herriakmargozten.com/
301 Moved Permanently 706 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 67f3a5933c17b3ab044826d3927d0ba9
5957076d09bacaa6db8ddc832b4fd87ed8f05f8a
97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Content-Type: text/html
Content-Length: 706
Date: Mon, 14 Nov 2022 18:49:53 GMT
Server: LiteSpeed
Location: https://herriakmargozten.com/
X-Powered-By: PleskLin
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7786cd9bd97e024b3a1d16215defaad2
786ddbb74b0b6bd9270622dbe0258d6caee407c1
9c297ccfd178eec7e472fb64a6b2e34d4c7a6dec32870f49982353e590196ba0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C297CCFD178EEC7E472FB64A6B2E34D4C7A6DEC32870F49982353E590196BA0"
Last-Modified: Mon, 14 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3452
Expires: Mon, 14 Nov 2022 19:47:25 GMT
Date: Mon, 14 Nov 2022 18:49:53 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 832aecaba9f06ee2d39d4d4bea65f13c
7195d6ffadfdbc6fc8e92c63ae28d4a3038a72dc
a437509314a97065de6c7b9e5e2b4b61f0234b45f5f5bf2649cbdf499577bfd3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2919
Cache-Control: max-age=145803
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 18:49:53 GMT
Etag: "637218f5-1d7"
Expires: Wed, 16 Nov 2022 11:19:56 GMT
Last-Modified: Mon, 14 Nov 2022 10:31:17 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4736bac84ca28f2b1e961159fb4ea098
1319612979f53896fcfeacd4215c2715d4951e4c
5e81213e111ddf68c7f884f72b4e06fc4dc95eb902c3cf0762236b2418840dba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Length, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 14 Nov 2022 18:44:34 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 319
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8c15cef160d1514fc977ed4c4e97086c
ffe4ce3199658a1fc7a45d1607df40ef3911621d
db1a82d8a2bacc0257b87efec0c365c1b769700fa27ce928321e082505f1d72a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DB1A82D8A2BACC0257B87EFEC0C365C1B769700FA27CE928321E082505F1D72A"
Last-Modified: Sun, 13 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6152
Expires: Mon, 14 Nov 2022 20:32:25 GMT
Date: Mon, 14 Nov 2022 18:49:53 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 1ApGvt/kBtewFG//aTxGvh/Vf5fAg8+Ohvi0tLo4NDLb6hXH91SG9fHpevtNgKi8Lr/c9xQUyOA=
x-amz-request-id: H1W70HQYX8RX2DXF
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 14 Nov 2022 17:51:12 GMT
age: 3521
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 14 Nov 2022 18:49:53 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 32800c8ca90d3b4d79ac8d9b029d2c80
a4553b75ab8140ece3bb7f64de63695722f9f94f
1002e36878f0760cdc9e18b6ca951eefe68e525c946e1e9e9f34dea9da843e2e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1002E36878F0760CDC9E18B6CA951EEFE68E525C946E1E9E9F34DEA9DA843E2E"
Last-Modified: Sun, 13 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21531
Expires: Tue, 15 Nov 2022 00:48:44 GMT
Date: Mon, 14 Nov 2022 18:49:53 GMT
Connection: keep-alive
herriakmargozten.com/
302 Found 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
set-cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; path=/; domain=herriakmargozten.com; HttpOnly; secure
x-logged-in: False
x-content-powered-by: K2 v2.10.2 (by JoomlaWorks)
p3p: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
location: https://www.herriakmargozten.com/en/
content-type: text/html; charset=utf-8
expires: Wed, 17 Aug 2005 00:00:00 GMT
last-modified: Mon, 14 Nov 2022 18:49:53 GMT
cache-control: no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-length: 0
date: Mon, 14 Nov 2022 18:49:53 GMT
server: LiteSpeed
alt-svc: quic=":443"; ma=2592000; v="43,46", h3-Q043=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-25=":443"; ma=2592000, h3-27=":443"; ma=2592000
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Cache-Control, Pragma, Retry-After, ETag, Alert, Expires, Backoff, Content-Type, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 14 Nov 2022 18:25:01 GMT
cache-control: public,max-age=3600
age: 1492
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 3200044057cb585f1a435c0efece61c8
8305d5b5891288aa9996b4b4ca6fce2265413194
df45704534a24928e7659a6d8cd1b5ac9ffa9b224b02b34a2d6aed5ef69fd586
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5766
Cache-Control: max-age=143593
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 18:49:54 GMT
Etag: "63720535-1d7"
Expires: Wed, 16 Nov 2022 10:43:07 GMT
Last-Modified: Mon, 14 Nov 2022 09:07:01 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
www.herriakmargozten.com/media/system/css/modal.css?ae9bd326c6a4b47700986b914b0a246f
200 OK 844 B URL HTTP/2 www.herriakmargozten.com/media/system/css/modal.css?ae9bd326c6a4b47700986b914b0a246f
IP
Hash 265e58237842624a2478845267e537de
9fb250a85cdc667e23e5b8628e92e44d108eea33
1aede16816bddc03fb36d023562783a40d6d2920c358a7192fe035e14a58c8f1
Analyzer Verdict Alert fortinet Malware
GET /media/system/css/modal.css?ae9bd326c6a4b47700986b914b0a246f HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: text/css
last-modified: Mon, 09 Mar 2020 14:22:36 GMT
etag: "bc5-5e66512c-a678968e74af5322;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 844
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/templates/gk_quark/css/font-awesome.css
200 OK 5.4 kB URL HTTP/2 www.herriakmargozten.com/templates/gk_quark/css/font-awesome.css
IP
File type troff or preprocessor input, ASCII text, with very long lines (357)
Hash 0b11ab79befe62968cac205b8ed275a0
8b5fb0156072627d022e91d0083b4b701c4e0b6d
3dd78837077d095b78af4034578206e0255d1164f41886581858f136bf1a0a54
GET /templates/gk_quark/css/font-awesome.css HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: text/css
last-modified: Thu, 24 Nov 2016 17:28:18 GMT
etag: "7049-58372332-88f1fb0e76079e70;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5400
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/templates/gk_quark/css/normalize.css
200 OK 2.3 kB URL HTTP/2 www.herriakmargozten.com/templates/gk_quark/css/normalize.css
IP
Hash 95e9a849cdbf8583def6b35291031efe
d7235413af5cff143cbaf7a7456965d767bc6ac1
6407e1c4fb52215e3a8611bc90d85811931d0cdf594ab2af1b19fa3a55e77ac6
GET /templates/gk_quark/css/normalize.css HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: text/css
last-modified: Thu, 24 Nov 2016 17:28:18 GMT
etag: "2019-58372332-95db217535828f44;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2263
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/templates/gk_quark/css/system/system.css
200 OK 524 B URL HTTP/2 www.herriakmargozten.com/templates/gk_quark/css/system/system.css
IP
Hash 74167146db4ecb96330e02c15e18fa39
9a3c134c7d9fa24f9c1c5deb6d28c05f76ad5ac1
31813c2a5bb6a0c7d5f9e5d3af2a44784c7a6dfbe85c90260ecfba888faed09a
GET /templates/gk_quark/css/system/system.css HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: text/css
last-modified: Thu, 24 Nov 2016 17:28:18 GMT
etag: "848-58372332-e52c3a3519f10a82;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 524
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/en/
200 OK 36 kB URL HTTP/2 www.herriakmargozten.com/en/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3191), with CRLF, CR, LF line terminators
Hash d4eadd0a288b5bf0d42f349eba25e051
f0017650545055b480f67d6857610e753f4a0a21
f8dde1897e13e3ea1a84a2a901f3aea3f5c332119132c0718d801a2c1b0101bb
Analyzer Verdict Alert fortinet Malware
GET /en/ HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/7.4.33, PleskLin
x-logged-in: False
x-content-powered-by: K2 v2.10.2 (by JoomlaWorks)
p3p: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
content-type: text/html; charset=utf-8
expires: Wed, 17 Aug 2005 00:00:00 GMT
last-modified: Mon, 14 Nov 2022 18:49:54 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
content-encoding: br
vary: Accept-Encoding
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.herriakmargozten.com/modules/mod_image_show_gk4/styles/gk_quark/style.css
200 OK 873 B URL HTTP/2 www.herriakmargozten.com/modules/mod_image_show_gk4/styles/gk_quark/style.css
IP
Hash 1651d9c3491fbaf74f02db05cca25766
daae888bc4d52f044a67a6cb450f6063f1835b8a
7b750f631dda243e5ab7d5b01b16524625b2c28af8bb9feadf24b60e06e5bcfe
GET /modules/mod_image_show_gk4/styles/gk_quark/style.css HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: text/css
last-modified: Thu, 24 Nov 2016 17:28:46 GMT
etag: "124e-5837234e-92423bc76e943b37;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 873
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/media/mod_languages/css/template.css
200 OK 133 B URL HTTP/2 www.herriakmargozten.com/media/mod_languages/css/template.css
IP
Hash 874a731349991bb17caed7240c80f4ee
aafd7198ac2d489b3f545147a0dffed6ae2f6eb7
c4d41515c8661d06e603d6d7801f03897941a8313ff578ef922a6fd225c70c77
GET /media/mod_languages/css/template.css HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: text/css
last-modified: Mon, 09 Mar 2020 14:22:36 GMT
etag: "14f-5e66512c-af423239a8e083ac;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 133
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/magnific-popup@1.1.0/dist/jquery.magnific-popup.min.js
200 OK 7.3 kB URL HTTP/2 cdn.jsdelivr.net/npm/magnific-popup@1.1.0/dist/jquery.magnific-popup.min.js
IP
File type ASCII text, with very long lines (20087)
Hash 1da1311038d7c0e2790d220c30896315
7ea02ce85caf930cd8fc325b228367f798bf2ca7
77b2ee9e2aa436295fdf10e32b587a09b760f098d93ae2fdc01d567fb8392972
GET /npm/magnific-popup@1.1.0/dist/jquery.magnific-popup.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.1.0
x-jsd-version-type: version
etag: W/"4ef8-9FXF8VP4cuUiZfh6ZE/4n+FKb7Y"
content-encoding: gzip
accept-ranges: bytes
date: Mon, 14 Nov 2022 18:49:54 GMT
age: 20598150
x-served-by: cache-fra19164-FRA, cache-bma1667-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 7348
X-Firefox-Spdy: h2
www.herriakmargozten.com/media/jui/js/jquery.min.js?ae9bd326c6a4b47700986b914b0a246f
200 OK 33 kB URL HTTP/2 www.herriakmargozten.com/media/jui/js/jquery.min.js?ae9bd326c6a4b47700986b914b0a246f
IP
File type ASCII text, with very long lines (65469)
Hash 0973287d8b659b5d23e4dd4f3358fc86
7b4cdbf24e342c721630e694edc127172aa48cc1
4b06eeeab79b5ab6828cc65139b4d442a0405683704cd627b5416ecebb73ae70
Analyzer Verdict Alert fortinet Malware
GET /media/jui/js/jquery.min.js?ae9bd326c6a4b47700986b914b0a246f HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: application/javascript
last-modified: Mon, 09 Mar 2020 14:22:36 GMT
etag: "1795e-5e66512c-a9e435a76991ae4d;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 32722
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/media/jui/js/jquery-noconflict.js?ae9bd326c6a4b47700986b914b0a246f
200 OK 21 B URL HTTP/2 www.herriakmargozten.com/media/jui/js/jquery-noconflict.js?ae9bd326c6a4b47700986b914b0a246f
IP
Hash e2060c4e5e5955c824723b13a212d3ec
18420ce484978f8ba3d7371febf1638828bb7a67
5b6cf4e6eda02f7c90b60b3c32413c0851915f8f80a268a913b92929085132a6
Analyzer Verdict Alert fortinet Malware
GET /media/jui/js/jquery-noconflict.js?ae9bd326c6a4b47700986b914b0a246f HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: application/javascript
last-modified: Mon, 09 Mar 2020 14:22:36 GMT
etag: "15-5e66512c-a704d802238fa9df;;;"
accept-ranges: bytes
content-length: 21
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/media/jui/js/jquery-migrate.min.js?ae9bd326c6a4b47700986b914b0a246f
200 OK 3.8 kB URL HTTP/2 www.herriakmargozten.com/media/jui/js/jquery-migrate.min.js?ae9bd326c6a4b47700986b914b0a246f
IP
File type ASCII text, with very long lines (9959)
Hash 7c4522c04f6ad8cc5ba9d83d27a652c9
9b3058c58d6f0f3bcf204d57d5e38fc3ef507b8f
186df88869ab6951e2647db3b07fc025857cdab144cd7367513944d1d2f0f26c
GET /media/jui/js/jquery-migrate.min.js?ae9bd326c6a4b47700986b914b0a246f HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: application/javascript
last-modified: Mon, 09 Mar 2020 14:22:36 GMT
etag: "2748-5e66512c-bafe835c906c7206;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3823
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/media/k2/assets/js/k2.frontend.js?v=2.10.2&b=20191212&sitepath=/
200 OK 2.2 kB URL HTTP/2 www.herriakmargozten.com/media/k2/assets/js/k2.frontend.js?v=2.10.2&b=20191212&sitepath=/
IP
Hash f4a97865836ad6e62d1e0daea6916823
4a40b49e81cb3492a68137b9e4c93958b75ecc98
67759b6b6903e41b02e28fd30e0469be132e444561ad4b6713db3a38dbebb0b9
GET /media/k2/assets/js/k2.frontend.js?v=2.10.2&b=20191212&sitepath=/ HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: application/javascript
last-modified: Fri, 10 Jan 2020 06:44:28 GMT
etag: "2115-5e181d4c-50c9cf4f4a05af3e;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2161
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/magnific-popup@1.1.0/dist/magnific-popup.min.css
200 OK 1.8 kB URL HTTP/2 cdn.jsdelivr.net/npm/magnific-popup@1.1.0/dist/magnific-popup.min.css
IP
File type ASCII text, with very long lines (5235)
Hash 2f53a1e5b3aa32553c5bd79be4d0b46d
e8a697a157a9256507ac33eeb3f32447d4ad5ef1
f6b729268be8b4d2682cf66289e09749c9a0b3234a958942f7174b824bbebee3
GET /npm/magnific-popup@1.1.0/dist/magnific-popup.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 1.1.0
x-jsd-version-type: version
etag: W/"15d0-l9cebZjEtdZbwVwNIEewoDsmxg4"
content-encoding: gzip
accept-ranges: bytes
date: Mon, 14 Nov 2022 18:49:54 GMT
age: 17317958
x-served-by: cache-fra19162-FRA, cache-bma1667-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1814
X-Firefox-Spdy: h2
www.herriakmargozten.com/media/jui/js/bootstrap.min.js?ae9bd326c6a4b47700986b914b0a246f
200 OK 7.4 kB URL HTTP/2 www.herriakmargozten.com/media/jui/js/bootstrap.min.js?ae9bd326c6a4b47700986b914b0a246f
IP
File type ASCII text, with very long lines (28972)
Hash 060f3b1933c4a6d9ccf659728b707b30
c800bd97b3f117b445c326f72afd2b930852ab85
c47555cadbb547d02d4100b4a7c152f932b43a41e200bf94c8c19bc85a1d7fa2
Analyzer Verdict Alert fortinet Malware
GET /media/jui/js/bootstrap.min.js?ae9bd326c6a4b47700986b914b0a246f HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: application/javascript
last-modified: Mon, 09 Mar 2020 14:22:36 GMT
etag: "71c6-5e66512c-cdd09cb5204122c3;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7400
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/media/system/js/core.js?ae9bd326c6a4b47700986b914b0a246f
200 OK 3.1 kB URL HTTP/2 www.herriakmargozten.com/media/system/js/core.js?ae9bd326c6a4b47700986b914b0a246f
IP
File type Unicode text, UTF-8 text, with very long lines (8803), with no line terminators
Hash 12b32e9c0ce6436be9bfe2a8f87eb6ba
f69b7ea12f5d54ae00e3f55cb723b1e6b8d4371a
7fce800db077b6ec5001368e08b702f5910c8e2c8c5dea2d60a7577f8c429023
Analyzer Verdict Alert fortinet Malware
GET /media/system/js/core.js?ae9bd326c6a4b47700986b914b0a246f HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: application/javascript
last-modified: Mon, 09 Mar 2020 14:22:36 GMT
etag: "2268-5e66512c-df082bdc3f48e1da;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3135
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/media/system/js/modal.js?ae9bd326c6a4b47700986b914b0a246f
200 OK 3.2 kB URL HTTP/2 www.herriakmargozten.com/media/system/js/modal.js?ae9bd326c6a4b47700986b914b0a246f
IP
File type Unicode text, UTF-8 text, with very long lines (9974)
Hash 00901d5c0cf5307878bb309b244029b4
bccf24d3d566ba135217a6e3c8f6a617949800fc
b9745aeece1ba65bf87d19fb40ea6382c96e8a1bd02eb6f910ea35b7b1abdb11
Analyzer Verdict Alert fortinet Malware
GET /media/system/js/modal.js?ae9bd326c6a4b47700986b914b0a246f HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: application/javascript
last-modified: Mon, 09 Mar 2020 14:22:36 GMT
etag: "278f-5e66512c-5f8ba8b8cf3acca4;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3154
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/templates/gk_quark/js/modernizr.js
200 OK 4.2 kB URL HTTP/2 www.herriakmargozten.com/templates/gk_quark/js/modernizr.js
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (10045)
Hash 543ccdd146ac1458afa1adf817a951ab
16fa418c3ff1d9a2f94eee6e6c92c495e0c94e91
bf9c44241c8ec5762e21d570a03abe499455fca29c1c184e2b7e6474dea586ba
Analyzer Verdict Alert fortinet Malware
GET /templates/gk_quark/js/modernizr.js HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: application/javascript
last-modified: Thu, 24 Nov 2016 17:28:18 GMT
etag: "2854-58372332-5d7d8594a928c686;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4243
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/templates/gk_quark/js/gk.scripts.js
200 OK 4.5 kB URL HTTP/2 www.herriakmargozten.com/templates/gk_quark/js/gk.scripts.js
IP
Hash 81acb534a4d7b88aa5f519ecce6e8214
5c09bebdf3da877161f2e31e564f6ffb2d8c8d7d
ba62bfbc30efb78a0244b1fc8817981d0cdac35cf8633d1945b1f8ef76c751ec
Analyzer Verdict Alert fortinet Malware
GET /templates/gk_quark/js/gk.scripts.js HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: application/javascript
last-modified: Thu, 24 Nov 2016 17:28:18 GMT
etag: "4755-58372332-6272d85973c9b5e8;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4520
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/templates/gk_quark/js/gk.menu.js
200 OK 2.3 kB URL HTTP/2 www.herriakmargozten.com/templates/gk_quark/js/gk.menu.js
IP
Hash 9cfe9a5f0d9bddfb0d276a5dfbb7bcc7
2aaba08b959cb81662e5935c7c5a3c1fc341efad
cfd22e22c0b786a802c70c540b8b83059b3024aaffdc60ccb528947b4ff74773
Analyzer Verdict Alert fortinet Malware
GET /templates/gk_quark/js/gk.menu.js HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: application/javascript
last-modified: Thu, 24 Nov 2016 17:28:18 GMT
etag: "2e31-58372332-5da3f3da05308834;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2279
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/media/system/js/mootools-core.js?ae9bd326c6a4b47700986b914b0a246f
200 OK 26 kB URL HTTP/2 www.herriakmargozten.com/media/system/js/mootools-core.js?ae9bd326c6a4b47700986b914b0a246f
IP
File type ASCII text, with very long lines (785)
Hash d89115fe1b46eb855adbc0eb84296ef5
b24b6b400f05ca79d4fafc36dcbb15bd0ec01d51
389736b3ba985cdb476dde1da113cecd770fd4958cbde55432dbdb6b82a5cb8d
Analyzer Verdict Alert fortinet Malware
GET /media/system/js/mootools-core.js?ae9bd326c6a4b47700986b914b0a246f HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: application/javascript
last-modified: Mon, 09 Mar 2020 14:22:36 GMT
etag: "147b5-5e66512c-44aa7fd984a6397d;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 26107
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/templates/gk_quark/js/photoswipe.min.js
200 OK 12 kB URL HTTP/2 www.herriakmargozten.com/templates/gk_quark/js/photoswipe.min.js
IP
File type ASCII text, with very long lines (30926)
Hash dbf45ea9829c99aa1f242ba6e9712428
04d2b557a7b39c0017d4474832542c8e9c52d083
b94e6cdd2f4a9c3e7b3da5ef944f08bee7ed631b9018692372a0cfa91c8148f3
Analyzer Verdict Alert fortinet Malware
GET /templates/gk_quark/js/photoswipe.min.js HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: application/javascript
last-modified: Thu, 24 Nov 2016 17:28:18 GMT
etag: "7933-58372332-b047438b02cb017d;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 11554
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/templates/gk_quark/js/photoswipe-ui.min.js
200 OK 3.5 kB URL HTTP/2 www.herriakmargozten.com/templates/gk_quark/js/photoswipe-ui.min.js
IP
File type HTML document, ASCII text, with very long lines (9564)
Hash 2fa249c45c212a4d55d423abf25c6135
93906af5e0090c5d3b5d75b49a0c70b6f4c1d92f
3103bbb1c67e40c36af2a2fe4001cab5b6b5c5559a1966721d3a7f98c8a117f7
Analyzer Verdict Alert fortinet Malware
GET /templates/gk_quark/js/photoswipe-ui.min.js HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: application/javascript
last-modified: Thu, 24 Nov 2016 17:28:18 GMT
etag: "25cb-58372332-1cde7498c194be1f;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3505
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/templates/gk_quark/js/scrollreveal.js
200 OK 3.7 kB URL HTTP/2 www.herriakmargozten.com/templates/gk_quark/js/scrollreveal.js
IP
File type ASCII text, with very long lines (8525)
Hash 75d3c0f3fe2893492b0f1a8a4a22cd0a
a898307eb96dd1eb080c165c35d389495eca0979
a713fa36de85f9f5ba4f69742b5c518de100271944cf1b3337c7bf5803372a6e
Analyzer Verdict Alert fortinet Malware
GET /templates/gk_quark/js/scrollreveal.js HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: application/javascript
last-modified: Thu, 24 Nov 2016 17:28:18 GMT
etag: "243a-58372332-845ef6a992e103ec;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3689
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/templates/gk_quark/js/gk.restaurant.js
200 OK 513 B URL HTTP/2 www.herriakmargozten.com/templates/gk_quark/js/gk.restaurant.js
IP
Hash 8d5fb95caf86bc767efc912792f2ae34
604279848a8e08165e2c507b26dcd84e34f60709
ce840cfb77db6de601585c71e65ade4de7ff7e228ddf63bf92e077f0b95fb88b
Analyzer Verdict Alert fortinet Malware
GET /templates/gk_quark/js/gk.restaurant.js HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: application/javascript
last-modified: Thu, 24 Nov 2016 17:28:18 GMT
etag: "744-58372332-77fd415889ece88d;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 513
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/modules/mod_image_show_gk4/styles/gk_quark/engine.js
200 OK 1.3 kB URL HTTP/2 www.herriakmargozten.com/modules/mod_image_show_gk4/styles/gk_quark/engine.js
IP
Hash 05016d533dd8348fb826098b913064f2
135c8753827f4bc3224aec98ec5de7158aaff6e9
e1f18e1c2e0db6bb58c7ffa9d910ee468b8ef59e8ff8ca9bc58d7c508349a8c4
Analyzer Verdict Alert fortinet Malware
GET /modules/mod_image_show_gk4/styles/gk_quark/engine.js HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: application/javascript
last-modified: Thu, 24 Nov 2016 17:28:46 GMT
etag: "16e4-5837234e-7763b0fe6845e5a4;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1300
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/modules/mod_news_pro_gk5/tmpl/portal_modes/news_slider/script.jquery.js
200 OK 953 B URL HTTP/2 www.herriakmargozten.com/modules/mod_news_pro_gk5/tmpl/portal_modes/news_slider/script.jquery.js
IP
Hash 370cbfb38372efb1464e37f6ed865de1
f06ea575716f659e588817577d8e632173e6e1e2
0d64d48b6b116eb80c77d2190e3761228b0bf3b4f52314ef1c9a269bae242c23
Analyzer Verdict Alert fortinet Malware
GET /modules/mod_news_pro_gk5/tmpl/portal_modes/news_slider/script.jquery.js HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: application/javascript
last-modified: Thu, 24 Nov 2016 17:28:46 GMT
etag: "f9e-5837234e-bb9fa146b83592f9;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 953
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/templates/gk_quark/css/small.desktop.css
200 OK 801 B URL HTTP/2 www.herriakmargozten.com/templates/gk_quark/css/small.desktop.css
IP
Hash a660e834dc8af646544607cf0cd0dd3a
8c77477c0db1075137d14ae4685e404ea68cbaa9
35c83820650d935483397846d17c3d18b75720064fda614c873f1a458df91adc
GET /templates/gk_quark/css/small.desktop.css HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: text/css
last-modified: Thu, 24 Nov 2016 17:28:18 GMT
etag: "ef4-58372332-55803aa54af8fc85;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 801
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/media/system/js/mootools-more.js?ae9bd326c6a4b47700986b914b0a246f
200 OK 65 kB URL HTTP/2 www.herriakmargozten.com/media/system/js/mootools-more.js?ae9bd326c6a4b47700986b914b0a246f
IP
File type Unicode text, UTF-8 text, with very long lines (2903)
Hash 3e9809d4d4acde57ed0d88f6ad600c92
538a2d176579ef994e9d8a8439824c460622cb38
51f1386dde3a14bf2e13a906b779fb1a6c7e6d7c51680872214e230c7e1f3a77
Analyzer Verdict Alert fortinet Malware
GET /media/system/js/mootools-more.js?ae9bd326c6a4b47700986b914b0a246f HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: application/javascript
last-modified: Mon, 09 Mar 2020 14:22:36 GMT
etag: "39d19-5e66512c-37f5fd0db8fc682;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 65072
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Fghcea5HuWTEF/RSVobF+w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: I76eh6CWlD38ko6RhIry+NatJTo=
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 1af800aa2b326e8af0f2640db68a7a0d
4c617814f5c705737bf4bf111c53bf40bb932af5
594f573b6e73b1d385ae75a518c18a0bb833ac4a3f894fcea377096c756f8cc1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 18:49:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b2d6aeeb303eaefc4cc6900e30da3b1b
4c3c027013211aa1b987006d0eb6c72f18c6a657
f542eab7c032d6c5f59710ee8993a01537e0fa2bf3882a6a699de85bba020999
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 18:49:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.herriakmargozten.com/templates/gk_quark/js/kalendae.js
200 OK 21 kB URL HTTP/2 www.herriakmargozten.com/templates/gk_quark/js/kalendae.js
IP
Hash f72840d48b36cd6edbceb88f7954c96a
1d3860737f29e2836bec05c4ec038f79e2af9b83
b47666a00db5d0db4d5ea6abedd5f5e3065828f8df8d1e8c4ab893378a46aeee
Analyzer Verdict Alert fortinet Malware
GET /templates/gk_quark/js/kalendae.js HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: application/javascript
last-modified: Thu, 24 Nov 2016 17:28:18 GMT
etag: "15237-58372332-c12828b7739607fd;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 20632
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/media/mod_languages/images/eu_es.gif
200 OK 230 B URL HTTP/2 www.herriakmargozten.com/media/mod_languages/images/eu_es.gif
IP
File type GIF image data, version 87a, 18 x 10\012- data
Hash bca92a267d1fde7012cda792e63f20ae
c5cb6605e3366a1b55266be6311b12452dc2cce8
ee6449713b7839bf631b3171c36b23a2493be9aceffda2967291c1da71806e53
GET /media/mod_languages/images/eu_es.gif HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: image/gif
last-modified: Mon, 09 Mar 2020 14:22:36 GMT
etag: "e6-5e66512c-f5fb83f81541c1a1;;;"
accept-ranges: bytes
content-length: 230
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/media/mod_languages/images/es.gif
200 OK 169 B URL HTTP/2 www.herriakmargozten.com/media/mod_languages/images/es.gif
IP
File type GIF image data, version 87a, 18 x 12\012- data
Hash 2773d70dd10b25208af0e02151ddaef9
ee6eab80cfbac5bb362161cb0fbe4cc2b9b5c33d
4b488639f0cf5d69cef7b5465329f797697dcf8d930728eae793f1e41d913a57
GET /media/mod_languages/images/es.gif HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: image/gif
last-modified: Mon, 09 Mar 2020 14:22:36 GMT
etag: "a9-5e66512c-8c92ce9e909df04e;;;"
accept-ranges: bytes
content-length: 169
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/media/mod_languages/images/en.gif
200 OK 1.0 kB URL HTTP/2 www.herriakmargozten.com/media/mod_languages/images/en.gif
IP
File type GIF image data, version 87a, 18 x 12\012- data
Hash dc27490e740f62c372205d04e5b0400e
cad81078b95b980801485ac2d69b10a45b8ff3f6
5d14e1355f6dc3fae99dda64bd1b376867196c66c2eb3dd07ffb18f8dd0d242b
GET /media/mod_languages/images/en.gif HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: image/gif
last-modified: Mon, 09 Mar 2020 14:22:36 GMT
etag: "403-5e66512c-ef71fd7e5a85d7ae;;;"
accept-ranges: bytes
content-length: 1027
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/logo-en-movile-gr250x144.png
200 OK 39 kB URL HTTP/2 www.herriakmargozten.com/images/logo-en-movile-gr250x144.png
IP
File type PNG image data, 250 x 120, 8-bit/color RGBA, non-interlaced\012- data
Hash 00f90ce059f520342f993d61a32a9dd6
66965cc8502e132ab29b47d8a4f0729099aa6f99
4f55ddc20d97e20042b5b256198af8f3adb180cab58c15f301dac4f119475fc5
GET /images/logo-en-movile-gr250x144.png HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: image/png
last-modified: Thu, 24 Nov 2016 17:28:48 GMT
etag: "98d8-58372350-1aa8639357abea1d;;;"
accept-ranges: bytes
content-length: 39128
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/modules/mod_news_pro_gk5/cache/k2.items.cache.d7a332411e14769f300879cf8b1d4da6_Genericnsp-879.jpg
200 OK 46 kB URL HTTP/2 www.herriakmargozten.com/modules/mod_news_pro_gk5/cache/k2.items.cache.d7a332411e14769f300879cf8b1d4da6_Genericnsp-879.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95", baseline, precision 8, 500x350, components 3\012- data
Hash 0bd7df7e1ee6e84d3f358aa6c94a3ebf
2b31b4acaf59206a5b624e33f3cfd51f48c8846c
d544217dc33caffc61a529276ff5c1fda7c638bc84d19d41e232fae06a862eb6
GET /modules/mod_news_pro_gk5/cache/k2.items.cache.d7a332411e14769f300879cf8b1d4da6_Genericnsp-879.jpg HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: image/jpeg
last-modified: Mon, 14 Nov 2022 18:49:47 GMT
etag: "b31c-63728dcb-8c645d8e2c60b1bc;;;"
accept-ranges: bytes
content-length: 45852
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
Hash 8a45fbec9e83c2fcf9793eb092083338
e079d5a99395179b62861c7d75c9a0a534bb2adf
9a3311d63827615483a98a6c3893745db47b3b0856fce19d902e065a7035edae
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 14 Nov 2022 18:49:54 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "F7BBB4E40D5D8F4F3FC55CC048BE79778D17C8E7"
Expires: Tue, 15 Nov 2022 05:00:00 GMT
Last-Modified: Mon, 14 Nov 2022 17:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1452
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76a1ee04a87cb4f1-OSL
www.googletagmanager.com/gtag/js?id=UA-88055469-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-88055469-1
IP
File type ASCII text, with very long lines (1921)
Hash 89432b958344a01907baa4403a359059
0daf2f8a6bbba488188c5a519bdfed149a84dc46
5126293ab24870fed541efb330d00d854eccd61848ca7209dfc87cd5d6ee0631
GET /gtag/js?id=UA-88055469-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 14 Nov 2022 18:49:54 GMT
expires: Mon, 14 Nov 2022 18:49:54 GMT
cache-control: private, max-age=900
last-modified: Mon, 14 Nov 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43612
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.herriakmargozten.com/modules/mod_news_pro_gk5/cache/k2.items.cache.391d45802a606be64095bd7b66c67316_Genericnsp-879.jpg
200 OK 56 kB URL HTTP/2 www.herriakmargozten.com/modules/mod_news_pro_gk5/cache/k2.items.cache.391d45802a606be64095bd7b66c67316_Genericnsp-879.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95", baseline, precision 8, 500x350, components 3\012- data
Hash 2017faeb36581549fb09e98c3a1cd947
0edc8e7a9d121ca462fe6469efc2e9a66e1d23f4
deee626c9d90e10c22bec6029d2c6dc094e47239950fbddf0cd3b094b23a7c12
GET /modules/mod_news_pro_gk5/cache/k2.items.cache.391d45802a606be64095bd7b66c67316_Genericnsp-879.jpg HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: image/jpeg
last-modified: Mon, 14 Nov 2022 18:49:47 GMT
etag: "dc7b-63728dcb-874cb99da2bfbc79;;;"
accept-ranges: bytes
content-length: 56443
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/modules/mod_news_pro_gk5/cache/k2.items.cache.5b98a51d844cf083418c7193dcee292b_Genericnsp-879.jpg
200 OK 54 kB URL HTTP/2 www.herriakmargozten.com/modules/mod_news_pro_gk5/cache/k2.items.cache.5b98a51d844cf083418c7193dcee292b_Genericnsp-879.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95", baseline, precision 8, 500x350, components 3\012- data
Hash 89ea674819bde638c43d895ca11fffb0
f1dccb23f7156fa07c2c3db221c8c5fc95d608e6
905ed55e08b80638d725bc3ff6eaf39db6c6ac21197dceb21ee8c6eb407e123e
GET /modules/mod_news_pro_gk5/cache/k2.items.cache.5b98a51d844cf083418c7193dcee292b_Genericnsp-879.jpg HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: image/jpeg
last-modified: Mon, 14 Nov 2022 18:49:47 GMT
etag: "d10c-63728dcb-e3070261576c5eea;;;"
accept-ranges: bytes
content-length: 53516
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/modules/mod_news_pro_gk5/cache/k2.items.cache.34570ba96cc3a4daee50221a47a4e2ec_Genericnsp-879.jpg
200 OK 57 kB URL HTTP/2 www.herriakmargozten.com/modules/mod_news_pro_gk5/cache/k2.items.cache.34570ba96cc3a4daee50221a47a4e2ec_Genericnsp-879.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95", baseline, precision 8, 500x350, components 3\012- data
Hash bec7d61e8d418db11880ce5a44636f48
c559f2593765f3d9d29e66d27febead3cb0a1160
f70b51758a48dfc9fc5f6f65e3c3e0a6895d53f8cf8cf91278066ad03faea0b5
GET /modules/mod_news_pro_gk5/cache/k2.items.cache.34570ba96cc3a4daee50221a47a4e2ec_Genericnsp-879.jpg HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: image/jpeg
last-modified: Mon, 14 Nov 2022 18:49:47 GMT
etag: "ddca-63728dcb-f0c75fbe2df0321d;;;"
accept-ranges: bytes
content-length: 56778
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/modules/mod_news_pro_gk5/cache/k2.items.cache.97a787f8d6fb66aaef15fa858aa433ea_Genericnsp-879.jpg
200 OK 53 kB URL HTTP/2 www.herriakmargozten.com/modules/mod_news_pro_gk5/cache/k2.items.cache.97a787f8d6fb66aaef15fa858aa433ea_Genericnsp-879.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95", baseline, precision 8, 500x350, components 3\012- data
Hash 30d869fbdbd48f877d2dd535b5dff2a2
6b95e5e13422f62b27bca8bd0d11e6065f239bce
103326d8563b4684b6022c77e9aeac1b84e50c949b2692200501c50e52172924
GET /modules/mod_news_pro_gk5/cache/k2.items.cache.97a787f8d6fb66aaef15fa858aa433ea_Genericnsp-879.jpg HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: image/jpeg
last-modified: Mon, 14 Nov 2022 18:49:47 GMT
etag: "cde7-63728dcb-96e3163b526e8ac9;;;"
accept-ranges: bytes
content-length: 52711
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/lapiceros7.jpg
200 OK 84 kB URL HTTP/2 www.herriakmargozten.com/images/lapiceros7.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1250x491, components 3\012- data
Hash b77a56fd1bd02db15f3efa78a21a94e3
5d30f434f6ac1d7abe74f7f1fda79796c3bb5723
70fc6d96c14fa7894de3c0578d12a2bddc1b912d6b44c3ce9fc002f416b9aee3
GET /images/lapiceros7.jpg HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: image/jpeg
last-modified: Thu, 24 Nov 2016 17:28:48 GMT
etag: "148b7-58372350-6ad9a3c8f780a806;;;"
accept-ranges: bytes
content-length: 84151
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b2d6aeeb303eaefc4cc6900e30da3b1b
4c3c027013211aa1b987006d0eb6c72f18c6a657
f542eab7c032d6c5f59710ee8993a01537e0fa2bf3882a6a699de85bba020999
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 18:49:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.herriakmargozten.com/modules/mod_image_show_gk4/cache/laminas_para_colorear_WEBgk-is-881.jpg
200 OK 158 kB URL HTTP/2 www.herriakmargozten.com/modules/mod_image_show_gk4/cache/laminas_para_colorear_WEBgk-is-881.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95", baseline, precision 8, 1200x500, components 3\012- data
Size 158 kB (158380 bytes)
Hash 4d8a14149a0e8f9eb93f698bc8886758
3d742efacc80b25dafc5218b13deb22abc3a6ac5
5fe9faaca4f573ae4446c0314f06b0e59d105644c531b878b7664be1c8478b91
GET /modules/mod_image_show_gk4/cache/laminas_para_colorear_WEBgk-is-881.jpg HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: image/jpeg
last-modified: Thu, 24 Nov 2016 17:28:46 GMT
etag: "26aac-5837234e-aa8c3a6ae6898a16;;;"
accept-ranges: bytes
content-length: 158380
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/modules/mod_image_show_gk4/cache/puzzlegk-is-881.jpg
200 OK 257 kB URL HTTP/2 www.herriakmargozten.com/modules/mod_image_show_gk4/cache/puzzlegk-is-881.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95", baseline, precision 8, 1160x661, components 3\012- data
Size 257 kB (256747 bytes)
Hash c3ce3af797335384adb3c251cd10c505
3354f2c101486f744c6410d29f50187b220d58f5
a897970d19441c53b709b92d27d81a20736cb4c393dd46ee62ca8550b4689b74
GET /modules/mod_image_show_gk4/cache/puzzlegk-is-881.jpg HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: image/jpeg
last-modified: Thu, 24 Nov 2016 17:28:46 GMT
etag: "3eaeb-5837234e-3a480e2bb0c7c7f0;;;"
accept-ranges: bytes
content-length: 256747
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/modules/mod_image_show_gk4/cache/HERRIAKPRESENTACIONgk-is-881.jpg
200 OK 163 kB URL HTTP/2 www.herriakmargozten.com/modules/mod_image_show_gk4/cache/HERRIAKPRESENTACIONgk-is-881.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95", baseline, precision 8, 1200x500, components 3\012- data
Size 163 kB (163006 bytes)
Hash 9f65c1bc6eae8500cdd0244bd62c814b
c14bdb869b1128febec96ddeaa3d3f23e828f6d2
6b302fd0381024f279d768faf2f7c1114822721ee19d0b8708df4bfc2f2a83a3
GET /modules/mod_image_show_gk4/cache/HERRIAKPRESENTACIONgk-is-881.jpg HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: image/jpeg
last-modified: Thu, 24 Nov 2016 17:28:46 GMT
etag: "27cbe-5837234e-db5b584ee9c61cef;;;"
accept-ranges: bytes
content-length: 163006
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 1af800aa2b326e8af0f2640db68a7a0d
4c617814f5c705737bf4bf111c53bf40bb932af5
594f573b6e73b1d385ae75a518c18a0bb833ac4a3f894fcea377096c756f8cc1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 18:49:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.herriakmargozten.com/images/cabeceras.jpg
200 OK 160 kB URL HTTP/2 www.herriakmargozten.com/images/cabeceras.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x500, components 3\012- data
Size 160 kB (159562 bytes)
Hash bae20951e36379cf7f6320c6f79d1e0b
aa313ee114436130fc1d1347fb9c16c222d577df
eb73b18649e5686ce395242a17fdec87a00b6d2ca6abdc5cbac20e6df2a16fb8
GET /images/cabeceras.jpg HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: image/jpeg
last-modified: Wed, 14 Feb 2018 09:51:14 GMT
etag: "26f4a-5a840692-ddf671b395cb4775;;;"
accept-ranges: bytes
content-length: 159562
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/bg.jpg
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/bg.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/bg.jpg HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 35ad471bf7f157abedbe322e59bb00ae
6f8c57f1c20377b6a1f74fd06849705a6370e291
b51251f347677a52f08a4a7c0d9ff0effed121992b6dc7fa709e33c400042e63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 18:49:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.herriakmargozten.com/templates/gk_quark/css/mobile.css
200 OK 2.1 kB URL HTTP/2 www.herriakmargozten.com/templates/gk_quark/css/mobile.css
IP
Hash bced1626694b7429ce5e345b7c17fc34
7618c42cdd62662615b0cb44bd7b7c9e5f6b6740
23bac17c7934912f00c6b2b19bf8bbd23d88384385f94011f781e5d870d6c1d5
GET /templates/gk_quark/css/mobile.css HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: text/css
last-modified: Thu, 24 Nov 2016 17:28:18 GMT
etag: "2c50-58372332-3a9f8ccd69862fe2;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2051
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/templates/gk_quark/css/small.tablet.css
200 OK 730 B URL HTTP/2 www.herriakmargozten.com/templates/gk_quark/css/small.tablet.css
IP
Hash 8cd84f140cb1808a84d889fb8ee23d7c
b084fc3118ece9982a6d9e26d3d7696fdc7f7a54
212bec99fd904cef1ce34d012896c99e736dcb4aac77e882dff99d26b33139ea
GET /templates/gk_quark/css/small.tablet.css HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: text/css
last-modified: Thu, 24 Nov 2016 17:28:18 GMT
etag: "9be-58372332-fca96774e7a50f52;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 730
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/templates/gk_quark/css/tablet.css
200 OK 1.1 kB URL HTTP/2 www.herriakmargozten.com/templates/gk_quark/css/tablet.css
IP
Hash 3b82b098b64e10cccb54142a8941e59c
ee5f90ac025a36ba81611a3973ac824c080f7a82
91c097583580f27cea71c3a530d70c800845284be29da3f4b6582b0bce16c47d
GET /templates/gk_quark/css/tablet.css HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: text/css
last-modified: Thu, 24 Nov 2016 17:28:18 GMT
etag: "17ea-58372332-ad1e29d507faf31d;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1076
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.herriakmargozten.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Nov 2022 05:42:51 GMT
expires: Fri, 10 Nov 2023 05:42:51 GMT
cache-control: public, max-age=31536000
age: 392823
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 35ad471bf7f157abedbe322e59bb00ae
6f8c57f1c20377b6a1f74fd06849705a6370e291
b51251f347677a52f08a4a7c0d9ff0effed121992b6dc7fa709e33c400042e63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 18:49:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.herriakmargozten.com/templates/gk_quark/fonts/font-awesome/fontawesome-webfont.woff?v=4.2.0
200 OK 72 kB URL HTTP/2 www.herriakmargozten.com/templates/gk_quark/fonts/font-awesome/fontawesome-webfont.woff?v=4.2.0
IP
File type Web Open Font Format, TrueType, length 71508, version 1.0\012- data
Hash d9ee23d59d0e0e727b51368b458a0bff
56ce13e71c2150d81bc972940584915181bd6081
e3870de89716b72cb61a4bba0e17c75783b361cdaba35ea96961c3070bd8ca18
Analyzer Verdict Alert fortinet Malware
GET /templates/gk_quark/fonts/font-awesome/fontawesome-webfont.woff?v=4.2.0 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.herriakmargozten.com/templates/gk_quark/css/font-awesome.css
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/font-woff
last-modified: Thu, 24 Nov 2016 17:28:18 GMT
etag: "11754-58372332-186cd7234b6a8513;;;"
accept-ranges: bytes
content-length: 71508
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:49:55 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/bg.mp4
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/bg.mp4
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /images/videos/bg.mp4 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:49:55 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:49:55 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 0f51a4efc7b43562164a21fac2f92dc3
ddeb9f8256d698f43e662029986c9032da79db9f
c60ba648b021d2c754eba4a6ace4758bb5a2c2b651586a6952128d0ad78045b2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1698
Cache-Control: max-age=123318
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 18:49:55 GMT
Etag: "6371c5e7-1d7"
Expires: Wed, 16 Nov 2022 05:05:13 GMT
Last-Modified: Mon, 14 Nov 2022 04:36:55 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
www.herriakmargozten.com/images/favicon.bmp
200 OK 824 B URL HTTP/2 www.herriakmargozten.com/images/favicon.bmp
IP
File type PC bitmap, Windows 3.x format, 16 x 16 x 24, image size 770, resolution 2834 x 2834 px/m, cbSize 824, bits offset 54\012- data
Hash 78940d75b08d00278a193d4f520ce930
7634211d590e459f1b8e2428c3cf12a765657790
cabf69a9b4da87026a6f312402d3ca7d4f76de4d3e7499ddd8cad1e983451129
Analyzer Verdict Alert fortinet Malware
GET /images/favicon.bmp HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:55 GMT
content-type: image/bmp
last-modified: Thu, 24 Nov 2016 17:28:48 GMT
etag: "338-58372350-9bc2f5b44927edbc;;;"
accept-ranges: bytes
content-length: 824
date: Mon, 14 Nov 2022 18:49:55 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.herriakmargozten.com/templates/gk_quark/images/touch-device.png
200 OK 25 kB URL HTTP/2 www.herriakmargozten.com/templates/gk_quark/images/touch-device.png
IP
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash dcf9cbe3270199a10c2bd58450ca63a8
bebf6f59d6c82b9cc57c69ffd6d7e3edd1eef6ef
c0176bfc74b6610b1ad71d859eb629af02105a7b311ead397735dc274e901238
GET /templates/gk_quark/images/touch-device.png HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:55 GMT
content-type: image/png
last-modified: Thu, 24 Nov 2016 17:28:18 GMT
etag: "620c-58372332-79205866d2b4a35a;;;"
accept-ranges: bytes
content-length: 25100
date: Mon, 14 Nov 2022 18:49:55 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
connect.facebook.net/en_US/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js
IP
File type ASCII text, with very long lines (1961)
Hash 26039b27e357b00efc3bab382cd9100b
0f2c8fe3dab086eab998b838ee2355737bc93009
1bd2ab31bf853862092cfbf8f439e12bce1a29d6096b4ab0cc5d308077ffff29
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 324ae463d001fba55be1f75af1dfe770
etag: "1939c7ecf9a0eaaf9cc43da2a5644a7e"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Mon, 14 Nov 2022 19:05:26 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: JgObJ+NXsA78O6s4LNkQCw==
x-fb-debug: +PCjpDsF2pL4utpf0ZXCmTJSTYQQsJ1hRg11J7iQKQ0A+JN8KWhTnGvVn7A90U0Iur2rfTnYdY9SAADyBRaj9Q==
priority: u=3,i
content-length: 1688
x-fb-trip-id: 1904183273
date: Mon, 14 Nov 2022 18:49:55 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Mon, 14 Nov 2022 18:41:09 GMT
expires: Mon, 14 Nov 2022 20:41:09 GMT
cache-control: public, max-age=7200
age: 526
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 0f51a4efc7b43562164a21fac2f92dc3
ddeb9f8256d698f43e662029986c9032da79db9f
c60ba648b021d2c754eba4a6ace4758bb5a2c2b651586a6952128d0ad78045b2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1698
Cache-Control: max-age=123318
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 18:49:55 GMT
Etag: "6371c5e7-1d7"
Expires: Wed, 16 Nov 2022 05:05:13 GMT
Last-Modified: Mon, 14 Nov 2022 04:36:55 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Range: bytes=0-
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:49:55 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:49:55 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 929d046b7cbed155022099e982ba0592
18ff58f5b4d98748552d6604bdcba9c57eb8f412
3c70c27c11afeaea96e782a0e7b7ae9c2f3ed35c94673fcd4361cb7406b078a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C70C27C11AFEAEA96E782A0E7B7AE9C2F3ED35C94673FCD4361CB7406B078A9"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2582
Expires: Mon, 14 Nov 2022 19:32:57 GMT
Date: Mon, 14 Nov 2022 18:49:55 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 929d046b7cbed155022099e982ba0592
18ff58f5b4d98748552d6604bdcba9c57eb8f412
3c70c27c11afeaea96e782a0e7b7ae9c2f3ed35c94673fcd4361cb7406b078a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C70C27C11AFEAEA96E782A0E7B7AE9C2F3ED35C94673FCD4361CB7406B078A9"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2582
Expires: Mon, 14 Nov 2022 19:32:57 GMT
Date: Mon, 14 Nov 2022 18:49:55 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 929d046b7cbed155022099e982ba0592
18ff58f5b4d98748552d6604bdcba9c57eb8f412
3c70c27c11afeaea96e782a0e7b7ae9c2f3ed35c94673fcd4361cb7406b078a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C70C27C11AFEAEA96E782A0E7B7AE9C2F3ED35C94673FCD4361CB7406B078A9"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2582
Expires: Mon, 14 Nov 2022 19:32:57 GMT
Date: Mon, 14 Nov 2022 18:49:55 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 929d046b7cbed155022099e982ba0592
18ff58f5b4d98748552d6604bdcba9c57eb8f412
3c70c27c11afeaea96e782a0e7b7ae9c2f3ed35c94673fcd4361cb7406b078a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C70C27C11AFEAEA96E782A0E7B7AE9C2F3ED35C94673FCD4361CB7406B078A9"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2582
Expires: Mon, 14 Nov 2022 19:32:57 GMT
Date: Mon, 14 Nov 2022 18:49:55 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 929d046b7cbed155022099e982ba0592
18ff58f5b4d98748552d6604bdcba9c57eb8f412
3c70c27c11afeaea96e782a0e7b7ae9c2f3ed35c94673fcd4361cb7406b078a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C70C27C11AFEAEA96E782A0E7B7AE9C2F3ED35C94673FCD4361CB7406B078A9"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2582
Expires: Mon, 14 Nov 2022 19:32:57 GMT
Date: Mon, 14 Nov 2022 18:49:55 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cd5bdc050716bb76afe8090fc81617e7
5109c156b180727767fc03c411190ccc0d3fb5fc
9b13e7838946c6654dda17886c2ca8d42de934acb93f4bddb1008dfa1bd1ea99
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11715
x-amzn-requestid: 20e508bd-6568-4225-9bee-c683a49d44f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdMhUHkpIAMFfJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec13b-7dc726b94a37fc667e2e6646;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:40:11 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: X3SUo1LP97TxraRav0ftskBhzWkTJInHaS44PW26yloF-dgD-bHBuA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 13 Nov 2022 21:45:57 GMT
age: 75838
etag: "5109c156b180727767fc03c411190ccc0d3fb5fc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F03b751df-18d0-4e56-8d74-5d8e8d02f241.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F03b751df-18d0-4e56-8d74-5d8e8d02f241.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dfc7286992b2cebdf1ebb58f85576e61
a49a1bf9716e32979810931d04d1f84216d096c1
7c5288d4ae39202e00c7fd482faa10b5610d31edf0bba9fc69fa4fc1f422b837
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F03b751df-18d0-4e56-8d74-5d8e8d02f241.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7494
x-amzn-requestid: b07e424a-c11e-442f-8636-e0670cb6f864
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bd8heGBtoAMFYQA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636f0e09-7dcda14e5077563d726752ae;Sampled=0
x-amzn-remapped-date: Sat, 12 Nov 2022 03:07:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: -7x_52WsOuP18MV9Q9oJFOdpvIm35aZngCAjZvWFau3P3fMY5NkElg==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Mon, 14 Nov 2022 04:11:16 GMT
age: 52719
etag: "a49a1bf9716e32979810931d04d1f84216d096c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5797e726-229b-4f42-9376-00ae67e14407.jpeg
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5797e726-229b-4f42-9376-00ae67e14407.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a0db3498954921b58948ad8a4e7fd49f
6b618c3ff6e589f9e01650bd0a619acb70d8004e
fa3baa9e32e455ab2eeefab0c76714bf0ff5f67a5ccd7c10b3f5c21d8138c5cf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5797e726-229b-4f42-9376-00ae67e14407.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6535
x-amzn-requestid: 3333aa65-c0c7-4704-9af1-fb0a49f830fb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bjyDtHbhoAMFSsg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637163b1-51c3e4513240b7e5662b8e6e;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 21:37:53 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 6dTOcWIKFuo-Thf3zUH_1WY70yFyQkj3w2xPrb6Ntjf8TUFPVG-_lA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Sun, 13 Nov 2022 21:54:01 GMT
age: 75354
etag: "6b618c3ff6e589f9e01650bd0a619acb70d8004e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F213417cd-cf64-4d28-ae86-bd6f16cecb3b.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F213417cd-cf64-4d28-ae86-bd6f16cecb3b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6f1e763f44800e4de06d69a3b2af74da
35afe48832221fe42de30260b9bcb15867109031
5f234c025d1f586b4364d2ef8c2818d3d4d441691444bb885e89f4c150b3d2a5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F213417cd-cf64-4d28-ae86-bd6f16cecb3b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9322
x-amzn-requestid: 0becd817-a29e-46bf-b9d6-2d18e12f5fe9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bjyDvE8DoAMFsiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637163b1-5b4bf1674c4edf80458cf53f;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 21:37:53 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: dMpz1U6HlmADIQZWvt1WR4D_nqlatl0mYBwg4rI6HDkKFbJCnivOgA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sun, 13 Nov 2022 21:50:08 GMT
age: 75587
etag: "35afe48832221fe42de30260b9bcb15867109031"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F68733d52-6c87-4ac4-ba56-bc5f74ff782b.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F68733d52-6c87-4ac4-ba56-bc5f74ff782b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ac5583760066002adcbba078f6dd1be4
39ca30395586cf1a0a0fa739f7279af807f548a3
cb5986e3330858716cd290297a81d77e371b838637fc57eece94810211715a7c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F68733d52-6c87-4ac4-ba56-bc5f74ff782b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9921
x-amzn-requestid: 933f6aa6-3bec-4f71-aba8-ef9e77942ae9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bjycgGB-oAMFsDQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6371644f-47d26359464b62b7276316e6;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 21:40:31 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: cl4CvcuSz4XqydcANekLjl49PkkKUuMs_EsPwEK0pu_VF57S3szecA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 13 Nov 2022 21:52:20 GMT
age: 75455
etag: "39ca30395586cf1a0a0fa739f7279af807f548a3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa23e03e8-7a4b-473b-801f-39322d374478.jpeg
200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa23e03e8-7a4b-473b-801f-39322d374478.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 31a009393081c25d9afbde558a278ebf
bf8de6c00f579baa320456bd0e79ab80978008bc
90e81f6a10d3dbc56a45e9cfd65dbcd6bddf9e3ab526b4cca270bc2f26404950
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa23e03e8-7a4b-473b-801f-39322d374478.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5149
x-amzn-requestid: f9b58134-4474-4ba5-bc90-368568c30eb4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bNaeqGAZoAMF9Ww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6368712a-4f7bbb4743f15dc2471fba0c;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 02:44:58 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: R-wKxHkN3mhPg5hGlsMSmENk1tERrZrO83Ohro0OmuKUQ5bC2tgTiw==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 14 Nov 2022 05:25:41 GMT
age: 48254
etag: "bf8de6c00f579baa320456bd0e79ab80978008bc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
connect.facebook.net/en_US/sdk.js?hash=15746d8726d7d038179854dc76ebd44b
200 OK 88 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js?hash=15746d8726d7d038179854dc76ebd44b
IP
File type ASCII text, with very long lines (18530)
Hash 153e99cbde2cca497f3ad1c39f4ea8c3
2d6cc740612757954d38822ae19dc793f31b6d36
8397ed12f7ff071ba5abcdf85f0d4111851ef5317c7fb829bb33bea644394c49
GET /en_US/sdk.js?hash=15746d8726d7d038179854dc76ebd44b HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.herriakmargozten.com
Connection: keep-alive
Referer: https://www.herriakmargozten.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 3270da39b79e4721e8e4c65a10390f49
etag: "7fc5152016fa06f06f443ff571eb40fc"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Tue, 14 Nov 2023 15:57:59 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: FT6Zy94sykl/OtHDn06oww==
x-fb-debug: XN7LMAFOZxuv7hV4V11wdJl/he79BgOAN4dCwltu6gxqA19atY+ZLdgy4jBH1tNuyRpRnbJsyawFPliTZDKjXw==
priority: u=3,i
content-length: 88353
x-fb-trip-id: 1904183273
date: Mon, 14 Nov 2022 18:49:55 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:49:55 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Range: bytes=0-
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:49:55 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=172636530017102&ev=fb_page_view&dl=https%3A%2F%2Fwww.herriakmargozten.com%2Fen%2F&rl=&if=false&ts=1668451794078&sw=1280&sh=1024&at=
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=172636530017102&ev=fb_page_view&dl=https%3A%2F%2Fwww.herriakmargozten.com%2Fen%2F&rl=&if=false&ts=1668451794078&sw=1280&sh=1024&at=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=172636530017102&ev=fb_page_view&dl=https%3A%2F%2Fwww.herriakmargozten.com%2Fen%2F&rl=&if=false&ts=1668451794078&sw=1280&sh=1024&at= HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Mon, 14 Nov 2022 18:49:56 GMT
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Range: bytes=0-
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:49:56 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:49:56 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Range: bytes=0-
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:49:56 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:49:57 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Range: bytes=0-
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:49:57 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:49:57 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Range: bytes=0-
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:49:57 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Range: bytes=0-
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:49:57 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:49:57 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Range: bytes=0-
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:49:57 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Range: bytes=0-
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:49:58 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:49:58 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Range: bytes=0-
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:49:58 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Range: bytes=0-
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:49:59 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:49:59 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Range: bytes=0-
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:49:59 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Range: bytes=0-
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:49:59 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:49:59 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Range: bytes=0-
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:49:59 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:50:00 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Range: bytes=0-
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:50:00 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Range: bytes=0-
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:50:00 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:50:00 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Range: bytes=0-
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:50:00 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Range: bytes=0-
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:50:00 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:50:00 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Range: bytes=0-
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:50:01 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:50:01 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
302 Found 0 B URL HTTP/2 www.herriakmargozten.com/images/videos/index.php?error=404&itemId=99999
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videos/index.php?error=404&itemId=99999 HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Range: bytes=0-
Referer: https://www.herriakmargozten.com/en/
Connection: keep-alive
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd; _ga=GA1.2.1150366775.1668451794; _gid=GA1.2.951107903.1668451794; _gat=1; _gat_gtag_UA_88055469_1=1
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.33, PleskLin
location: index.php?error=404&itemId=99999
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 14 Nov 2022 18:50:01 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:300,400,500,700
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:300,400,500,700
IP
GET /css?family=Open+Sans:300,400,500,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 14 Nov 2022 18:49:54 GMT
date: Mon, 14 Nov 2022 18:49:54 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.herriakmargozten.com/images/lapiceros7b.jpg
200 OK 0 B URL HTTP/2 www.herriakmargozten.com/images/lapiceros7b.jpg
IP
GET /images/lapiceros7b.jpg HTTP/1.1
Host: www.herriakmargozten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.herriakmargozten.com/en/
Cookie: e25a8efb753664cd526c9d694a892cf8=oqjus10tj750tegnbu9luekedd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 21 Nov 2022 18:49:54 GMT
content-type: image/jpeg
last-modified: Thu, 24 Nov 2016 17:28:48 GMT
etag: "5545-58372350-d61ccb8ef93a9e6c;;;"
accept-ranges: bytes
content-length: 21829
date: Mon, 14 Nov 2022 18:49:54 GMT
server: LiteSpeed
x-powered-by: PleskLin
X-Firefox-Spdy: h2
193.42.143.79
34.120.237.76
104.18.21.226
151.101.85.229
23.36.76.226
93.184.220.29