Report - www.gabysearthfoods.co.za/tbkjbi/002846343/manqrets

Report Overview

Submitted URL
www.gabysearthfoods.co.za/tbkjbi/002846343/manqrets_002846343.zip
IP
35.228.150.132
ASN
#396982 GOOGLE-CLOUD-PLATFORM
Submitted
2022-12-19 11:32:14
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
www.wix.com	18092	2012-12-26T18:13:41Z	2023-03-09T12:26:38Z	471 B	777 B	35.228.150.132
www.gabysearthfoods.co.za	unknown	2015-01-26T08:55:35Z	2023-02-27T18:34:13Z	890 B	1.8 kB	35.228.150.132
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-09T05:09:05Z	2.0 kB	5.3 kB	23.36.77.32
ocsp.digicert.com	86	2012-05-21T09:02:23Z	2023-03-09T11:52:10Z	682 B	1.6 kB	93.184.220.29
ocsp.globalsign.com	2075	2012-07-20T19:46:16Z	2023-03-09T05:09:04Z	368 B	2.0 kB	151.101.2.133
static.parastorage.com	5943	2012-08-03T19:30:14Z	2023-03-09T06:10:03Z	3.0 kB	54 kB	151.101.1.91
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-09T05:09:13Z	606 B	127 B	34.216.192.228
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-09T10:04:36Z	3.2 kB	60 kB	34.120.237.76
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-09T05:09:18Z	782 B	2.4 kB	35.241.9.150
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-09T05:09:49Z	413 B	5.9 kB	34.160.144.191
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-09T05:09:48Z	333 B	391 B	34.117.237.239
ocsp.sectigo.com	487	2019-11-29T12:50:24Z	2023-03-09T11:25:06Z	340 B	963 B	172.64.155.188

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-12-19	medium	www.gabysearthfoods.co.za/tbkjbi/002846343/manqrets_002846343.zip	Malware
2022-12-19	medium	www.gabysearthfoods.co.za/tbkjbi/002846343/manqrets_002846343.zip	Malware

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (8)

	URL	Size	First Seen	Last Seen
	www.gabysearthfoods.co.za/tbkjbi/002846343/manqrets_002846343.zip	543 B	2023-03-07	2023-03-26
Pretty URL www.gabysearthfoods.co.za/tbkjbi/002846343/manqrets_002846343.zip IP 35.228.150.132 ASN #396982 GOOGLE-CLOUD-PLATFORM Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:16:40 Last Seen2023-03-26 14:01:04 Times Seen103 Hash f3e2bb1dbf7c86c6200099b3ab5f8b77 6ab27213d63dcd8c57dd388363d4bd51dc84b514 6227e0ac3311fdffaf03f9fff4243ead52cfbdde2ee7803647ffc0bef5440c75 Loading...

	static.parastorage.com/services/wix-public/1.299.0/scripts/error-pages/app.js	24 kB	2023-03-07	2023-12-02
Pretty URL static.parastorage.com/services/wix-public/1.299.0/scripts/error-pages/app.js IP 151.101.1.91 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:16:40 Last Seen2023-12-02 14:29:58 Times Seen143 Hash efa4fbe4313723db287c076d3e73398e 7c8ddaf8b8fce0622b60052c17233fd9ca7cb4b9 d0be665643f85a90621efe6b0ca185da8fe8cf87b46676a699b29802b54e8245 Loading...

	unknown	0 B	2023-03-07	2024-04-25
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-25 02:38:27 Times Seen37052866 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	static.parastorage.com/services/third-party/angular-translate/1.1.1/angular-translate.min.js	6.9 kB	2023-03-07	2024-04-24
Pretty URL static.parastorage.com/services/third-party/angular-translate/1.1.1/angular-translate.min.js IP 151.101.1.91 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:14:33 Last Seen2024-04-24 00:17:06 Times Seen2690 Hash a4d0977836ca8a1c8b6001c029a89b9b 3d6207c4dddd59c3fc12c5a745d5b7d09b884be1 55c1fffb51c6b05e29856c66261fa59fb12393a8e1bb37d5ffb656e2eb387c09 Loading...

	static.parastorage.com/services/third-party/angularjs/1.2.28/angular.min.js	108 kB	2023-03-07	2024-04-24
Pretty URL static.parastorage.com/services/third-party/angularjs/1.2.28/angular.min.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:16:40 Last Seen2024-04-24 00:17:06 Times Seen2146 Hash c5d22c0a6f50fd66ac9ee980a2b7ac61 828f4028829d2ab52aea75af1d59567a203fa3c1 91fb6887a7d7b8f298f3ea09abd8284404916b3623679b791a71087a12d65523 Loading...

	static.parastorage.com/services/third-party/angularjs/1.2.28/i18n/angular-locale_en.js	2.3 kB	2023-03-07	2024-04-24
Pretty URL static.parastorage.com/services/third-party/angularjs/1.2.28/i18n/angular-locale_en.js IP 151.101.1.91 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:16:40 Last Seen2024-04-24 00:17:06 Times Seen2103 Hash 7da0269aa66d40d9b9980bd5c0bb902c f97cc20d33f5051d60c104568469a922011d386e 71f2d3048e604fed91a29c84204f99c7f9cb6b06d9ba04fbb5304951eb51c714 Loading...

	static.parastorage.com/services/wix-public/1.299.0/scripts/error-pages/locale/messages_en.js	4.9 kB	2023-03-07	2023-12-02
Pretty URL static.parastorage.com/services/wix-public/1.299.0/scripts/error-pages/locale/messages_en.js IP 151.101.1.91 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:16:40 Last Seen2023-12-02 14:29:58 Times Seen296 Hash c5f98494447c215860d685fe28c43c3c 9e401fa160de15aca6923593f0336d911b743e49 e5c5f0ad1758d19245df1a8cca476908a430f32cff78a1a17c2b7f23c5362f6f Loading...

		Size	First Seen	Last Seen
	#1 Write - 502b36f016e12395c94202ae8a33c83a	152 B	2023-03-07	2024-04-24
Pretty Observations First Seen2023-03-07 01:16:40 Last Seen2024-04-24 00:17:06 Times Seen1143 Hash 502b36f016e12395c94202ae8a33c83a d3d0a9b898f9821b8dbd6f60c6936051241a4aa6 dee67aac013765d423d09df578e3f24d9a58bfaef2b7eb84dd5bd396e345fed7 Loading...

HTTP Transactions (31)

URL IP Response Size

www.gabysearthfoods.co.za/tbkjbi/002846343/manqrets_002846343.zip

35.228.150.132

301 Moved Permanently

0 B

URL HTTP/1.1
www.gabysearthfoods.co.za/tbkjbi/002846343/manqrets_002846343.zip
IP
35.228.150.132:0
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /tbkjbi/002846343/manqrets_002846343.zip HTTP/1.1
Host: www.gabysearthfoods.co.za
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Date: Mon, 19 Dec 2022 11:32:03 GMT
Content-Length: 0
Connection: keep-alive
location: https://www.gabysearthfoods.co.za/tbkjbi/002846343/manqrets_002846343.zip
strict-transport-security: max-age=3600
x-wix-request-id: 1671449523.65055053380112781
Age: 0
Server-Timing: cache;desc=miss, varnish;desc=miss, dc;desc=eun1
X-Seen-By: sHU62EDOGnH2FBkJkG/Wx8EeXWsWdHrhlvbxtlynkVg3eJm1dmeYth65h9Bw8kV9,qquldgcFrj2n046g4RNSVOEcKTWnPkUHK4qOWpouMik=,2d58ifebGbosy5xc+FRalk+nHqJuCoUZBXUcwRTkTWK+n8FhovUCiFYACGiBOTim3QpI/ucnHvfrUjeESIoVeiamFQeXaBgjzlz+DFrnxoc=,2UNV7KOq4oGjA5+PKsX47PeE4JkJeK48Oko5cEfOjJRYgeUJqUXtid+86vZww+nL,7npGRUZHWOtWoP0Si3wDp7b0P2hW624+eIf97kAHQSk=,xTu8fpDe3EKPsMR1jrheEGfVVkqNbOazfnIVWRpvUdY=,adCcrjWN+9jYhIHsscsS5pEnFjMBw3yQ62IpTXI4lAEMzUJC8Ijx4tjstW3Z1XSLiLmOBCJX9PwPq0FFNfh5cw==
Cache-Control: no-cache
X-Content-Type-Options: nosniff
Server: Pepyaka/1.19.10

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
2039a1dda99e075b82840608771d2326
e89713a35b312f3b87fbeaad98f03fddecbf77ce
aae78c754635e9833fa6c231d775bddc82add02f9ce3197a0b260a0806e708c3

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AAE78C754635E9833FA6C231D775BDDC82ADD02F9CE3197A0B260A0806E708C3"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4984
Expires: Mon, 19 Dec 2022 12:55:07 GMT
Date: Mon, 19 Dec 2022 11:32:03 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
9f3cf7e36f17a535e53e5213c02cf2b4
e65acbc03135ce135b9e91b4f74b3e1439faa6f6
a2317476862acd0a92fe523454c3991752b07ba14e7667f421dd9624e0233758

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A2317476862ACD0A92FE523454C3991752B07BA14E7667F421DD9624E0233758"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8009
Expires: Mon, 19 Dec 2022 13:45:32 GMT
Date: Mon, 19 Dec 2022 11:32:03 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Backoff, Content-Length, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 19 Dec 2022 10:45:36 GMT
content-type: application/json
age: 2787
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
cf03270e3476f7482a2cc7ddc6a9e857
ab70d5ee87b01e0601f8e518bf36f97c8ceeba9a
43a4e796860a1481636dac103488cadc68c261d13cfe835d273efc368e569f97

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "43A4E796860A1481636DAC103488CADC68C261D13CFE835D273EFC368E569F97"
Last-Modified: Sun, 18 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5099
Expires: Mon, 19 Dec 2022 12:57:02 GMT
Date: Mon, 19 Dec 2022 11:32:03 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: D5FLfLInp68/4g4ltekvRSonsNcGTwSPsaiBH1+DsSJmm4P3fiUgmY+08z5urqQFYcIFuTofcOLGy5UGUREIQw==
x-amz-request-id: V60RANSH0R2ADH22
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 19 Dec 2022 10:54:31 GMT
age: 2252
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Mon, 19 Dec 2022 11:32:03 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.sectigo.com/

172.64.155.188

200 OK

471 B

URL HTTP/1.1
ocsp.sectigo.com/
IP
172.64.155.188:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
471 B (471 bytes)
Hash
ee6b3e6bcd2099ca52ee7082e39ffe54
98d187fb8906043d4eb7feaa6720cbb8bf1d5c9e
acc8ef7181488273369a8e21b7d62d7b1bbb13ec73d9013ccb29cf86ee3119c4

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 19 Dec 2022 11:32:04 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 16 Dec 2022 13:22:17 GMT
Expires: Fri, 23 Dec 2022 13:22:16 GMT
Etag: "98d187fb8906043d4eb7feaa6720cbb8bf1d5c9e"
Cache-Control: max-age=351611,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77bfd0c4ba060b06-OSL

static.parastorage.com/services/third-party/fonts/Helvetica/fontFace.css

151.101.1.91

200 OK

3.2 kB

URL HTTP/2
static.parastorage.com/services/third-party/fonts/Helvetica/fontFace.css
IP
151.101.1.91:0
ASN
#54113 FASTLY

File type
ASCII text, with very long lines (331)
Size
3.2 kB (3182 bytes)
Hash
138f6948f4f82fda4d44fad50f5456be
002792dd712e5de8c48d71334ca6e45042d3c992
2f8100e5b650bcde60f264ada67f6b5712e61036260fcbe9173bb33ffc875cff

HTTP Headers

GET /services/third-party/fonts/Helvetica/fontFace.css HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gabysearthfoods.co.za/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css
last-modified: Tue, 17 Apr 2018 11:38:08 GMT
etag: W/"338855569759ca44a0734ec4435bcbd0"
x-amz-version-id: WeoPV8OPw8UQocVJiZwVeWZ26II363jN
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciexeHcfy36aNagyZbZBL0eWIHlCalF7YnfvOr2cMPpyw==,aVxMblM8KFG3we5NLvyVcz/fYSfKbw6+xesuKQMt4UgghGES6Jsix+7j8qfOfk1L
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1664245827.87411473494101428454
accept-ranges: bytes
date: Mon, 19 Dec 2022 11:32:04 GMT
age: 7339018
x-served-by: cache-bma1639-BMA
x-cache: HIT
x-cache-hits: 709
x-timer: S1671449525.515747,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3182
X-Firefox-Spdy: h2

static.parastorage.com/services/wix-public/1.299.0/scripts/error-pages/locale/messages_en.js

151.101.1.91

200 OK

1.8 kB

URL HTTP/2
static.parastorage.com/services/wix-public/1.299.0/scripts/error-pages/locale/messages_en.js
IP
151.101.1.91:0
ASN
#54113 FASTLY

File type
ASCII text, with very long lines (4871), with no line terminators
Size
1.8 kB (1781 bytes)
Hash
984cc672b3055600836d0f0fe987ed5a
30e9197fc7c666b4e01a7cbd786dfcc7c5ae4254
6f42f3b7e22c928aceadbeca64500c6a4b1de963e031d77bf34479022150c9ce

HTTP Headers

GET /services/wix-public/1.299.0/scripts/error-pages/locale/messages_en.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gabysearthfoods.co.za/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Sun, 15 Sep 2019 05:55:20 GMT
etag: W/"c5f98494447c215860d685fe28c43c3c"
x-goog-meta-origin: archive-extractor
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciDgmy1x1bk0T2mMblm59aj,aVxMblM8KFG3we5NLvyVcwnP9a1Ia0LRvqhhntyPznoQXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000
server: Pepyaka/1.19.10
x-wix-request-id: 1667952690.62471583434637605
accept-ranges: bytes
date: Mon, 19 Dec 2022 11:32:04 GMT
age: 3620842
x-served-by: cache-bma1639-BMA
x-cache: HIT
x-cache-hits: 15
x-timer: S1671449525.516473,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1781
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Last-Modified, ETag, Cache-Control, Alert, Content-Length, Pragma, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 19 Dec 2022 10:33:24 GMT
age: 3520
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

static.parastorage.com/services/wix-public/1.299.0/scripts/error-pages/app.js

151.101.1.91

200 OK

5.6 kB

URL HTTP/2
static.parastorage.com/services/wix-public/1.299.0/scripts/error-pages/app.js
IP
151.101.1.91:0
ASN
#54113 FASTLY

File type
HTML document, ASCII text, with very long lines (23665), with no line terminators
Size
5.6 kB (5603 bytes)
Hash
851d1ca04e10fec6666ece846590e936
844db7094339ae9cd24f57d9ec0e5a0ca3ab90e6
5a1501306c51a31beb659c991c02631fcd88c379695c121b9daa435bb2ec66ab

HTTP Headers

GET /services/wix-public/1.299.0/scripts/error-pages/app.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gabysearthfoods.co.za/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Sun, 15 Sep 2019 05:55:27 GMT
etag: W/"efa4fbe4313723db287c076d3e73398e"
x-goog-meta-origin: archive-extractor
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrchkavE0ZtMXws1mfakihq4B,aVxMblM8KFG3we5NLvyVc7eNHvhCRAbD7EPjVZvQO20fbJaKSXYQ/lskq2jK6SGP
cache-control: public, max-age=7776000
server: Pepyaka/1.19.0
x-wix-request-id: 1668043586.5274391953749991
accept-ranges: bytes
date: Mon, 19 Dec 2022 11:32:04 GMT
age: 3450452
x-served-by: cache-bma1639-BMA
x-cache: HIT
x-cache-hits: 19
x-timer: S1671449525.517443,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 5603
X-Firefox-Spdy: h2

static.parastorage.com/services/third-party/jquery/2.0.3/jquery.min.js

151.101.1.91

200 OK

29 kB

URL HTTP/2
static.parastorage.com/services/third-party/jquery/2.0.3/jquery.min.js
IP
151.101.1.91:0
ASN
#54113 FASTLY

File type
ASCII text, with very long lines (32023)
Size
29 kB (29312 bytes)
Hash
975b03d7fd857300e0ad13d6769de319
912db7e9cadd0e2486d8380b80e0d2dd86e03c56
424897e5fadb664e036c49aab9fc96c56e8d4a9a6a7fd6ab27f669bd2611f47a

HTTP Headers

GET /services/third-party/jquery/2.0.3/jquery.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gabysearthfoods.co.za/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Wed, 26 Jul 2017 07:04:55 GMT
etag: W/"2f0cbb7f0c5a3c00476a1e7f9500fd9f-1"
x-amz-version-id: lUzvgAVIkMfC7WkprXuYi7GAU3SremQ_
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjV0TBmJ+uLPQ4OZPC1VSMH,aVxMblM8KFG3we5NLvyVc1AtKGBpHBVRBa1WzqM3DuAfbJaKSXYQ/lskq2jK6SGP
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.0
x-wix-request-id: 1669852465.8011789526889151991
accept-ranges: bytes
date: Mon, 19 Dec 2022 11:32:04 GMT
age: 1622477
x-served-by: cache-bma1639-BMA
x-cache: HIT
x-cache-hits: 22
x-timer: S1671449525.517458,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 29312
X-Firefox-Spdy: h2

static.parastorage.com/services/wix-public/1.299.0/styles/error-pages/styles.css

151.101.1.91

200 OK

2.9 kB

URL HTTP/2
static.parastorage.com/services/wix-public/1.299.0/styles/error-pages/styles.css
IP
151.101.1.91:0
ASN
#54113 FASTLY

File type
ASCII text, with very long lines (15552), with no line terminators
Size
2.9 kB (2894 bytes)
Hash
26611c0a4655915f72db4923a56431bc
97395c64cd88ec513c64d6b03f5f48e063d12bda
d70e755632f37cf354aec0a9d634b2a08309d50f238d02b389e30873f0ea07f0

HTTP Headers

GET /services/wix-public/1.299.0/styles/error-pages/styles.css HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gabysearthfoods.co.za/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css; charset=utf-8
last-modified: Sun, 15 Sep 2019 05:55:24 GMT
etag: W/"bc59bd5f822da3e199a6b98fece4e818"
x-goog-meta-origin: archive-extractor
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrchkavE0ZtMXws1mfakihq4B,aVxMblM8KFG3we5NLvyVc7eNHvhCRAbD7EPjVZvQO20fbJaKSXYQ/lskq2jK6SGP
cache-control: public, max-age=7776000
server: Pepyaka/1.19.0
x-wix-request-id: 1667882885.576650549441511084
accept-ranges: bytes
date: Mon, 19 Dec 2022 11:32:04 GMT
age: 3639702
x-served-by: cache-bma1639-BMA
x-cache: HIT
x-cache-hits: 20
x-timer: S1671449525.517681,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2894
X-Firefox-Spdy: h2

static.parastorage.com/services/third-party/angularjs/1.2.28/i18n/angular-locale_en.js

151.101.1.91

200 OK

866 B

URL HTTP/2
static.parastorage.com/services/third-party/angularjs/1.2.28/i18n/angular-locale_en.js
IP
151.101.1.91:0
ASN
#54113 FASTLY

File type
ASCII text
Size
866 B (866 bytes)
Hash
fa365b53f8dde8376882043301d5eee3
aa7c46f0fd5efce84227ffae91fc556a9e2cd736
ddd4fca2c8c260bb21fc7041cf363f2a73a8101edd83d087111b79bcd2230544

HTTP Headers

GET /services/third-party/angularjs/1.2.28/i18n/angular-locale_en.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gabysearthfoods.co.za/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Wed, 26 Jul 2017 06:27:26 GMT
etag: W/"3c405f66126816b065d7d4680a6a5105-1"
x-amz-version-id: IeAD7WAYSU8sPS1PorNuCByw2miVzwg4
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciDgmy1x1bk0T2mMblm59aj,aVxMblM8KFG3we5NLvyVc5U6nDV0Sthqh2jmVbYx0F4QXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1668488806.647441442835223951
accept-ranges: bytes
date: Mon, 19 Dec 2022 11:32:04 GMT
age: 3028296
x-served-by: cache-bma1639-BMA
x-cache: HIT
x-cache-hits: 15
x-timer: S1671449525.518144,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 866
X-Firefox-Spdy: h2

static.parastorage.com/services/third-party/angular-translate/1.1.1/angular-translate.min.js

151.101.1.91

200 OK

2.2 kB

URL HTTP/2
static.parastorage.com/services/third-party/angular-translate/1.1.1/angular-translate.min.js
IP
151.101.1.91:0
ASN
#54113 FASTLY

File type
ASCII text, with very long lines (6946), with no line terminators
Size
2.2 kB (2235 bytes)
Hash
a7cfef48b3425eb2276b76a677a6e97f
329760f904bf636bce9a7c71129d8b01da0205a2
f473d8d24d3529a1a11f44f58ae8825baae0a9577c05b4668ed16c5c91cd090a

HTTP Headers

GET /services/third-party/angular-translate/1.1.1/angular-translate.min.js HTTP/1.1
Host: static.parastorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gabysearthfoods.co.za/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Fri, 15 Dec 2017 15:35:51 GMT
etag: W/"c1d049fb1f646c932e45bc1be1999dc2"
x-guploader-response-body-transformations: gunzipped
warning: 214 UploadServer gunzipped
access-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, Warning, X-GUploader-Response-Body-Transformations, X-GUploader-UploadID, X-Google-Trace
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciDgmy1x1bk0T2mMblm59aj,aVxMblM8KFG3we5NLvyVc0Sqk9+MZwtm2RdjD28LmUcQXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000
server: Pepyaka/1.19.10
x-wix-request-id: 1670297275.0272209232364423951
accept-ranges: bytes
date: Mon, 19 Dec 2022 11:32:04 GMT
age: 1318741
x-served-by: cache-bma1639-BMA
x-cache: HIT
x-cache-hits: 82
x-timer: S1671449525.537018,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2235
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
4df678b16094ceafefdbbd55707f4dbe
39a68e051456a8ab6c782502a94e8b95ccb0a71d
00561de9683c69a89e084b685df25c6ea4d3a38654a40554f127814200aadf6a

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4147
Cache-Control: max-age=168231
Content-Type: application/ocsp-response
Date: Mon, 19 Dec 2022 11:32:04 GMT
Etag: "63a029a8-1d7"
Expires: Wed, 21 Dec 2022 10:15:55 GMT
Last-Modified: Mon, 19 Dec 2022 09:06:48 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471

ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3

151.101.2.133

200 OK

1.5 kB

URL HTTP/1.1
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
IP
151.101.2.133:0
ASN
#54113 FASTLY

File type
data
Size
1.5 kB (1462 bytes)
Hash
0fbbfec689ae04d8aaaffe9d158f3474
4200e339646bda172973b62bf49417b86ba19919
3f87f7f3fe70a24fa45f7c4182a43d99f621ffb7c03a89e63a8b3733291c3d4c

HTTP Headers

POST /ca/gsatlasr3dvtlsca2022q3 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1462
Content-Type: application/ocsp-response
Etag: "A8505FB8B679915974393ADE52B60DFD6A63E9D6"
Expires: Mon, 19 Dec 2022 23:00:00 UTC
Last-Modified: Mon, 19 Dec 2022 11:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
Accept-Ranges: bytes
Date: Mon, 19 Dec 2022 11:32:04 GMT
Via: 1.1 varnish
Age: 1847
X-Served-By: cache-bma1676-BMA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1671449525.635413,VS0,VE1

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
7718185457368696ba7e72e33cc81050
e804f59a8d16ee895fe527c1a06380dc7550bf7d
841f5f1b90e20287640883c02a6d27ccfc7221843b74eb1dbb63acb18f76c983

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4286
Cache-Control: max-age=149684
Content-Type: application/ocsp-response
Date: Mon, 19 Dec 2022 11:32:04 GMT
Etag: "639fe0aa-1d7"
Expires: Wed, 21 Dec 2022 05:06:48 GMT
Last-Modified: Mon, 19 Dec 2022 03:55:22 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

34.216.192.228

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
34.216.192.228:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: SL5bg/ZDYX8PbatWI0e2Hg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Qk1pfOeC28/floIMyPTTZ9ADca8=

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
74619c8a7d32d46fc91cc86f793f107c
3f2b1390ef4f7cd385f513d57297fa482f7dd43c
6aa1fbfb532fc85b041684e259bbeecf53c7e7f711c8d414fc0775c4c1404457

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6AA1FBFB532FC85B041684E259BBEECF53C7E7F711C8D414FC0775C4C1404457"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6970
Expires: Mon, 19 Dec 2022 13:28:16 GMT
Date: Mon, 19 Dec 2022 11:32:06 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
74619c8a7d32d46fc91cc86f793f107c
3f2b1390ef4f7cd385f513d57297fa482f7dd43c
6aa1fbfb532fc85b041684e259bbeecf53c7e7f711c8d414fc0775c4c1404457

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6AA1FBFB532FC85B041684E259BBEECF53C7E7F711C8D414FC0775C4C1404457"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6970
Expires: Mon, 19 Dec 2022 13:28:16 GMT
Date: Mon, 19 Dec 2022 11:32:06 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
74619c8a7d32d46fc91cc86f793f107c
3f2b1390ef4f7cd385f513d57297fa482f7dd43c
6aa1fbfb532fc85b041684e259bbeecf53c7e7f711c8d414fc0775c4c1404457

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6AA1FBFB532FC85B041684E259BBEECF53C7E7F711C8D414FC0775C4C1404457"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6970
Expires: Mon, 19 Dec 2022 13:28:16 GMT
Date: Mon, 19 Dec 2022 11:32:06 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe03f69d5-77c0-42d9-9b2a-210a52667086.jpeg

34.120.237.76

200 OK

4.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe03f69d5-77c0-42d9-9b2a-210a52667086.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.5 kB (4457 bytes)
Hash
9c7a1481c2acfca36dfc40d5525f4f5d
39ebe36d481dc83f16d42feff7e6a594eb1eb090
6fa67fb9185e55892298acd0a7aa2b81fb2aa5857aa9eddca3931189ea538457

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe03f69d5-77c0-42d9-9b2a-210a52667086.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4457
x-amzn-requestid: 82585058-e84a-4d7c-827e-25e5ad105cc0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c-EYmEpPoAMFc_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63958103-5fdbaa223aa63f092c53655e;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 07:04:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: C_yz89d-7ESZhycrODTwNw164xTpMh7g_2G41RHC2ZSGI3E5GEGLnQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Dec 2022 00:44:23 GMT
age: 38863
etag: "39ebe36d481dc83f16d42feff7e6a594eb1eb090"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9d0e2ec9-6896-4273-b8df-01dec989c40f.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.8 kB (9839 bytes)
Hash
fa1560ff1a3a3e698d833e8b6755ec41
2871e0b444d1280ddd962686d86c3fad39804345
f278a5decebd47e869cdaeedd1d5faa7650fe1446655937d1fb444e54a5de3d6

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9d0e2ec9-6896-4273-b8df-01dec989c40f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9839
x-amzn-requestid: 9c6ba5d7-f5a8-4726-b223-2205ade3aace
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dJvjfENdIAMFSow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639a2c7c-77ce3f1916280be75e0a8a7b;Sampled=0
x-amzn-remapped-date: Wed, 14 Dec 2022 20:05:16 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -nx30FEx9im5SYmqVXrUZVNsPicRRt8tSn_ZSLRo0TXMR0WY6Bi1uA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Dec 2022 21:52:15 GMT
age: 49191
etag: "2871e0b444d1280ddd962686d86c3fad39804345"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4e12be4-4d3a-4c89-acc3-9f2634b84373.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.7 kB (5654 bytes)
Hash
8576327b06d5d8259e87bfeb71761ff5
2b2e5694e77b30f2e2cdfddd8ad616be214c9df2
377ffbcb85710900d97b1d99522a8087a6c66bcb778be42da806283cae833715

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4e12be4-4d3a-4c89-acc3-9f2634b84373.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5654
x-amzn-requestid: b9f6e88a-f07b-4c6c-b823-9b9e928274ee
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dKtB8Eb5oAMF3gw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639a8ed9-3c8888ca41c995d67a09fa50;Sampled=0
x-amzn-remapped-date: Thu, 15 Dec 2022 03:04:57 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FaoiV9Jr3-1aqI-rVbXAYEMTsG_cjqVxmr0di-CbJaQBwIbb6BRg6A==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Dec 2022 06:05:02 GMT
age: 19624
etag: "2b2e5694e77b30f2e2cdfddd8ad616be214c9df2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F098a9ffa-a930-493a-86d2-96d21a07d7ae.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.8 kB (9824 bytes)
Hash
945d09b8aa956ddee667614c08687f76
0db0497203df4f2ec5da40cd0ab89383479e5d9b
a0953dafcf933d120941f84b60d2884b3df33fa01dfbc5bfe62fc4910b392a83

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F098a9ffa-a930-493a-86d2-96d21a07d7ae.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9824
x-amzn-requestid: c9683b2f-dcf3-4c59-ad63-d10ec8908aa9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dTQDBE5tIAMFwdw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639dfa13-6ab265cc3d4229b548a8dc4d;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 17:19:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: sXOJkHnQUxV2rJN7VQkRpyqQO36n2AsIyokaIoWOVc2zoQWrCktLXg==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Dec 2022 06:02:10 GMT
age: 19796
etag: "0db0497203df4f2ec5da40cd0ab89383479e5d9b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c81bdf4-0a78-472d-ba75-80092016f334.png
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (12125 bytes)
Hash
ed374d0c34e8b2e15f08a6479a4f45e7
5db9e59699048998f0685e940640eae19ef11c8e
9933854830be796a87cfe44b6b8336294e2d3dbbe3205f267720aca6968c3a21

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c81bdf4-0a78-472d-ba75-80092016f334.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12125
x-amzn-requestid: e44faa15-1dfd-4bc0-bdfb-307c3de2755d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT2QPFZAIAMFf5g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3734-33d636210a1e24742ee71187;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:40:04 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: DmeWRYIlUMCR8Nds0-n0a9ju0ySR7ZuTAS82Lu8sZxPXQpBJkqzvww==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Dec 2022 21:52:16 GMT
age: 49190
etag: "5db9e59699048998f0685e940640eae19ef11c8e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8c17fa1e-3676-4150-9a56-a1ca369a9c6a.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (11263 bytes)
Hash
6d178a6b115f657a00617293489405fe
5a85960ea077d8a1e8ee24de73a9594682d9a4ef
61c2a7e815efe3206e64f00974ddba9b24b99b41bf030a102e53a6613d105b67

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8c17fa1e-3676-4150-9a56-a1ca369a9c6a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11263
x-amzn-requestid: 7cb5a6e1-9e6f-4b65-a0c4-d7612223edb3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c6OCtGU6IAMF6lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6393f6dd-459d1bef15af6cf134231005;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 03:02:53 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: dF3uhrxqSuq8L3bfocnU2ryQb_UcL97PM_MVhushhf0_STCTbIhORA==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Dec 2022 21:37:59 GMT
age: 50047
etag: "5a85960ea077d8a1e8ee24de73a9594682d9a4ef"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

www.gabysearthfoods.co.za/tbkjbi/002846343/manqrets_002846343.zip

35.228.150.132

404 Not Found

0 B

URL HTTP/2
www.gabysearthfoods.co.za/tbkjbi/002846343/manqrets_002846343.zip
IP
35.228.150.132:0
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /tbkjbi/002846343/manqrets_002846343.zip HTTP/1.1
Host: www.gabysearthfoods.co.za
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 404 Not Found
date: Mon, 19 Dec 2022 11:32:04 GMT
content-type: text/html; charset=UTF-8
content-language: en-US
strict-transport-security: max-age=3600
x-wix-request-id: 1671449524.21752940070124865
age: 0
server-timing: cache;desc=miss, varnish;desc=miss, dc;desc=eun1
x-seen-by: sHU62EDOGnH2FBkJkG/Wx8EeXWsWdHrhlvbxtlynkVhSPP4BX7vGHBD5iOzRxYD3,qquldgcFrj2n046g4RNSVOEcKTWnPkUHK4qOWpouMik=,2d58ifebGbosy5xc+FRalnU6ibzFAuUKQRFHu7tjb8Uh8GniroPNy6bMWv5DN3GH3QpI/ucnHvfrUjeESIoVeozoSbWbQ76bDaCQXyKdiYw=,2UNV7KOq4oGjA5+PKsX47F5BsGrV9wopHJr0QwUp44Wa46R9xNIlpQ4eUPYpBuqs,7npGRUZHWOtWoP0Si3wDpxIZYQRbgILnG+u+o7R9A3Q=,xTu8fpDe3EKPsMR1jrheEM8D0QE3vlT0y873R2lED5U=,adCcrjWN+9jYhIHsscsS5kz2ALE6rGXweo+2Cikj+vv69JQqzvqtAVbvDBPLXl6/iLmOBCJX9PwPq0FFNfh5cw==
cache-control: no-cache
vary: Accept-Encoding
x-content-type-options: nosniff
content-encoding: br
server: Pepyaka/1.19.10
X-Firefox-Spdy: h2

www.wix.com/_api/wix-laboratory-server/laboratory/conductAllInScope?scope=error-pages&accept=jsonp&callback=setExperimentsSync

35.228.150.132

200 OK

0 B

URL HTTP/2
www.wix.com/_api/wix-laboratory-server/laboratory/conductAllInScope?scope=error-pages&accept=jsonp&callback=setExperimentsSync
IP
35.228.150.132:0
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /_api/wix-laboratory-server/laboratory/conductAllInScope?scope=error-pages&accept=jsonp&callback=setExperimentsSync HTTP/1.1
Host: www.wix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gabysearthfoods.co.za/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 19 Dec 2022 11:32:04 GMT
content-type: application/jsonp;charset=UTF-8
set-cookie: XSRF-TOKEN=1671449524|AvTlW0A_JvP1;Path=/;Domain=.wix.com;Secure;SameSite=None
cache-control: no-cache
x-seen-by: sHU62EDOGnH2FBkJkG/Wx8EeXWsWdHrhlvbxtlynkVhSPP4BX7vGHBD5iOzRxYD3,qquldgcFrj2n046g4RNSVFU+wIjSmTlxqMUV00MvxJE=,7EIX/IwEzpj2jL+X/Xh766blPQxJ23gq9u47M+UjIw+Ug3q+6/flRNE6R8aZvDuICONUzZLbexpS3PEZaUF96g==,7npGRUZHWOtWoP0Si3wDp7IBA5zNUVbHdAALFlpYcZg=,xTu8fpDe3EKPsMR1jrheEMS3ik4fK4jaHv4CKBuQGNg=,mvxQ9qSAmY38asKjFCcmGyEJeY1XPzffLKLIvF2ztRI2xK6NDEVMvOaFRU5iSWZfxLeKTh8riNoe/gIoG5AY2A==
x-wix-request-id: 1671449524.79152940082124865
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
server: Pepyaka/1.19.10
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (31)

URL HTTP/1.1

IP

ASN

File type

Size

Hash