foldingillusions.com/
200 OK 24 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (18458)
Hash 40c5fc26a8a026030f8af4acd2ac67bc
34649189fd7f66ccf1306517dc0f70c4e033dea1
6fe93cf062bef82517fbd9bfe9b6029e4031c2b6e8f39b64152ecd9bccc5f5a5
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 25 Nov 2022 01:45:56 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache
Content-Encoding: gzip
WPO-Cache-Status: cached
Last-Modified: Thu, 24 Nov 2022 12:31:44 GMT
X-Powered-By: PHP/7.3.33, PleskLin
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a9f1d4d98705c281fed3b60343463200
db6f8aa98d2eda4e5473b116a222c3055568bb78
164d11173045b569cafb32e300e4c1ec6d6ab177fd34d0414cc40c541268779f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "164D11173045B569CAFB32E300E4C1EC6D6AB177FD34D0414CC40C541268779F"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2442
Expires: Fri, 25 Nov 2022 02:26:39 GMT
Date: Fri, 25 Nov 2022 01:45:57 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash af40a2fcf8debb90c3608002da6c907a
3c75d6c0b557a3bd8d5db50155b8d896e852c145
555617a51ee3077552545a29a3baf0b43e8a82367e4c08110ee480ebedc8b523
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6589
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 01:45:57 GMT
Last-Modified: Thu, 24 Nov 2022 23:56:08 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 260e9998c20d831b66f1029c8f47aac9
716d630f647c54dc69a7f9c63a6cac294b3df7f7
c9951a909f354174f0075a01c01c3c3aa6960983040e328bfbbbea81aeb405c2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C9951A909F354174F0075A01C01C3C3AA6960983040E328BFBBBEA81AEB405C2"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4440
Expires: Fri, 25 Nov 2022 02:59:57 GMT
Date: Fri, 25 Nov 2022 01:45:57 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 25 Nov 2022 01:19:01 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1616
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 6i+5gcPhd1Py93z1jZiNAc1i1xuhIMyb937TvupMifJpXykShkfSqEBQvP0DoBdYxbuyBphYnG4=
x-amz-request-id: BMM827YTCCCMTH5H
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 25 Nov 2022 01:43:38 GMT
age: 139
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:57 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a0111a2443450172e5d2b48d350a8f57
75e89d4cd001303e66a93880f96d6c47e7d665ab
c9865c82b8f373aeb3a7333b0f65408211d832aba753c35d3544ecb2913f4f64
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 01:45:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dd0dd96ca622aa07354fabdd0da767bf
a29eaa02a81dabed2c12be20a89d65a5a0417524
6a670e9031ec8c94bdc91c47a2d6a4ca2bd95fe032fec28888a8e6d7dc163cb4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 01:45:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-184503207-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-184503207-1
IP
File type ASCII text, with very long lines (1921)
Hash 2d29ba007cd5e18f1e50f2d236a2b0bd
bcc0f479c82339dd7307d67c9a85cd807f7a9e55
43214dd5d98f8300e6cc3f475315cdfeb05222d421735310367b81fb9bc6b579
GET /gtag/js?id=UA-184503207-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 01:45:57 GMT
expires: Fri, 25 Nov 2022 01:45:57 GMT
cache-control: private, max-age=900
last-modified: Fri, 25 Nov 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43681
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-MP69GDNWHF
200 OK 76 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-MP69GDNWHF
IP
File type ASCII text, with very long lines (19102)
Hash 1815b51572bb971207f74c6fae07cf9b
95fb409f768dfdcf6a72f7cf1c22c42b7aa9b591
fd39a09d870944e9a08c66abc899190ccb47c1053b85d5b2e315ea4d328ef71f
GET /gtag/js?id=G-MP69GDNWHF HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 01:45:57 GMT
expires: Fri, 25 Nov 2022 01:45:57 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 75947
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c8c8ae004c94c41270a118ddc4af4d48
bd33766ad22c8c33ec1c459c9a3792c0c4e95102
0d7e47ed3d424324cbc3f26510e244beaeddd07131393495d84233c24f8fec7f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0D7E47ED3D424324CBC3F26510E244BEAEDDD07131393495D84233C24F8FEC7F"
Last-Modified: Wed, 23 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21514
Expires: Fri, 25 Nov 2022 07:44:31 GMT
Date: Fri, 25 Nov 2022 01:45:57 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c8c8ae004c94c41270a118ddc4af4d48
bd33766ad22c8c33ec1c459c9a3792c0c4e95102
0d7e47ed3d424324cbc3f26510e244beaeddd07131393495d84233c24f8fec7f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0D7E47ED3D424324CBC3F26510E244BEAEDDD07131393495D84233C24F8FEC7F"
Last-Modified: Wed, 23 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 25 Nov 2022 07:45:57 GMT
Date: Fri, 25 Nov 2022 01:45:57 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dd0dd96ca622aa07354fabdd0da767bf
a29eaa02a81dabed2c12be20a89d65a5a0417524
6a670e9031ec8c94bdc91c47a2d6a4ca2bd95fe032fec28888a8e6d7dc163cb4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 01:45:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8f33903fe8aead8d8a2d78bdefbcce13
3a99a25f4109935c87a37afba979a8af629278c7
d6d6019f8d67501e4e1f6033fff2e4234c041af8d1e9075430857cedc54736af
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D6D6019F8D67501E4E1F6033FFF2E4234C041AF8D1E9075430857CEDC54736AF"
Last-Modified: Fri, 25 Nov 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21552
Expires: Fri, 25 Nov 2022 07:45:09 GMT
Date: Fri, 25 Nov 2022 01:45:57 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8f33903fe8aead8d8a2d78bdefbcce13
3a99a25f4109935c87a37afba979a8af629278c7
d6d6019f8d67501e4e1f6033fff2e4234c041af8d1e9075430857cedc54736af
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D6D6019F8D67501E4E1F6033FFF2E4234C041AF8D1E9075430857CEDC54736AF"
Last-Modified: Fri, 25 Nov 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21570
Expires: Fri, 25 Nov 2022 07:45:27 GMT
Date: Fri, 25 Nov 2022 01:45:57 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8f33903fe8aead8d8a2d78bdefbcce13
3a99a25f4109935c87a37afba979a8af629278c7
d6d6019f8d67501e4e1f6033fff2e4234c041af8d1e9075430857cedc54736af
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D6D6019F8D67501E4E1F6033FFF2E4234C041AF8D1E9075430857CEDC54736AF"
Last-Modified: Fri, 25 Nov 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21566
Expires: Fri, 25 Nov 2022 07:45:23 GMT
Date: Fri, 25 Nov 2022 01:45:57 GMT
Connection: keep-alive
foldingillusions.com/wp-content/uploads/2021/01/logox1-1.png
200 OK 16 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/01/logox1-1.png
IP
File type PNG image data, 150 x 162, 8-bit/color RGBA, non-interlaced\012- data
Hash 3b9698964078bbc1012eb587c0d48583
79b7c92e5527627e823131d632b4c1d6a4512ce2
8dd0c0ef3fb286d10a403bf31d552a9b1c01c3a65178b5e57ec547d477e7e9ec
GET /wp-content/uploads/2021/01/logox1-1.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:57 GMT
content-type: image/png
content-length: 16490
last-modified: Thu, 25 Feb 2021 06:51:07 GMT
etag: "603748db-406a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 25 Nov 2022 01:08:53 GMT
cache-control: public,max-age=3600
age: 2224
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-27134c07.min.css
200 OK 60 kB URL HTTP/2 foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-27134c07.min.css
IP
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Hash 6981b864ca8293340683cecd62aa601f
51730461ed77a1cb9f4ae0eca9b91c46eda57eb9
37a9d82adc3332696df8c727b29ff7874a285be034d8a72293a0210e2e8d0184
GET /wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-27134c07.min.css HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:57 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 09:42:42 GMT
etag: W/"63623b92-45893"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/05/Fotofolio_peto-1.jpg
200 OK 174 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/05/Fotofolio_peto-1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=18, height=3024, bps=0, PhotometricIntepretation=RGB, manufacturer=Apple, model=iPhone 8 Plus, orientation=upper-left, width=3553], baseline, precision 8, 823x751, components 3\012- data
Size 174 kB (174477 bytes)
Hash 855d29ef241a0c92eb963f695f33dfcd
e16a8ee02e179953533cd30558167151b1b656a9
326ece4ffb597da49922d3093ca68eaf5e1b59ae30892501a7ad2aa72fb08afa
GET /wp-content/uploads/2021/05/Fotofolio_peto-1.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:57 GMT
content-type: image/jpeg
content-length: 174477
last-modified: Sun, 02 May 2021 15:05:44 GMT
etag: "608ebfc8-2a98d"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/12/ALBUM-OFERTA-1-1200x900.png
200 OK 1.5 MB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/ALBUM-OFERTA-1-1200x900.png
IP
File type PNG image data, 1200 x 900, 8-bit/color RGB, non-interlaced\012- data
Size 1.5 MB (1470717 bytes)
Hash c32ee84338e5c3858e8aa1a73330c905
014c07df49b7ac912e6425b4143e412b65554b74
466be4f35afec3b8542617001fbf37d9c9de485a2fcbd737f097d1f69d28ba55
GET /wp-content/uploads/2021/12/ALBUM-OFERTA-1-1200x900.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:57 GMT
content-type: image/png
content-length: 1470717
last-modified: Wed, 08 Dec 2021 11:01:22 GMT
etag: "61b09082-1670fd"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/05/Fotofolio_oriental_portada-2-1.jpg
200 OK 206 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/05/Fotofolio_oriental_portada-2-1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=15, height=3024, bps=0, PhotometricIntepretation=RGB, manufacturer=Apple, model=iPhone 8 Plus, orientation=upper-left, width=4032], baseline, precision 8, 823x751, components 3\012- data
Size 206 kB (205897 bytes)
Hash c1e1ad92e89a6586c8a9403a01ccde39
942f859de60580ab73911771baf55787cfccacd8
ad5fd4531b10a6da8233705bcc96329e490978728a198c51121df3f77862f573
GET /wp-content/uploads/2021/05/Fotofolio_oriental_portada-2-1.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:57 GMT
content-type: image/jpeg
content-length: 205897
last-modified: Sun, 02 May 2021 15:05:00 GMT
etag: "608ebf9c-32449"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/05/Libro_de_firmas_vestido_portada-1.jpg
200 OK 214 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/05/Libro_de_firmas_vestido_portada-1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=18, height=3024, bps=0, PhotometricIntepretation=RGB, manufacturer=Apple, model=iPhone 8 Plus, orientation=upper-left, width=4032], baseline, precision 8, 823x751, components 3\012- data
Size 214 kB (214083 bytes)
Hash 7c935aa7b23d8ee9ae5033eda4cd31f2
148bf7c36154a1e4355f7c8365b8347ec003250a
ae1a779aa2bec65c7d33585e3026739f2aa13cb82415618e6d1c61b13d28a232
GET /wp-content/uploads/2021/05/Libro_de_firmas_vestido_portada-1.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:57 GMT
content-type: image/jpeg
content-length: 214083
last-modified: Sun, 02 May 2021 15:05:22 GMT
etag: "608ebfb2-34443"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/05/Album_mar_portada-1.jpg
200 OK 211 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/05/Album_mar_portada-1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=18, height=3024, bps=0, PhotometricIntepretation=RGB, manufacturer=Apple, model=iPhone 8 Plus, orientation=upper-left, width=4032], baseline, precision 8, 823x751, components 3\012- data
Size 211 kB (210594 bytes)
Hash 0e3e68aa6645540cdd71d42295c54d81
2942181644dc2f78f8b619fd4f71cddfca9c473c
505af017da1fbea687979018f41cc35f4fd531561436b7decf3c1d12afd21e08
GET /wp-content/uploads/2021/05/Album_mar_portada-1.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:57 GMT
content-type: image/jpeg
content-length: 210594
last-modified: Sun, 02 May 2021 15:19:51 GMT
etag: "608ec317-336a2"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-1200x900.png
200 OK 1.5 MB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-1200x900.png
IP
File type PNG image data, 1200 x 900, 8-bit/color RGB, non-interlaced\012- data
Size 1.5 MB (1465516 bytes)
Hash cac35120337df321e0b5f18ec0846b1f
81af6787ebeb0685ead1aefacde5c9cd69fd7cdf
b7451f1d2eade0b68f8546d5bf9faaffb2871503edcd3ce5f55ce47c640daf38
GET /wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-1200x900.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:57 GMT
content-type: image/png
content-length: 1465516
last-modified: Wed, 08 Dec 2021 10:59:41 GMT
etag: "61b0901d-165cac"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-2-1200x900.png
200 OK 1.5 MB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-2-1200x900.png
IP
File type PNG image data, 1200 x 900, 8-bit/color RGB, non-interlaced\012- data
Size 1.5 MB (1543229 bytes)
Hash 5aabaadadee30841ddaa02f8fd239f70
2ef1207148b375fbf24b4b5f79129796ad4b47b0
c96451151913e5745392ccc9a1c2954abf11472e2bce57f3bf936432eaa4cf17
GET /wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-2-1200x900.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:57 GMT
content-type: image/png
content-length: 1543229
last-modified: Wed, 08 Dec 2021 11:00:16 GMT
etag: "61b09040-178c3d"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-1-1200x900.png
200 OK 1.8 MB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-1-1200x900.png
IP
File type PNG image data, 1200 x 900, 8-bit/color RGB, non-interlaced\012- data
Size 1.8 MB (1838905 bytes)
Hash 325e1ef7a0d86109d3da8e6b047298db
4232ca01e82c9623a2fc3110fdb5f063b54879f1
0a01b3d509b59e82ab55f270d7b64a46f94cb7a932ee64cdf2ee36c591a79e21
GET /wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-1-1200x900.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:57 GMT
content-type: image/png
content-length: 1838905
last-modified: Wed, 08 Dec 2021 10:59:58 GMT
etag: "61b0902e-1c0f39"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 6DKAaZz9OgYaCUXVQWZlgQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: HwOc8V+m6fChlUT/o/zXkaTzM80=
foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-00440e2f.min.js
200 OK 2.2 MB URL HTTP/2 foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-00440e2f.min.js
IP
File type ASCII text, with very long lines (36518)
Size 2.2 MB (2176623 bytes)
Hash d19ed11a9f9c75d0b35230a83b74be5e
5d70131cdcf225bb498a01785238160fc4dbc533
7e0b0744869afc3176f7fee6e95ab8b7f08d3a5a4c68a1dce0ede464845266b6
Analyzer Verdict Alert fortinet Malware
GET /wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-00440e2f.min.js HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:57 GMT
content-type: application/javascript
last-modified: Wed, 08 Dec 2021 11:32:50 GMT
etag: W/"61b097e2-11403"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/icomoon.woff
200 OK 21 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/icomoon.woff
IP
File type Web Open Font Format, TrueType, length 20908, version 1.0\012- data
Hash 00491de6282bc94e9cc6a2ccbb4b3ae6
a3f9f4a0e469c3557e64029415698942903f10a4
22c851d5f36813ff8cbb4ab0d16273aa1eb536f84f2c56b53df8d2c7a54479a4
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/icomoon.woff HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:58 GMT
content-type: application/font-woff
content-length: 20908
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-51ac"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-1536x1152.png
200 OK 2.3 MB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-1536x1152.png
IP
File type PNG image data, 1536 x 1152, 8-bit/color RGB, non-interlaced\012- data
Size 2.3 MB (2336875 bytes)
Hash be21752a28f8072770deee3b6e59c3e7
bad177169b0b1202a56f9730fa45d7a46a0d91af
0745896bc307e1f527a6f0d683113286979ae4a02cd347853d911d36bf5ce5b6
GET /wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-1536x1152.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:58 GMT
content-type: image/png
content-length: 2336875
last-modified: Wed, 08 Dec 2021 10:59:34 GMT
etag: "61b09016-23a86b"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2
200 OK 13 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13276, version 331.-31261\012- data
Hash f0f8230116992e521526097a28f54066
0447c6b10bbf73f97b23dcfd6e6a48510822cb6e
8afc6e5e842baab16010c2ce6fcf48ec4ded8e1579a37c1f1bc027e120d04951
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:58 GMT
content-type: font/woff2
content-length: 13276
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-33dc"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
200 OK 78 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261\012- data
Hash e8a427e15cc502bef99cfd722b37ea98
a9922842a120a7f1eaced667480c5e185a106d69
d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:58 GMT
content-type: font/woff2
content-length: 78196
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-13174"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2
200 OK 77 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 76764, version 331.-31261\012- data
Hash f7307680c7fe85959f3ecf122493ea7d
fce0da592a3e536d6d5df5b50cb513398d8c5161
43c072c16c9ee6d67acdfa6c6d6685ff1e74eb4237b7cc3c1348ab1c108b26af
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:58 GMT
content-type: font/woff2
content-length: 76764
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-12bdc"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 01:45:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-8de213aa.min.css
200 OK 2.4 MB URL HTTP/2 foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-8de213aa.min.css
IP
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Size 2.4 MB (2400918 bytes)
Hash eecd6a3dd254234e4ae39e7b5dce4b2e
dd048e6fee8b5f6da5080463e2e10a1e5e8e3345
2c7924fd62e1565070df012205e211d9ae080b736bbc1f4671fa56f47938f2e6
GET /wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-8de213aa.min.css HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:57 GMT
content-type: text/css
last-modified: Wed, 08 Dec 2021 11:32:50 GMT
etag: W/"61b097e2-182ae"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash aee1eaa2ef2d0edbb0bc5703979e6439
8baa6d1cdd85ce2c5b6e30bd7a60096eeafce4db
095cc1e6ce8241ba22f88cb66d752587909fea3dc66936a72c369ef74b3134f1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 01:45:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash aee1eaa2ef2d0edbb0bc5703979e6439
8baa6d1cdd85ce2c5b6e30bd7a60096eeafce4db
095cc1e6ce8241ba22f88cb66d752587909fea3dc66936a72c369ef74b3134f1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 01:45:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-2-1536x1152.png
200 OK 2.4 MB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-2-1536x1152.png
IP
File type PNG image data, 1536 x 1152, 8-bit/color RGB, non-interlaced\012- data
Size 2.4 MB (2449140 bytes)
Hash a98d3e64476fffb4ca562a6bcdc47b20
9ce4b9e57bac080b906b4501c1dd90bcfe15bcfa
e86a90f78954de8492c7053a76e3629a9880a3079d9e92c84aa7df54eca4e0a7
GET /wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-2-1536x1152.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:58 GMT
content-type: image/png
content-length: 2449140
last-modified: Wed, 08 Dec 2021 11:00:11 GMT
etag: "61b0903b-255ef4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-3-1536x1152.png
200 OK 2.4 MB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-3-1536x1152.png
IP
File type PNG image data, 1536 x 1152, 8-bit/color RGB, non-interlaced\012- data
Size 2.4 MB (2366980 bytes)
Hash 82314374fd33635cc69d31bb1322a6da
bd7ebe95552fa433dd7fd2953c91fe2b4a117eca
e02fd65faee6e5872789dabd4669a309d430bf79662ea4489be75168c968e8a6
GET /wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-3-1536x1152.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:58 GMT
content-type: image/png
content-length: 2366980
last-modified: Wed, 08 Dec 2021 11:00:28 GMT
etag: "61b0904c-241e04"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/12/ALBUM-OFERTA-1200x900.png
200 OK 472 B URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/ALBUM-OFERTA-1200x900.png
IP
Hash aee1eaa2ef2d0edbb0bc5703979e6439
8baa6d1cdd85ce2c5b6e30bd7a60096eeafce4db
095cc1e6ce8241ba22f88cb66d752587909fea3dc66936a72c369ef74b3134f1
GET /wp-content/uploads/2021/12/ALBUM-OFERTA-1200x900.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:57 GMT
content-type: image/png
content-length: 1332849
last-modified: Wed, 08 Dec 2021 11:00:55 GMT
etag: "61b09067-145671"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash aee1eaa2ef2d0edbb0bc5703979e6439
8baa6d1cdd85ce2c5b6e30bd7a60096eeafce4db
095cc1e6ce8241ba22f88cb66d752587909fea3dc66936a72c369ef74b3134f1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 01:45:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K0nXBi8JoI3ZKyHqQg.woff
200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K0nXBi8JoI3ZKyHqQg.woff
IP
File type Web Open Font Format, TrueType, length 22980, version 1.1\012- data
Hash f2a7709803facad3132b46b739548369
7ae29ea1cc9e76acc69877d118fa5d4d61465b59
ca71ae7855c81379852da88328a11f97646e1aa1d38683c633c1d9dd28468355
GET /s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K0nXBi8JoI3ZKyHqQg.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22980
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 15:28:05 GMT
expires: Fri, 24 Nov 2023 15:28:05 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 10 Nov 2021 18:06:11 GMT
content-type: font/woff
age: 37073
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-1-1536x1152.png
200 OK 2.9 MB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-1-1536x1152.png
IP
File type PNG image data, 1536 x 1152, 8-bit/color RGB, non-interlaced\012- data
Size 2.9 MB (2939045 bytes)
Hash 60f102bd7499a98d5fe54367bef9ca6c
56c3eda1573f135fe485d6e1b82061b89481007d
055c1799d889311d9e9eef0c6ea7509fe79b8f6d0484193c1e344297709159cd
GET /wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-1-1536x1152.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:58 GMT
content-type: image/png
content-length: 2939045
last-modified: Wed, 08 Dec 2021 10:59:54 GMT
etag: "61b0902a-2cd8a5"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/icomoon.ttf
200 OK 21 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/icomoon.ttf
IP
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon \012- data
Hash b628f37cfeac97148aafb864ca676f6a
71ae0dfae50d4087daa4755a396b914a62213bae
e70b68f603538e3d4d8eb4af3dc2ff84b99af56fb0af22fd5b94167639f30473
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/icomoon.ttf HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:58 GMT
content-type: application/font-sfnt
content-length: 20832
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-5160"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff
200 OK 102 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff
IP
File type Web Open Font Format, TrueType, length 101652, version 331.-31261\012- data
Size 102 kB (101652 bytes)
Hash 9fe5a17c8ab036d20e6c5ba3fd2ac511
52751432ded489dfdf27fb1cf64c570c4c27a1d7
74edc18b67c487e32f181719fdb347e2e77020744651f446e9acd7bd6821e2e7
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:58 GMT
content-type: application/font-woff
content-length: 101652
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-18d14"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff
200 OK 90 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff
IP
File type Web Open Font Format, TrueType, length 90060, version 331.-31261\012- data
Hash 099a9556e1a63ece24f8a99859c94c7d
5f8cab91347c553c1eb87f9b527f6bee8a28e40d
aff76e5c986f295d4bc6f8142a78e2a31888b101c2d025db89f79c75f64fd90b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:58 GMT
content-type: application/font-woff
content-length: 90060
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-15fcc"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v29/KFOlCnqEu92Fr1MmEU9vAA.woff
200 OK 66 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v29/KFOlCnqEu92Fr1MmEU9vAA.woff
IP
File type Web Open Font Format, TrueType, length 65492, version 1.1\012- data
Hash 08926d7a008503f9c640b1772c225476
6a57df5217d336599bdec757772025beb40c4536
c93f4332daa92f95a2c2446599d6cf9e87b00b20d60db827af63b0e4a3feb22b
GET /s/roboto/v29/KFOlCnqEu92Fr1MmEU9vAA.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 65492
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 20:06:11 GMT
expires: Thu, 23 Nov 2023 20:06:11 GMT
cache-control: public, max-age=31536000
age: 106787
last-modified: Wed, 22 Sep 2021 16:13:30 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v18/JTURjIg1_i6t8kCHKm45_dJE7g0.woff
200 OK 68 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v18/JTURjIg1_i6t8kCHKm45_dJE7g0.woff
IP
File type Web Open Font Format, TrueType, length 68180, version 1.1\012- data
Hash 3f39d0942bc86b5d8cced884e1b00000
7e5e86e3d1d52935828ed1eec575cecd62da93d5
b97a40f9d7c840a361acec789c38ab643fdf4b3831c05a2a4087977acc202478
GET /s/montserrat/v18/JTURjIg1_i6t8kCHKm45_dJE7g0.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 68180
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 19 Nov 2022 01:06:26 GMT
expires: Sun, 19 Nov 2023 01:06:26 GMT
cache-control: public, max-age=31536000
age: 520772
last-modified: Tue, 10 Aug 2021 00:21:06 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v18/JTUSjIg1_i6t8kCHKm45xW0.woff
200 OK 68 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v18/JTUSjIg1_i6t8kCHKm45xW0.woff
IP
File type Web Open Font Format, TrueType, length 68308, version 1.1\012- data
Hash f559455a2bb877b795730a2d1167f125
8792d78996b824aa89be7592babd6117a7cee3cc
977cced473e900f9f44d78171db812fc563ded25b7afc2b6e040b267eab566ca
GET /s/montserrat/v18/JTUSjIg1_i6t8kCHKm45xW0.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 68308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 16:10:27 GMT
expires: Fri, 24 Nov 2023 16:10:27 GMT
cache-control: public, max-age=31536000
age: 34531
last-modified: Tue, 10 Aug 2021 00:19:54 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K3vXBi8JoI3ZKyHqQg.woff
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K3vXBi8JoI3ZKyHqQg.woff
IP
File type Web Open Font Format, TrueType, length 23976, version 1.1\012- data
Hash 24fb4331b0e2ba0c12dabc947b1290df
faa2409a20a93a92fbaec6c70ad9680cd6c0d793
f533ccd7a731a34ea932467f4d7b1a42966981db0ada056392626037a4f03738
GET /s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K3vXBi8JoI3ZKyHqQg.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 15:28:06 GMT
expires: Fri, 24 Nov 2023 15:28:06 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 10 Nov 2021 18:06:03 GMT
content-type: font/woff
age: 37072
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v29/KFOlCnqEu92Fr1MmWUlvAA.woff
200 OK 65 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v29/KFOlCnqEu92Fr1MmWUlvAA.woff
IP
File type Web Open Font Format, TrueType, length 65292, version 1.1\012- data
Hash 8b2b2aae46819bb8c37c438760dbb4f6
3594876105e2630504fa1fa00de36e774d238528
61e16263ed1227e721bffd26891b13a4d07c5140249fa78f297b51845ee169db
GET /s/roboto/v29/KFOlCnqEu92Fr1MmWUlvAA.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 65292
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 20 Nov 2022 19:47:02 GMT
expires: Mon, 20 Nov 2023 19:47:02 GMT
cache-control: public, max-age=31536000
age: 367136
last-modified: Wed, 22 Sep 2021 16:13:30 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v29/KFOmCnqEu92Fr1Me5g.woff
200 OK 65 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v29/KFOmCnqEu92Fr1Me5g.woff
IP
File type Web Open Font Format, TrueType, length 65244, version 1.1\012- data
Hash 73f26bf98a715ecab4d2287ff3a02ad0
c6c8a2b7e67c182d77916cd2118b1b0d8a6ca549
55110586d3719c3e8bdaa21f06e4cc1c0a7451abbae662344cbd4411536b585f
GET /s/roboto/v29/KFOmCnqEu92Fr1Me5g.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 65244
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 22:04:27 GMT
expires: Wed, 22 Nov 2023 22:04:27 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 22 Sep 2021 16:13:22 GMT
content-type: font/woff
age: 186091
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v18/JTURjIg1_i6t8kCHKm45_bZF7g0.woff
200 OK 68 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v18/JTURjIg1_i6t8kCHKm45_bZF7g0.woff
IP
File type Web Open Font Format, TrueType, length 67920, version 1.1\012- data
Hash f5b5ac943a80d7e7aff13b8a651c15df
a9eabaf668d043bdd45c7b01119eff648b46e480
268377e98dea0d350cd21714107d0e0473baade9163f94322e2f97088682af5e
GET /s/montserrat/v18/JTURjIg1_i6t8kCHKm45_bZF7g0.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 67920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 21:07:32 GMT
expires: Fri, 24 Nov 2023 21:07:32 GMT
cache-control: public, max-age=31536000
age: 16706
last-modified: Tue, 10 Aug 2021 00:20:42 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-26c75ab0.min.css
200 OK 198 kB URL HTTP/2 foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-26c75ab0.min.css
IP
File type ASCII text, with very long lines (35574)
Size 198 kB (197638 bytes)
Hash 1d0403bb33e26f8c057c41c105b9f4de
a7cb79d6c82c4a195031c3acd0c8618f34ac913e
507a8bcc0f8550b4217dda82b17ce3a27d852af40c6ce45e8f5d3c81b477a387
GET /wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-26c75ab0.min.css HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:57 GMT
content-type: text/css
last-modified: Wed, 08 Dec 2021 11:32:49 GMT
etag: W/"61b097e1-182a97"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v18/JTURjIg1_i6t8kCHKm45_cJD7g0.woff
200 OK 68 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v18/JTURjIg1_i6t8kCHKm45_cJD7g0.woff
IP
File type Web Open Font Format, TrueType, length 67596, version 1.1\012- data
Hash 7e09e547298d02b35fe04c76528b0a05
ab23ecb2265181abb5247feb0097bb16ee1f0f16
031a79b04005ef5553ea2cf39fae33fb4afffb3f7ebeed24c6f17495ac00e87f
GET /s/montserrat/v18/JTURjIg1_i6t8kCHKm45_cJD7g0.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 67596
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 16:32:05 GMT
expires: Fri, 24 Nov 2023 16:32:05 GMT
cache-control: public, max-age=31536000
age: 33233
last-modified: Tue, 10 Aug 2021 00:20:13 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32KxfXBi8JoI3ZKyHqQg.woff
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32KxfXBi8JoI3ZKyHqQg.woff
IP
File type Web Open Font Format, TrueType, length 23864, version 1.1\012- data
Hash d21e30f88d5335f5408ecbccabc7bba1
fbaad0a8796710505f2b622aa8cf0e8c90df8df1
bd236492f4bb8585df02bec0ffe0e7a88f8800de0aba3245eff81e3149a912a7
GET /s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32KxfXBi8JoI3ZKyHqQg.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23864
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 15:28:05 GMT
expires: Fri, 24 Nov 2023 15:28:05 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 10 Nov 2021 18:06:01 GMT
content-type: font/woff
age: 37073
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.ttf
200 OK 203 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.ttf
IP
File type TrueType Font data, 13 tables, 1st "FFTM", 28 names, Macintosh\012- data
Size 203 kB (202744 bytes)
Hash 605ed7926cf39a2ad5ec2d1f9d391d3d
c1b9fae262f42868c075ac865a8ab34920e20a2c
3d06af1f31cd83ace7a265a014b8fb5dee15770ecac8f7a55555190e627e03c2
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.ttf HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:58 GMT
content-type: application/font-sfnt
content-length: 202744
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-317f8"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff
200 OK 16 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff
IP
File type Web Open Font Format, TrueType, length 16276, version 331.-31261\012- data
Hash 7124eb50fc8227c78269f2d995637ff5
d33d8b5b15b7bba2cc17190dc685fe0a76d2989e
14c9db4ff87fde08f67b0a69dd594bab6d87174812a0dbd34c59833bfed8cc0e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:58 GMT
content-type: application/font-woff
content-length: 16276
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-3f94"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash aee1eaa2ef2d0edbb0bc5703979e6439
8baa6d1cdd85ce2c5b6e30bd7a60096eeafce4db
095cc1e6ce8241ba22f88cb66d752587909fea3dc66936a72c369ef74b3134f1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 01:45:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.ttf
200 OK 134 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.ttf
IP
File type TrueType Font data, 13 tables, 1st "FFTM", 28 names, Macintosh\012- data
Size 134 kB (134040 bytes)
Hash 3b89dd103490708d19a95adcae52210e
3fa2d67cef22da5c3f3eb5730c6afbd6fecf0372
06f4d00923ea24697df5df0b92984175991d8bd25776a02d531bb401e393ec42
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.ttf HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:58 GMT
content-type: application/font-sfnt
content-length: 134040
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-20b98"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.ttf
200 OK 34 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.ttf
IP
File type TrueType Font data, 13 tables, 1st "FFTM", 28 names, Macintosh\012- data
Hash 1f77739ca9ff2188b539c36f30ffa2be
7d849a3981a716e2ba4a84634bc57d0b8054a6a3
c651b8a67d3193206f622c3c3b0fbca4a2f2727108c4212b52c1e2a2e84c9b31
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.ttf HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:59 GMT
content-type: application/font-sfnt
content-length: 33736
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-83c8"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2
200 OK 80 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 80272, version 331.-31458\012- data
Hash 3bb4d4ff63186a8caf433d3d3a022d49
023d6411b150baea1ec6784dcb2888577d95f13e
75f5349190725c85b426fdb66c683beb21b7804792d0770a9e84b28e7ace5d28
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:59 GMT
content-type: font/woff2
content-length: 80272
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-13990"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff2
200 OK 78 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 78532, version 331.-31458\012- data
Hash 79dced08c62eddd969d92c9f58987a33
262c9c0e4848466e73ad4757ddaab6e168eaef81
0a80acfa0f85d8ea233785ca14b0dd030dbe7ed229b00bc754b55dae39c7a106
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:59 GMT
content-type: font/woff2
content-length: 78532
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-132c4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff2
200 OK 14 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13584, version 331.-31458\012- data
Hash c940f62026ba5a202238ec177cce01a5
62edc86975d56aa66873803baf0582c2ab36cef5
41dc4f99f4101a4ae7956b5c23c2d40e04ffb928c7ebd989658d950b4e2f7c5d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:59 GMT
content-type: font/woff2
content-length: 13584
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-3510"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff
200 OK 92 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff
IP
File type Web Open Font Format, TrueType, length 92216, version 331.-31458\012- data
Hash a6d5b6e21f0c0ce5d05dd9d2aa644c9f
a2e0949835d3ae7f3c990f8eb6a8f3629a1ddacc
64351d3323461bde0c1eb9b70137cd643892fb72aea6cc5ecd4d4f102eb5f79d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:59 GMT
content-type: application/font-woff
content-length: 92216
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-16838"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff
200 OK 104 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff
IP
File type Web Open Font Format, TrueType, length 104284, version 331.-31458\012- data
Size 104 kB (104284 bytes)
Hash c48d0f239282bb3a0856a4817fa2a5c2
bd4c2e3e55397c69b35b9f1947aa72beedd45651
26701523bfc95c31e4c3a5dbd73943ca1dd4c99a1f2dbc5b48a589943d1afb99
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:59 GMT
content-type: application/font-woff
content-length: 104284
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-1975c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/316399926_914090016244320_1656897882776101200_n.webpfull.jpg
200 OK 47 kB URL HTTP/1.1 foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/316399926_914090016244320_1656897882776101200_n.webpfull.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x640, components 3\012- data
Hash af4a018ec7c7e743266344852c26da7e
4b450932a11790222323bfe3ca7ca1b36e21884b
2553cfde15066dd526e2bb543429217574e768757c69d0d1299e1bf2da0dc42b
GET /wp-content/uploads/sb-instagram-feed-images/316399926_914090016244320_1656897882776101200_n.webpfull.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foldingillusions.com/
Cookie: _ga_MP69GDNWHF=GS1.1.1669340758.1.0.1669340758.0.0.0; _ga=GA1.1.1889481251.1669340758
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 25 Nov 2022 01:45:59 GMT
Content-Type: image/jpeg
Content-Length: 47282
Last-Modified: Tue, 22 Nov 2022 18:59:55 GMT
Connection: keep-alive
ETag: "637d1c2b-b8b2"
X-Powered-By: PleskLin
Accept-Ranges: bytes
foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/315773709_458395096443685_2129687521849212021_n.webpfull.jpg
200 OK 57 kB URL HTTP/1.1 foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/315773709_458395096443685_2129687521849212021_n.webpfull.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x640, components 3\012- data
Hash d03aa5f99dc9d0c613dea7cca3496a75
c590076b19c42af73e564ccf44455e75241c782b
311ebdb32cc5c51afc62651a21409a29d2a70c79e0d83cc04cde7fa00894dcb2
GET /wp-content/uploads/sb-instagram-feed-images/315773709_458395096443685_2129687521849212021_n.webpfull.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foldingillusions.com/
Cookie: _ga_MP69GDNWHF=GS1.1.1669340758.1.0.1669340758.0.0.0; _ga=GA1.1.1889481251.1669340758
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 25 Nov 2022 01:45:59 GMT
Content-Type: image/jpeg
Content-Length: 56623
Last-Modified: Sun, 20 Nov 2022 08:38:12 GMT
Connection: keep-alive
ETag: "6379e774-dd2f"
X-Powered-By: PleskLin
Accept-Ranges: bytes
foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/315894394_968843341171707_7087732702479082328_n.webpfull.jpg
200 OK 77 kB URL HTTP/1.1 foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/315894394_968843341171707_7087732702479082328_n.webpfull.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x640, components 3\012- data
Hash fd9c09825ea9664c359ae67872bd3bcf
3875efb906b1a2733479191cea07da7089463fd8
19c2493629f36200ff4015634d505a205ba7ace6f098197af41bb01130d7d50e
GET /wp-content/uploads/sb-instagram-feed-images/315894394_968843341171707_7087732702479082328_n.webpfull.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foldingillusions.com/
Cookie: _ga_MP69GDNWHF=GS1.1.1669340758.1.0.1669340758.0.0.0; _ga=GA1.1.1889481251.1669340758
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 25 Nov 2022 01:45:59 GMT
Content-Type: image/jpeg
Content-Length: 77292
Last-Modified: Thu, 17 Nov 2022 12:12:02 GMT
Connection: keep-alive
ETag: "63762512-12dec"
X-Powered-By: PleskLin
Accept-Ranges: bytes
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff
200 OK 17 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff
IP
File type Web Open Font Format, TrueType, length 16776, version 331.-31458\012- data
Hash b7995ffca32ee27012b039e79a9dad06
0a5d9e8e13305c8d75b81ab5c3438d9a7e9a6279
8b01a186e17207b605f5f037815f82b62a37fcb4804b2d46eae10e316b78a9c5
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:59 GMT
content-type: application/font-woff
content-length: 16776
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-4188"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/315559131_512783147428456_786754020041015235_n.webpfull.jpg
200 OK 64 kB URL HTTP/1.1 foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/315559131_512783147428456_786754020041015235_n.webpfull.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x640, components 3\012- data
Hash 12f2c5fbf5fb93a196ef8d0be9501bf4
45461a0474b461d9acc39234a545d67bcb597c96
dacd3f1cf456e17e4696f36065872c867351dca833ec3f116c7cbdc99bcfaf0e
GET /wp-content/uploads/sb-instagram-feed-images/315559131_512783147428456_786754020041015235_n.webpfull.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foldingillusions.com/
Cookie: _ga_MP69GDNWHF=GS1.1.1669340758.1.0.1669340758.0.0.0; _ga=GA1.1.1889481251.1669340758
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 25 Nov 2022 01:45:59 GMT
Content-Type: image/jpeg
Content-Length: 64171
Last-Modified: Wed, 16 Nov 2022 11:56:03 GMT
Connection: keep-alive
ETag: "6374cfd3-faab"
X-Powered-By: PleskLin
Accept-Ranges: bytes
foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/315294270_1493685634449045_4996166890042696463_n.webpfull.jpg
200 OK 43 kB URL HTTP/1.1 foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/315294270_1493685634449045_4996166890042696463_n.webpfull.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x640, components 3\012- data
Hash ddf42ccc088cf9bba90f8dca5c77f859
59baa38c5b800fce35ff3641219cbf8c8331c364
a5245780fd9769648025e900d6a52ce9e1046a376127c6cc4a1f742ccb350a20
GET /wp-content/uploads/sb-instagram-feed-images/315294270_1493685634449045_4996166890042696463_n.webpfull.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foldingillusions.com/
Cookie: _ga_MP69GDNWHF=GS1.1.1669340758.1.0.1669340758.0.0.0; _ga=GA1.1.1889481251.1669340758
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 25 Nov 2022 01:45:59 GMT
Content-Type: image/jpeg
Content-Length: 42687
Last-Modified: Tue, 15 Nov 2022 12:28:38 GMT
Connection: keep-alive
ETag: "637385f6-a6bf"
X-Powered-By: PleskLin
Accept-Ranges: bytes
foldingillusions.com/wp-content/uploads/2021/10/pexels-tatiana-3312232-min-scaled.jpg
200 OK 556 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/10/pexels-tatiana-3312232-min-scaled.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2560x1707, components 3\012- data
Size 556 kB (556351 bytes)
Hash 96d97000b6c7d66989ec1fcb3a114eee
d6b32f46aa15a720b10e2c32e37d455caa256e0c
fb1b392a80603d6be6a498277dc2710ef46eb9c23eafa5c525773746f5b863c1
GET /wp-content/uploads/2021/10/pexels-tatiana-3312232-min-scaled.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:59 GMT
content-type: image/jpeg
content-length: 556351
last-modified: Wed, 06 Oct 2021 11:02:12 GMT
etag: "615d8234-87d3f"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/10/pexels-cottonbro-6074059-min-scaled.jpg
200 OK 669 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/10/pexels-cottonbro-6074059-min-scaled.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2560x1706, components 3\012- data
Size 669 kB (669045 bytes)
Hash fab1e80275a740da6448d418fdae8cab
ac2d99fb819c76dd102b8d4c8e0b7ecef0d21541
81ae6c7f2b780383177691f80bc5b7bc6837846034085e96e28f269201f7e307
GET /wp-content/uploads/2021/10/pexels-cottonbro-6074059-min-scaled.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:59 GMT
content-type: image/jpeg
content-length: 669045
last-modified: Wed, 06 Oct 2021 11:06:33 GMT
etag: "615d8339-a3575"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/314916275_1418293882028971_3462723192739210818_n.webpfull.jpg
200 OK 68 kB URL HTTP/1.1 foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/314916275_1418293882028971_3462723192739210818_n.webpfull.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x640, components 3\012- data
Hash 1ec757a31437f0cf42b05d0a8894d8c0
0039aa0cc9301dfd28c1542be804577a2561d478
885dc8651c24d903bd608d61904402e840f2b957135abae4bf63877719df3688
GET /wp-content/uploads/sb-instagram-feed-images/314916275_1418293882028971_3462723192739210818_n.webpfull.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foldingillusions.com/
Cookie: _ga_MP69GDNWHF=GS1.1.1669340758.1.0.1669340758.0.0.0; _ga=GA1.1.1889481251.1669340758
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 25 Nov 2022 01:45:59 GMT
Content-Type: image/jpeg
Content-Length: 68524
Last-Modified: Sat, 12 Nov 2022 00:24:20 GMT
Connection: keep-alive
ETag: "636ee7b4-10bac"
X-Powered-By: PleskLin
Accept-Ranges: bytes
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.ttf
200 OK 137 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.ttf
IP
File type TrueType Font data, 13 tables, 1st "FFTM", 28 names, Macintosh\012- data
Size 137 kB (136576 bytes)
Hash dbec1b4af0117cdc7c7a76090903fe77
95567ff8d60e2dffe34d11179086353416441235
3cd97d0d065ef9165afb2966faa989cb143cc14397ea07db7ccbdffe461377f9
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.ttf HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:59 GMT
content-type: application/font-sfnt
content-length: 136576
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-21580"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.ttf
200 OK 34 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.ttf
IP
File type TrueType Font data, 13 tables, 1st "FFTM", 28 names, Macintosh\012- data
Hash 547429d0f054fe33407e57011ca9ab26
8dcc0c72c424c439b0393ca60bcf08d25db9ae99
e54356ac02b129240597fdbb5452a9bed10b923f2f658cd2f44c4e56270cdb05
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.ttf HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:59 GMT
content-type: application/font-sfnt
content-length: 34052
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-8504"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.ttf
200 OK 204 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.ttf
IP
File type TrueType Font data, 13 tables, 1st "FFTM", 28 names, Macintosh\012- data
Size 204 kB (204528 bytes)
Hash f49b824a2e4784d078b768506e7bf8e7
c93491c279667947a89dc2ec2be5e785d76051dc
107b29791cfd2c528158ff645116823a660290e2b56cf0429a0761bd1d43f9b1
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.ttf HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:59 GMT
content-type: application/font-sfnt
content-length: 204528
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-31ef0"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8393
Expires: Fri, 25 Nov 2022 04:05:52 GMT
Date: Fri, 25 Nov 2022 01:45:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8393
Expires: Fri, 25 Nov 2022 04:05:52 GMT
Date: Fri, 25 Nov 2022 01:45:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8393
Expires: Fri, 25 Nov 2022 04:05:52 GMT
Date: Fri, 25 Nov 2022 01:45:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8393
Expires: Fri, 25 Nov 2022 04:05:52 GMT
Date: Fri, 25 Nov 2022 01:45:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8393
Expires: Fri, 25 Nov 2022 04:05:52 GMT
Date: Fri, 25 Nov 2022 01:45:59 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4006a9037ab5f28dca62b0aa7a704c41
74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b
556ae6516a1f272a96569a3637858292731a34e82672b682f6e7442ca68f4b1d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3955
x-amzn-requestid: 42c8d309-a8d2-47cc-8d97-c7fa3a63f8cd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCM9NGJHoAMF4sQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d8eba-2a06cda9346bd02c46955444;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 03:08:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ESacQ13nZwlbUKiNnwl6AxqC9ar8cxPctKLMFWS86aB3ZGsbxG0ZOA==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 04:22:08 GMT
age: 77031
etag: "74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3e55f70-58c6-4585-a420-ac74e1b8c6dd.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3e55f70-58c6-4585-a420-ac74e1b8c6dd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e2580ebded0a32ceecc3083ae1db2b37
2ec124224738807229328a3ade6ca493ccf4b287
010eeda33c923e2166851da1e131dcc21419d1f4f28995617ca93332ce4be08c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3e55f70-58c6-4585-a420-ac74e1b8c6dd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10679
x-amzn-requestid: aec8d040-d4e6-4185-b71e-7c049617ebc5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b4J3VEM5IAMFtcg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637989c8-42b520ea3af2a2086ad416ad;Sampled=0
x-amzn-remapped-date: Sun, 20 Nov 2022 01:58:32 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AqpyU32i39pVq4O_-tSo8Bup9eNgoPGBq_lKyeXYUsN1BapLq-xGGg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 06:12:03 GMT
age: 70436
etag: "2ec124224738807229328a3ade6ca493ccf4b287"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F96a33fb5-b971-4386-a670-7dcbbf52b051.jpeg
200 OK 2.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F96a33fb5-b971-4386-a670-7dcbbf52b051.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 66d06d3cac1784e4ce6c8c89c300f10a
41ef94d198bbf98185eb332a3b6934c3c26c3afc
55312d1b43447e4f77d8e9e52451bb63a9868ba8122c9e16e0a20479d34367e3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F96a33fb5-b971-4386-a670-7dcbbf52b051.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2351
x-amzn-requestid: 1e3e6b14-8f46-4b62-a3d1-f5dbe5d5f94f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cGupUE_VIAMFa3A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637f5e3b-573fabc44ce59c2f4c24a32d;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 12:06:19 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: XEUrOPYr2rn89eMIJORVFnpqJfxqfjBadcbplZKzqLjDkzHV8NEbHg==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 18:51:30 GMT
age: 24869
etag: "41ef94d198bbf98185eb332a3b6934c3c26c3afc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F216636c8-4200-4f0d-83d2-8579be32f1ac.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F216636c8-4200-4f0d-83d2-8579be32f1ac.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 648677a7e7bab1896a190d2e5fb7243c
6217a262002244ef3f2e8034076a735cafd9888a
72f2913f7c0770ebab0f2683bdc1ec5a5db8872e8f2c62a8fd5c9178b95dbb06
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F216636c8-4200-4f0d-83d2-8579be32f1ac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4270
x-amzn-requestid: 7327f8fb-804b-4d09-83dc-628e35ffa74b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB8xFwXoAMFkqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe384-33f83cea2c585279140f4f59;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:00 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rKROwsZ-X8yDd4iVaYBaNFe6bgHaThxafIt76PBgLoOTrPMqAVQ9iQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 22:22:43 GMT
age: 12196
etag: "6217a262002244ef3f2e8034076a735cafd9888a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 841a4b110022a99ddea6f7bf66df0fa1
126771b86638108050cf57c0d12faa27f80f0edb
240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: 47c2739d-73c5-4d91-914c-fe635cb09772
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1U8xGxgIAMF-qQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63786851-6fbe19dc5c4c20dd657604e3;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 05:23:29 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: j_8oVo464QMWMnmkxQJIDRhaIVmwhzCTHe4A57OdmaUr9HcyTtBUjg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 2750b94b402c92287d764b5fa115a042.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 05:04:28 GMT
age: 74491
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F012ad1d7-e278-4523-b537-853fcf51e3c0.jpeg
200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F012ad1d7-e278-4523-b537-853fcf51e3c0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 58d104a028a45c82a7310de66477b256
e94f119e32bcff525f9b1a1c239e77747b6fc101
84d79596f4a2c255d1ecb98f557cfa4a2a42230eb92228122df7db6662140250
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F012ad1d7-e278-4523-b537-853fcf51e3c0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15116
x-amzn-requestid: 8babc46e-4964-4296-b13d-a3ad113d3095
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCDsiGC8oAMFwLQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d7fe9-38b816f81940abb71ad60fdd;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 02:05:29 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: FBWmZXoDHzX-tjUXMn4pkKwf1XU28Mz2JkuiikoIcKtYEqx3NFWpUw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 06:12:03 GMT
age: 70436
etag: "e94f119e32bcff525f9b1a1c239e77747b6fc101"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-MP69GDNWHF>m=2oeb90&_p=671174180&gdid=dZTNiMT&cid=1889481251.1669340758&ul=en-us&sr=1280x1024&_s=1&sid=1669340758&sct=1&seg=0&dl=http%3A%2F%2Ffoldingillusions.com%2F&dt=Folding%20Illusions%20I%20%C3%81lbumes%20de%20fotos%20hechos%20a%20mano&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-MP69GDNWHF>m=2oeb90&_p=671174180&gdid=dZTNiMT&cid=1889481251.1669340758&ul=en-us&sr=1280x1024&_s=1&sid=1669340758&sct=1&seg=0&dl=http%3A%2F%2Ffoldingillusions.com%2F&dt=Folding%20Illusions%20I%20%C3%81lbumes%20de%20fotos%20hechos%20a%20mano&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-MP69GDNWHF>m=2oeb90&_p=671174180&gdid=dZTNiMT&cid=1889481251.1669340758&ul=en-us&sr=1280x1024&_s=1&sid=1669340758&sct=1&seg=0&dl=http%3A%2F%2Ffoldingillusions.com%2F&dt=Folding%20Illusions%20I%20%C3%81lbumes%20de%20fotos%20hechos%20a%20mano&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: http://foldingillusions.com
date: Fri, 25 Nov 2022 01:45:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 25 Nov 2022 00:41:08 GMT
expires: Fri, 25 Nov 2022 02:41:08 GMT
cache-control: public, max-age=7200
age: 3891
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/11/cropped-Logo_Folding_Illusions-192x192.png
200 OK 8.2 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/11/cropped-Logo_Folding_Illusions-192x192.png
IP
File type PNG image data, 192 x 192, 8-bit colormap, non-interlaced\012- data
Hash 40df24a24d61b60d31cb777c1b63af2e
9afbe17d8b41f6f141a194a4466e4d1a7a270ee9
02d5e0ed2f4a1c1dcc24bee7d424531261d5529b6135904f10e3d5b8a2c04e55
GET /wp-content/uploads/2021/11/cropped-Logo_Folding_Illusions-192x192.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:59 GMT
content-type: image/png
content-length: 8164
last-modified: Tue, 23 Nov 2021 12:53:12 GMT
etag: "619ce438-1fe4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/11/cropped-Logo_Folding_Illusions-32x32.png
200 OK 1.2 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/11/cropped-Logo_Folding_Illusions-32x32.png
IP
File type PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced\012- data
Hash d8f72e1d65df907322448fb4e6fdf530
a618d7d998fef24802759ba07ae988956bc3c6b9
d27a3b1c908861c13b7d14808f98017e7faec16cd4a487d6d65875cf7fb2b024
GET /wp-content/uploads/2021/11/cropped-Logo_Folding_Illusions-32x32.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:59 GMT
content-type: image/png
content-length: 1178
last-modified: Tue, 23 Nov 2021 12:53:12 GMT
etag: "619ce438-49a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/?wc-ajax=get_refreshed_fragments
301 Moved Permanently 0 B URL HTTP/1.1 foldingillusions.com/?wc-ajax=get_refreshed_fragments
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
POST /?wc-ajax=get_refreshed_fragments HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 18
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: http://foldingillusions.com/
Cookie: _ga_MP69GDNWHF=GS1.1.1669340758.1.0.1669340758.0.0.0; _ga=GA1.1.1889481251.1669340758
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 25 Nov 2022 01:46:01 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
WPO-Cache-Status: not cached
WPO-Cache-Message: The request method was not GET (POST), In the settings, caching is disabled for matches for one of the current request's GET parameters
X-Redirect-By: WordPress
Location: https://foldingillusions.com/?wc-ajax=get_refreshed_fragments
X-Powered-By: PHP/7.3.33, PleskLin
foldingillusions.com/wp-content/uploads/2021/01/logox2-1.png
200 OK 34 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/01/logox2-1.png
IP
File type PNG image data, 300 x 323, 8-bit/color RGBA, non-interlaced\012- data
Hash 7e0500f407eec1099385570e0da721bb
7643b29df83055477145d20b5b21e6ef0d1551f1
0afb569855fbd0d87f890112ec4031808f3bca0f6b79dcde200fffe46ce6553f
GET /wp-content/uploads/2021/01/logox2-1.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:46:02 GMT
content-type: image/png
content-length: 33797
last-modified: Thu, 25 Feb 2021 06:51:07 GMT
etag: "603748db-8405"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/?wc-ajax=get_refreshed_fragments
200 OK 0 B URL HTTP/2 foldingillusions.com/?wc-ajax=get_refreshed_fragments
IP
Analyzer Verdict Alert fortinet Malware
OPTIONS /?wc-ajax=get_refreshed_fragments HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-requested-with
Referer: http://foldingillusions.com/
Origin: http://foldingillusions.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:46:03 GMT
content-type: text/html; charset=UTF-8
wpo-cache-status: not cached
wpo-cache-message: The request method was not GET (OPTIONS), In the settings, caching is disabled for matches for one of the current request's GET parameters
access-control-allow-origin: http://foldingillusions.com
access-control-allow-credentials: true
x-powered-by: PHP/7.3.33, PleskLin
content-encoding: br
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-3-1200x900.png
200 OK 0 B URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-3-1200x900.png
IP
GET /wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-3-1200x900.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:57 GMT
content-type: image/png
content-length: 1498189
last-modified: Wed, 08 Dec 2021 11:00:34 GMT
etag: "61b09052-16dc4d"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-56432496.min.js
200 OK 0 B URL HTTP/2 foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-56432496.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-56432496.min.js HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:57 GMT
content-type: application/javascript
last-modified: Wed, 08 Dec 2021 11:29:14 GMT
etag: W/"61b0970a-5b529"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/12/andris-romanovskis-267865-unsplash.jpg
200 OK 0 B URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/andris-romanovskis-267865-unsplash.jpg
IP
GET /wp-content/uploads/2021/12/andris-romanovskis-267865-unsplash.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-26c75ab0.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:58 GMT
content-type: image/jpeg
content-length: 339469
last-modified: Wed, 08 Dec 2021 10:43:51 GMT
etag: "61b08c67-52e0d"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/10/pexels-cottonbro-6667305-scaled.jpg
301 Moved Permanently 0 B URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/10/pexels-cottonbro-6667305-scaled.jpg
IP
GET /wp-content/uploads/2021/10/pexels-cottonbro-6667305-scaled.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Fri, 25 Nov 2022 01:46:02 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-redirect-by: Rank Math SEO
location: https://foldingillusions.com
x-powered-by: PHP/7.3.33, PleskLin
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-5f3dc96a.min.js
200 OK 0 B URL HTTP/2 foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-5f3dc96a.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-5f3dc96a.min.js HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 01:45:57 GMT
content-type: application/javascript
last-modified: Tue, 25 Jan 2022 23:22:07 GMT
etag: W/"61f0861f-af323"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
82.223.33.49
142.250.74.168
23.36.76.226
93.184.220.29