firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bdb8b66c705a7b996496d780f50c00b5
403ae92039fcc933870f51f913f78ccaf9652256
c923ed2539f4ce9f4d43743c402fbb2060a52a4cbedbf14c5f5742ab718073d6
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 21 Oct 2022 04:52:20 GMT
Expires: Fri, 21 Oct 2022 04:52:20 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ZP1gW-dAzsRgad6WlE9wG6mI499eS43xt6BBgaNfL17I9-yk4pf39g==
Age: 2073
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 24a97183f836954e0f05c4dc794ff4d1
52778bbe39b9f736c16b5798575d1d96607ce9d0
01f6721f2674f54662fff590fdf7247cc8c58a3f84906cae75527fb7b6dd2436
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "01F6721F2674F54662FFF590FDF7247CC8C58A3F84906CAE75527FB7B6DD2436"
Last-Modified: Wed, 19 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5257
Expires: Fri, 21 Oct 2022 06:54:31 GMT
Date: Fri, 21 Oct 2022 05:26:54 GMT
Connection: keep-alive
derwenttw.com/
301 Moved Permanently 233 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 483b6dfc65825513a1f8b6723c1d7485
830ee8db4a047d8b0293793c2e0b87f49ade5bfa
82bcb48eb6421c6e8028a04b049b55543b99eb6d24517c575b2574874f26bc28
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: derwenttw.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Fri, 21 Oct 2022 05:26:54 GMT
Server: Apache
Location: http://www.derwenttw.com/
Content-Length: 233
Keep-Alive: timeout=10, max=66
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9dc4f23f82148797f6d8041bdda3c7f7
6841ded3e2dd94fd762316d01efd43f7aafb8354
e229db1854a85b320cee574e805210f3adf5797136ea820c0a0ce9abcd63d4dd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E229DB1854A85B320CEE574E805210F3ADF5797136EA820C0A0CE9ABCD63D4DD"
Last-Modified: Thu, 20 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5295
Expires: Fri, 21 Oct 2022 06:55:09 GMT
Date: Fri, 21 Oct 2022 05:26:54 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: aQqY9ftamkoCU1WRxbNqMg4Xz24kBOv6KS1jIW+UEY7XCbUciNICzEKTpICkcYDett3WdXF/cJs=
x-amz-request-id: MQKMX39TSV6BWZK5
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 21 Oct 2022 04:37:02 GMT
age: 2992
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 05:26:54 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Fri, 21 Oct 2022 04:43:40 GMT
Expires: Fri, 21 Oct 2022 04:46:39 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: YKLTtBm8dZ_AHvkJyN26o6D5yWOxc3NON32RQaEm5_TxTl0V9RXacA==
Age: 2594
www.derwenttw.com/
200 OK 10 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1350), with CRLF, LF line terminators
Hash a8585a6723464e15f08ab74620ac7a93
7d94ac7fd321e0acb548efa4d712edd2aefb57d6
85b884750cbe99fbf31e2f8fd1067b5363516b90c2a64dd8730362921df251bc
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: www.derwenttw.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 21 Oct 2022 05:26:54 GMT
Server: Apache
Vary: X-W-SSL,Accept-Encoding,User-Agent
Set-Cookie: is_mobile=0; path=/; domain=www.derwenttw.com
language=en; expires=Fri, 04-Nov-2022 05:26:54 GMT; Max-Age=1209600; path=/
Cache-Control: private
ETag: W/"bca0cb151c799f31c8aa91f3d358315c-gzip"
Content-Encoding: gzip
X-Host: grn24.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 9981
Keep-Alive: timeout=10, max=65
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
ocsp.digicert.com/
200 OK 471 B IP
Hash a5dd4f71f4ddd5be9201466ed7a6c423
1d0832fb6e227d42137d319f728c8bc1414c816f
1edffa6a320210fccbd0e5fa6dbdaa45561678a75a66639985f02791c8283b40
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2762
Cache-Control: max-age=98754
Content-Type: application/ocsp-response
Date: Fri, 21 Oct 2022 05:26:54 GMT
Etag: "63510196-1d7"
Expires: Sat, 22 Oct 2022 08:52:48 GMT
Last-Modified: Thu, 20 Oct 2022 08:06:46 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
cdn2.editmysite.com/css/social-icons.css?buildtime=1662672764
200 OK 1.6 kB URL HTTP/1.1 cdn2.editmysite.com/css/social-icons.css?buildtime=1662672764
IP
File type ASCII text, with very long lines (13080)
Hash d9b973e874b3c1daa4d91b5d73b59f41
102306abbadb5d6a702d0344c234d9dcdede01bb
6f5d5e4da9ceae2bccaabd6b63b891085371a373d67ddf60ab7296565b21ff9f
GET /css/social-icons.css?buildtime=1662672764 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.derwenttw.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1640
Server: nginx
Content-Type: text/css
Last-Modified: Thu, 06 Oct 2022 21:50:54 GMT
ETag: W/"633f4dbe-3319"
Expires: Mon, 24 Oct 2022 11:37:20 GMT
Cache-Control: max-age=1209600
X-Host: blu137.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 21 Oct 2022 05:26:54 GMT
Age: 928175
X-Served-By: cache-sjc10041-SJC, cache-bma1675-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 3, 1
X-Timer: S1666330015.844390,VS0,VE1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/css/sites.css?buildTime=1662672764
200 OK 30 kB URL HTTP/1.1 cdn2.editmysite.com/css/sites.css?buildTime=1662672764
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash d10158b22b553f723d99dc78eaee6390
80f2d6670cfb0d01cd20c471cf8e3e6465ddd3f6
939c7a8e1ad74a44e0c847e38533e69e36454b6805d25acf3fb0cb5c472d245e
GET /css/sites.css?buildTime=1662672764 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.derwenttw.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 29746
Server: nginx
Content-Type: text/css
Last-Modified: Mon, 17 Oct 2022 18:41:24 GMT
ETag: W/"634da1d4-347ac"
Expires: Tue, 01 Nov 2022 10:21:09 GMT
Cache-Control: max-age=1209600
X-Host: grn7.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 21 Oct 2022 05:26:54 GMT
Age: 241545
X-Served-By: cache-sjc10043-SJC, cache-bma1660-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 3, 2
X-Timer: S1666330015.844008,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/fonts/Quattrocento_Sans/font.css?2
200 OK 334 B URL HTTP/1.1 cdn2.editmysite.com/fonts/Quattrocento_Sans/font.css?2
IP
Hash 940c7e4af2f3e260aa21535c373cc744
04410aa25c1ced32f0ff4ebd4ed2e094e1553d36
db242ce406bfc7a17acf1e1fc8b2c392ac8bf44b7c82bd081a85ffc61d27cd3e
GET /fonts/Quattrocento_Sans/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.derwenttw.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 334
Server: nginx
Content-Type: text/css
Last-Modified: Mon, 17 Oct 2022 18:37:24 GMT
ETag: "634da0e4-6de"
Expires: Tue, 01 Nov 2022 11:34:37 GMT
Cache-Control: max-age=1209600
X-Host: grn65.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 21 Oct 2022 05:26:54 GMT
Age: 237137
X-Served-By: cache-sjc10067-SJC, cache-bma1645-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 40, 1
X-Timer: S1666330015.844236,VS0,VE1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/fonts/Open_Sans/font.css?2
200 OK 367 B URL HTTP/1.1 cdn2.editmysite.com/fonts/Open_Sans/font.css?2
IP
Hash 52e94ffb1c814650bab35433c3034ac7
b42d636ac9b71805f751612208ddb34e93a6538d
fe0f821828a4b146e9b0aba7f9a4956a0caa14a2ac72541ced5ee1d2ed376462
GET /fonts/Open_Sans/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.derwenttw.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 367
Server: nginx
Content-Type: text/css
Last-Modified: Thu, 06 Oct 2022 19:12:45 GMT
ETag: "633f28ad-a2a"
Expires: Mon, 24 Oct 2022 12:08:37 GMT
Cache-Control: max-age=1209600
X-Host: grn61.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 21 Oct 2022 05:26:54 GMT
Age: 926296
X-Served-By: cache-sjc10081-SJC, cache-bma1662-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 41, 1070
X-Timer: S1666330015.844641,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/css/old/fancybox.css?1662672764
200 OK 1.2 kB URL HTTP/1.1 cdn2.editmysite.com/css/old/fancybox.css?1662672764
IP
File type ASCII text, with very long lines (3910)
Hash b644e92258f4c7c0b4270047652d1e60
93734d52ee9e86a768159e514076051813c39cd9
29199496fb817668f887938571046abcdfb49063d0207d571b361f221f467907
GET /css/old/fancybox.css?1662672764 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.derwenttw.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1218
Server: nginx
Content-Type: text/css
Last-Modified: Thu, 20 Oct 2022 20:35:57 GMT
ETag: "6351b12d-f47"
Expires: Thu, 03 Nov 2022 21:36:08 GMT
Cache-Control: max-age=1209600
X-Host: blu56.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 21 Oct 2022 05:26:54 GMT
Age: 28246
X-Served-By: cache-sjc10060-SJC, cache-bma1645-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 66, 2
X-Timer: S1666330015.844451,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/fonts/Quattrocento/font.css?2
200 OK 278 B URL HTTP/1.1 cdn2.editmysite.com/fonts/Quattrocento/font.css?2
IP
Hash 89f53b13b9fb642f135f7e95bb63aa1c
17070d03b523b9bf26fff8a2caddb4875b3c452b
b7e57a5cab9d35e7050dc07ae397be67e0abefc881ce5027c567918281a6ec3e
GET /fonts/Quattrocento/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.derwenttw.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 278
Server: nginx
Content-Type: text/css
Last-Modified: Thu, 13 Oct 2022 17:06:06 GMT
ETag: "6348457e-358"
Expires: Mon, 31 Oct 2022 12:20:59 GMT
Cache-Control: max-age=1209600
X-Host: blu108.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 21 Oct 2022 05:26:54 GMT
Age: 320755
X-Served-By: cache-sjc10051-SJC, cache-bma1645-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 4, 1
X-Timer: S1666330015.844570,VS0,VE1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/css/old/slideshow/slideshow.css?1662672764
200 OK 1.5 kB URL HTTP/1.1 cdn2.editmysite.com/css/old/slideshow/slideshow.css?1662672764
IP
File type ASCII text, with very long lines (7352)
Hash ba9bbd4df86b5b255f5ef44658e52130
3970cecb6939475f95556c2d32d17de0d1645f32
244b7b062e6e558009c622e46008d5542604b9163315220199a2ac50868ff3e5
GET /css/old/slideshow/slideshow.css?1662672764 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.derwenttw.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1488
Server: nginx
Content-Type: text/css
Last-Modified: Mon, 10 Oct 2022 17:19:24 GMT
ETag: W/"6344541c-1cb9"
Expires: Tue, 25 Oct 2022 13:50:32 GMT
Cache-Control: max-age=1209600
X-Host: blu88.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 21 Oct 2022 05:26:54 GMT
Age: 833783
X-Served-By: cache-sjc10033-SJC, cache-bma1675-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 3060, 1
X-Timer: S1666330015.853268,VS0,VE1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/js/old/slideshow-jq.js?buildTime=1662672764
200 OK 13 kB URL HTTP/1.1 cdn2.editmysite.com/js/old/slideshow-jq.js?buildTime=1662672764
IP
File type ASCII text, with very long lines (32013)
Hash da04d4da36c827437eb064334cf40561
b54b259c2dce4a00e265deddf2ee0941dda6ed40
0064ed54b2f6244cda5252037026ceb744b58067811265aa1a10c3f7cd937b3a
GET /js/old/slideshow-jq.js?buildTime=1662672764 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.derwenttw.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 13265
Server: nginx
Content-Type: application/javascript
Last-Modified: Sat, 15 Oct 2022 20:01:03 GMT
ETag: "634b117f-9e0b"
Expires: Mon, 31 Oct 2022 12:50:21 GMT
Cache-Control: max-age=1209600
X-Host: blu32.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 21 Oct 2022 05:26:54 GMT
Age: 318993
X-Served-By: cache-sjc10027-SJC, cache-bma1662-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 279, 1
X-Timer: S1666330015.854608,VS0,VE1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1662672764
200 OK 159 kB URL HTTP/1.1 cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1662672764
IP
File type ASCII text, with very long lines (32007)
Size 159 kB (158930 bytes)
Hash f740fdfbcf394f270a9b176029fa6f37
5f20c49627104282744508eb0278d7185128532e
3021f0f944c9bd7c6e995601f25b3d970e0bd41f9a411f08b2871bb5415a8707
GET /js/site/main-customer-accounts-site.js?buildTime=1662672764 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.derwenttw.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 158930
Server: nginx
Content-Type: application/javascript
Last-Modified: Mon, 10 Oct 2022 17:19:28 GMT
ETag: "63445420-8250f"
Expires: Tue, 25 Oct 2022 11:33:14 GMT
Cache-Control: max-age=1209600
X-Host: blu17.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 21 Oct 2022 05:26:54 GMT
Age: 842020
X-Served-By: cache-sjc10034-SJC, cache-bma1645-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 20957, 1
X-Timer: S1666330015.855603,VS0,VE1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3ba8661d0dde97c6205d6b58f0c3a13f
1abffcefb1bbc25240bb03e58f660f2f367273bc
48bb57c92f2e3facfb062fcdac1b5f05c3f319b37a259e7e306bd4708fa7b3fe
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 21 Oct 2022 05:26:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.derwenttw.com/files/main_style.css?1662950610
200 OK 5.3 kB URL HTTP/1.1 www.derwenttw.com/files/main_style.css?1662950610
IP
File type ASCII text, with very long lines (632)
Hash e6e6301e2d56f034c7e77dadafcfdf13
771dea7d93c5827ab40bd020aef857b0c9ab296c
7010bc2982a2c56dc662e99b1bdf8dfbb96cc0a160427971a64e03f619be93db
GET /files/main_style.css?1662950610 HTTP/1.1
Host: www.derwenttw.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.derwenttw.com/
Cookie: is_mobile=0; language=en
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 21 Oct 2022 05:26:54 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: grn90.sf2p.intern.weebly.net
Content-Encoding: gzip
ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js
IP
File type ASCII text, with very long lines (65483)
Hash a54a444f20643b131117dc2112cca05f
074964746b12ff1d30f7656310d6154ae1cc98b5
aa3ca8485dd777d4d880b38c1cf3bc2fc290d28a79ba3e3e43cba1f653132830
GET /ajax/libs/jquery/1.8.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.derwenttw.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33593
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 15 Oct 2022 14:42:36 GMT
expires: Sun, 15 Oct 2023 14:42:36 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 485058
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3ba8661d0dde97c6205d6b58f0c3a13f
1abffcefb1bbc25240bb03e58f660f2f367273bc
48bb57c92f2e3facfb062fcdac1b5f05c3f319b37a259e7e306bd4708fa7b3fe
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 21 Oct 2022 05:26:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn2.editmysite.com/js/lang/zh_TW/stl.js?buildTime=1662672764&
200 OK 37 kB URL HTTP/1.1 cdn2.editmysite.com/js/lang/zh_TW/stl.js?buildTime=1662672764&
IP
File type Unicode text, UTF-8 text, with very long lines (59347)
Hash 3419272f44811134f8f37a20a8ef6105
0ad609a69e53535b22c511603877c455df7e6912
b630de476e97d314f41ba513c8e17a1023262ac6076ec44a05d0e3e29d81cc03
GET /js/lang/zh_TW/stl.js?buildTime=1662672764& HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.derwenttw.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 36568
Server: nginx
Content-Type: application/javascript
Last-Modified: Tue, 18 Oct 2022 22:32:26 GMT
ETag: "634f297a-2bfda"
Expires: Wed, 02 Nov 2022 19:42:55 GMT
Cache-Control: max-age=1209600
X-Host: grn121.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 21 Oct 2022 05:26:55 GMT
Age: 121439
X-Served-By: cache-sjc10048-SJC, cache-bma1660-BMA
X-Cache: HIT, MISS
X-Cache-Hits: 38, 0
X-Timer: S1666330015.854680,VS0,VE195
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: UFEw7dJG0POY/WGCqcdQgQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: cBYH/ptj0aX4GNTdpwQEqOrQ4Os=
www.derwenttw.com/files/templateArtifacts.js?1662950610
200 OK 1.6 kB URL HTTP/1.1 www.derwenttw.com/files/templateArtifacts.js?1662950610
IP
File type exported SGML document, ASCII text, with very long lines (1630)
Hash e0836e8203c22b8e4086f27e91e86f5a
28235e77f5a895c8cd411aff4a6ef4e6f7d419c2
32dbc4a2eeca39a57d35670f00e2cf59e03c279521e47506c56c5c36d8b664b6
GET /files/templateArtifacts.js?1662950610 HTTP/1.1
Host: www.derwenttw.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.derwenttw.com/
Cookie: is_mobile=0; language=en
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 21 Oct 2022 05:26:55 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: grn73.sf2p.intern.weebly.net
Content-Encoding: gzip
www.derwenttw.com/files/theme/custom.js?1556830342
200 OK 1.7 kB URL HTTP/1.1 www.derwenttw.com/files/theme/custom.js?1556830342
IP
Hash 12a587ed16d3f533d2694634e5df625d
dbc684eed2989848bce9f905f7ead268dd987e34
02618dcdb47ee386fb0ada0f4e6dfa23cd7729d714b09f519f1645df24bae4cf
Analyzer Verdict Alert fortinet Malware
GET /files/theme/custom.js?1556830342 HTTP/1.1
Host: www.derwenttw.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.derwenttw.com/
Cookie: is_mobile=0; language=en
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 21 Oct 2022 05:26:55 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Thu, 12 May 2022 17:57:51 GMT
x-rgw-object-type: Normal
ETag: W/"29fc207672510b76ead1ef5dba730e07"
x-amz-request-id: tx000000000000001ca47aa-0062848e1f-b9fbc63-sfo1
X-Storage-Bucket: z5133
X-Storage-Object: 51336e9210d70b71c15c249d51f2f67ef80b727549aac03c489071722b7c74f0
X-Host: blu45.sf2p.intern.weebly.net
Content-Encoding: gzip
cdn2.editmysite.com/fonts/Quattrocento_Sans/bold.woff2
200 OK 24 kB URL HTTP/1.1 cdn2.editmysite.com/fonts/Quattrocento_Sans/bold.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 24232, version 1.0\012- data
Hash cbe1a8068bb09cd3931bbe4d89f768b1
7cc08b6e0ee00e2704b518af26c8b1851b412313
194c18a2b5dd01fb3f988112f03fdba314ad5f0051ecb8b2fbc652b7e7e46438
GET /fonts/Quattrocento_Sans/bold.woff2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.derwenttw.com
Connection: keep-alive
Referer: http://cdn2.editmysite.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 24232
Server: nginx
Content-Type: font/woff2
Last-Modified: Mon, 17 Oct 2022 18:37:24 GMT
ETag: "634da0e4-5ea8"
Expires: Thu, 03 Nov 2022 10:01:27 GMT
Cache-Control: max-age=1209600
X-Host: grn45.sf2p.intern.weebly.net
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 21 Oct 2022 05:26:55 GMT
Age: 69928
X-Served-By: cache-sjc10020-SJC, cache-bma1653-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 51, 1
X-Timer: S1666330015.247841,VS0,VE1
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/fonts/Quattrocento_Sans/regular.woff2
200 OK 24 kB URL HTTP/1.1 cdn2.editmysite.com/fonts/Quattrocento_Sans/regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 24320, version 1.0\012- data
Hash 056a6ed9c698772e2438032629f4933e
e88b32e3d9492e241bf5451e95967c5597f29967
86380b40e3d14ed9f3e0a5ff79c04f510d7910f677a66685e2b10f8b8765797f
GET /fonts/Quattrocento_Sans/regular.woff2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.derwenttw.com
Connection: keep-alive
Referer: http://cdn2.editmysite.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 24320
Server: nginx
Content-Type: font/woff2
Last-Modified: Thu, 13 Oct 2022 17:06:06 GMT
ETag: "6348457e-5f00"
Expires: Mon, 31 Oct 2022 13:26:55 GMT
Cache-Control: max-age=1209600
X-Host: grn76.sf2p.intern.weebly.net
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 21 Oct 2022 05:26:55 GMT
Age: 316800
X-Served-By: cache-sjc10075-SJC, cache-bma1650-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 371, 1
X-Timer: S1666330015.248018,VS0,VE1
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/fonts/Open_Sans/regular.woff2
200 OK 17 kB URL HTTP/1.1 cdn2.editmysite.com/fonts/Open_Sans/regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16740, version 1.0\012- data
Hash e43b535855a4ae53bd5b07a6eeb3bf67
6507312d9491156036316484bf8dc41e8b52ddd9
b34551ae25916c460423b82beb8e0675b27f76a9a2908f18286260fbd6de6681
GET /fonts/Open_Sans/regular.woff2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.derwenttw.com
Connection: keep-alive
Referer: http://cdn2.editmysite.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 16740
Server: nginx
Content-Type: font/woff2
Last-Modified: Thu, 20 Oct 2022 15:05:42 GMT
ETag: "635163c6-4164"
Expires: Thu, 03 Nov 2022 18:06:47 GMT
Cache-Control: max-age=1209600
X-Host: blu48.sf2p.intern.weebly.net
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 21 Oct 2022 05:26:55 GMT
Age: 40807
X-Served-By: cache-sjc10052-SJC, cache-bma1643-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 16, 43
X-Timer: S1666330015.255400,VS0,VE0
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/fonts/Quattrocento_Sans/italic.woff2
200 OK 26 kB URL HTTP/1.1 cdn2.editmysite.com/fonts/Quattrocento_Sans/italic.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 26464, version 1.0\012- data
Hash 56df6d969eecc8d6b91aebe1898298a7
ff1d5e8511ceee785cf7ca979ed6d18ba9b1c66a
558ce0841dfbc3d199acf558c75c9a8beb69a07dfd4de8752d694ba87fdad17a
GET /fonts/Quattrocento_Sans/italic.woff2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.derwenttw.com
Connection: keep-alive
Referer: http://cdn2.editmysite.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 26464
Server: nginx
Content-Type: font/woff2
Last-Modified: Mon, 10 Oct 2022 17:15:39 GMT
ETag: "6344533b-6760"
Expires: Tue, 25 Oct 2022 09:28:19 GMT
Cache-Control: max-age=1209600
X-Host: grn141.sf2p.intern.weebly.net
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 21 Oct 2022 05:26:55 GMT
Age: 849516
X-Served-By: cache-sjc10021-SJC, cache-bma1650-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 51, 1
X-Timer: S1666330015.259594,VS0,VE1
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/fonts/Quattrocento/bold.woff2
200 OK 36 kB URL HTTP/1.1 cdn2.editmysite.com/fonts/Quattrocento/bold.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 35952, version 1.0\012- data
Hash 1ede9b49c70635ad07115dc802702118
a7cea5ca5f71b4fed7fc4a69434091c87faf71f5
5e232623c90033b45c4ca98c53ff6b4b5b6c54b1c2da2f05a3a1a7e68e2ca8f5
GET /fonts/Quattrocento/bold.woff2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.derwenttw.com
Connection: keep-alive
Referer: http://cdn2.editmysite.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 35952
Server: nginx
Content-Type: font/woff2
Last-Modified: Thu, 13 Oct 2022 17:06:06 GMT
ETag: "6348457e-8c70"
Expires: Sat, 29 Oct 2022 07:40:29 GMT
Cache-Control: max-age=1209600
X-Host: grn118.sf2p.intern.weebly.net
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 21 Oct 2022 05:26:55 GMT
Age: 510385
X-Served-By: cache-sjc10043-SJC, cache-bma1653-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 13, 1
X-Timer: S1666330015.260244,VS0,VE1
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdn2.editmysite.com/fonts/wSocial/wsocial.woff?ts=1665093054094
200 OK 2.6 kB URL HTTP/1.1 cdn2.editmysite.com/fonts/wSocial/wsocial.woff?ts=1665093054094
IP
File type Web Open Font Format, TrueType, length 2636, version 1.0\012- data
Hash 0e88795b66eeac48b209209aa0179411
983e16566390f9167c6c4fbbdb052623fc01a631
e8106b06fab14948098cae97983eafbe1a60643ac725b2a029e4da57d43854df
GET /fonts/wSocial/wsocial.woff?ts=1665093054094 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.derwenttw.com
Connection: keep-alive
Referer: http://cdn2.editmysite.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 2636
Server: nginx
Content-Type: font/woff
Last-Modified: Mon, 17 Oct 2022 18:37:25 GMT
ETag: "634da0e5-a4c"
Expires: Wed, 02 Nov 2022 12:37:33 GMT
Cache-Control: max-age=1209600
X-Host: blu39.sf2p.intern.weebly.net
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 21 Oct 2022 05:26:55 GMT
Age: 146961
X-Served-By: cache-sjc10059-SJC, cache-bma1650-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1180, 1
X-Timer: S1666330015.272613,VS0,VE1
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
www.derwenttw.com/files/theme/plugins.js?1556830342
200 OK 16 kB URL HTTP/1.1 www.derwenttw.com/files/theme/plugins.js?1556830342
IP
Hash ce37502e9066932ae36507eff2c95a51
eac31d39f374a2a7512208477c9feabe185ab167
b23632e7cfb2ae59a9e8e6dd4427071bbb2d316ef562bf8cd8bedace4201c541
Analyzer Verdict Alert fortinet Malware
GET /files/theme/plugins.js?1556830342 HTTP/1.1
Host: www.derwenttw.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.derwenttw.com/
Cookie: is_mobile=0; language=en
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 21 Oct 2022 05:26:55 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Thu, 05 May 2022 18:26:31 GMT
x-rgw-object-type: Normal
ETag: W/"64497d2ab794cdb5e3c5c86cf7c5a611"
x-amz-request-id: tx000000000000001b62afc-006284804a-b9fbc20-sfo1
X-Storage-Bucket: z637b
X-Storage-Object: 637b5d2a661d0201f239a7afcd1278bf55bec7ef7ada6cc6c0485c4e45d9b702
X-Host: grn79.sf2p.intern.weebly.net
Content-Encoding: gzip
www.derwenttw.com/uploads/1/2/3/8/123883954/published/derwentlogo.jpg?1599461653
200 OK 3.3 kB URL HTTP/1.1 www.derwenttw.com/uploads/1/2/3/8/123883954/published/derwentlogo.jpg?1599461653
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x48, components 3\012- data
Hash 91afc843c464255fa7bb0d0ef5951e57
10ca86dd1e1345416e7fc78bf0a996eccefe9f2f
499c1e09ee824020ff8abd041d7803f6bf3b569a3915b84b28479205592e5879
Analyzer Verdict Alert fortinet Malware
GET /uploads/1/2/3/8/123883954/published/derwentlogo.jpg?1599461653 HTTP/1.1
Host: www.derwenttw.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.derwenttw.com/
Cookie: is_mobile=0; language=en
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 21 Oct 2022 05:26:55 GMT
Content-Type: image/jpeg
Content-Length: 3291
Connection: keep-alive
Last-Modified: Mon, 07 Sep 2020 06:54:13 GMT
x-rgw-object-type: Normal
ETag: "91afc843c464255fa7bb0d0ef5951e57"
x-amz-request-id: tx00000000000001d46d0be-0063522d9f-c6aed46-sfo1
X-Storage-Bucket: z499c
X-Storage-Object: 499c1e09ee824020ff8abd041d7803f6bf3b569a3915b84b28479205592e5879
X-Host: grn79.sf2p.intern.weebly.net
Accept-Ranges: bytes, bytes
cdn2.editmysite.com/js/wsnbn/snowday262.js
200 OK 26 kB URL HTTP/1.1 cdn2.editmysite.com/js/wsnbn/snowday262.js
IP
File type ASCII text, with very long lines (2512)
Hash 234327230add9a5a5d61a48829ea4565
7966cc0e4bd76f88ff193c8a99a067de804b7129
bb696c58d9ae5fa635b3ff22efdf60de9ac2f8ef9df5e2f2d58dd5f8dc99df75
GET /js/wsnbn/snowday262.js HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.derwenttw.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 25752
Server: nginx
Content-Type: application/javascript
Last-Modified: Wed, 12 Oct 2022 22:57:27 GMT
ETag: "63474657-124fe"
Expires: Thu, 27 Oct 2022 08:38:41 GMT
Cache-Control: max-age=1209600
X-Host: blu85.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 21 Oct 2022 05:26:55 GMT
Age: 679693
X-Served-By: cache-sjc10061-SJC, cache-bma1645-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 20, 6808
X-Timer: S1666330015.399789,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9f4b1d3c4fdfbd28fa4afc92115bd9f9
365125fe68f668bae6f3c13ef21d92bb00783ebe
92ea3ab34acb6f2464ef06496365dd1a54767519d3429346849898739bf05bb5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 21 Oct 2022 05:26:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?_=1666330027356
200 OK 555 B URL HTTP/2 www.google.com/recaptcha/api.js?_=1666330027356
IP
File type ASCII text, with very long lines (850), with no line terminators
Hash e97ac326fe7d86d6443c29db10dd14e7
6001bc7cf0bc44bb9fb4b3cb5e99928d988e5221
ceb685ffc1ceb8e12d13345098796805f46a8f97fb744a00739f57c8961a59b6
GET /recaptcha/api.js?_=1666330027356 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.derwenttw.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Fri, 21 Oct 2022 05:26:55 GMT
date: Fri, 21 Oct 2022 05:26:55 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 555
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6894994e02f8f5ba7b41315e467ec514
20381d88239721ae42a0637d67417a19b41af581
df9e40affa62e2ef3a0797b0fbb3093c9906ce8254a035f547553d563a329505
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 21 Oct 2022 05:26:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn2.editmysite.com/js/site/main.js?buildTime=1662672764
200 OK 0 B URL HTTP/1.1 cdn2.editmysite.com/js/site/main.js?buildTime=1662672764
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/site/main.js?buildTime=1662672764 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.derwenttw.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 146400
Server: nginx
Content-Type: application/javascript
Last-Modified: Tue, 18 Oct 2022 22:33:22 GMT
ETag: "634f29b2-74804"
Expires: Thu, 03 Nov 2022 12:01:59 GMT
Cache-Control: max-age=1209600
X-Host: blu70.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 21 Oct 2022 05:26:54 GMT
Age: 62695
X-Served-By: cache-sjc10024-SJC, cache-bma1645-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 28, 1
X-Timer: S1666330015.854747,VS0,VE1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
www.derwenttw.com/uploads/1/2/3/8/123883954/editor/3404896.jpg?1599460253
200 OK 77 kB URL HTTP/1.1 www.derwenttw.com/uploads/1/2/3/8/123883954/editor/3404896.jpg?1599460253
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 758x585, components 3\012- data
Hash 50580fa46953ea4b994e8632a1491618
7220871854b68a8e1720b973ad78eb127e3b5e12
28e0c8bd80e3c0b3159b48c668727649d2ca5583951c67b56885f6185ce426da
GET /uploads/1/2/3/8/123883954/editor/3404896.jpg?1599460253 HTTP/1.1
Host: www.derwenttw.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.derwenttw.com/
Cookie: is_mobile=0; language=en
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 21 Oct 2022 05:26:55 GMT
Content-Type: image/jpeg
Content-Length: 77185
Connection: keep-alive
Last-Modified: Mon, 07 Sep 2020 06:30:53 GMT
x-rgw-object-type: Normal
ETag: "50580fa46953ea4b994e8632a1491618"
x-amz-request-id: tx00000000000001e39f9ce-0063522d9f-c699baa-sfo1
X-Storage-Bucket: z28e0
X-Storage-Object: 28e0c8bd80e3c0b3159b48c668727649d2ca5583951c67b56885f6185ce426da
X-Host: blu81.sf2p.intern.weebly.net
Accept-Ranges: bytes, bytes
www.google-analytics.com/ga.js
200 OK 17 kB URL HTTP/1.1 www.google-analytics.com/ga.js
IP
File type ASCII text, with very long lines (1305)
Hash 01d5892e6e243b52998310c2925b9f3a
58180151b6a6ee4af73583a214b68efb9e8844d4
7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
GET /ga.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.derwenttw.com/
HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 17168
Date: Fri, 21 Oct 2022 05:05:29 GMT
Expires: Fri, 21 Oct 2022 07:05:29 GMT
Cache-Control: public, max-age=7200
Age: 1286
Last-Modified: Tue, 27 Sep 2022 22:01:05 GMT
Content-Type: text/javascript
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 0 B URL HTTP/1.1 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://www.derwenttw.com/
Origin: http://www.derwenttw.com
Connection: keep-alive
HTTP/1.1 200 OK
Date: Fri, 21 Oct 2022 05:26:55 GMT
Content-Length: 0
Connection: keep-alive
Server: nginx
Access-Control-Allow-Origin: http://www.derwenttw.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type, SP-Anonymous
Access-Control-Max-Age: 5
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a0738b138f262176b9a5984a8afe3127
513e61f1dd78a6c51077165a5e5391119b9d9228
04a69025a549be2708481584eb6a6a361c5541c0490d9c42ccba8161720e6075
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 21 Oct 2022 05:26:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.editmysite.com/ajax/apps/generateMap.php?map=google&elementid=135995231909347281&ineditor=0&control=3&width=auto&height=250px&overviewmap=0&scalecontrol=1&typecontrol=0&zoom=15&long=121.52148549999993&lat=25.0443133&domain=www&point=1&align=2&reseller=false
200 OK 12 kB URL HTTP/1.1 www.editmysite.com/ajax/apps/generateMap.php?map=google&elementid=135995231909347281&ineditor=0&control=3&width=auto&height=250px&overviewmap=0&scalecontrol=1&typecontrol=0&zoom=15&long=121.52148549999993&lat=25.0443133&domain=www&point=1&align=2&reseller=false
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (827)
Hash a2bfb37f7e270a34023101e343de35b5
ef8b47ccdd8353ca274fa704e4f295207fcf7f8f
bdba7a4a2a5f6f51d1936f3ab01a098b612d425d8d8fdf85eb807309d586d81d
GET /ajax/apps/generateMap.php?map=google&elementid=135995231909347281&ineditor=0&control=3&width=auto&height=250px&overviewmap=0&scalecontrol=1&typecontrol=0&zoom=15&long=121.52148549999993&lat=25.0443133&domain=www&point=1&align=2&reseller=false HTTP/1.1
Host: www.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.derwenttw.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 21 Oct 2022 05:26:55 GMT
Server: Apache
X-Host: blu103.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 11588
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
X-W-DC: SFO
Set-Cookie: sto-id-designer=JKHKBNAK; Domain=editmysite.com; Path=/
www.gstatic.com/recaptcha/releases/vP4jQKq0YJFzU6e21-BGy3GP/recaptcha__en.js
200 OK 402 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/vP4jQKq0YJFzU6e21-BGy3GP/recaptcha__en.js
IP
File type ASCII text, with very long lines (608)
Size 402 kB (401632 bytes)
Hash af538c6d81d575aac0416963bea7b208
22a080678c77639132902a5ef3ead0b4d06b3120
396c964c85a9b2e9a380bb18b1f6d51960f2bc7f7d4fd2bcf4754fc0ac443cd0
GET /recaptcha/releases/vP4jQKq0YJFzU6e21-BGy3GP/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.derwenttw.com
Connection: keep-alive
Referer: http://www.derwenttw.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 401632
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 17 Oct 2022 17:40:38 GMT
expires: Tue, 17 Oct 2023 17:40:38 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 02 Oct 2022 20:02:07 GMT
content-type: text/javascript
age: 301577
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a0738b138f262176b9a5984a8afe3127
513e61f1dd78a6c51077165a5e5391119b9d9228
04a69025a549be2708481584eb6a6a361c5541c0490d9c42ccba8161720e6075
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 21 Oct 2022 05:26:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e6c3e0486533b0a2edffeca191cd7785
2d688b3c35b26c69e8490ed21ccb94dbbe5ddd27
0780ccc7e7101d6bbfb981fcfdc6e9642f49b4671e2109bde58362d5be33c5d8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 21 Oct 2022 05:26:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e6c3e0486533b0a2edffeca191cd7785
2d688b3c35b26c69e8490ed21ccb94dbbe5ddd27
0780ccc7e7101d6bbfb981fcfdc6e9642f49b4671e2109bde58362d5be33c5d8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 21 Oct 2022 05:26:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.derwenttw.com/favicon.ico
200 OK 17 kB URL HTTP/1.1 www.derwenttw.com/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel\012- data
Hash b376e869161affe1ce0477f73e93071b
ff1d5dd6865ead4fdf9a1c37a2948debbdc4b734
71133b58144819dd8c7a502f8d30409e5731e79e5f6ec2e365d658af89b91224
GET /favicon.ico HTTP/1.1
Host: www.derwenttw.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.derwenttw.com/
Cookie: is_mobile=0; language=en; _snow_ses.1a98=*; _snow_id.1a98=934a2cda-4677-40d0-aad4-a162f2a15782.1666330027.1.1666330027.1666330027.4a163d20-c05b-4052-b1d0-eaf33875f119
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 21 Oct 2022 05:26:55 GMT
Content-Type: image/x-icon
Content-Length: 16958
Connection: keep-alive
Last-Modified: Mon, 07 Sep 2020 06:42:51 GMT
x-rgw-object-type: Normal
ETag: "b376e869161affe1ce0477f73e93071b"
x-amz-request-id: tx00000000000001d46d105-0063522d9f-c6aed46-sfo1
X-Storage-Bucket: z7113
X-Storage-Object: 71133b58144819dd8c7a502f8d30409e5731e79e5f6ec2e365d658af89b91224
X-Host: blu81.sf2p.intern.weebly.net
Accept-Ranges: bytes, bytes
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/1.1 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json; charset=UTF-8
Content-Length: 1771
Origin: http://www.derwenttw.com
Connection: keep-alive
Referer: http://www.derwenttw.com/
HTTP/1.1 200 OK
Date: Fri, 21 Oct 2022 05:26:55 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 2
Connection: keep-alive
Server: nginx
Set-Cookie: sp=7c599b76-d975-4fc0-94b3-0056122acc90; Expires=Sat, 21 Oct 2023 05:26:55 GMT; Domain=; Path=/; Secure; SameSite=None
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
Access-Control-Allow-Origin: http://www.derwenttw.com
Access-Control-Allow-Credentials: true
www.derwenttw.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]
200 OK 432 B URL HTTP/1.1 www.derwenttw.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]
IP
File type JSON data\012- , ASCII text, with very long lines (432), with no line terminators
Hash a4cf59767d4abb9a3423cf28b5009012
00c44553378b9d968f0262700ab2dd9c3897ea57
0644357b2162e2a1fb39fad3873bee9b33450c1155e8f1ea26e8ea4072fb8ad1
Analyzer Verdict Alert fortinet Malware
POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1
Host: www.derwenttw.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 83
Origin: http://www.derwenttw.com
Connection: keep-alive
Referer: http://www.derwenttw.com/
Cookie: is_mobile=0; language=en; _snow_ses.1a98=*; _snow_id.1a98=934a2cda-4677-40d0-aad4-a162f2a15782.1666330027.1.1666330027.1666330027.4a163d20-c05b-4052-b1d0-eaf33875f119
HTTP/1.1 200 OK
Date: Fri, 21 Oct 2022 05:26:55 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: blu88.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 432
Keep-Alive: timeout=10, max=69
Connection: Keep-Alive
Content-Type: application/json
www.derwenttw.com/uploads/1/2/3/8/123883954/2018973668_orig.jpg
200 OK 116 kB URL HTTP/1.1 www.derwenttw.com/uploads/1/2/3/8/123883954/2018973668_orig.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1100x626, components 3\012- data
Size 116 kB (116448 bytes)
Hash e79b180c66eb7a8b2fd5ba81302ea42c
ad87054033890011e69ec3795b8249fc80aebc3a
65aa190ea2b4c68fc65cabf836ea8c43597a264dcaeae0ca76603bfa87aad31a
GET /uploads/1/2/3/8/123883954/2018973668_orig.jpg HTTP/1.1
Host: www.derwenttw.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.derwenttw.com/
Cookie: is_mobile=0; language=en
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 21 Oct 2022 05:26:55 GMT
Content-Type: image/jpeg
Content-Length: 116448
Connection: keep-alive
Last-Modified: Wed, 04 May 2022 02:34:54 GMT
x-rgw-object-type: Normal
ETag: "e79b180c66eb7a8b2fd5ba81302ea42c"
x-amz-request-id: tx00000000000001d608b95-0063522d9f-c67eadd-sfo1
X-Storage-Bucket: z65aa
X-Storage-Object: 65aa190ea2b4c68fc65cabf836ea8c43597a264dcaeae0ca76603bfa87aad31a
X-Host: grn75.sf2p.intern.weebly.net
Accept-Ranges: bytes, bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dcbf142b7958e83961fc03b9676d1fc6
930f67e486f95de63450b6d73d1957aac204fb43
9194e452419c2c850073f3dc2d2b23d759dd793b9a0d881cb7b6d862d54805b1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9194E452419C2C850073F3DC2D2B23D759DD793B9A0D881CB7B6D862D54805B1"
Last-Modified: Wed, 19 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5303
Expires: Fri, 21 Oct 2022 06:55:19 GMT
Date: Fri, 21 Oct 2022 05:26:56 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dcbf142b7958e83961fc03b9676d1fc6
930f67e486f95de63450b6d73d1957aac204fb43
9194e452419c2c850073f3dc2d2b23d759dd793b9a0d881cb7b6d862d54805b1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9194E452419C2C850073F3DC2D2B23D759DD793B9A0D881CB7B6D862D54805B1"
Last-Modified: Wed, 19 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5303
Expires: Fri, 21 Oct 2022 06:55:19 GMT
Date: Fri, 21 Oct 2022 05:26:56 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0f39369-b0de-4f1a-a265-fb5b78bd72bb.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0f39369-b0de-4f1a-a265-fb5b78bd72bb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9092a9add4d42e5bd0fd11c1459b5c69
4055fbef2d5d4e27a1d88ee293552f7742914390
b07359415e41671b4eb74c0d253d36f99bd2b40f6223bf4915bb11d2086af571
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0f39369-b0de-4f1a-a265-fb5b78bd72bb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8859
x-amzn-requestid: 8ecd9a22-fe28-487d-b01a-a818eb874d6d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aUsQ9Es8oAMFiVQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6351c0d2-6cd9f84f1fe795e5758d2527;Sampled=0
x-amzn-remapped-date: Thu, 20 Oct 2022 21:42:42 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 7PXqP2B3EZKZDCcews8bixw8SacLHtQHNMgzH0JtTFQ0AZHok1Ki8A==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 20 Oct 2022 22:02:31 GMT
age: 26665
etag: "4055fbef2d5d4e27a1d88ee293552f7742914390"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe88fd32b-e32c-4e05-ba5d-ff09e2d25456.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe88fd32b-e32c-4e05-ba5d-ff09e2d25456.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a13890c0ba208ebf4d34e326985b04ed
3fb08432bde3f01162ba0ca8b83680ad5f9b3af0
a83d2360a7a62f466c373b4d848acbd257473ae24dd5deb6dadac1368973995b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe88fd32b-e32c-4e05-ba5d-ff09e2d25456.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11885
x-amzn-requestid: 129b5863-b4ce-472d-a39c-20f6e781e4fa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aLB0KHzzIAMFzLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634de34d-3fd176f70135ffb755d14786;Sampled=0
x-amzn-remapped-date: Mon, 17 Oct 2022 23:20:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hZK2pc1M8sxrkazarZ0XH-JSWbiNyPO4s5pqsq2FWnKW0f5Tv3D9yg==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 20 Oct 2022 08:31:03 GMT
age: 75353
etag: "3fb08432bde3f01162ba0ca8b83680ad5f9b3af0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75287f5f-8525-4258-bd5c-f7b2726ca608.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75287f5f-8525-4258-bd5c-f7b2726ca608.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 01b09d9fb8bc36958ca73e2107200455
bc413d3d727a9a93adf17ec4c875cd929e09b4ec
fd63b40801efb7ec96f10ef972f69f45c8c44947a3dda4bd9db66d8d11efc039
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75287f5f-8525-4258-bd5c-f7b2726ca608.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10392
x-amzn-requestid: 6a35f696-7923-4a34-84f8-e40be1500e24
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aO1dUGakIAMF6Ew=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634f6921-5af8ef6d0fe202dc74528142;Sampled=0
x-amzn-remapped-date: Wed, 19 Oct 2022 03:04:01 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: EwA2_rUgCKcRhR5jyXHBVVIPF9Zz8im30bbO4SwtSrQ2mbDlEkoPwA==
via: 1.1 0800f067ff646622f3e8e507cb9b52e8.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Fri, 21 Oct 2022 03:55:10 GMT
age: 5506
etag: "bc413d3d727a9a93adf17ec4c875cd929e09b4ec"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe33f18c8-1681-4562-bd4e-6faf533351cf.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe33f18c8-1681-4562-bd4e-6faf533351cf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2604d057684fe42da19cfdc7aa6bf745
8d51d5db808059d2d937e5838d60d72b6979f6b8
6b965eb976fab7c3682123c7c23abf05d7673d1db421c115b76a72a1e351b5ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe33f18c8-1681-4562-bd4e-6faf533351cf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10019
x-amzn-requestid: d38ff377-3d5b-46ea-8313-94a4de6a51ff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aVBuAG6xoAMF8NA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6351e326-76191f3b0c52beac36c6e588;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 00:09:10 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: u-zcc_bB6ZeiBwWXjPUfJcoc1JYv3Nl6dipBY49b22hhdsSQ9YagqQ==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 21 Oct 2022 00:51:20 GMT
age: 16536
etag: "8d51d5db808059d2d937e5838d60d72b6979f6b8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98b8db42-7c94-466e-b74a-050e96c7ba27.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98b8db42-7c94-466e-b74a-050e96c7ba27.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 65594d1dc13761dcc4674f03b629141f
440b895d33ade533ab57689cccfc533871958559
76eb16523cde78e0a7bc34e2a2d2a073b4569cd4b9ee5c28213497b1ea2893d0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98b8db42-7c94-466e-b74a-050e96c7ba27.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5029
x-amzn-requestid: 63037ba8-bfa6-4087-9486-d583348d79bd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aVCNwGl1IAMFuvw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6351e3f1-4fa2d43240e5f45624553bd3;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 00:12:33 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: VChWOK-Odah11FGz0dg4VaKPBMTy_KIIilS9YYVMZaMLOdCJPZjr-A==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Fri, 21 Oct 2022 00:34:47 GMT
etag: "440b895d33ade533ab57689cccfc533871958559"
content-type: image/jpeg
age: 17529
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F736d4923-26b7-4909-9553-d576c206bd33.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F736d4923-26b7-4909-9553-d576c206bd33.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b5006761dc43470b6b3c97dad6b755c2
d8a42f57f06c1de46d781ed2de3cceba2ee2f967
358130b2c3af00a0aca24cd7cd540037f7ab57a83efe98d5cbd331231909b916
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F736d4923-26b7-4909-9553-d576c206bd33.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7512
x-amzn-requestid: a2aa868b-32a8-4464-98f7-4e07ff540759
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aUsOkH_DIAMF2Ug=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6351c0c3-531142322f9737d663f36630;Sampled=0
x-amzn-remapped-date: Thu, 20 Oct 2022 21:42:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: kjAmyoogqGs2Rr4KpMDXYe5y-63CybLW4JjRuU4jwS9-B-obgJmUEA==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 20 Oct 2022 22:00:21 GMT
age: 26795
etag: "d8a42f57f06c1de46d781ed2de3cceba2ee2f967"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Google+Sans+Text:400&text=%E2%86%90%E2%86%92%E2%86%91%E2%86%93&lang=en
200 OK 16 kB URL HTTP/2 fonts.googleapis.com/css?family=Google+Sans+Text:400&text=%E2%86%90%E2%86%92%E2%86%91%E2%86%93&lang=en
IP
Hash 2c5e576c986fa3babe2c32f4a7ca3f3c
2f9f0aaf63ec000b07fc073c26fddfb6ab4e4466
f560931ec3844307c32fb2b1503925261fc99f30ecd22d27664b104e13e5567c
GET /css?family=Google+Sans+Text:400&text=%E2%86%90%E2%86%92%E2%86%91%E2%86%93&lang=en HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.editmysite.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 21 Oct 2022 05:26:56 GMT
date: Fri, 21 Oct 2022 05:26:56 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:300,400,500,700|Google+Sans:400,500,700|Google+Sans+Text:400&lang=en
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,500,700|Google+Sans:400,500,700|Google+Sans+Text:400&lang=en
IP
GET /css?family=Roboto:300,400,500,700|Google+Sans:400,500,700|Google+Sans+Text:400&lang=en HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.editmysite.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 21 Oct 2022 05:26:56 GMT
date: Fri, 21 Oct 2022 05:26:56 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
199.34.228.77
151.101.85.46
23.36.76.226
93.184.220.29
0.0.0.0