, A), A.V && x < A.H ? (X(403, A, A.H), J4(v, A)) : X(403, A, v), U), A), x)), E)(368, A)
        },
        Nn = function(U, v, A, x, e, C, J, r) {
            return (v = [60, 32, -94, 21, 71, (J = U & (r = er, 7), 74), v, 90, 56, 20], C = V[A.Z](A.Px), C[A.Z] = function(N) {
                J += 6 + 7 * (e = N, U), J &= 7
            }, C).concat = function(N) {
                return (e = (N = (N = (N = x % 16 + 1, +v[J + 43 & 7] * x * N - 1184 * x * e + J + 37 * e * e + (r() | 0) * N) + 3 * x * x * N - 111 * x * x * e - N * e - 3589 * e, v[N]), void 0), v)[(J + 21 & 7) + (U & 2)] = N, v[J + (U & 2)] = 32, N
            }, C
        },
        kc = function(U, v, A, x, e) {
            for (e = (x = (U.Px = (U.lG = U[U.Mx = (U.pf = nw, OK), W], lX)(U.Z, {get: function() {
                        return this.concat()
                    }
                }), U.Hx = V[U.Z](U.Px, {
                    value: {
                        value: {}
                    }
                }), 0), []); 128 > x; x++) e[x] = String.fromCharCode(x);
            I(true, true, (L((L((F(260, function(C, J, r, N, O, l, z, k, a, m, y, f) {
                function u(D, b) {
                    for (; l < D;) r |= Q(C) << l, l += 8;
                    return b = r & (l -= D, (1 << D) - 1), r >>= D, b
                }
                for (k = ((l = (a = S(C), r = 0), u(3)) | 0) + 1, O = u(5), J = [], z = m = 0; z < O; z++) y = u(1), J.push(y), m += y ? 0 : 1;
                for (z = (m = ((m | 0) - 1).toString(2).length, N = [], 0); z < O; z++) J[z] || (N[z] = u(m));
                for (m = 0; m < O; m++) J[m] && (N[m] = S(C));
                for (f = []; k--;) f.push(E(S(C), C));
                F(a, function(D, b, w, T, t) {
                    for (w = (T = [], 0), b = []; w < O; w++) {
                        if (!J[t = N[w], w]) {
                            for (; t >= T.length;) T.push(S(D));
                            t = T[t]
                        }
                        b.push(t)
                    }
                    D.g = mv((D.i = mv(f.slice(), D), b), D)
                }, C)
            }, (U.zk = (X(39, (F(153, function(C, J) {
                J4((J = E(S(C), C), J), C.P)
            }, (F(76, ((X(23, U, ((F(257, (X(220, (F(203, function(C, J, r, N) {
                J = (r = S(C), N = S(C), S(C)), C.P == C && (J = E(J, C), N = E(N, C), E(r, C)[N] = J, 495 == r && (C.l = void 0, 2 == N && (C.v = Z(C, 32, false), C.l = void 0)))
            }, (F(77, function(C, J, r, N, O, l, z) {
                for (r = (O = (l = E((N = (z = qn((J = S(C), C)), ""), 48), C), l.length), 0); z--;) r = ((r | 0) + (qn(C) | 0)) % O, N += e[l[r]];
                X(J, C, N)
            }, (F(197, function(C, J) {
                (J = S(C), C = E(J, C.P), C[0]).removeEventListener(C[1], C[2], q)
            }, (F(145, function(C, J, r, N, O, l) {
                if (!G(C, true, J, true)) {
                    if ("object" == (r = (l = (r = S((O = S((J = (l = S(C), S(C)), C)), C)), J = E(J, C), E(l, C)), E(r, C)), C = E(O, C), zh(l))) {
                        for (N in O = [], l) O.push(N);
                        l = O
                    }
                    for (O = (N = 0, C = 0 < C ? C : 1, l).length; N < O; N += C) J(l.slice(N, (N | 0) + (C | 0)), r)
                }
            }, (F(204, (X(4, (F(146, (F(319, (F(247, function(C, J, r, N, O) {
                X((J = (O = E((N = E((N = (J = (O = S((r = S(C), C)), S(C)), S(C)), N), C), O), C), E)(J, C), r), C, oh(J, C, N, O))
            }, (X(109, U, ((X(368, U, (F(42, (X(217, (F(486, (F(55, (F(226, function(C, J, r, N) {
                !G(C, true, J, false) && (J = Ih(C), N = J.Bx, r = J.I, C.P == C || r == C.nf && N == C) && (X(J.Al, C, r.apply(N, J.S)), C.Y = C.G())
            }, (F(308, (F(436, (U.Y5 = (F(483, function(C, J, r, N) {
                if (J = C.a1.pop()) {
                    for (N = Q(C); 0 < N; N--) r = S(C), J[r] = C.B[r];
                    C.B = (J[4] = C.B[J[52] = C.B[52], 4], J)
                } else X(403, C, C.H)
            }, (F(405, function(C) {
                jr(4, C)
            }, (F(475, (X(52, (F(64, function(C, J, r) {
                (r = (r = (J = S(C), S)(C), E)(r, C), 0) != E(J, C) && X(403, C, r)
            }, (X(491, U, (F(460, (F(131, (X(51, U, (X(((X(403, (((U.H = 0, U.V8 = (U.o = [], U.B = [], U.g = (U.a1 = [], U.O = (U.D = 0, false), U.N = void 0, void 0), ((U.i = void 0, U).A = (x = window.performance || {}, void 0), U).U = (U.X = ((U.uG = (U.l = void 0, U.j = false, !(U.R = 0, 1)), U).h = (U.P = U, U.V = (U.J = (U.W = 1, null), []), U.F = [], 0), U.C = void 0, 8001), U.K = (U.v = void 0, 25), U.Y = 0, 0), 0), U).nf = function(C) {
                this.P = C
            }, U.u = [], U).Gk = x.timeOrigin || (x.timing || {}).navigationStart || 0, U), 0), X)(105, U, 0), 208), U, U), [])), function(C, J, r, N) {
                (r = E((N = (J = S((r = (N = S(C), S(C)), C)), E(N, C)), r), C), X)(J, C, N[r])
            }), U), function(C, J, r, N) {
                r = E((J = S((N = S(C), r = S(C), C)), r), C), N = E(N, C) == r, X(J, C, +N)
            }), U), R(4))), F(478, function(C, J, r, N) {
                X((r = E((J = E((r = S((J = S(C), C)), N = S(C), J), C), r), C), N), C, J in r | 0)
            }, U), U)), U), []), function(C) {
                Lw(C, 4)
            }), U), U)), U)), 0), function() {}), U), function(C, J, r, N, O, l) {
                G(C, true, J, false) || (l = Ih(C.P), N = l.Bx, O = l.I, J = l.Al, l = l.S, r = l.length, N = 0 == r ? new N[O] : 1 == r ? new N[O](l[0]) : 2 == r ? new N[O](l[0], l[1]) : 3 == r ? new N[O](l[0], l[1], l[2]) : 4 == r ? new N[O](l[0], l[1], l[2], l[3]) : 2(), X(J, C, N))
            }), U), U)), function(C, J, r, N) {
                X((r = S((N = (J = S(C), Q)(C), C)), r), C, E(J, C) >>> N)
            }), U), function(C) {
                jr(1, C)
            }), U), U), [0, 0, 0]), function(C, J, r, N, O) {
                0 !== (J = E((N = (r = E((O = (J = (r = (N = (O = S(C), S(C)), S(C)), S)(C), E(O, C.P)), r), C), E)(N, C), J), C), O) && (J = oh(J, C, 1, r, O, N), O.addEventListener(N, J, q), X(39, C, [O, N, J]))
            }), U), {})), X)(16, U, n), 0)), U)), function(C, J, r, N) {
                r = (J = S(C), N = S(C), S)(C), X(r, C, E(J, C) || E(N, C))
            }), U), function(C, J, r) {
                X((r = (J = (r = S(C), S(C)), r = E(r, C), zh)(r), J), C, r)
            }), U), U), 2048), function(C, J, r) {
                G(C, true, J, false) || (J = S(C), r = S(C), X(r, C, function(N) {
                    return eval(N)
                }(Mn(E(J, C.P)))))
            }), U), U)), U)), U)), U)), U), [160, 0, 0]), function(C) {
                ah(4, C)
            }), U), F)(366, function(C, J, r) {
                X((r = S(C), J = S(C), J), C, "" + E(r, C))
            }, U), 426)), F)(395, function(C, J, r, N, O) {
                for (r = (O = qn((J = S(C), C)), N = 0, []); N < O; N++) r.push(Q(C));
                X(J, C, r)
            }, U), F(341, function(C) {
                ah(3, C)
            }, U), U.dh = 0, function(C, J, r, N) {
                r = (J = E((N = (J = S(C), S(C)), J), C), E)(N, C), X(N, C, r + J)
            }), U), U)), U), 0), 0), U)), [EK]), U), L([c, v], U), [XV, A]), U), U))
        },
        Q = function(U) {
            return U.i ? Vg(U.g, U) : Z(U, 8, true)
        },
        lX = function(U, v) {
            return V[U](V.prototype, {
                call: v,
                floor: v,
                length: v,
                document: v,
                stack: v,
                replace: v,
                console: v,
                splice: v,
                prototype: v,
                pop: v,
                parent: v,
                propertyIsEnumerable: v
            })
        },
        R = function(U, v) {
            for (v = []; U--;) v.push(255 * Math.random() | 0);
            return v
        },
        Cw = function(U, v, A, x, e) {
            if (x = v[0], x == p) U.K = 25, U.T(v);
            else if (x == W) {
                A = v[1];
                try {
                    e = U.A || U.T(v)
                } catch (C) {
                    K(U, C), e = U.A
                }
                A(e)
            } else if (x == fw) U.T(v);
            else if (x == c) U.T(v);
            else if (x == XV) {
                try {
                    for (e = 0; e < U.o.length; e++) try {
                        A = U.o[e], A[0][A[1]](A[2])
                    } catch (C) {}
                } catch (C) {}(0, v[1])(function(C, J) {
                    U.s(C, true, J)
                }, (U.o = [], function(C) {
                    L([(C = !U.u.length, D_)], U), C && I(false, true, U)
                }))
            } else {
                if (x == M) return e = v[2], X(345, U, v[6]), X(368, U, e), U.T(v);
                x == D_ ? (U.F = [], U.B = null, U.V = []) : x == EK && "loading" === n.document.readyState && (U.J = function(C, J) {
                    function r() {
                        J || (J = true, C())
                    }(n.document.addEventListener("DOMContentLoaded", (J = false, r), q), n).addEventListener("load", r, q)
                })
            }
        },
        jr = function(U, v, A, x) {
            h((A = (x = S(v), S(v)), A), v, H(U, E(x, v)))
        },
        I = function(U, v, A, x, e, C) {
            if (A.u.length) {
                A.uG = (A.j = !(A.j && 0(), 0), v);
                try {
                    x = A.G(), A.Y = x, A.N = 0, A.U = x, C = yg(A, v), e = A.G() - A.U, A.R += e, e < (U ? 0 : 10) || 0 >= A.K-- || (e = Math.floor(e), A.F.push(254 >= e ? e : 254))
                } finally {
                    A.j = false
                }
                return C
            }
        },
        g, WF = function(U, v, A) {
            if (3 == U.length) {
                for (A = 0; 3 > A; A++) v[A] += U[A];
                for (A = (U = 0, [13, 8, 13, 12, 16, 5, 3, 10, 15]); 9 > U; U++) v[3](v, U % 3, A[U])
            }
        },
        zh = function(U, v, A) {
            if ("object" == (v = typeof U, v))
                if (U) {
                    if (U instanceof Array) return "array";
                    if (U instanceof Object) return v;
                    if ("[object Window]" == (A = Object.prototype.toString.call(U), A)) return "object";
                    if ("[object Array]" == A || "number" == typeof U.length && "undefined" != typeof U.splice && "undefined" != typeof U.propertyIsEnumerable && !U.propertyIsEnumerable("splice")) return "array";
                    if ("[object Function]" == A || "undefined" != typeof U.call && "undefined" != typeof U.propertyIsEnumerable && !U.propertyIsEnumerable("call")) return "function"
                } else return "null";
            else if ("function" == v && "undefined" == typeof U.call) return "object";
            return v
        },
        Vg = function(U, v) {
            return (U = U.create().shift(), v.i.create()).length || v.g.create().length || (v.g = void 0, v.i = void 0), U
        },
        Lw = function(U, v, A, x) {
            for (A = (x = S(U), 0); 0 < v; v--) A = A << 8 | Q(U);
            X(x, U, A)
        },
        Y = function(U, v, A) {
            A = this;
            try {
                kc(this, U, v)
            } catch (x) {
                K(this, x), v(function(e) {
                    e(A.A)
                })
            }
        },
        F = function(U, v, A) {
            v[X(U, A, v), EK] = 2796
        },
        J4 = function(U, v) {
            X(403, v, (v.a1.push(v.B.slice()), v.B[403] = void 0, U))
        },
        xc = function(U, v, A, x, e, C) {
            if (!v.A) {
                v.h++;
                try {
                    for (x = (e = 0, A = v.H, void 0); --U;) try {
                        if ((C = void 0, v).i) x = Vg(v.i, v);
                        else {
                            if (e = E(403, v), e >= A) break;
                            x = (C = (X(105, v, e), S(v)), E)(C, v)
                        }
                        G(v, (x && x[D_] & 2048 ? x(v, U) : d(0, v, [P, 21, C]), false), U, false)
                    } catch (J) {
                        E(23, v) ? d(22, v, J) : X(23, v, J)
                    }
                    if (!U) {
                        if (v.Zr) {
                            xc(335982656583, (v.h--, v));
                            return
                        }
                        d(0, v, [P, 33])
                    }
                } catch (J) {
                    try {
                        d(22, v, J)
                    } catch (r) {
                        K(v, r)
                    }
                }
                v.h--
            }
        },
        G = function(U, v, A, x, e, C, J, r, N) {
            if (U.W += (U.P = ((e = (r = (J = (C = (N = (v || U.N++, 0 < U.D && U.j && U.uG && 1 >= U.h && !U.i && !U.J && (!v || 1 < U.X - A) && 0 == document.hidden), 4 == U.N)) || N ? U.G() : U.Y, J) - U.Y, r >> 14), U).v && (U.v ^= e * (r << 2)), e) || U.P, e), C || N) U.Y = J, U.N = 0;
            if (!N || J - U.U < U.D - (x ? 255 : v ? 5 : 2)) return false;
            return !(((X(403, (x = E(v ? 105 : 403, (U.X = A, U)), U), U.H), U).u.push([fw, x, v ? A + 1 : A]), U).J = FV, 0)
        },
        Sr = function(U, v, A, x, e) {
            for (v = (e = v[3] | 0, v[2] | 0), x = 0; 14 > x; x++) U = U >>> 8 | U << 24, U += A | 0, U ^= v + 3462, A = A << 3 | A >>> 29, A ^= U, e = e >>> 8 | e << 24, e += v | 0, e ^= x + 3462, v = v << 3 | v >>> 29, v ^= e;
            return [A >>> 24 & 255, A >>> 16 & 255, A >>> 8 & 255, A >>> 0 & 255, U >>> 24 & 255, U >>> 16 & 255, U >>> 8 & 255, U >>> 0 & 255]
        },
        Rh = function(U, v, A, x) {
            try {
                x = U[((v | 0) + 2) % 3], U[v] = (U[v] | 0) - (U[((v | 0) + 1) % 3] | 0) - (x | 0) ^ (1 == v ? x << A : x >>> A)
            } catch (e) {
                throw e;
            }
        },
        Qg = function(U, v) {
            return U(function(A) {
                A(v)
            }), [function() {
                return v
            }]
        },
        K = function(U, v) {
            U.A = ((U.A ? U.A + "~" : "E:") + v.message + ":" + v.stack).slice(0, 2048)
        },
        bX = function(U, v, A, x) {
            function e() {}
            return x = uX(U, function(C) {
                e && (v && FV(v), A = C, e(), e = void 0)
            }, (A = void 0, !!v))[0], {
                invoke: function(C, J, r, N) {
                    function O() {
                        A(function(l) {
                            FV(function() {
                                C(l)
                            })
                        }, r)
                    }
                    if (!J) return J = x(r), C && C(J), J;
                    A ? O() : (N = e, e = function() {
                        (N(), FV)(O)
                    })
                }
            }
        },
        E = function(U, v) {
            if ((v = v.B[U], void 0) === v) throw [P, 30, U];
            if (v.value) return v.create();
            return v.create(3 * U * U + 32 * U + 97), v.prototype
        },
        UK = function(U) {
            return U
        },
        n = this || self,
        Ih = function(U, v, A, x, e, C) {
            for (x = (v = (((A = (C = U[Gh] || {}, S)(U), C).Al = S(U), C).S = [], U.P) == U ? (Q(U) | 0) - 1 : 1, S)(U), e = 0; e < v; e++) C.S.push(S(U));
            for (C.Bx = E(x, U); v--;) C.S[v] = E(C.S[v], U);
            return C.I = E(A, U), C
        },
        Z_ = function(U, v) {
            ((v.push(U[0] << 24 | U[1] << 16 | U[2] << 8 | U[3]), v).push(U[4] << 24 | U[5] << 16 | U[6] << 8 | U[7]), v).push(U[8] << 24 | U[9] << 16 | U[10] << 8 | U[11])
        },
        cF = function(U, v, A) {
            return U.s(function(x) {
                A = x
            }, false, v), A
        },
        h = function(U, v, A, x, e, C) {
            if (v.P == v)
                for (e = E(U, v), 491 == U ? (U = function(J, r, N, O) {
                        if (e.k5 != (r = (O = e.length, (O | 0) - 4 >> 3), r)) {
                            r = (r << (N = [0, 0, C[1], (e.k5 = r, C[2])], 3)) - 4;
                            try {
                                e.Q8 = Sr(A4(e, (r | 0) + 4), N, A4(e, r))
                            } catch (l) {
                                throw l;
                            }
                        }
                        e.push(e.Q8[O & 7] ^ J)
                    }, C = E(217, v)) : U = function(J) {
                        e.push(J)
                    }, x && U(x & 255), v = 0, x = A.length; v < x; v++) U(A[v])
        },
        X = function(U, v, A) {
            if (403 == U || 105 == U) v.B[U] ? v.B[U].concat(A) : v.B[U] = mv(A, v);
            else {
                if (v.O && 495 != U) return;
                220 == U || 491 == U || 51 == U || 52 == U || 217 == U ? v.B[U] || (v.B[U] = Nn(62, A, v, U)) : v.B[U] = Nn(97, A, v, U)
            }
            495 == U && (v.v = Z(v, 32, false), v.l = void 0)
        },
        L = function(U, v) {
            v.u.splice(0, 0, U)
        },
        qn = function(U, v) {
            return (v = Q(U), v) & 128 && (v = v & 127 | Q(U) << 7), v
        },
        FV = n.requestIdleCallback ? function(U) {
            requestIdleCallback(function() {
                U()
            }, {
                timeout: 4
            })
        } : n.setImmediate ? function(U) {
            setImmediate(U)
        } : function(U) {
            setTimeout(U, 0)
        },
        yg = function(U, v, A, x) {
            for (; U.u.length;) {
                U.J = null, x = U.u.pop();
                try {
                    A = Cw(U, x)
                } catch (e) {
                    K(U, e)
                }
                if (v && U.J) {
                    (v = U.J, v)(function() {
                        I(true, true, U)
                    });
                    break
                }
            }
            return A
        },
        B, ah = function(U, v, A, x, e) {
            h(((A = E((A = S((e = U & 4, U &= 3, v)), x = S(v), A), v), e && (A = pw("" + A)), U) && h(x, v, H(2, A.length)), x), v, A)
        },
        d = function(U, v, A, x, e, C) {
            if (!v.O) {
                if ((U = (0 == (x = E(52, ((C = void 0, A) && A[0] === P && (U = A[1], C = A[2], A = void 0), v)), x.length) && (e = E(105, v) >> 3, x.push(U, e >> 8 & 255, e & 255), void 0 != C && x.push(C & 255)), ""), A && (A.message && (U += A.message), A.stack && (U += ":" + A.stack)), A = E(4, v), 3) < A) {
                    v.P = (C = (U = (A -= ((U = U.slice(0, (A | 0) - 3), U).length | 0) + 3, pw)(U), v.P), v);
                    try {
                        h(491, v, H(2, U.length).concat(U), 9)
                    } finally {
                        v.P = C
                    }
                }
                X(4, v, A)
            }
        },
        H = function(U, v, A, x) {
            for (x = (U | 0) - (A = [], 1); 0 <= x; x--) A[(U | 0) - 1 - (x | 0)] = v >> 8 * x & 255;
            return A
        },
        S = function(U, v) {
            if (U.i) return Vg(U.g, U);
            return (v = Z(U, 8, true), v & 128) && (v ^= 128, U = Z(U, 2, true), v = (v << 2) + (U | 0)), v
        },
        q = {
            passive: true,
            capture: true
        },
        uX = function(U, v, A, x) {
            return (x = g[U.substring(0, 3) + "_"]) ? x(U.substring(3), v, A) : Qg(v, U)
        },
        pw = function(U, v, A, x, e) {
            for (e = (U = U.replace(/\r\n/g, "\n"), A = v = 0, []); A < U.length; A++) x = U.charCodeAt(A), 128 > x ? e[v++] = x : (2048 > x ? e[v++] = x >> 6 | 192 : (55296 == (x & 64512) && A + 1 < U.length && 56320 == (U.charCodeAt(A + 1) & 64512) ? (x = 65536 + ((x & 1023) << 10) + (U.charCodeAt(++A) & 1023), e[v++] = x >> 18 | 240, e[v++] = x >> 12 & 63 | 128) : e[v++] = x >> 12 | 224, e[v++] = x >> 6 & 63 | 128), e[v++] = x & 63 | 128);
            return e
        },
        mv = function(U, v, A) {
            return ((A = V[v.Z](v.Hx), A)[v.Z] = function() {
                return U
            }, A).concat = function(x) {
                U = x
            }, A
        },
        Z = function(U, v, A, x, e, C, J, r, N, O, l, z, k, a) {
            if (N = E(403, U), N >= U.H) throw [P, 31];
            for (l = (z = (r = v, x = U.lG.length, 0), N); 0 < r;) J = l % 8, a = 8 - (J | 0), O = l >> 3, a = a < r ? a : r, k = U.V[O], A && (e = U, e.l != l >> 6 && (e.l = l >> 6, C = E(495, e), e.C = Sr(e.l, [0, 0, C[1], C[2]], e.v)), k ^= U.C[O & x]), l += a, z |= (k >> 8 - (J | 0) - (a | 0) & (1 << a) - 1) << (r | 0) - (a | 0), r -= a;
            return X(403, (A = z, U), (N | 0) + (v | 0)), A
        },
        Gh = String.fromCharCode(105, 110, 116, 101, 103, 67, 104, 101, 99, 107, 66, 121, 112, 97, 115, 115),
        p = ((Y.prototype.mN = void 0, Y.prototype).U3 = void 0, Y.prototype.Zr = false, []),
        M = (Y.prototype.L = "toString", []),
        fw = [],
        P = {},
        XV = [],
        EK = [],
        c = [],
        D_ = [],
        W = [],
        er = ((((((((Z_, function() {})(R), Rh, function() {})(WF), B = Y.prototype, B.vx = function(U, v, A) {
            return U ^ ((v = (v ^= v << 13, v ^= v >> 17, (v ^ v << 5) & A)) || (v = 1), v)
        }, B).Tk = function(U, v, A, x, e) {
            for (e = x = 0; x < U.length; x++) e += U.charCodeAt(x), e += e << 10, e ^= e >> 6;
            return (U = (e += e << 3, e ^= e >> 11, e + (e << 15)) >>> 0, x = new Number(U & (1 << v) - 1), x)[0] = (U >>> v) % A, x
        }, Y.prototype).Z = "create", B.s = function(U, v, A, x, e) {
            if ((A = "array" === zh(A) ? A : [A], this).A) U(this.A);
            else try {
                x = [], e = !this.u.length, L([p, x, A], this), L([W, U, x], this), v && !e || I(true, v, this)
            } catch (C) {
                K(this, C), U(this.A)
            }
        }, B).y8 = function() {
            return Math.floor(this.R + (this.G() - this.U))
        }, B).ff = function(U, v, A, x, e, C) {
            for (A = (e = C = 0, []); C < U.length; C++)
                for (x = x << v | U[C], e += v; 7 < e;) e -= 8, A.push(x >> e & 255);
            return A
        }, B).G = (window.performance || {}).now ? function() {
            return this.Gk + window.performance.now()
        } : function() {
            return +new Date
        }, void 0),
        V = P.constructor;
    (B.gh = function() {
        return Math.floor(this.G())
    }, Y.prototype).T = function(U, v) {
        return U = {}, er = function() {
                return v == U ? 97 : 61
            }, v = {},
            function(A, x, e, C, J, r, N, O, l, z, k, a, m, y, f) {
                v = (C = v, U);
                try {
                    if (f = A[0], f == c) {
                        a = A[1];
                        try {
                            for (r = atob((x = [], a)), l = O = 0; O < r.length; O++) y = r.charCodeAt(O), 255 < y && (x[l++] = y & 255, y >>= 8), x[l++] = y;
                            X(495, (this.H = (this.V = x, this.V.length << 3), this), [0, 0, 0])
                        } catch (u) {
                            d(17, this, u);
                            return
                        }
                        xc(8001, this)
                    } else if (f == p) A[1].push(E(220, this).length, E(51, this).length, E(4, this), E(491, this).length), X(368, this, A[2]), this.B[458] && r0(8001, E(458, this), this);
                    else {
                        if (f == W) {
                            this.P = (m = H(2, (E(220, (O = A[2], this)).length | 0) + 2), J = this.P, this);
                            try {
                                N = E(52, this), 0 < N.length && h(220, this, H(2, N.length).concat(N), 10), h(220, this, H(1, this.W), 109), h(220, this, H(1, this[W].length)), r = 0, r -= (E(220, this).length | 0) + 5, r += E(109, this) & 2047, z = E(491, this), 4 < z.length && (r -= (z.length | 0) + 3), 0 < r && h(220, this, H(2, r).concat(R(r)), 15), 4 < z.length && h(220, this, H(2, z.length).concat(z), 156)
                            } finally {
                                this.P = J
                            }
                            if (e = (l = R(2).concat(E(220, this)), l[1] = l[0] ^ 6, l[3] = l[1] ^ m[0], l[4] = l[1] ^ m[1], this).iG(l)) e = "!" + e;
                            else
                                for (r = 0, e = ""; r < l.length; r++) k = l[r][this.L](16), 1 == k.length && (k = "0" + k), e += k;
                            return E(491, (E((x = e, 220), this).length = O.shift(), E(51, this).length = O.shift(), X(4, this, O.shift()), this)).length = O.shift(), x
                        }
                        if (f == fw) r0(A[2], A[1], this);
                        else if (f == M) return r0(8001, A[1], this)
                    }
                } finally {
                    v = C
                }
            }
    }();
    var nw, OK = (Y.prototype.hl = (Y.prototype[XV] = [0, 0, 1, 1, 0, 1, 1], Y.prototype.iG = function(U, v, A, x) {
            if (x = window.btoa) {
                for (A = (v = 0, ""); v < U.length; v += 8192) A += String.fromCharCode.apply(null, U.slice(v, v + 8192));
                U = x(A).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "")
            } else U = void 0;
            return U
        }, Y.prototype.Jl = 0, 0), /./),
        Kw = c.pop.bind(Y.prototype[p]),
        Mn = (nw = lX(Y.prototype.Z, {get: (OK[Y.prototype.L] = Kw, Kw)
        }), Y.prototype.Su = void 0, function(U, v) {
            return (v = vF()) && 1 === U.eval(v.createScript("1")) ? function(A) {
                return v.createScript(A)
            } : function(A) {
                return "" + A
            }
        })(n);
    40 < (g = n.botguard || (n.botguard = {}), g.m) || (g.m = 41, g.bg = bX, g.a = uX), g.qBf_ = function(U, v, A) {
        return A = new Y(U, v), [function(x) {
            return cF(A, x)
        }]
    };
}).call(this);
                                    

#5 JavaScript::Eval (size: 64, repeated: 1) - SHA256: 87c99b9a88a42ee46bbe6ce447b600a1653142b3ebb7b9ed96bc786f7a99d488

                                        0,
function(C, J, r) {
    X((J = (r = (J = S(C), S)(C), C.B[J]) && E(J, C), r), C, J)
}
                                    

#6 JavaScript::Eval (size: 22, repeated: 1) - SHA256: ba41c5348d38a6ebd3399d0378ae76921f287d04f94ff5d93d6709e7f2a962b7

                                        0,
function(C) {
    Lw(C, 2)
}
                                    

Executed Writes (0)



HTTP Transactions (113)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1F611155394FAC39439B8EC8217D8CD493D6B588D372D264E0D66C03129C50C6"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5205
Expires: Tue, 04 Oct 2022 17:05:59 GMT
Date: Tue, 04 Oct 2022 15:39:14 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 04 Oct 2022 14:47:04 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: iMxEi9YILwokM25HPupBoeWKmrVWBoWUYVLby8nlW7jtfG9QJxaN8g==
Age: 3130


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    1b3053fa528e28810f8a2cc9284cc921
Sha1:   cca9eb471d941881a6b9a1793aecb6c281908f6a
Sha256: a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.110
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 04 Oct 2022 05:28:28 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LBX1p10dwajXPJULxrtuE19mGRtD4qx6bMQIukGpO0Xod-a7RLDNZQ==
age: 36647
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET /dora-bayer/priscilla_morison-72.zip HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         50.87.146.64
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Tue, 04 Oct 2022 15:39:14 GMT
Server: Apache
Location: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Cache-Control: max-age=300
Expires: Tue, 04 Oct 2022 15:44:14 GMT
Content-Length: 274
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   274
Md5:    793dabedf3b6a5edb32eee1ed75d54f8
Sha1:   af5d72988a86ec29bcf9e1b775f88ac4bb187b38
Sha256: 252322a361226c96f658ae614a38954cf8182e8e7a2debfaad9e1f558f855615

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 04 Oct 2022 15:39:14 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Tue, 04 Oct 2022 15:29:33 GMT
Expires: Tue, 04 Oct 2022 16:18:32 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: AMzAoeFgEXMHA1OEeQp1aWV5t2YBO3YXxHPP2FrzKxuvSBINQ3Fnmw==
Age: 582


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A7E00E82C61B3D1A6A63EB61CAC0FFD02486CCACFB807FA6F7D6147EA02BA992"
Last-Modified: Tue, 04 Oct 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 04 Oct 2022 21:39:15 GMT
Date: Tue, 04 Oct 2022 15:39:15 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4775
Cache-Control: 'max-age=158059'
Date: Tue, 04 Oct 2022 15:39:15 GMT
Last-Modified: Tue, 04 Oct 2022 14:19:40 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: jx+dULsjTZUTMOZi7/D79Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         52.38.146.2
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 2yaIs1de+FxcXHe6B5UHK1lYRvs=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5683
Expires: Tue, 04 Oct 2022 17:13:59 GMT
Date: Tue, 04 Oct 2022 15:39:16 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5683
Expires: Tue, 04 Oct 2022 17:13:59 GMT
Date: Tue, 04 Oct 2022 15:39:16 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5683
Expires: Tue, 04 Oct 2022 17:13:59 GMT
Date: Tue, 04 Oct 2022 15:39:16 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5683
Expires: Tue, 04 Oct 2022 17:13:59 GMT
Date: Tue, 04 Oct 2022 15:39:16 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5683
Expires: Tue, 04 Oct 2022 17:13:59 GMT
Date: Tue, 04 Oct 2022 15:39:16 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F545190f2-96f3-40f8-bd46-cebe7171aee7.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9917
x-amzn-requestid: 2dff93d9-795d-4885-9b82-610b0d235a82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpvTGEnIAMF1zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5661-117afa703663ada75627792c;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:38:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: p5nOqBojKO6S-c_DxIu8B3p-NK0pzRHkz0DOPeyv7PQt9h0x1jdtoQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:55:54 GMT
age: 63802
etag: "22aab05208a01ae5def4d63dc145085630f57bcb"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9917
Md5:    d8c08f8066cc732de8befd6ccd629a95
Sha1:   22aab05208a01ae5def4d63dc145085630f57bcb
Sha256: f8a560a0563518d992d0bd2655d2b5c406435a18e874ca00b51374d2ff901770
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fec31ab6c-46f2-4d77-a807-9f14bb5073bc.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11955
x-amzn-requestid: ce6bbe93-95b0-4b6e-a8bc-012796485e67
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zcqb9FUtoAMF0WQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b577f-59dc0a18523f900a059aa5df;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:43:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: tJwzKfs7HnQ7dVcINwnlzxTChXiEi4JPj8jrS8p5KhurRx_o3ZVOZQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 22:10:59 GMT
etag: "e2ea2ef6805e391c497e62e101e76a0bdecfce64"
age: 62897
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11955
Md5:    54b3ef7aa50273b78b59c24511b0c1f9
Sha1:   e2ea2ef6805e391c497e62e101e76a0bdecfce64
Sha256: 296e8954022d5160137b3e02ab5085a15cee7c23cd6d4ca61b36880706062457
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8641c47a-9aff-4f73-bb07-6770cbbcc8d6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5504
x-amzn-requestid: 37405eb0-5c75-46a9-84c0-e8ed726995d8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpHvHPvoAMF3mg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5564-77fd550b58af612525e74761;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:34:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Ovm2wuk28PygH4EZNEUoPchoHQggWCyXbYHOjMV1tZmfyDrL6PjPZA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 22:29:19 GMT
age: 61797
etag: "20ef861be49c652a938e0145e4ca3a60159367e2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5504
Md5:    6c6882c60d7ca6f918c77104e3ad1d52
Sha1:   20ef861be49c652a938e0145e4ca3a60159367e2
Sha256: 861f5870990fbd2939d151ae18384cf311e87067ca9a50818efe0c2d51b83088
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a61745f-0c9b-404a-ba22-0a69cf2f0383.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4858
x-amzn-requestid: fb21c414-2994-444a-a838-e643fd05b171
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpvTEfPoAMFfeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5661-593dd8043b0490e7301cac0d;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:38:41 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: MiSh_FjAciKCaOakY2mM_EHBN1Z6GIDYIP8mwS4ikkrToQN3Ktsv2g==
via: 1.1 773ca14e6bd4bf9244988cb69fc9dca8.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:56:46 GMT
age: 63750
etag: "585e7146fd24cdc2496b05baafea04091dc541e2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4858
Md5:    6779181f9c06975f2a662da743893939
Sha1:   585e7146fd24cdc2496b05baafea04091dc541e2
Sha256: 8e9a9f92fd89b7cdce77884ccd76b83ab82d28f125ebfc1cb0d371d4046b7985
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6bf68975-a099-4d4b-9abd-6e684653439d.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10878
x-amzn-requestid: a849d918-ec40-47d4-93cb-e938b010bd50
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpJKGAPIAMFSiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b556d-242a8d2208b6574c34063c1f;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:34:37 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 40cLnZvUr45pWmnT6qZgZu13Y1pyeycMEK-m9ALI1LVo2Wpysjt7Vw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:45:04 GMT
age: 64452
etag: "d893d8035379e06e53e365b9f47f5da40bff932b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10878
Md5:    f62719b24a32198c6f462a0a0412ac98
Sha1:   d893d8035379e06e53e365b9f47f5da40bff932b
Sha256: ca863affca1559e92e415a4de2e78e4b4c1ec4cf8e8549693499c6f79bd27975
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6315
x-amzn-requestid: 6aa75b16-32e4-48a7-9fb0-9e3d5528c2d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWSdsHUnIAMFXtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338cabd-742d8a436403683e0cd9368f;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 23:18:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5sAzc5Ewv4g6Wqq6JJiLylG3Jyy_nlWrr5Oteeo6ebEgq7Rvss4XaQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 04:42:53 GMT
age: 39383
etag: "58ff0bf8ce7528b303d28bab01a80ad721705569"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6315
Md5:    206fb65e75dbadf119512f71e0b78402
Sha1:   58ff0bf8ce7528b303d28bab01a80ad721705569
Sha256: 56c8d5f3b3060ee54bf81995269b86c070855d8c33bf437161339a45b309703f
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:39:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:39:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtag/js?id=UA-167750773-1 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 04 Oct 2022 15:39:17 GMT
expires: Tue, 04 Oct 2022 15:39:17 GMT
cache-control: private, max-age=900
last-modified: Tue, 04 Oct 2022 15:08:24 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42365
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2039)
Size:   42365
Md5:    8bdbc7ab09983889949fb0477fb306d5
Sha1:   3d26521cab601fbeb132b56fc046595b60c77a2d
Sha256: 77b0877c99dc984d62b3b526225bdb14482e5e2cbfdbc47ebf50db2e892538bb
                                        
                                            GET /wp-content/plugins/woo-out-of-stock-products/inc/outofstock.css?ver=6.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Sun, 26 Apr 2020 16:07:55 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 421
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (364), with CRLF line terminators
Size:   421
Md5:    b85872ebc1a17128f0a513e85de4b504
Sha1:   a2ef838a52b0499604f4c423709971d2627dcf10
Sha256: 9c5984e4e0a9229145b396522ed540defef291c3da2056a808f35cd61b553f52
                                        
                                            GET /wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Wed, 08 Jan 2020 20:57:09 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1298
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4186), with no line terminators
Size:   1298
Md5:    91bab39b98d7e5c1632717b9ebe349e4
Sha1:   e639a447d06fc7827be5b5b35d603ff16b5f7bb1
Sha256: 47ff151faeb23a5654f6ec58b404e51193f6714849a69de241c2ee79662f74c6
                                        
                                            GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 11 Feb 2021 15:57:54 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 3239
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11256), with no line terminators
Size:   3239
Md5:    1054d0d53548e8bae51665b11acc6413
Sha1:   2eea6a05fe18db61fff58c431d34a86b3e0b7ade
Sha256: cb8b0f0f3f871d9776da32ee6d9e1af9277a211be61e97a831c7f8c98fbebfae
                                        
                                            GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=5.5.1 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 10 Mar 2022 21:42:13 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1154
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3276), with no line terminators
Size:   1154
Md5:    4b54905974b8a358e51ac1d1807f55bd
Sha1:   2c785074589dda8fe89324c9dd16f8d5694dded0
Sha256: 2d1217b0eec970b6bb388260f840baf654e276b2340ce2f240684fc88582e974
                                        
                                            GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=5.6.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 10 Mar 2022 21:42:14 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 3138
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (17923), with no line terminators
Size:   3138
Md5:    cb050cf785dc6a3154760c12096a2f5c
Sha1:   797c9ea468aa1f60667926bd35bf6874a3e548ea
Sha256: 97ac5d6189e1cdb1d62b676c0769ec783131500f02155eba5b4eae109fe1fa0f
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:39:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/plugins/woo-out-of-stock-products/admin/inc/admin-outofstock.css?ver=6.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Sun, 26 Apr 2020 01:00:54 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 123
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   123
Md5:    8df5ad8a0ae40a17e71597baacf9b180
Sha1:   fa1d318397c905a1d36f88f7420425409be9a8ae
Sha256: b367e0e6756e828d0ef2cd4f77527e8d74784b7cfab12c502bbc132e95207526
                                        
                                            GET /css?family=Oswald%3A400%2C300%7COpen+Sans%3A700%2C400%2C400i%7CRoboto%3A700%2C400&ver=6.0.2 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 04 Oct 2022 15:39:17 GMT
date: Tue, 04 Oct 2022 15:39:17 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1543
Md5:    c9265a234dc5444a19e58557fa47394e
Sha1:   667a39154890b164e6b65a7ccc29ac60df1d132a
Sha256: b15f1521872ac87f27adccb33c2f688584b95d6d70bddd19a4ddcf618df6fe60
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:39:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /recaptcha/api.js?render=6LfBB94UAAAAAJsmWr7aJs22tm_JnxB6ZDAwrNC7&ver=3.0 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.164
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
expires: Tue, 04 Oct 2022 15:39:17 GMT
date: Tue, 04 Oct 2022 15:39:17 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 586
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (884), with no line terminators
Size:   586
Md5:    863a79c51303858639841bf08f42de45
Sha1:   4a735ae95a6a6b8c32b0fe1c5067c1cfe0d6bddf
Sha256: 5a299cbb63e627fef65dc036db52e3bfd8e1fc968310b2998154e35b2d847bfc
                                        
                                            GET /wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.8 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 27 Jan 2020 02:10:22 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 11979
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (5178)
Size:   11979
Md5:    0934891eb8e76a58d115e0c41015b023
Sha1:   43afb84e3363148a8075e015c074f7317fc5a090
Sha256: 9c53e0485cf755c4236daabea4c457ae80056756a2e0f00970cf39bc449fcabe
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:39:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 01 Aug 2022 13:52:07 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 16594
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (43771)
Size:   16594
Md5:    2a67a4888baa44de739f3fe56203ce07
Sha1:   da175eae57f26b655747d79f055477e3fee1abb9
Sha256: 3a4d7627476a0099ca4bcc101685f27de04cb49dd66ef842d72c6cda270599dd
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.6.1 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 409 Conflict
content-type: text/html; charset=iso-8859-1
                                        
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
content-length: 83
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   83
Md5:    26267cd8990f15d3bbea71684a6d5995
Sha1:   ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
Sha256: 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
                                        
                                            GET /wp-content/plugins/creame-whatsapp-me/public/css/joinchat-btn.min.css?ver=4.5.9 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 01 Aug 2022 13:46:01 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 2462
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6021), with no line terminators
Size:   2462
Md5:    5970e7598cf1a83c35e762ae20415920
Sha1:   8660ae5456c778a1603ae5a8e07f1497cff5c50c
Sha256: 4ab655357d11e783d63e4ce3d227e7d75bec807e67355a8eaf17954d151cdc5a
                                        
                                            GET /wp-content/plugins/eventON/assets/fonts/font-awesome.css?ver=2.7 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Sat, 07 Mar 2020 21:08:12 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 7517
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  troff or preprocessor input, ASCII text, with very long lines (347)
Size:   7517
Md5:    92b827bf163a062725109c0508b0fabe
Sha1:   e611af31aa49b2d9ea5146486657126dd3ba3063
Sha256: 86415a98efa83492835dfd413224429951c0fe565f3940464232f352f9832253
                                        
                                            GET /wp-content/themes/eveprest/css/prettyPhoto.css?ver=6.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 27 Jan 2020 02:00:53 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 4811
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   4811
Md5:    13dcaddec0c181498bd9f6feb5ee1693
Sha1:   40dd2ec323b38247f41502e8bd6d32180c7b73f4
Sha256: cfe47550f7fe5818fb09180a168217bb839197bb61dcb707709770210bfaead2
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6.1 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 409 Conflict
content-type: text/html; charset=iso-8859-1
                                        
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
content-length: 83
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   83
Md5:    26267cd8990f15d3bbea71684a6d5995
Sha1:   ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
Sha256: 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
                                        
                                            GET /wp-content/plugins/kingcomposer/assets/css/animate.css?ver=2.9.6 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 14 Jan 2021 16:58:27 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 3656
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (36512)
Size:   3656
Md5:    e3f6e578fe7ca5362fccbfcce94ce996
Sha1:   b1deba8d80cae941d22051fda096e49d6274af3b
Sha256: eb202c9ec2bc15da2ea3e218313eb25628179671965ed043c49fb711a63dfbfe
                                        
                                            GET /wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=8.7.0 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 01 Aug 2022 13:46:00 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 3861
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1577)
Size:   3861
Md5:    0de3f234bf5adf709c64d6a81701e107
Sha1:   ec76e30709d2ac94c86121529768c54b84943872
Sha256: c67075988b28f06061348cebb275f465c608e141f9a00b50c5e4824f57ed10f3
                                        
                                            GET /wp-content/plugins/kingcomposer/assets/css/icons.css?ver=2.9.6 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 14 Jan 2021 16:58:27 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 11214
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (35475)
Size:   11214
Md5:    0ee2565319bdc28b2f5edac9826f40ae
Sha1:   79c05f008f3ff3f96fd97b94a1ea13de34b72afa
Sha256: 11457f8c739cb2b78f0a6cfd63e263390b53d8a566489dc1cb15198c0d8299a0
                                        
                                            GET /wp-content/uploads/2020/02/payment.png HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Thu, 27 Feb 2020 01:48:39 GMT
accept-ranges: bytes
content-length: 3474
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 255 x 22, 8-bit colormap, non-interlaced\012- data
Size:   3474
Md5:    26ccffda5c7255dc62bfabac1ad0592a
Sha1:   d71af19b8500468b0e27f41f25b386fb4819b58b
Sha256: 68d6fd8051da72645f729d7f3389b60cc55121b4889dc82afc89d90e18ffc57f
                                        
                                            GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.5.6.1 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 409 Conflict
content-type: text/html; charset=iso-8859-1
                                        
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
content-length: 83
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   83
Md5:    26267cd8990f15d3bbea71684a6d5995
Sha1:   ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
Sha256: 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=5.6.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 10 Mar 2022 21:42:14 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1200
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (3037), with no line terminators
Size:   1200
Md5:    57b5945094a547e06221f8f949e6d335
Sha1:   76fc7361f00684ea29ffbf4b7d46e5429b8c245a
Sha256: f9d0da987075df31cc4cf8aed46bc193467ce7165568d83c8016e6fe904e72c3
                                        
                                            GET /wp-content/plugins/eventON/assets/css/eventon_dynamic_styles.css?ver=6.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Sat, 07 Mar 2020 21:34:29 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 2265
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  assembler source, ASCII text, with very long lines (2921), with CRLF line terminators
Size:   2265
Md5:    c8a3608d28b620f2efd1f2c86691be80
Sha1:   236f0a935c975236962d62a5309eebcd44d4e0fc
Sha256: a992513e606d3e87bb52685eeb50ac7244620b54fdf46d600c0f088937bccd3d
                                        
                                            GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 01 Aug 2022 13:52:08 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 2675
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6475), with no line terminators
Size:   2675
Md5:    45bd1d6f7fc3a4069fc6fd400b90c961
Sha1:   903c7e28c7141e9fc1bdb4dfc62d043a97a01e2d
Sha256: c638a0057b4be0a61cfb65b1860a855a327397e9871f5dde28fa2f138fb394dc
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=5.6.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 10 Mar 2022 21:42:14 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1093
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2938), with no line terminators
Size:   1093
Md5:    cd0d4a61ea66e2609f7fafca802e10c8
Sha1:   6c2f2a32371a7cb6c34cd0d7abd5ca653058b6e1
Sha256: 21a6739f80cd455c35620bf9869f312c4ff0b7e5d4b6d6cc8401bd5deba54c1a
                                        
                                            GET /wp-content/plugins/eventON/assets/js/eventon_functions.js?ver=2.7 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:41:46 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1021
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1021
Md5:    f7fb8cc8255bd25334fa6d7bc157c280
Sha1:   a6f84408321f7560d0735a842f85eadd55431bb5
Sha256: 1c7446b1f3baaed496b6e798870eed738bb0d05a10938ba4668ee4b7c509ad45
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=5.6.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 10 Mar 2022 21:42:14 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 792
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2139), with no line terminators
Size:   792
Md5:    1ca3f41c13e0027acc45f0601f8b640f
Sha1:   cced34af0c6a59e9cee4229faa66ab39c7031506
Sha256: d3bc5eaf4c6be9473dbba690825cce9a1a6f4accb6721dae7875efef54942f41
                                        
                                            GET /wp-content/plugins/eventON/assets/js/jquery.mousewheel.min.js?ver=2.7 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:44:17 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 716
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1020)
Size:   716
Md5:    bb865c2c01892719bfdd390898e7634d
Sha1:   0d69bbe15aa80a0a949b95d730350625dfa6369a
Sha256: b0f210b68a0f064803906cab5dd9d1bdd65e03ffb309f603ca4afe6533819285
                                        
                                            GET /dora-bayer/priscilla_morison-72.zip HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         50.87.146.64
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                        
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://fundaciondarydarse.org/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:39:15 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Size:   20986
Md5:    fbaf6a5e1954718915013865ff0ecf23
Sha1:   d91c73ab80cff7068053b47aef11f16109b35a83
Sha256: 7078357d8de7169660451074ac5b130c6766453f6289cb17ada6a81ff8c1b194

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/themes/eveprest/js/functions.js?ver=20150315 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:39:27 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 2179
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   2179
Md5:    3356a040b291b40357e00aafbd148802
Sha1:   7f276bf644063fb6f553da60fc0f4d8fa80e4b7a
Sha256: 7e4a44df807df6d125ae3cb8ed6fc56344a617acfe73068f7115d8341c49979a
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 25 Aug 2021 19:13:45 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 4618
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11126)
Size:   4618
Md5:    acdb97105af28a7066790c6748ae2e1e
Sha1:   65794d2c5a9d04f747faf370bc8bacd330e69e5a
Sha256: dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
                                        
                                            GET /wp-includes/js/jquery/suggest.min.js?ver=1.1-20110113 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 25 Aug 2021 19:13:45 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1431
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2992)
Size:   1431
Md5:    f75161fdcb9f74f47747e959c8cfc1b7
Sha1:   77a9216b944111011f19ead03d48e7ac2a4de109
Sha256: 94ca799a236dbda6c8198fa181b8bf85744f1b55a2ae14fcd1c480ec7f75c74e
                                        
                                            GET /wp-content/plugins/wpopal-themer/assets/js/elevatezoom/elevatezoom-min.js?ver=6.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:46:10 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 7847
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (560)
Size:   7847
Md5:    684f525508c5891f2565719a8f15a9fe
Sha1:   67bb1d05a41a70ae23dd757642bcbe4c5a6fad89
Sha256: 214a8b1edf79077afccf8105c7f59342004018f2d5052fc0c8aa884c92f269b0
                                        
                                            GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 01 Aug 2022 13:52:08 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 5321
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (15660)
Size:   5321
Md5:    710f8b142ea44c0682dc2c30f318f065
Sha1:   49144e9b3a76d3d383b1d4359cf7a25e947f4233
Sha256: 708bb5819879a2a2c7670abc20a58cca68a415ffd621011cbc4c3c9d82dddc50
                                        
                                            GET /wp-content/plugins/creame-whatsapp-me/public/js/joinchat.min.js?ver=4.5.9 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 01 Aug 2022 13:46:01 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 3144
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7996), with no line terminators
Size:   3144
Md5:    d1c9564ba057c67abbf92063047fbd0b
Sha1:   62e211fdb6c7277c0cf8b4c24a96fc986d7f9db5
Sha256: 630854c465b2a91eafc869896e89749a20215a5b99a4cf0eb930ba5c6a7584bc
                                        
                                            GET /wp-content/themes/eveprest/js/woocommerce.js?ver=20131022 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:39:11 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 3270
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   3270
Md5:    2c886b74ada8ff85e1a3986a9b64d219
Sha1:   048641e360a268443f2f65431e1cf3d307b94819
Sha256: 85c724b510d03de0227557076405419018902da580534c2f021df73103868547
                                        
                                            GET /wp-content/themes/eveprest/js/jquery.prettyPhoto.js?ver=6.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:39:11 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 7455
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (21223)
Size:   7455
Md5:    943defc85539a3513d3a76442d5c3307
Sha1:   2633f53e5a6b04544a803961504327fe059f357a
Sha256: 31658dc37ad1feeeee8137866f0476b43894725ff63f62db3c2e0f6b9d4ee2b7
                                        
                                            GET /wp-content/themes/eveprest/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 27 Jan 2020 02:00:52 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 7079
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (30629)
Size:   7079
Md5:    934b13b87386616f02d876ba5966833c
Sha1:   318fb4792f877fe9628e37db5fe27f23ab3d8395
Sha256: 53f4c4d51cd69a86d2f92175f97d9e373a644b81d066a1e4ea2e2896f16c775c
                                        
                                            GET /wp-content/plugins/eventON/assets/js/jquery.mobile.min.js?ver=2.7 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:40:38 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 4177
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (13639), with no line terminators
Size:   4177
Md5:    3384dd748de7a3411c5f335665f2c966
Sha1:   89ee515f5819573381ca9bd0dcfdb809b0d5245c
Sha256: 9b4a667c48034e48ed398eebf7d2f97948b205260d191c043568c3f284bf2571
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.5.6.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 10 Mar 2022 21:42:14 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 3952
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (9151)
Size:   3952
Md5:    338b374df64ac61f520f0dc2c42f84a4
Sha1:   7f5d52c9681f54bd3adbda325dffaac88b48839f
Sha256: c411e1e640b16842b6142a6e4db4b7172abedc8740b0944fc7c510c7f8f85609
                                        
                                            GET /s-202240.js HTTP/1.1 
Host: stats.wp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         192.0.76.3
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 04 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
etag: W/"6197c5cf-2494"
content-encoding: br
expires: Mon, 02 Oct 2023 15:43:35 GMT
cache-control: max-age=31536000
x-nc: HIT arn
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (9364), with no line terminators
Size:   12073
Md5:    90bf0cee2eeeb6dbbbdd9166e8cf2b67
Sha1:   d41760fa5454773438b2071eae52464f84a82408
Sha256: f7fd0baa4b2113e5b68c174eb999cb0873263dbe8f78a9b2ba93f507cbd8b59a
                                        
                                            GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=5.6.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 10 Mar 2022 21:42:14 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 13274
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (62789), with no line terminators
Size:   13274
Md5:    82896daaf5244f88f56a2a05ad01f545
Sha1:   d29b7c23ec5d0c5996138a0191fa8e44ebe01e2d
Sha256: 5a9ff1f54c905da4d01e306753da7a9bd10c98e1e84b5bd89d112567dc687da3
                                        
                                            GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 01 Aug 2022 13:52:08 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 8169
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (8189)
Size:   8169
Md5:    a0a1c8194f131320e1798f90a7b1262a
Sha1:   3346d35be1f2e4886f19e7fcc0cc96ee4753d9ed
Sha256: 7f618ab13cec0933ec2c61fa2b580ad77ca41522028649677494219fa9ce56db
                                        
                                            GET /wp-content/plugins/kingcomposer/assets/frontend/js/kingcomposer.min.js?ver=2.9.6 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:45:14 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 8232
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (17655)
Size:   8232
Md5:    bf1ff96c20bc4bdf23a2abdfb01f3dd1
Sha1:   017cc02e2bf733bde013999e09e3cbde44df1bd5
Sha256: 626aec5edc9fa0edf3ea391ef1b0eb41cfc09fd5970b488db2264f3018032149
                                        
                                            GET /wp-content/themes/eveprest/js/bootstrap.min.js?ver=20130402 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:38:01 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 14302
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32034)
Size:   14302
Md5:    5f6b33d0c3c840a00bb9546255b950fe
Sha1:   8529abb9ada164bd0c06aac91f8772598cb06a83
Sha256: 77ef532197a471284339e911d1ec20c1da285e8e8dba10fec10c1dcde394fb08
                                        
                                            GET /wp-content/themes/eveprest/js/owl-carousel/owl.carousel.js?ver=20150315 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:43:53 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 11998
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   11998
Md5:    752d1936df616908639a921209323a83
Sha1:   119b009420eafb606f5e39544b154f7f2496b845
Sha256: 6e900a35e46ad4b2526372286c43389c764ff16f2fd9a8d7b2e10fa020eb90c3
                                        
                                            GET /wp-content/plugins/eventON/assets/js/eventon_script.js?ver=2.7 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:44:37 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 14370
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   14370
Md5:    f3ab5f46e7ed4a053ef5ca51a0609bfc
Sha1:   79dfe6de7f243d3370ae7935df21656fcb1320a1
Sha256: d914405f59424ab7d09a98c98ec990f43550e2f5b583c14e77d1bfeeb367e875
                                        
                                            GET /wp-content/uploads/2020/02/cropped-logo-foot2.png HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Wed, 26 Feb 2020 02:58:44 GMT
accept-ranges: bytes
content-length: 9045
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 77 x 75, 8-bit/color RGBA, non-interlaced\012- data
Size:   9045
Md5:    4fc4cf77723f0c2b5f43c4e01ab7c99e
Sha1:   a74745a8947bd0314a7634d4f4b27a3e7474c757
Sha256: c98e05f77ce684f2693d0a0b2753a4e44d7fc092692b6e851e20c53d0eb6ebbd
                                        
                                            GET /wp-content/uploads/2020/02/logo-foot.png HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Sun, 09 Feb 2020 01:05:20 GMT
accept-ranges: bytes
content-length: 26120
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 150 x 135, 8-bit/color RGBA, non-interlaced\012- data
Size:   26120
Md5:    03ead5633efb2d5ca2ccf99a090c8d07
Sha1:   c7364df3435ce6e6dc508e6f908bdd4d87c02128
Sha256: 3eb0131743adf39a4c647d80b392a98024b9fc1ea701416112d59b04f3baa43b
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:39:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=5.6.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 10 Mar 2022 21:42:14 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:18 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1294
date: Tue, 04 Oct 2022 15:39:18 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7043), with no line terminators
Size:   1294
Md5:    23030da399d26bb36e2effda3c58d488
Sha1:   2480e4b14c65a29b6013515cea8a55a6646aa85a
Sha256: 026d41f0bbec9c4116e05c06d43d3bbae4e9ec0975f84140565760431eaa88d7
                                        
                                            GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fundaciondarydarse.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Oct 2022 03:08:55 GMT
expires: Sun, 01 Oct 2023 03:08:55 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
age: 304223
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Size:   44856
Md5:    565ce506190ad3af920b40baf1794cec
Sha1:   ad3cba5d06100e09449a864d3b5e58403b478b3d
Sha256: 8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:39:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/plugins/eventON/assets/js/handlebars.js?ver=2.7 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:41:52 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   27737
Md5:    5cc6011b3659755906525ebd5f61587c
Sha1:   f32dc1f1b17cb33eede9cad5314a6b7245d7db62
Sha256: bdeaadb77a181738f3de1035e443d9827aadce3b053982f2b6152e3620be32c7
                                        
                                            GET /wp-content/uploads/2020/04/body-fundation.png HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/wp-content/themes/eveprest/css/style.css?ver=6.0.2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Fri, 17 Apr 2020 03:56:32 GMT
accept-ranges: bytes
content-length: 372950
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:18 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:39:18 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Size:   372950
Md5:    3b5cde15300676b7dc90047be72dc314
Sha1:   8ac399d53197a0d373fa7dc8df9dbdf6302487e4
Sha256: 4b059c8ebf76b5dd854bb067a9ec87e0599e50ee1b30205a59b52bbf1ae55223
                                        
                                            GET /wp-content/themes/eveprest/fonts/proximanovacondensed/ProximaNovaCondensedLight.woff HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://fundaciondarydarse.org/wp-content/themes/eveprest/css/style.css?ver=6.0.2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: font/woff
                                        
last-modified: Mon, 27 Jan 2020 02:01:17 GMT
accept-ranges: bytes
content-length: 55436
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:18 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:39:18 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, CFF, length 55436, version 0.0\012- data
Size:   55436
Md5:    b9b6810f2616d36cec5afcf02eedd171
Sha1:   a0b07a15c7f528994a60d5db23e782a9a310f93c
Sha256: b46fdebcaaced5bf4e6bb91ff195e7611c595c4cb9d5fee4edea59e7b5c66909
                                        
                                            GET /wp-content/plugins/kingcomposer/assets/css/fonts/fa-solid-900.woff2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://fundaciondarydarse.org/wp-content/plugins/kingcomposer/assets/css/icons.css?ver=2.9.6
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: font/woff2
                                        
last-modified: Thu, 14 Jan 2021 16:58:27 GMT
accept-ranges: bytes
content-length: 44068
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:18 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:39:18 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 44068, version 1.0\012- data
Size:   44068
Md5:    84f351b3972185aed620f78489e48b2d
Sha1:   27c88aea3904d48cde4c8cd6fa85a414b547feea
Sha256: cb7aa6b06aa5a8eea3670662c4b0c37104041c14575fc170dc48677a0506a33a
                                        
                                            GET /wp-content/themes/eveprest/fonts/proximanovacondensed/ProximaNovaCondensedRegular.woff HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://fundaciondarydarse.org/wp-content/themes/eveprest/css/style.css?ver=6.0.2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: font/woff
                                        
last-modified: Mon, 27 Jan 2020 02:01:20 GMT
accept-ranges: bytes
content-length: 55804
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:18 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:39:18 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, CFF, length 55804, version 0.0\012- data
Size:   55804
Md5:    78091db94f3527ee01b6f46d4fff2b2c
Sha1:   a091cd76ed4b01cd9b6db59515cc06278c6d98d6
Sha256: ac6ddfe6981739ff58f783db6eb4a0bae2ff06f8f1b5dab856de25524a83c0ab
                                        
                                            GET /wp-content/themes/eveprest/fonts/proximanovacondensed/ProximaNovaCondensedBold.woff HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://fundaciondarydarse.org/wp-content/themes/eveprest/css/style.css?ver=6.0.2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: font/woff
                                        
last-modified: Mon, 27 Jan 2020 02:01:16 GMT
accept-ranges: bytes
content-length: 57564
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:18 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:39:18 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, CFF, length 57564, version 0.0\012- data
Size:   57564
Md5:    6c58651f10f14cff8a059d1287747783
Sha1:   d460c88393d7722c72f6a62838b8347133398051
Sha256: 293ec76211b0bb1e242ef4b56abbd5b667418f9e3c98a891c95fa052bc03ceb1
                                        
                                            GET /wp-content/plugins/kingcomposer/assets/css/fonts/fa-brands-400.woff2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://fundaciondarydarse.org/wp-content/plugins/kingcomposer/assets/css/icons.css?ver=2.9.6
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: font/woff2
                                        
last-modified: Thu, 14 Jan 2021 16:58:27 GMT
accept-ranges: bytes
content-length: 55144
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:18 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:39:18 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 55144, version 1.0\012- data
Size:   55144
Md5:    2ac01f7650b5ab76bfebbc708928929e
Sha1:   8ca7aeb88ef1fefb582f941e9216029328e25f4c
Sha256: e8562087317b34c4b2ac60e28e272b7b33e37523aacd5f2adba7a4f108e415c6
                                        
                                            GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.5.6.1 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 409 Conflict
content-type: text/html; charset=iso-8859-1
                                        
date: Tue, 04 Oct 2022 15:39:18 GMT
server: Apache
content-length: 83
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   83
Md5:    26267cd8990f15d3bbea71684a6d5995
Sha1:   ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
Sha256: 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
                                        
                                            GET /g.gif?v=ext&j=1%3A11.1.2&blog=172023568&post=0&tz=-5&srv=fundaciondarydarse.org&host=fundaciondarydarse.org&ref=&fcp=3629&rand=0.7231645723126845 HTTP/1.1 
Host: pixel.wp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         192.0.76.3
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Tue, 04 Oct 2022 15:39:18 GMT
content-length: 50
cache-control: no-cache
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 6 x 5\012- data
Size:   50
Md5:    e4d673a55c5656f19ef81563fb10884c
Sha1:   1f2d8ed221d39329251ad3a6ff1edb20b7219443
Sha256: f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1
                                        
                                            GET /maps-api-v3/embed/js/50/7a/intl/es_419/init_embed.js HTTP/1.1 
Host: maps.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 69325
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Oct 2022 16:58:02 GMT
expires: Sun, 01 Oct 2023 16:58:02 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 27 Sep 2022 20:34:50 GMT
age: 254476
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2669)
Size:   69325
Md5:    f24d3836affa80a8d17e2720e15d9b13
Sha1:   cc91c7b820f873a197697421984637399ae484ee
Sha256: 3a21d4f024399c1648048acf80e720961ca5e2272051cee41b6fb444474f9dee
                                        
                                            GET /wp-content/themes/eveprest/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://fundaciondarydarse.org/wp-content/themes/eveprest/css/font-awesome.min.css?ver=4.7.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: font/woff2
                                        
last-modified: Mon, 27 Jan 2020 02:01:12 GMT
accept-ranges: bytes
content-length: 77160
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:18 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:39:18 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Size:   77160
Md5:    af7ae505a9eed503f8b8e6982036873e
Sha1:   d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
Sha256: 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 04 Oct 2022 14:41:09 GMT
expires: Tue, 04 Oct 2022 16:41:09 GMT
cache-control: public, max-age=7200
age: 3489
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20039
Md5:    47e6f374ca946fddd5b59871b325736c
Sha1:   baa9282efc8785e84d247c3bff518eaa45f101c4
Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
                                        
                                            GET /recaptcha/releases/a9s0j4pCVT6gaTEkLiFbtZPH/recaptcha__en.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fundaciondarydarse.org
Connection: keep-alive
Referer: https://fundaciondarydarse.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 158844
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Oct 2022 01:05:31 GMT
expires: Sun, 01 Oct 2023 01:05:31 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 26 Sep 2022 04:02:34 GMT
age: 311627
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (711)
Size:   158844
Md5:    b4ed95d4318e3b78b936c9c0f1ffa96e
Sha1:   b53c9376b1459afb07fb4b5c2e8d8dad776d3a02
Sha256: 3c21880cb7be6bec40f9d40c23ad39c9758999cf950cec07b86c83b21fde175f
                                        
                                            GET /wp-content/uploads/2020/02/favicon.ico HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Cookie: tk_or=%22%22; tk_r3d=%22%22; tk_lr=%22%22
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: image/x-icon
                                        
last-modified: Sun, 09 Feb 2020 03:17:22 GMT
accept-ranges: bytes
content-length: 1150
cache-control: max-age=31536000
expires: Wed, 04 Oct 2023 15:39:18 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:39:18 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size:   1150
Md5:    2de14e3e5b90dd75c1f25e178db7de10
Sha1:   a0fcffe4e795780b3dd2b5e443a4fb49406fdc05
Sha256: 3a1ed2228dee991066ded374a1c94d0667f41f8c23f7ba459a522bd5a4722b5e
                                        
                                            GET /wp-content/themes/eveprest/css/style.css?ver=6.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Sun, 26 Apr 2020 01:43:43 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   91296
Md5:    3f46ef6ebb46ba5f904edd13e4f5a464
Sha1:   90988d41976be830c6eb8619693ca239007a9619
Sha256: d47793be57e0cb757f5f2232f47b51af3327d61aa0adc30e186a8909e996b820
                                        
                                            GET /wp-content/plugins/eventON/assets/css/eventon_styles.css?ver=2.7 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Sat, 07 Mar 2020 21:08:08 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   29257
Md5:    5c4554edadab6f8bff329dfbd421a7aa
Sha1:   a8a39dfa47fd3b432a0bee2895a1b17d8c81ae33
Sha256: 2ce97234ebe6734f1e78cf658aa6be355c513497649fe67505e3446e17e72f75
                                        
                                            GET /e-202240.js HTTP/1.1 
Host: stats.wp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         192.0.76.3
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 04 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
etag: W/"6197c5cf-3508"
content-encoding: br
expires: Mon, 25 Sep 2023 06:12:14 GMT
cache-control: max-age=31536000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2690)
Size:   17515
Md5:    422bf7b9f3aea73228c0c2d7206b23c2
Sha1:   c2ab75f3839c50a06e59f29f5d1fb36bb71bcae1
Sha256: 57c44c4c95f40f8bc8aa2a4e4f4e3500b8ce0c5bce272715f44934fe684930d6
                                        
                                            GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=5.5.1 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 10 Mar 2022 21:42:14 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   43268
Md5:    12de41caacd120e7cff83eb6e32189ba
Sha1:   5b0919218b08d3ef711b6777b583d859e5d33f85
Sha256: a637bd02f499b70f6673671c0ac7df94410df9e442abccd210a07fb9b6db0b5c
                                        
                                            GET /wp-content/themes/eveprest/css/woocommerce.css?ver=1.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Sun, 24 May 2020 18:18:41 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   31520
Md5:    289a57498afe3d5c13eb30c6d38a0e93
Sha1:   1f238b0e15f1e932c282a0505106924943f29d3a
Sha256: 3701388d05acf9d5519021a47eb4691307206060f57f00284ab415da858d7c7a
                                        
                                            GET /wp-content/plugins/kingcomposer/assets/frontend/css/kingcomposer.min.css?ver=2.9.6 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 14 Jan 2021 16:58:27 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   35835
Md5:    1676fb75ffeeb3395690c15596be3f5b
Sha1:   743c773b481a7174014ad85bc31c4124b60c7879
Sha256: dfc3cb83a68619de6a6a96369a3e8ca7347a32c355d94aa400f9128940a9897f
                                        
                                            GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Oct 2022 12:31:58 GMT
expires: Sun, 01 Oct 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 270441
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Size:   15344
Md5:    5d4aeb4e5f5ef754e307d7ffaef688bd
Sha1:   06db651cdf354c64a7383ea9c77024ef4fb4cef8
Sha256: 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
                                        
                                            GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 30 Sep 2022 00:48:31 GMT
expires: Sat, 30 Sep 2023 00:48:31 GMT
cache-control: public, max-age=31536000
age: 399048
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Size:   15552
Md5:    285467176f7fe6bb6a9c6873b3dad2cc
Sha1:   ea04e4ff5142ddd69307c183def721a160e0a64e
Sha256: 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:39:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-167750773-1&cid=1763424559.1664897958&jid=491304477&gjid=718849827&_gid=786235933.1664897958&_u=aGBAAUIgAAAAACAAI~&z=464172591 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://fundaciondarydarse.org
Connection: keep-alive
Referer: https://fundaciondarydarse.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         74.125.131.154
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: https://fundaciondarydarse.org
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 04 Oct 2022 15:39:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  very short file (no magic)
Size:   1
Md5:    c4ca4238a0b923820dcc509a6f75849b
Sha1:   356a192b7913b04c54574d18c28d46e6395428ab
Sha256: 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
                                        
                                            POST /?wc-ajax=get_refreshed_fragments HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 18
Origin: https://fundaciondarydarse.org
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Cookie: tk_or=%22%22; tk_r3d=%22%22; tk_lr=%22%22
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
                                        
access-control-allow-origin: https://fundaciondarydarse.org
access-control-allow-credentials: true
x-content-type-options: nosniff
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-robots-tag: noindex
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 265
date: Tue, 04 Oct 2022 15:39:18 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- exported SGML document, ASCII text, with very long lines (487), with no line terminators
Size:   265
Md5:    5bae85ed249cf46084fcb41e04e458ba
Sha1:   202577166706fb0a208ee8c44896ff5f10883ed0
Sha256: aa33a9c276c8d5417a8ed50a8f9f0605bb21152ebab0fed237e11d533f2ca8fb
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:39:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 28 Sep 2022 19:34:08 GMT
expires: Thu, 28 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 504311
last-modified: Wed, 11 May 2022 19:24:48 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Size:   15744
Md5:    15d9f621c3bd1599f0169dcf0bd5e63e
Sha1:   7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
Sha256: f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:39:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 15:39:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /maps/gen_204?target=api&ev=api_mapft&cad=host:www.google.com,v:50,fv:3.50.7a,r:100,client:google-maps-embed,Mm:1,Tm:1,Ox:1,Lg:1,Czn:1,Cpn:1,Crn:1,Cvn:1,Rs:1,hybrid:0,src:apiv3,token:3gv0b2asua,ts:ud9aq1 HTTP/1.1 
Host: maps.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                         
                                         216.58.211.14
HTTP/2 204 No Content
content-type: image/gif
                                        
date: Tue, 04 Oct 2022 15:39:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
server: mafe
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            GET /maps/gen_204?target=api&ev=api_maprft&cad=host:www.google.com,v:50,fv:3.50.7a,r:100,client:google-maps-embed,t:587,Ep:1,src:apiv3,token:3gv0b2asua,ts:ud9aq0 HTTP/1.1 
Host: maps.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                         
                                         216.58.211.14
HTTP/2 204 No Content
content-type: image/gif
                                        
date: Tue, 04 Oct 2022 15:39:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
server: mafe
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  gzip compressed data, max compression\012- data
Size:   258
Md5:    d2f944aac738db63d5417c464b85f1e6
Sha1:   fac0cd07fb24a363fdf096cc6e6479de4e997675
Sha256: 20a3beccf2e94d82042de5a827a4218e884524c7cb2cf71edfc15bcf4ea3f80f

Alerts:
  File Analyzers:
    - virustotal: 0/0
                                        
                                            GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.8 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:44:55 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/plugins/jetpack/css/jetpack.css?ver=11.1.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 01 Aug 2022 13:54:10 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 25 Aug 2021 19:13:45 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.8 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/priscilla_morison-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:45:35 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 15:39:17 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 15:39:17 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---