r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ec47f9eed203ae063b9c210009de54a9
19ff156471b9cffbc2432c5b65543bdd18e36271
3974208ce1840f6c9467287b7e220379ed881d76db64939f411dbc500c103d48
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3974208CE1840F6C9467287B7E220379ED881D76DB64939F411DBC500C103D48"
Last-Modified: Thu, 02 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20729
Expires: Sat, 04 Feb 2023 14:32:37 GMT
Date: Sat, 04 Feb 2023 08:47:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 81713f952b51a865ad9764cde68e3fdb
278c3a9c4bb2a0ffb7375f90d89a1ba6e90a766a
c2eb0d8a24ecb51af28f1c71db4b9a95c568dcf6c94b41ee8c78787a4ebebcef
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2EB0D8A24ECB51AF28F1C71DB4B9A95C568DCF6C94B41EE8C78787A4EBEBCEF"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3538
Expires: Sat, 04 Feb 2023 09:46:06 GMT
Date: Sat, 04 Feb 2023 08:47:08 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 04 Feb 2023 08:43:37 GMT
content-type: application/json
age: 211
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash fb7b6b46e708ad73eaaa3c21e74569ae
950663c025acad81556af5aa3022ecc9d55097fe
763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19261
Expires: Sat, 04 Feb 2023 14:08:09 GMT
Date: Sat, 04 Feb 2023 08:47:08 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Td0APaIDW/cl2AIWay6b7qBw5tFJeOhAnnCdgyu6MaYPNP+Jt3xDO3fzzHWbaMQIBTx/i8zJuYb/eB8k/DbNQA==
x-amz-request-id: 6VYK1MDT962BNTS8
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 04 Feb 2023 07:52:45 GMT
age: 3263
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 08:47:08 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
key-logger-free.com/index.html
69.164.210.206301 Moved Permanently 0 B URL HTTP/1.1 key-logger-free.com/index.html
IP 69.164.210.206:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /index.html HTTP/1.1
Host: key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 08:47:08 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.5.38
Set-Cookie: wfvt_343609991=63de1b8caaef9; expires=Sat, 04-Feb-2023 09:17:08 GMT; Max-Age=1800; path=/; httponly
Expires: Sat, 04 Feb 2023 09:47:08 GMT
Cache-Control: max-age=3600
Location: http://key-logger-free.com
X-Redirect-Agent: redirection
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 04 Feb 2023 08:07:19 GMT
age: 2389
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash dedf9c519ac38c4bece9c5bc895787d7
4911175c3f8a435978c5301c33c7a99a5e00a1d5
bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2196
Expires: Sat, 04 Feb 2023 09:23:45 GMT
Date: Sat, 04 Feb 2023 08:47:09 GMT
Connection: keep-alive
push.services.mozilla.com/
34.211.126.51101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.211.126.51:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: vv2bZwyalhUnBvbUy3H2Cw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: oeLlkpJv2q03y233WfILBLtFJqg=
key-logger-free.com/
69.164.210.206301 Moved Permanently 0 B IP 69.164.210.206:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: wfvt_343609991=63de1b8caaef9
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 08:47:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.5.38
Set-Cookie: wfvt_343609991=63de1b8d8f274; expires=Sat, 04-Feb-2023 09:17:09 GMT; Max-Age=1800; path=/; httponly
Expires: Sat, 04 Feb 2023 09:47:09 GMT
Cache-Control: max-age=3600
Location: http://www.key-logger-free.com/
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2791
Expires: Sat, 04 Feb 2023 09:33:41 GMT
Date: Sat, 04 Feb 2023 08:47:10 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2791
Expires: Sat, 04 Feb 2023 09:33:41 GMT
Date: Sat, 04 Feb 2023 08:47:10 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2791
Expires: Sat, 04 Feb 2023 09:33:41 GMT
Date: Sat, 04 Feb 2023 08:47:10 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2791
Expires: Sat, 04 Feb 2023 09:33:41 GMT
Date: Sat, 04 Feb 2023 08:47:10 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F10640252-429d-4110-bf18-1908ac233402.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F10640252-429d-4110-bf18-1908ac233402.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 392b61306c346508d3ac4a2f28218f9c
d2de32b52e0d3f4fc6acaf687b3521294b01dc03
018712a4d6734b84ac1777124f97dae4d93b1e5b297a5dcfe0955b52710b8a35
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F10640252-429d-4110-bf18-1908ac233402.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10253
x-amzn-requestid: a90cb6b3-8a72-4b4b-b4f5-6dafc8c6752a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD7GGv5IAMFu8A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8046-3ca59e7c52800a4e44bda8fd;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: G8F3Fflod6HB4QFtjpD09xzi-2LKPw_DBJT0PKYKU3bs3pvOwO_LRw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:10:32 GMT
age: 38198
etag: "d2de32b52e0d3f4fc6acaf687b3521294b01dc03"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa139f02-bb4d-4058-8a17-82e241e61bf2.jpeg
34.120.237.76200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa139f02-bb4d-4058-8a17-82e241e61bf2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 75b9c67fbf2d207afec78eb14b95d7ec
c0b7e9e9ca9ee71761489e738a3a308ff0b6e5c8
42ddfef2fc1e0200a1ff3d615fd6da42fd8bdea4551344580c13af07092d401f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa139f02-bb4d-4058-8a17-82e241e61bf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5917
x-amzn-requestid: 095185b4-b608-4ac8-9041-6e5fcf9033d9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyEW_EA4IAMFxVw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd80f9-1d780a2a58fcc30613bdfdab;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:47:37 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -4TwLeMENj7WdI_QQWKgwxTj9MldN5z7qmo7_OX_eXIVba9zjDEoaA==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:17:42 GMT
age: 37768
etag: "c0b7e9e9ca9ee71761489e738a3a308ff0b6e5c8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe387e59d-188b-44a0-b94c-033d7d635117.jpeg
34.120.237.76200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe387e59d-188b-44a0-b94c-033d7d635117.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 45c6a062f8637e689819f505b019dc0e
61665688f1039c4fad848853a68e28d057718ad1
c9b14113eba535a2e1a6cbbf121a818ad0204fc6dd7b2ea9b592830ab927d6d1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe387e59d-188b-44a0-b94c-033d7d635117.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6718
x-amzn-requestid: 662f889b-4c25-4dec-85d4-ea9dfa8b8974
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD7DE5boAMF_cA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8046-33ca99fc7b6eac8d5486d6c1;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WvNs1hPPXHBJs5rTIBqH3DbqLLX6si9jHF46KrsuT9BFB2N2V3zeUA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:06:20 GMT
age: 38450
etag: "61665688f1039c4fad848853a68e28d057718ad1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e366b32074025aaf60bbae8bdb08d330
a52c2883bad98fa20333aa639a5dd3a5bf544c8e
9d661c26effaec9efee16833f6459d6ecbe4f77b822c9c46e2a6433bda816e5c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11565
x-amzn-requestid: 87a84ffd-1176-4656-aac4-e98f38ec2cd9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fboIrFGboAMFyyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d48704-162ed8114aa1809204500548;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 02:23:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lsQxPtozrh2Ty1T-3d-1crDfi8HgVKRafOXb1UFl033bCx3kAzTS7w==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 21:48:04 GMT
age: 39546
etag: "a52c2883bad98fa20333aa639a5dd3a5bf544c8e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg
34.120.237.76200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6661b7263315f5eb3cd2465f671e1fcd
b7b5831c6b3ccc41d7a980b6088adc10ff8785f1
eb25507950d81db4b54a1af7fadaceee1bcff780eb28b6a04dbfb3886785f5b7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8527
x-amzn-requestid: f95a2821-ae89-4ea9-93b2-43e570285df3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyEC3FyboAMFe0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8078-7e2177f11d5715d4092cad2c;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:45:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: dcFgY5x3Ef0J__7wGn3llTjZ9as5nX1H4HErIT3VlKfeQaQTjymW2g==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:10:33 GMT
etag: "b7b5831c6b3ccc41d7a980b6088adc10ff8785f1"
content-type: image/jpeg
age: 38197
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18e70636-fb7d-4a6e-9742-a039e4d7253d.jpeg
34.120.237.76200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18e70636-fb7d-4a6e-9742-a039e4d7253d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 41580a501cc07c328e6ab6b167a110dc
a4dfa0f479b5f9a036b75b2eea6dffabd3a3486e
0fa45161e563101b3f1293f951a3edf84c88c9f3b29bed9b54f952ca325bf21d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18e70636-fb7d-4a6e-9742-a039e4d7253d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7101
x-amzn-requestid: 479d8004-430a-45b9-99fa-11cbcc605a7c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD7EHxqoAMFaug=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8046-25ac3c54427748bc191fd1ba;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 6h25M_XSVuTCF-9FkTtwujV0X-0-M9fvw4ouOBFmSnMWeApCSHmBsA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:13:30 GMT
age: 38020
etag: "a4dfa0f479b5f9a036b75b2eea6dffabd3a3486e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.key-logger-free.com/
69.164.210.206200 OK 14 kB IP 69.164.210.206:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1787), with CRLF, LF line terminators
Hash 6b4be17c86f58636e6c405eac6fb3508
6d711849306ff246354a0df0c017804f75bb7e16
bc1c13bdf7c4b4248ae5139ccf250be314e3b3f2b26f6d85af2525dcba2196d9
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:11 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.5.38
Set-Cookie: wfvt_343609991=63de1b8f2a813; expires=Sat, 04-Feb-2023 09:17:11 GMT; Max-Age=1800; path=/; httponly
Link: <http://www.key-logger-free.com/wp-json/>; rel="https://api.w.org/", <http://www.key-logger-free.com/>; rel=shortlink
Content-Encoding: gzip
cdn.jsdelivr.net/wp/wp-slimstat/tags/4.7.3.1/wp-slimstat.min.js
104.16.85.20301 Moved Permanently 0 B URL HTTP/1.1 cdn.jsdelivr.net/wp/wp-slimstat/tags/4.7.3.1/wp-slimstat.min.js
IP 104.16.85.20:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp/wp-slimstat/tags/4.7.3.1/wp-slimstat.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
HTTP/1.1 301 Moved Permanently
Date: Sat, 04 Feb 2023 08:47:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 04 Feb 2023 09:47:11 GMT
Location: https://cdn.jsdelivr.net/wp/wp-slimstat/tags/4.7.3.1/wp-slimstat.min.js
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nxp%2Bxgj1c%2Fyo4C%2FI4rAl2yM5tipTuWXiZ7DKhXRC0%2FtYqP7e6shRf7oDiwA1b9VuGPe3TQAKAbYTMcNJyU47Gvr7f0tRALGfQH25hOwkwgLR7p8CMTdZZuIjDRE5A2jpzEQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794223e28e5cfac4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
assets.pinterest.com/js/pinit.js
151.101.84.84200 OK 290 B URL HTTP/1.1 assets.pinterest.com/js/pinit.js
IP 151.101.84.84:0
File type ASCII text, with very long lines (361), with no line terminators
Hash 82bfd941d2c9b3b9e0650a27c9d11737
2eb742a101e79067c9df4d15b518bde85e8eeb2e
3f6e9b85ad3ee165ec6c9587d98d2a43588f7ba0f63d31ad019a0d4cbfd3f3d1
GET /js/pinit.js HTTP/1.1
Host: assets.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 290
ETag: "82bfd941d2c9b3b9e0650a27c9d11737"
Content-Encoding: gzip
Content-Type: application/javascript; charset=utf-8
X-CDN: fastly
alt-svc: h3=":443";ma=600,h3-29=":443";ma=600,h3-27=":443";ma=600
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 86400
Access-Control-Expose-Headers: X-CDN
Vary: Accept-Encoding, Origin
Cache-Control: max-age=300
date: Sat, 04 Feb 2023 08:47:11 GMT
www.key-logger-free.com/wp-includes/css/dashicons.min.css?ver=4.9.3
69.164.210.206200 OK 30 kB URL HTTP/1.1 www.key-logger-free.com/wp-includes/css/dashicons.min.css?ver=4.9.3
IP 69.164.210.206:0
File type ASCII text, with very long lines (46325)
Hash bf98be27695d0a49c876eb4c35afc797
3f1e7e39ef9aec2d5f6e8ff163839524a2b4a95e
3840fe8c5eb2073f48d0fae3bb7b12e81c9b9ca3dcd26ef19e00527e721b0d1f
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/css/dashicons.min.css?ver=4.9.3 HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:11 GMT
Content-Type: text/css
Last-Modified: Mon, 20 Nov 2017 09:48:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5a12a4ea-b518"
Expires: Sat, 04 Feb 2023 20:47:11 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.key-logger-free.com/wp-content/plugins/ultimate-social-media-icons/css/sfsi-style.css?ver=4.9.3
69.164.210.206200 OK 11 kB URL HTTP/1.1 www.key-logger-free.com/wp-content/plugins/ultimate-social-media-icons/css/sfsi-style.css?ver=4.9.3
IP 69.164.210.206:0
File type ASCII text, with very long lines (331), with CRLF line terminators
Hash c6ac1df7af2b6fcdd66c4061735a8d64
5777dd53eb450027a50848beb1c637ef33301fc7
0053da3a97648c4bf1288cb0b1c92bfdb5953c6156838df8a01fa88ddcd9d27d
GET /wp-content/plugins/ultimate-social-media-icons/css/sfsi-style.css?ver=4.9.3 HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:11 GMT
Content-Type: text/css
Last-Modified: Mon, 06 Nov 2017 12:06:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5a005034-c4d0"
Expires: Sat, 04 Feb 2023 20:47:11 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.key-logger-free.com/wp-content/plugins/menu-icons/css/extra.min.css?ver=0.10.2
69.164.210.206200 OK 815 B URL HTTP/1.1 www.key-logger-free.com/wp-content/plugins/menu-icons/css/extra.min.css?ver=0.10.2
IP 69.164.210.206:0
File type ASCII text, with very long lines (815), with no line terminators
Hash 89a1d01bd834e4af70404b69500a72b6
bef54b154fbd469effb0e9c998790ed45b24b4bc
99fabc4a8687714d2abdfcf07e106d5249e9e54eb00f650811a01bb40e2b6a19
GET /wp-content/plugins/menu-icons/css/extra.min.css?ver=0.10.2 HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:11 GMT
Content-Type: text/css
Content-Length: 815
Last-Modified: Mon, 18 Sep 2017 02:54:19 GMT
Connection: keep-alive
ETag: "59bf355b-32f"
Expires: Sat, 04 Feb 2023 20:47:11 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
www.key-logger-free.com/wp-content/themes/keylogger/assets/css/animate.min.css?ver=1.3.6
69.164.210.206200 OK 4.8 kB URL HTTP/1.1 www.key-logger-free.com/wp-content/themes/keylogger/assets/css/animate.min.css?ver=1.3.6
IP 69.164.210.206:0
File type ASCII text, with very long lines (55061)
Hash db35c68004deeeaeeca50aad54e1c197
ae6c39c6062f3f0449ade123e006bf7c9c0a962e
ccdc76dcd07af6527d8642dffc24805ac3162fcf87c62d0659e154048095505e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/keylogger/assets/css/animate.min.css?ver=1.3.6 HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:11 GMT
Content-Type: text/css
Last-Modified: Fri, 15 Sep 2017 09:51:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"59bba2ad-d7b6"
Expires: Sat, 04 Feb 2023 20:47:11 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash c181c51a9326d56e60915a792c306c2c
de1cc0ce1384905e65a9fa9575743091d785e528
b74bc74e2920124b3288a980f9a7b59e3450ba63f2333027440cd6ebbdfdbf8d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 08:47:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.key-logger-free.com/wp-content/themes/keylogger/assets/css/font-awesome.min.css?ver=4.7.0
69.164.210.206200 OK 7.8 kB URL HTTP/1.1 www.key-logger-free.com/wp-content/themes/keylogger/assets/css/font-awesome.min.css?ver=4.7.0
IP 69.164.210.206:0
File type ASCII text, with very long lines (30837)
Hash 72e5580f63813b931f26cc394f03dafe
a142f0f90b34d3119e7a20d45faff1aa32864bf2
5b2d00a1e9b566eec47655ce8c8981d87493da936a57a3857a35bb526c5f75e9
GET /wp-content/themes/keylogger/assets/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:11 GMT
Content-Type: text/css
Last-Modified: Fri, 15 Sep 2017 09:51:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"59bba2ad-7918"
Expires: Sat, 04 Feb 2023 20:47:11 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash b71b94b3682f35ef38e5d6af66035c3f
b3754599fe38b540c9364e2ecf9fc6b43271105a
992222e9324198de91c53dab70825a2852268f2833c2f5c0a02a4994c073a1a6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3172
Cache-Control: max-age=120983
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 08:47:11 GMT
Etag: "63dd44c2-118"
Expires: Sun, 05 Feb 2023 18:23:34 GMT
Last-Modified: Fri, 03 Feb 2023 17:30:42 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 280
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash c181c51a9326d56e60915a792c306c2c
de1cc0ce1384905e65a9fa9575743091d785e528
b74bc74e2920124b3288a980f9a7b59e3450ba63f2333027440cd6ebbdfdbf8d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 08:47:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.key-logger-free.com/wp-content/themes/keylogger/style.css?ver=4.9.3
69.164.210.206200 OK 17 kB URL HTTP/1.1 www.key-logger-free.com/wp-content/themes/keylogger/style.css?ver=4.9.3
IP 69.164.210.206:0
File type ASCII text, with very long lines (443)
Hash 75cf910dde105108cc9971d03481fd8e
e0be691712de835c744bcfcbacbb8c0dbc3e4c5b
aae68bdd0450109ce5c608051b37f0fb3e3ecb7ea09bdaec5ffaa20e3f5cd038
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/keylogger/style.css?ver=4.9.3 HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:11 GMT
Content-Type: text/css
Last-Modified: Fri, 15 Sep 2017 09:51:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"59bba2ad-125e8"
Expires: Sat, 04 Feb 2023 20:47:11 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.key-logger-free.com/wp-content/themes/keylogger/assets/css/lightgallery.css?ver=4.9.3
69.164.210.206200 OK 4.8 kB URL HTTP/1.1 www.key-logger-free.com/wp-content/themes/keylogger/assets/css/lightgallery.css?ver=4.9.3
IP 69.164.210.206:0
Hash 215c9965113b91edad9e116127010aaf
cc038da0eb5c8a5a44d481bdbaffc42e49a7ea31
13e670f0ebfa5746642ba33811c19c3f77bb3c75e117c10690baa5ffb483249b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/keylogger/assets/css/lightgallery.css?ver=4.9.3 HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:11 GMT
Content-Type: text/css
Last-Modified: Fri, 15 Sep 2017 09:51:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"59bba2ad-5dc1"
Expires: Sat, 04 Feb 2023 20:47:11 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.key-logger-free.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
69.164.210.206200 OK 4.2 kB URL HTTP/1.1 www.key-logger-free.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
IP 69.164.210.206:0
File type ASCII text, with very long lines (9959)
Hash a7ab79114859d7de68a4c246cdce2bd1
34e64d880e0663b3aabd9f40dff3d77cecc5231d
e81bee38d5e189b11c8bb332acafc1f8aa765c1aacbb928828f4039edec4e563
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:11 GMT
Content-Type: application/javascript
Last-Modified: Thu, 19 May 2016 22:11:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"573e3a10-2748"
Expires: Sat, 04 Feb 2023 20:47:11 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.key-logger-free.com/wp-includes/js/jquery/ui/core.min.js?ver=1.11.4
69.164.210.206200 OK 1.9 kB URL HTTP/1.1 www.key-logger-free.com/wp-includes/js/jquery/ui/core.min.js?ver=1.11.4
IP 69.164.210.206:0
File type ASCII text, with very long lines (3775)
Hash 7fd1aec7e1e52e27c785fd70efe8c388
ef0cd82d9b9aa8504bd539ddfc40c8d8cfc33de5
f2784b7a35c30f2cf611ec65409dd4e0ff230d6bfedf2b31125dd3b12f9027df
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.11.4 HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:11 GMT
Content-Type: application/javascript
Last-Modified: Wed, 02 Nov 2016 21:40:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"581a5d52-fa0"
Expires: Sat, 04 Feb 2023 20:47:11 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.key-logger-free.com/wp-content/themes/keylogger/assets/css/bootstrap.min.css?ver=1.3.6
69.164.210.206200 OK 21 kB URL HTTP/1.1 www.key-logger-free.com/wp-content/themes/keylogger/assets/css/bootstrap.min.css?ver=1.3.6
IP 69.164.210.206:0
File type ASCII text, with very long lines (65363)
Hash eac341077d85a27d7eb0e7b84e52047d
e307d7b01f287ad8d429f9b3293db5ede8f595a3
fce6f379134a5e779e70c404001a93010faf38ef722405c259fc90b704077281
GET /wp-content/themes/keylogger/assets/css/bootstrap.min.css?ver=1.3.6 HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:11 GMT
Content-Type: text/css
Last-Modified: Fri, 15 Sep 2017 09:51:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"59bba2ad-1751e"
Expires: Sat, 04 Feb 2023 20:47:11 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.key-logger-free.com/wp-content/plugins/ultimate-social-media-icons/js/shuffle/modernizr.custom.min.js?ver=4.9.3
69.164.210.206200 OK 1.5 kB URL HTTP/1.1 www.key-logger-free.com/wp-content/plugins/ultimate-social-media-icons/js/shuffle/modernizr.custom.min.js?ver=4.9.3
IP 69.164.210.206:0
File type HTML document, ASCII text, with very long lines (2861)
Hash f5dcaa666694793fe1081b089c88c22b
e75d92e119c71adffd656aef59e13de1b8dbec95
637f6f3169c364cdcf196fab660144f6acf1d3264ebd00fb49fe3b3ed84bc0e4
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-social-media-icons/js/shuffle/modernizr.custom.min.js?ver=4.9.3 HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:12 GMT
Content-Type: application/javascript
Last-Modified: Mon, 06 Nov 2017 12:06:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5a005034-c02"
Expires: Sat, 04 Feb 2023 20:47:12 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.key-logger-free.com/wp-content/plugins/ultimate-social-media-icons/js/shuffle/jquery.shuffle.min.js?ver=4.9.3
69.164.210.206200 OK 4.7 kB URL HTTP/1.1 www.key-logger-free.com/wp-content/plugins/ultimate-social-media-icons/js/shuffle/jquery.shuffle.min.js?ver=4.9.3
IP 69.164.210.206:0
File type ASCII text, with very long lines (12056), with no line terminators
Hash 72c19d4cf78c788bc2b06af71b634566
934aef7d1bed235afe2e3fbdccbe080eb3c9ea58
59acf791a79edc2ad8d8867ed40b837b254319158b3e5a2a40251bb876c376ec
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-social-media-icons/js/shuffle/jquery.shuffle.min.js?ver=4.9.3 HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:12 GMT
Content-Type: application/javascript
Last-Modified: Mon, 06 Nov 2017 12:06:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5a005034-2f18"
Expires: Sat, 04 Feb 2023 20:47:12 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.key-logger-free.com/wp-content/plugins/ultimate-social-media-icons/js/shuffle/random-shuffle-min.js?ver=4.9.3
69.164.210.206200 OK 719 B URL HTTP/1.1 www.key-logger-free.com/wp-content/plugins/ultimate-social-media-icons/js/shuffle/random-shuffle-min.js?ver=4.9.3
IP 69.164.210.206:0
File type ASCII text, with very long lines (1472), with no line terminators
Hash 5532380e45834160a2e3b897b571cedd
25d3fd5bb7de5082ac2079a3d62c68cf26eb5b74
23e79a5d17806f3696e74fc63e43c09ae8054f57dbe90993726031fc5a0619d1
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/ultimate-social-media-icons/js/shuffle/random-shuffle-min.js?ver=4.9.3 HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:12 GMT
Content-Type: application/javascript
Last-Modified: Mon, 06 Nov 2017 12:06:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5a005034-5c0"
Expires: Sat, 04 Feb 2023 20:47:12 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.key-logger-free.com/wp-includes/js/jquery/jquery.js?ver=1.12.4
69.164.210.206200 OK 38 kB URL HTTP/1.1 www.key-logger-free.com/wp-includes/js/jquery/jquery.js?ver=1.12.4
IP 69.164.210.206:0
File type ASCII text, with very long lines (32077)
Hash 557c729e5dbfa3fa6853e62762302b39
05433de0d7e86edf8ae1262fb96da01fa5e3f1e2
578722ce71855eff9959e040d2da996e6e0f424c2e14f3e18bb7c886f8d7b36a
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:11 GMT
Content-Type: application/javascript
Last-Modified: Mon, 23 May 2016 01:00:30 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5742562e-17ba0"
Expires: Sat, 04 Feb 2023 20:47:11 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.key-logger-free.com/wp-content/plugins/ultimate-social-media-icons/js/custom.js?ver=4.9.3
69.164.210.206200 OK 4.1 kB URL HTTP/1.1 www.key-logger-free.com/wp-content/plugins/ultimate-social-media-icons/js/custom.js?ver=4.9.3
IP 69.164.210.206:0
File type ASCII text, with CRLF line terminators
Hash 4c9b9659f4f62abac2ac4cdaf24ae8bc
6c19d77fa2f294175a1b38c4e322c4ad2e3c1c3f
e6495811feeb640fe152e0f52ee591193a0b89c2b54115207a4d812ca59d7e29
GET /wp-content/plugins/ultimate-social-media-icons/js/custom.js?ver=4.9.3 HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:12 GMT
Content-Type: application/javascript
Last-Modified: Mon, 06 Nov 2017 12:06:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5a005034-4542"
Expires: Sat, 04 Feb 2023 20:47:12 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.key-logger-free.com/wp-content/themes/keylogger/assets/js/plugins.js?ver=1.3.6
69.164.210.206200 OK 29 kB URL HTTP/1.1 www.key-logger-free.com/wp-content/themes/keylogger/assets/js/plugins.js?ver=1.3.6
IP 69.164.210.206:0
File type HTML document, Unicode text, UTF-8 text, with very long lines (23217)
Hash c17a068f614f3ce26ae1392d43089447
2f42e56f22ffcd3b5c909febf1657913f7ed3095
e53d7f37aef319dface3a7a0ecfc1517b584dc19324f30cda5db477f45583cbd
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/keylogger/assets/js/plugins.js?ver=1.3.6 HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:12 GMT
Content-Type: application/javascript
Last-Modified: Fri, 15 Sep 2017 09:51:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"59bba2ad-161d1"
Expires: Sat, 04 Feb 2023 20:47:12 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
s7.addthis.com/js/300/addthis_widget.js
23.38.200.123200 OK 116 kB URL HTTP/2 s7.addthis.com/js/300/addthis_widget.js
IP 23.38.200.123:0
File type ASCII text, with very long lines (54602)
Size 116 kB (116423 bytes)
Hash d5b9b7a3accd3b7b7de639c072ae3ee2
9583b5c046d78af5c6379d844219f828aa2222d0
648dad6716bb917c7d981e7772fca499d9583717fd83ffef47b0534cb9132b60
GET /js/300/addthis_widget.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-5834c"
cache-control: public, max-age=600
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 116423
date: Sat, 04 Feb 2023 08:47:12 GMT
vary: Accept-Encoding
x-distribution: 99
x-host: s7.addthis.com
X-Firefox-Spdy: h2
www.key-logger-free.com/wp-content/themes/keylogger/assets/js/bootstrap.min.js?ver=1.3.6
69.164.210.206200 OK 14 kB URL HTTP/1.1 www.key-logger-free.com/wp-content/themes/keylogger/assets/js/bootstrap.min.js?ver=1.3.6
IP 69.164.210.206:0
File type ASCII text, with very long lines (32001)
Hash e25217227f9349e9571c53cf456fd882
042f094be713ec3734a34961136a7601cdc00eb3
5bcee5894f2abe2e859c170ee69c6ce58e5ea885fb60ece9cc379b14bf2fd5ec
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/keylogger/assets/js/bootstrap.min.js?ver=1.3.6 HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:12 GMT
Content-Type: application/javascript
Last-Modified: Fri, 15 Sep 2017 09:51:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"59bba2ad-af1a"
Expires: Sat, 04 Feb 2023 20:47:12 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.key-logger-free.com/wp-content/themes/keylogger/assets/js/theme.js?ver=1.3.6
69.164.210.206200 OK 6.6 kB URL HTTP/1.1 www.key-logger-free.com/wp-content/themes/keylogger/assets/js/theme.js?ver=1.3.6
IP 69.164.210.206:0
Hash 67e00d8ae098fee55aa1e7b3a22e1e4a
c712aa8779e40bf52a768ed8ab50eb7b9d49f897
5ad4deea8ad04854296f356f71cba03488e26ab05fbad3aac25e1ee279d026e0
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/keylogger/assets/js/theme.js?ver=1.3.6 HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:12 GMT
Content-Type: application/javascript
Last-Modified: Fri, 15 Sep 2017 09:51:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"59bba2ad-5cb2"
Expires: Sat, 04 Feb 2023 20:47:12 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.key-logger-free.com/wp-includes/js/wp-embed.min.js?ver=4.9.3
69.164.210.206200 OK 763 B URL HTTP/1.1 www.key-logger-free.com/wp-includes/js/wp-embed.min.js?ver=4.9.3
IP 69.164.210.206:0
File type ASCII text, with very long lines (1398), with no line terminators
Hash 25e57d2bde9b248aaed5da0e41ae0889
5167303a3851bf12da00ba758bb7c1c5576605d1
53aa42f6b1c51582c7c62d45d2cd20e5a39f841a3fae042c716a4e24df3e8b86
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/wp-embed.min.js?ver=4.9.3 HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:12 GMT
Content-Type: application/javascript
Last-Modified: Wed, 23 Nov 2016 05:38:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"58352b5a-576"
Expires: Sat, 04 Feb 2023 20:47:12 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
www.key-logger-free.com/wp-includes/js/wp-emoji-release.min.js?ver=4.9.3
69.164.210.206200 OK 4.6 kB URL HTTP/1.1 www.key-logger-free.com/wp-includes/js/wp-emoji-release.min.js?ver=4.9.3
IP 69.164.210.206:0
File type ASCII text, with very long lines (8813)
Hash 929532360ac1aeebee8be16bf513c1c1
24137101c156796335676ecabd910bde90ed5d9e
4de07591e24f77382665ad55b458576df3153c29ad87c7808a4bb12fab498f5a
GET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.3 HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:12 GMT
Content-Type: application/javascript
Last-Modified: Mon, 05 Feb 2018 21:03:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5a78c69a-2dc9"
Expires: Sat, 04 Feb 2023 20:47:12 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
key-logger-free.com/wp-content/uploads/download_reviews2.jpg
69.164.210.206200 OK 4.1 kB URL HTTP/1.1 key-logger-free.com/wp-content/uploads/download_reviews2.jpg
IP 69.164.210.206:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 205x37, components 3\012- data
Hash 4d8ec8ac5b930b2346d06cc01df6420f
4833640e791bd474a91f9c815c2c7d9e6899070c
731871d8542b68de88f7ceaf755d091e9d230b74ff1cafe45de63f54c8573ac8
GET /wp-content/uploads/download_reviews2.jpg HTTP/1.1
Host: key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8d8f274
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:12 GMT
Content-Type: image/jpeg
Content-Length: 4067
Last-Modified: Wed, 27 Sep 2017 18:08:43 GMT
Connection: keep-alive
ETag: "59cbe92b-fe3"
Expires: Mon, 06 Mar 2023 08:47:12 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash b71b94b3682f35ef38e5d6af66035c3f
b3754599fe38b540c9364e2ecf9fc6b43271105a
992222e9324198de91c53dab70825a2852268f2833c2f5c0a02a4994c073a1a6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4587
Cache-Control: max-age=122397
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 08:47:12 GMT
Etag: "63dd44c2-118"
Expires: Sun, 05 Feb 2023 18:47:09 GMT
Last-Modified: Fri, 03 Feb 2023 17:30:42 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 280
www.key-logger-free.com/wp-content/uploads/logo.png
69.164.210.206200 OK 6.8 kB URL HTTP/1.1 www.key-logger-free.com/wp-content/uploads/logo.png
IP 69.164.210.206:0
File type PNG image data, 336 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash cf04aa5db327408d4b838667acf62491
fc89fd73117abd0bda5369578d69a7e18eedd59b
8c1c238fde4aa9d2bdbf97c671f47dc90a0c32f09f6390505c2396c8c059e863
GET /wp-content/uploads/logo.png HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:12 GMT
Content-Type: image/png
Content-Length: 6803
Last-Modified: Tue, 19 Sep 2017 03:30:50 GMT
Connection: keep-alive
ETag: "59c08f6a-1a93"
Expires: Mon, 06 Mar 2023 08:47:12 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
www.key-logger-free.com/wp-content/uploads/features1.png
69.164.210.206200 OK 17 kB URL HTTP/1.1 www.key-logger-free.com/wp-content/uploads/features1.png
IP 69.164.210.206:0
File type PNG image data, 340 x 340, 8-bit/color RGBA, non-interlaced\012- data
Hash 975565d2a8ce5b08fd8d1de025aeffeb
9dd4386ee3c0feeb3e21d66b56bf3751bc5ce1ce
ffb2ab9250c0f66639913311add627fe8739e11fc669662b9bfdfbddca12e487
GET /wp-content/uploads/features1.png HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:12 GMT
Content-Type: image/png
Content-Length: 16609
Last-Modified: Tue, 19 Sep 2017 03:31:21 GMT
Connection: keep-alive
ETag: "59c08f89-40e1"
Expires: Mon, 06 Mar 2023 08:47:12 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 23287a0337047631e479bb3cbe8b0fcd
15ec24f5ee1990ee456a6fd3bbcbdbe27bf62c99
da05b381eec3589d2689bc5fab2b89eb5d65f9a5652f9254f3353e30a4540034
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 08:47:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.key-logger-free.com/wp-content/uploads/661-300x150.jpg
69.164.210.206200 OK 9.0 kB URL HTTP/1.1 www.key-logger-free.com/wp-content/uploads/661-300x150.jpg
IP 69.164.210.206:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 300x150, components 3\012- data
Hash 0fb5945dc7c9264a44acb0677734351a
781ca97a6ae7fcb79d77ee1e86e7879985bb1f7e
4196baca4707e680ad456528bb508be44d25f0ca0cd3493e44a440f2589f4b98
GET /wp-content/uploads/661-300x150.jpg HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:12 GMT
Content-Type: image/jpeg
Content-Length: 8960
Last-Modified: Mon, 18 Dec 2017 06:48:02 GMT
Connection: keep-alive
ETag: "5a3764a2-2300"
Expires: Mon, 06 Mar 2023 08:47:12 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 23287a0337047631e479bb3cbe8b0fcd
15ec24f5ee1990ee456a6fd3bbcbdbe27bf62c99
da05b381eec3589d2689bc5fab2b89eb5d65f9a5652f9254f3353e30a4540034
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 08:47:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 23287a0337047631e479bb3cbe8b0fcd
15ec24f5ee1990ee456a6fd3bbcbdbe27bf62c99
da05b381eec3589d2689bc5fab2b89eb5d65f9a5652f9254f3353e30a4540034
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 08:47:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 23287a0337047631e479bb3cbe8b0fcd
15ec24f5ee1990ee456a6fd3bbcbdbe27bf62c99
da05b381eec3589d2689bc5fab2b89eb5d65f9a5652f9254f3353e30a4540034
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 08:47:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 23287a0337047631e479bb3cbe8b0fcd
15ec24f5ee1990ee456a6fd3bbcbdbe27bf62c99
da05b381eec3589d2689bc5fab2b89eb5d65f9a5652f9254f3353e30a4540034
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 08:47:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.74.67200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 142.250.74.67:0
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.key-logger-free.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Jan 2023 18:52:41 GMT
expires: Tue, 30 Jan 2024 18:52:41 GMT
cache-control: public, max-age=31536000
age: 395671
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.key-logger-free.com/wp-content/uploads/001-300x150.jpg
69.164.210.206200 OK 9.9 kB URL HTTP/1.1 www.key-logger-free.com/wp-content/uploads/001-300x150.jpg
IP 69.164.210.206:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 300x150, components 3\012- data
Hash b8394b074b93b5ca6dc00c5a0905a7b0
f57a188b4a445652549345de471df251b8bcb000
b26d1598be306d0db1b43a631204508e8c1a71e3c368fca9afae80331a7ad8ca
GET /wp-content/uploads/001-300x150.jpg HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:12 GMT
Content-Type: image/jpeg
Content-Length: 9853
Last-Modified: Mon, 20 Nov 2017 09:21:33 GMT
Connection: keep-alive
ETag: "5a129e9d-267d"
Expires: Mon, 06 Mar 2023 08:47:12 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
142.250.74.67200 OK 46 kB URL HTTP/2 fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
IP 142.250.74.67:0
File type Web Open Font Format (Version 2), TrueType, length 46524, version 1.0\012- data
Hash c1fd378f54921c75e4ae1821e7b8fff6
2ce96e97783b2f154d07f4464ca6f8eb2469f2c1
405ceee1c2f5c31f1cb94ebc63d49a43fddd1471c2c7401a01c7c11bb1d93826
GET /s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.key-logger-free.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46524
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 01 Feb 2023 03:37:24 GMT
expires: Thu, 01 Feb 2024 03:37:24 GMT
cache-control: public, max-age=31536000
age: 277788
last-modified: Mon, 18 Jul 2022 19:58:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
142.250.74.67200 OK 48 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
IP 142.250.74.67:0
File type Web Open Font Format (Version 2), TrueType, length 47952, version 1.0\012- data
Hash 17b406b7b8caa297435fa358e194f5a1
e2132f0e97781af56fa966c0fabb49132f2af203
84161c46238fff2c6920ebc28f02cddd7b710cf3d1107853f540b084320f6afd
GET /s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.key-logger-free.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 47952
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 31 Jan 2023 09:41:19 GMT
expires: Wed, 31 Jan 2024 09:41:19 GMT
cache-control: public, max-age=31536000
age: 342353
last-modified: Mon, 15 Aug 2022 18:22:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 23287a0337047631e479bb3cbe8b0fcd
15ec24f5ee1990ee456a6fd3bbcbdbe27bf62c99
da05b381eec3589d2689bc5fab2b89eb5d65f9a5652f9254f3353e30a4540034
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 08:47:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.key-logger-free.com/wp-content/uploads/2017/09/freekeylogger-large-1-480x300.png
69.164.210.206200 OK 164 kB URL HTTP/1.1 www.key-logger-free.com/wp-content/uploads/2017/09/freekeylogger-large-1-480x300.png
IP 69.164.210.206:0
File type PNG image data, 480 x 300, 8-bit/color RGBA, non-interlaced\012- data
Size 164 kB (163711 bytes)
Hash ede10299c7c0028d98096b083fd256f6
bdd3e4c25ac617a1eac709a4ce27808c2598bc46
7cc08711f74518468e32a7999131b14ab6dff061b8213e5bb7380b0542fb6357
GET /wp-content/uploads/2017/09/freekeylogger-large-1-480x300.png HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:12 GMT
Content-Type: image/png
Content-Length: 163711
Last-Modified: Mon, 18 Sep 2017 01:57:30 GMT
Connection: keep-alive
ETag: "59bf280a-27f7f"
Expires: Mon, 06 Mar 2023 08:47:12 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
www.key-logger-free.com/wp-content/uploads/991-300x150.jpg
69.164.210.206200 OK 9.7 kB URL HTTP/1.1 www.key-logger-free.com/wp-content/uploads/991-300x150.jpg
IP 69.164.210.206:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 300x150, components 3\012- data
Hash a73a51d8ca97a9f5615b12f3e8336ba1
aa1aecb30573082e5b89276ae6452749575216a1
e1741e0dfd8845acfe9372e7791c286d56268c8075cc3803a247154fd7efcadf
GET /wp-content/uploads/991-300x150.jpg HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:12 GMT
Content-Type: image/jpeg
Content-Length: 9716
Last-Modified: Mon, 20 Nov 2017 09:05:05 GMT
Connection: keep-alive
ETag: "5a129ac1-25f4"
Expires: Mon, 06 Mar 2023 08:47:12 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
23.38.200.123200 OK 26 kB URL HTTP/2 s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
IP 23.38.200.123:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (63757)
Hash 707317ccaabe08d32d1bd781754e6871
bb82dcd3e044c960e0861c2ce878f5504e628f78
d0a164ece41c61aec26517fb645646f5ba91f72ea5448eff1ee6c393b7c53051
GET /static/sh.f48a1a04fe8dbf021b4cda1d.html HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: text/html
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-11adc"
timing-allow-origin: *
cache-control: public, max-age=86313600
p3p: CP="NON ADM OUR DEV IND COM STA"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 26421
date: Sat, 04 Feb 2023 08:47:12 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
www.key-logger-free.com/wp-content/uploads/Parental-Control-300x150.jpg
69.164.210.206200 OK 12 kB URL HTTP/1.1 www.key-logger-free.com/wp-content/uploads/Parental-Control-300x150.jpg
IP 69.164.210.206:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 300x150, components 3\012- data
Hash 3665e28d83daa307998228e9ea7061e3
5ebebfbc54d3a7824c0a677bfd415d2f0d4c29b0
d88cdd6e64151e1f7b4fcdfaf98dd06e6cdc9fca0cad893d7a69906a46c63fa8
GET /wp-content/uploads/Parental-Control-300x150.jpg HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:12 GMT
Content-Type: image/jpeg
Content-Length: 11738
Last-Modified: Thu, 28 Sep 2017 01:44:57 GMT
Connection: keep-alive
ETag: "59cc5419-2dda"
Expires: Mon, 06 Mar 2023 08:47:12 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
www.key-logger-free.com/wp-content/themes/keylogger/assets/fonts/fontawesome-webfont.woff2?v=4.7.0
69.164.210.206200 OK 77 kB URL HTTP/1.1 www.key-logger-free.com/wp-content/themes/keylogger/assets/fonts/fontawesome-webfont.woff2?v=4.7.0
IP 69.164.210.206:0
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/keylogger/assets/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.key-logger-free.com/wp-content/themes/keylogger/assets/css/font-awesome.min.css?ver=4.7.0
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:12 GMT
Content-Type: application/octet-stream
Content-Length: 77160
Last-Modified: Fri, 15 Sep 2017 09:51:41 GMT
Connection: keep-alive
ETag: "59bba2ad-12d68"
Accept-Ranges: bytes
www.key-logger-free.com/wp-content/uploads/2017/09/keyloggerfree0101-300x150.png
69.164.210.206200 OK 41 kB URL HTTP/1.1 www.key-logger-free.com/wp-content/uploads/2017/09/keyloggerfree0101-300x150.png
IP 69.164.210.206:0
File type PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash f5a9aae216d101499d29799f84770503
91b0fbaab4c1e7f44fa56264a6376fffad1f3f6f
901ed76cd9c59e5d7993cbc27d1e8d6829ba03571d55ff4dfb43a63233a0feef
GET /wp-content/uploads/2017/09/keyloggerfree0101-300x150.png HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:12 GMT
Content-Type: image/png
Content-Length: 40598
Last-Modified: Mon, 18 Sep 2017 01:32:11 GMT
Connection: keep-alive
ETag: "59bf221b-9e96"
Expires: Mon, 06 Mar 2023 08:47:12 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
www.key-logger-free.com/wp-content/uploads/2017/09/keyloggerfree0103-300x150.png
69.164.210.206200 OK 45 kB URL HTTP/1.1 www.key-logger-free.com/wp-content/uploads/2017/09/keyloggerfree0103-300x150.png
IP 69.164.210.206:0
File type PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 2f1b2d4120459f59cc2fd3aa399fc740
d2f2b49cd3752d23c66dd7e53de159daf4927a3b
49e3b87cca829e159530e7370d18142e0559f9a3f8f22c467f34779b3c34be68
GET /wp-content/uploads/2017/09/keyloggerfree0103-300x150.png HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:12 GMT
Content-Type: image/png
Content-Length: 45204
Last-Modified: Mon, 18 Sep 2017 01:24:48 GMT
Connection: keep-alive
ETag: "59bf2060-b094"
Expires: Mon, 06 Mar 2023 08:47:12 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
www.free-auto-clicker.com/wp-content/uploads/bullet-checkmark.png
172.104.13.22200 OK 1.1 kB URL HTTP/1.1 www.free-auto-clicker.com/wp-content/uploads/bullet-checkmark.png
IP 172.104.13.22:0
File type PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced\012- data
Hash 7e27580a02cf63c32c3458149580c553
5bf8f687badc130f9b1754eee33660353c5e0cbf
f9c87aa6d596a511a72f7fce3ee1a2749959d5651cb42f582fa340a4c6d53e4c
GET /wp-content/uploads/bullet-checkmark.png HTTP/1.1
Host: www.free-auto-clicker.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:12 GMT
Content-Type: image/png
Content-Length: 1086
Last-Modified: Wed, 13 Sep 2017 19:28:23 GMT
Connection: keep-alive
ETag: "59b986d7-43e"
Expires: Mon, 06 Mar 2023 08:47:12 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
www.key-logger-free.com/wp-content/uploads/2017/09/freekeylogger-large-2-480x300.png
69.164.210.206200 OK 171 kB URL HTTP/1.1 www.key-logger-free.com/wp-content/uploads/2017/09/freekeylogger-large-2-480x300.png
IP 69.164.210.206:0
File type PNG image data, 480 x 300, 8-bit/color RGBA, non-interlaced\012- data
Size 171 kB (171300 bytes)
Hash 54c58be8a30287e4599658259f8e9d2e
5dd986f3864bb9d75bf7ff6c729bc9232e9d5380
b0e137f6ffcf29d7bd378cfa1669275c9fdb9d76b79848cd7f9077b7ede89ee1
GET /wp-content/uploads/2017/09/freekeylogger-large-2-480x300.png HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:12 GMT
Content-Type: image/png
Content-Length: 171300
Last-Modified: Mon, 18 Sep 2017 01:57:31 GMT
Connection: keep-alive
ETag: "59bf280b-29d24"
Expires: Mon, 06 Mar 2023 08:47:12 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
www.key-logger-free.com/wp-content/uploads/hero.jpg
69.164.210.206200 OK 63 kB URL HTTP/1.1 www.key-logger-free.com/wp-content/uploads/hero.jpg
IP 69.164.210.206:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1280x853, components 3\012- data
Hash c3e607c8ffdd05bd8a3345eaaa774ea6
7d97187cf47f18a9d3066eae3de5d33fb4394bf0
481c4c1b10b7d4fd0417f26af1ce666e0b13e619429be5e5fc4c88b6b2f515f3
GET /wp-content/uploads/hero.jpg HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:12 GMT
Content-Type: image/jpeg
Content-Length: 63230
Last-Modified: Tue, 19 Sep 2017 03:44:58 GMT
Connection: keep-alive
ETag: "59c092ba-f6fe"
Expires: Mon, 06 Mar 2023 08:47:12 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
www.key-logger-free.com/wp-content/uploads/2017/09/freekeylogger-large-3-480x300.png
69.164.210.206200 OK 175 kB URL HTTP/1.1 www.key-logger-free.com/wp-content/uploads/2017/09/freekeylogger-large-3-480x300.png
IP 69.164.210.206:0
File type PNG image data, 480 x 300, 8-bit/color RGBA, non-interlaced\012- data
Size 175 kB (175307 bytes)
Hash a3343e649aef78a607992ebe68f0e898
c11e8359c5cf9dff6e767fa40f77031a0eeb84af
38e94c162e682690a402ca4fa7546c28b09afa620cdc4751dae91f1f346c82a9
GET /wp-content/uploads/2017/09/freekeylogger-large-3-480x300.png HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:12 GMT
Content-Type: image/png
Content-Length: 175307
Last-Modified: Mon, 18 Sep 2017 01:57:29 GMT
Connection: keep-alive
ETag: "59bf2809-2accb"
Expires: Mon, 06 Mar 2023 08:47:12 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
connect.facebook.net/en_US/sdk.js
31.13.72.12301 Moved Permanently 0 B URL HTTP/1.1 connect.facebook.net/en_US/sdk.js
IP 31.13.72.12:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
HTTP/1.1 301 Moved Permanently
Location: https://connect.facebook.net/en_US/sdk.js
Content-Type: text/plain
Server: proxygen-bolt
Date: Sat, 04 Feb 2023 08:47:12 GMT
Connection: keep-alive
Content-Length: 0
z.moatads.com/addthismoatframe568911941483/moatframe.js
23.38.201.146200 OK 948 B URL HTTP/2 z.moatads.com/addthismoatframe568911941483/moatframe.js
IP 23.38.201.146:0
File type ASCII text, with very long lines (523)
Hash f14b4e1f799b14f798a195f43cf58376
b6fd3b3d407fb4c0a00fb8a31862235e2a6e0a86
92ed3e9fda5fa4d738ff4d9023846b56633617363dda6a750cacb4fba53241ac
GET /addthismoatframe568911941483/moatframe.js HTTP/1.1
Host: z.moatads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: e0HboiVQpjIDEK8WTxqU5+8G8wOtu9bNCFY72alTHLP0/Yb+qoiTOxu6fad89ebRofzHxENxOOg=
x-amz-request-id: 61EC92F13BB22DD4
last-modified: Fri, 08 Nov 2019 20:13:52 GMT
etag: "f14b4e1f799b14f798a195f43cf58376"
content-encoding: gzip
accept-ranges: bytes
content-type: application/x-javascript
content-length: 948
server: AmazonS3
vary: Accept-Encoding
cache-control: max-age=21515
date: Sat, 04 Feb 2023 08:47:12 GMT
X-Firefox-Spdy: h2
platform.twitter.com/widgets.js
93.184.220.66200 OK 28 kB URL HTTP/1.1 platform.twitter.com/widgets.js
IP 93.184.220.66:0
File type Unicode text, UTF-8 text, with very long lines (38752)
Hash 8aa708f5eebf10bd82e942dabf1623a5
326a6d469222302a80ecf29039e7837d8870ee47
fcfdc2930fdd7f4b3c7f0c1308ce2e89fcc5082ae6a0a1e16ecf0f7e417f1368
GET /widgets.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 3000
Age: 483
Cache-Control: public, max-age=1800
Content-Type: application/javascript; charset=utf-8
Date: Sat, 04 Feb 2023 08:47:12 GMT
Etag: "9e99725b7a4cd730a934afba2a438bb5+gzip"
Last-Modified: Tue, 24 Jan 2023 21:41:51 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F711)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ
Vary: Accept-Encoding
x-amzn-internal-status: 304
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 27630
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 994e21b70c95eb7dd513bcc9fb3cb36e
30265438e8ccb5c0b74c2b9c673e18fdcd210a33
660ebe5cefd5ac620b17399879db991ffecefe28d5b209cda648eec005e0ec83
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 08:47:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
assets.pinterest.com/js/pinit_main.js?0.6441683972142025
151.101.84.84200 OK 19 kB URL HTTP/2 assets.pinterest.com/js/pinit_main.js?0.6441683972142025
IP 151.101.84.84:0
File type Unicode text, UTF-8 text, with very long lines (32016)
Hash 3725764cf05d1a0938de73d398772331
abdc742d760ca9c8f28c8d44ca9796d9ad6c0bc7
f8c41f2f59fc9e9d088bc9002eef583c3cf256b4cd371619b18107b4abd92812
GET /js/pinit_main.js?0.6441683972142025 HTTP/1.1
Host: assets.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
etag: "3725764cf05d1a0938de73d398772331"
content-encoding: br
content-type: application/javascript; charset=utf-8
x-cdn: fastly
alt-svc: h3=":443";ma=600,h3-29=":443";ma=600,h3-27=":443";ma=600
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 86400
access-control-expose-headers: X-CDN
vary: Accept-Encoding, Origin
cache-control: max-age=300
date: Sat, 04 Feb 2023 08:47:12 GMT
content-length: 18679
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 994e21b70c95eb7dd513bcc9fb3cb36e
30265438e8ccb5c0b74c2b9c673e18fdcd210a33
660ebe5cefd5ac620b17399879db991ffecefe28d5b209cda648eec005e0ec83
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 08:47:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.key-logger-free.com/wp-content/uploads/features1-300x300.png
69.164.210.206200 OK 32 kB URL HTTP/1.1 www.key-logger-free.com/wp-content/uploads/features1-300x300.png
IP 69.164.210.206:0
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash ccac02ff20b127f438f5f13a7cda56fa
192055a72d78072120f74f2cd5fe2b4f54dc0abf
0796eccdadca164f4e498df3b15ac1b1814d43b90f4c3dcea5cc3249572d6e6f
GET /wp-content/uploads/features1-300x300.png HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813; __atuvc=1%7C5; __atuvs=63de1bb333e73c04000
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:12 GMT
Content-Type: image/png
Content-Length: 32080
Last-Modified: Tue, 19 Sep 2017 03:31:21 GMT
Connection: keep-alive
ETag: "59c08f89-7d50"
Expires: Mon, 06 Mar 2023 08:47:12 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
www.key-logger-free.com/wp-content/uploads/features1-150x150.png
69.164.210.206200 OK 12 kB URL HTTP/1.1 www.key-logger-free.com/wp-content/uploads/features1-150x150.png
IP 69.164.210.206:0
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash d5e7269a5924d774f7365cc590e60955
91c54076e88bdbe0200386fb8e2331d9a1d6abbf
c488705bb670f1bf343c281a5d630f0eb3d581e8eb3104e4e798aa28addf608f
GET /wp-content/uploads/features1-150x150.png HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813; __atuvc=1%7C5; __atuvs=63de1bb333e73c04000
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:12 GMT
Content-Type: image/png
Content-Length: 12279
Last-Modified: Tue, 19 Sep 2017 03:31:21 GMT
Connection: keep-alive
ETag: "59c08f89-2ff7"
Expires: Mon, 06 Mar 2023 08:47:12 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash d3e050cf67675c3c19014a74517e3747
9931fd6a416e220e15ef5eccad6d0cb12edf3995
8411e23b7bfeba91b6252f15de6ed18b8cff1f752af0efc4f5429b54fccb0da4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5808
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 08:47:12 GMT
Last-Modified: Sat, 04 Feb 2023 07:10:24 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
apis.google.com/js/platform.js
172.217.21.174200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js
IP 172.217.21.174:0
File type ASCII text, with very long lines (1429)
Hash 2354fa28c58e16af89e7da6224aeca93
6bd3430a81730ed77c5d53f5406ddb40306ecabd
dc35ae752b7be035bd3a3bd4ae205e41afce5fa8f88e1bfe0e9524610df10f3b
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20950
date: Sat, 04 Feb 2023 08:47:12 GMT
expires: Sat, 04 Feb 2023 08:47:12 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "03884666a30c671f"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
apis.google.com/js/plusone.js
172.217.21.174200 OK 21 kB URL HTTP/2 apis.google.com/js/plusone.js
IP 172.217.21.174:0
File type ASCII text, with very long lines (1429)
Hash f8971f3ad662af35a2ca6871f8c78482
35a0b814d6ecec8deacc9aea87ce9be62b15d92b
a438d380bab44504b1ff13673a0e041c6ac6645d03926e7f076465d1fe049765
GET /js/plusone.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20950
date: Sat, 04 Feb 2023 08:47:12 GMT
expires: Sat, 04 Feb 2023 08:47:12 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "9dea963ca1c75dde"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash fee83b372950f6d3c32bb43c15c50107
c1b8ba8555ea04bc611d0d1911d59c99603a60f1
4337261864e6bf566c18e03d4c65e287f5c1a3cbce9a2273a0309be9a1b1a417
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6524
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 08:47:12 GMT
Last-Modified: Sat, 04 Feb 2023 06:58:28 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
v1.addthisedge.com/live/boost/ra-558ac14e7f79bff7/_ate.track.config_resp
23.38.200.123200 OK 154 B URL HTTP/2 v1.addthisedge.com/live/boost/ra-558ac14e7f79bff7/_ate.track.config_resp
IP 23.38.200.123:0
File type ASCII text, with no line terminators
Hash 1798455c51e19a1de93e52339a502e8d
a0457d200050e575fe5fce342ef18826773a19a2
3f695eaf6f5245ffc8385edd6ed3d174509a3faedc9b9e14e4bffb1f0a881fb0
GET /live/boost/ra-558ac14e7f79bff7/_ate.track.config_resp HTTP/1.1
Host: v1.addthisedge.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
etag: 659743217
content-disposition: attachment; filename=1.txt
content-encoding: gzip
content-length: 154
cache-control: public, max-age=45, s-maxage=86400
date: Sat, 04 Feb 2023 08:47:12 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
connect.facebook.net/en_US/sdk.js
31.13.72.12200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js
IP 31.13.72.12:0
File type ASCII text, with very long lines (1957)
Hash 8cbf7291a6a451200803441794e75e8d
7eb97c5adbd53609341dcba1289c56caabccb10a
b2d3ecbbf3e8b21d6865973c511f23de9e20f4a161c3911bc446af46c3e3d589
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.key-logger-free.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: e966fbb65ce4d271559451cc7f2fc823
etag: "7ee106444d9ca86c510a7f7ffdc4468f"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sat, 04 Feb 2023 09:01:58 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: jL9ykaakUSAIA0QXlOdejQ==
x-fb-debug: NPttoWJZYEnHYN5ijaUgTpxMbNRGZGx6lkinY/F1G8T10J+AU7VlYXRROnlZ6EcraCcwPiEegwqG1/et9RyMtw==
priority: u=3,i
content-length: 1688
x-fb-trip-id: 1904183273
date: Sat, 04 Feb 2023 08:47:12 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
platform.twitter.com/widgets/widget_iframe.2b2d73daf636805223fb11d48f3e94f7.html?origin=http%3A%2F%2Fwww.key-logger-free.com
93.184.220.66200 OK 105 kB URL HTTP/1.1 platform.twitter.com/widgets/widget_iframe.2b2d73daf636805223fb11d48f3e94f7.html?origin=http%3A%2F%2Fwww.key-logger-free.com
IP 93.184.220.66:0
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (56166)
Size 105 kB (105435 bytes)
Hash 58f06e7d628e7e207cad8e48c9cc76be
9042f057d52be00c9535ce93b0ce4c03707e0c41
ea6c34f2e7acfea93ba722fe283f2704392dc518c9a0d1eeca0ba03a0b63d789
GET /widgets/widget_iframe.2b2d73daf636805223fb11d48f3e94f7.html?origin=http%3A%2F%2Fwww.key-logger-free.com HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 903837
Cache-Control: public, max-age=315360000
Content-Type: text/html; charset=utf-8
Date: Sat, 04 Feb 2023 08:47:12 GMT
Etag: "95e1b50b0c179aefb47b5b211bb347b5+gzip"
Last-Modified: Tue, 24 Jan 2023 21:41:13 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F709)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 105435
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash d3e050cf67675c3c19014a74517e3747
9931fd6a416e220e15ef5eccad6d0cb12edf3995
8411e23b7bfeba91b6252f15de6ed18b8cff1f752af0efc4f5429b54fccb0da4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5741
Cache-Control: max-age=89023
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 08:47:12 GMT
Etag: "63dcbde2-1d7"
Expires: Sun, 05 Feb 2023 09:30:55 GMT
Last-Modified: Fri, 03 Feb 2023 07:55:14 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
m.addthis.com/live/red_lojson/300lo.json?si=63de1bb30f52a75f&bkl=0&bl=1&pdt=3499&sid=63de1bb30f52a75f&pub=ra-558ac14e7f79bff7&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=www.key-logger-free.com&fp=&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1675500467173&jsl=1&uvs=63de1bb333e73c04000&skipb=1&callback=addthis.cbs.jsonp__73918703310217180
23.38.200.123200 OK 89 B URL HTTP/2 m.addthis.com/live/red_lojson/300lo.json?si=63de1bb30f52a75f&bkl=0&bl=1&pdt=3499&sid=63de1bb30f52a75f&pub=ra-558ac14e7f79bff7&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=www.key-logger-free.com&fp=&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1675500467173&jsl=1&uvs=63de1bb333e73c04000&skipb=1&callback=addthis.cbs.jsonp__73918703310217180
IP 23.38.200.123:0
File type ASCII text, with no line terminators
Hash 112ffc617ad87506300243d5bf8a193e
d4140c22be728e1ee422199aed62478c8ba64c9c
ee09856964ce7058961379fb56cf994e7d2ba7d1b4f78437ac8254f0e9168076
GET /live/red_lojson/300lo.json?si=63de1bb30f52a75f&bkl=0&bl=1&pdt=3499&sid=63de1bb30f52a75f&pub=ra-558ac14e7f79bff7&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=www.key-logger-free.com&fp=&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1675500467173&jsl=1&uvs=63de1bb333e73c04000&skipb=1&callback=addthis.cbs.jsonp__73918703310217180 HTTP/1.1
Host: m.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 89
cache-control: max-age=0, no-cache, no-store, no-transform
pragma: no-cache
content-disposition: attachment; filename=1.txt
date: Sat, 04 Feb 2023 08:47:12 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 8176ac8bbb8fa05f36bdfa163da09e0c
b936c84c5fa7e781b12a17952c82bca546ca0575
1aa7e39fd02514a4023036a8a100d7e7898ee220063ebfb41c509264c81ed727
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 08:47:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/en_US/sdk.js?hash=49c5c2f27be6084b9e9dd58328830257
31.13.72.12200 OK 88 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js?hash=49c5c2f27be6084b9e9dd58328830257
IP 31.13.72.12:0
File type ASCII text, with very long lines (18530)
Hash a3bd7b91cf1bc09d8f83722788c8cc10
50858d4e02882d036abe84f7921cab1e91151c0a
06f8c40892c2a0045e2c29531ae1d893b791108587854423b5d0b02e4d5dd0da
GET /en_US/sdk.js?hash=49c5c2f27be6084b9e9dd58328830257 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.key-logger-free.com
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 7e498e4fc857dc72f97e045d10511daa
etag: "9e91e04b221e85fef1ad4cc9b4b2de40"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sun, 04 Feb 2024 07:41:40 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: o717kc8bwJ2Pg3IniMjMEA==
x-fb-debug: 9dBAtmRnBIcd9zsAHDun2dV4KelIMpLvBXpaSWzc4z8D9So87xHkGrIqDqVU0+DaOwE6lKqdLKtQN6j0TEDezA==
content-length: 88448
x-fb-trip-id: 1904183273
date: Sat, 04 Feb 2023 08:47:12 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 313 B IP 93.184.220.29:0
Hash 47596e29084bc770512471731d8627f1
ff10d540287425c2476aaffd4e321679cdef048c
015c3fbcf2992381d1e027318a028058b1d4ff44f32a7b8f7ad1d3d9d82b2c82
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2780
Cache-Control: max-age=162332
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 08:47:12 GMT
Etag: "63dde7d0-139"
Expires: Mon, 06 Feb 2023 05:52:44 GMT
Last-Modified: Sat, 04 Feb 2023 05:06:24 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 313
syndication.twitter.com/settings?session_id=a89fa595b286095765f372e94cc0fe5168ebae91
104.244.42.8200 OK 326 B URL HTTP/2 syndication.twitter.com/settings?session_id=a89fa595b286095765f372e94cc0fe5168ebae91
IP 104.244.42.8:0
File type JSON data\012- , ASCII text, with very long lines (919), with no line terminators
Hash 11f6a2d6bb52340b52d53f9cf72973e8
ea0c3e5d850a2659b3344d84957b691a6f7942b8
a0b2545f4adeaf91f7a23b95f43c682557bdfd1e59d2cf394d10a01f97c886ff
GET /settings?session_id=a89fa595b286095765f372e94cc0fe5168ebae91 HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://platform.twitter.com/
Origin: https://platform.twitter.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sat, 04 Feb 2023 08:47:12 GMT
perf: 7626143928
vary: Origin
server: tsa_o
content-type: application/json; charset=utf-8
cache-control: must-revalidate, max-age=600
last-modified: Sat, 04 Feb 2023 08:47:13 GMT
content-length: 326
content-encoding: gzip
x-transaction-id: ba348ee24f88af57
strict-transport-security: max-age=631138519
access-control-allow-origin: https://platform.twitter.com
access-control-allow-credentials: true
x-response-time: 107
x-connection-hash: 956a1bdd3874d023e8df230f2fb7a00c55ae780f83351694c29f4ea5c12cfa8a
X-Firefox-Spdy: h2
www.key-logger-free.com/?wordfence_lh=1&hid=CB0DD4D0FA448387AE5CEE82CF524923&r=0.7800109352749593
69.164.210.206200 OK 0 B URL HTTP/1.1 www.key-logger-free.com/?wordfence_lh=1&hid=CB0DD4D0FA448387AE5CEE82CF524923&r=0.7800109352749593
IP 69.164.210.206:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?wordfence_lh=1&hid=CB0DD4D0FA448387AE5CEE82CF524923&r=0.7800109352749593 HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813; __atuvc=1%7C5; __atuvs=63de1bb333e73c04000
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:13 GMT
Content-Type: text/javascript
Content-Length: 0
Connection: keep-alive
X-Powered-By: PHP/5.5.38
Link: <http://www.key-logger-free.com/wp-json/>; rel="https://api.w.org/", <http://www.key-logger-free.com/>; rel=shortlink
X-Robots-Tag: noindex
Set-Cookie: wfvt_343609991=63de1b91c5f64; expires=Sat, 04-Feb-2023 09:17:13 GMT; Max-Age=1800; path=/; httponly
wordfence_verifiedHuman=0f995d94fcf2f7ce7431cdf21389f80b; expires=Sun, 05-Feb-2023 08:47:13 GMT; Max-Age=86400; path=/
log.pinterest.com/?type=pidget&guid=4RtBdx6duvDx&tv=2021110201&event=init&sub=www&button_count=0&follow_count=0&pin_count=0&profile_count=0&board_count=0§ion_count=0&lang=en&nvl=en-US&via=http%3A%2F%2Fwww.key-logger-free.com%2F&viaSrc=canonical
151.101.192.84200 OK 0 B URL HTTP/2 log.pinterest.com/?type=pidget&guid=4RtBdx6duvDx&tv=2021110201&event=init&sub=www&button_count=0&follow_count=0&pin_count=0&profile_count=0&board_count=0§ion_count=0&lang=en&nvl=en-US&via=http%3A%2F%2Fwww.key-logger-free.com%2F&viaSrc=canonical
IP 151.101.192.84:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?type=pidget&guid=4RtBdx6duvDx&tv=2021110201&event=init&sub=www&button_count=0&follow_count=0&pin_count=0&profile_count=0&board_count=0§ion_count=0&lang=en&nvl=en-US&via=http%3A%2F%2Fwww.key-logger-free.com%2F&viaSrc=canonical HTTP/1.1
Host: log.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-envoy-upstream-service-time: 2
server: envoy
x-pinterest-rid: 7878817255448851
accept-ranges: bytes
date: Sat, 04 Feb 2023 08:47:14 GMT
via: 1.1 varnish
x-served-by: cache-bma1655-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675500434.983190,VS0,VE43
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
content-length: 0
X-Firefox-Spdy: h2
www.key-logger-free.com/wp-admin/admin-ajax.php
69.164.210.206200 OK 56 B URL HTTP/1.1 www.key-logger-free.com/wp-admin/admin-ajax.php
IP 69.164.210.206:0
File type ASCII text, with no line terminators
Hash 15081080b7be5eabe5de102cc2a57697
4069c1bb0f81030ecf1ad7d81ef1d2520e624231
1ce07691c2755b15eb22263cea0c5ad956793a915c1c30eea5f0f9f103dd5195
Analyzer Verdict Alert fortinet Malware
POST /wp-admin/admin-ajax.php HTTP/1.1
Host: www.key-logger-free.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Content-Length: 281
Origin: http://www.key-logger-free.com
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Cookie: wfvt_343609991=63de1b8f2a813; __atuvc=1%7C5; __atuvs=63de1bb333e73c04000
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 08:47:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.5.38
Access-Control-Allow-Origin: http://www.key-logger-free.com
Access-Control-Allow-Credentials: true
X-Robots-Tag: noindex
X-Content-Type-Options: nosniff
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Set-Cookie: wfvt_343609991=63de1b91dbf95; expires=Sat, 04-Feb-2023 09:17:13 GMT; Max-Age=1800; path=/; httponly
slimstat_tracking_code=77274.62c4b7bd22539f0d88139664285f6781; expires=Sat, 04-Feb-2023 09:17:14 GMT; Max-Age=1800; path=/
Content-Encoding: gzip
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd74fd89c-32f8-4ed4-ab23-e95f810fbc57.jpeg
34.120.237.76200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd74fd89c-32f8-4ed4-ab23-e95f810fbc57.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4b5c35cdff2fb0758db780212b0b1f77
edbb557a3bf57128467335685aebbd4831d802f8
e0fa59843073ba8bd171c66610bc1b3d59a1a94c4991e6023507b9453ca0edba
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd74fd89c-32f8-4ed4-ab23-e95f810fbc57.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9349
x-amzn-requestid: ecd1913d-7dbe-4ffd-ba85-0549aab51a06
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyayOGPlIAMFQ7Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dda4da-6a9b8d146155fa8b6c1c02d6;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 00:20:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jGBEz2d-SXXPBZhwlJgR4w248y-NY2c-18euLre5PULjWUIfhfUmNQ==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 00:20:43 GMT
etag: "edbb557a3bf57128467335685aebbd4831d802f8"
content-type: image/jpeg
age: 30394
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.jsdelivr.net/wp/wp-slimstat/tags/4.7.3.1/wp-slimstat.min.js
104.16.85.20200 OK 0 B URL HTTP/2 cdn.jsdelivr.net/wp/wp-slimstat/tags/4.7.3.1/wp-slimstat.min.js
IP 104.16.85.20:0
GET /wp/wp-slimstat/tags/4.7.3.1/wp-slimstat.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.key-logger-free.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 04 Feb 2023 08:47:12 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
etag: W/"22f3-ERMLxzedZTbuoBxC9QgrG0z3RVY"
x-served-by: cache-fra19147-FRA, cache-jnb7026-JNB
x-cache: HIT, HIT
vary: Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fMs159iwlEovO6yEoVDTc2YgS1B79neYatftVP8tqiJ91NU1LTzyXIWQzWVEiiHOpg0gg%2BfZxx1KhKh8ejZehPPfuOuxG3bGU3WiDXQV0KPsCok6QlfD5Vvd5R4Hq5%2F%2BaZM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794223e39cd70b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Raleway%3A400%2C500%2C600%2C700%2C300%2C100%2C800%2C900%7COpen+Sans%3A400%2C300%2C300italic%2C400italic%2C600%2C600italic%2C700%2C700italic&subset=latin%2Clatin-ext&ver=1.3.6
142.250.74.74200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Raleway%3A400%2C500%2C600%2C700%2C300%2C100%2C800%2C900%7COpen+Sans%3A400%2C300%2C300italic%2C400italic%2C600%2C600italic%2C700%2C700italic&subset=latin%2Clatin-ext&ver=1.3.6
IP 142.250.74.74:0
GET /css?family=Raleway%3A400%2C500%2C600%2C700%2C300%2C100%2C800%2C900%7COpen+Sans%3A400%2C300%2C300italic%2C400italic%2C600%2C600italic%2C700%2C700italic&subset=latin%2Clatin-ext&ver=1.3.6 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.key-logger-free.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 04 Feb 2023 08:47:11 GMT
date: Sat, 04 Feb 2023 08:47:11 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2