firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 3f17af4e8a1739eda4a518039f4892f9
c3feba08ae7e8f57e0fe9bcd2ebedea6bda67cbb
c485b09cad08b5233fe8753682faf59219fe0d18fcc34d90dc88fb0971295f5f
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 09 Oct 2022 02:47:42 GMT
Expires: Sun, 09 Oct 2022 03:24:04 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: yQs_nuw7D8OSmk0yymvdRj5pBRlTqfXbz_HO83JdqZ7Liyew5_rYiw==
Age: 3389
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cf768e41672570b0a4a9fe86045915fc
2249064a86b2ba11e28208b9fba1c9f1db4f3e9e
a049499f78078df12f4d1c5180f1f36715a5c99db4f31c18ee06bcf0b6382b30
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A049499F78078DF12F4D1C5180F1F36715A5C99DB4F31C18EE06BCF0B6382B30"
Last-Modified: Fri, 07 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2991
Expires: Sun, 09 Oct 2022 04:34:02 GMT
Date: Sun, 09 Oct 2022 03:44:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3d0ffae9abfdf558a6286013a0201c8b
2dc8ea0000a1b0c0f849611fdd73429bca51bfad
8e19eab9b6d16819f9ef3920971542cbcf5dd18280617e2de1a3827f0c149398
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8E19EAB9B6D16819F9EF3920971542CBCF5DD18280617E2DE1A3827F0C149398"
Last-Modified: Sun, 09 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8847
Expires: Sun, 09 Oct 2022 06:11:38 GMT
Date: Sun, 09 Oct 2022 03:44:11 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: dlUfpuDxy/+34hOEYifaTPfH4NLIdbdx0ZJoCroaQsnwNsBJXBQpJEVcHd2bKyEPwlrL0fQZZ2k=
x-amz-request-id: SD8ASVH3ZACX5ENB
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 09 Oct 2022 02:59:51 GMT
age: 2660
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 09 Oct 2022 03:44:11 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Expires, Backoff, ETag, Last-Modified, Pragma, Cache-Control, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Date: Sun, 09 Oct 2022 03:29:42 GMT
Cache-Control: max-age=3600
Expires: Sun, 09 Oct 2022 04:24:10 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: e--p05xhmIY8e4Luic18iPIzbXeBi0jAx4Mx8-zdCSaoDWk2MEIO3g==
Age: 871
ocsp.digicert.com/
200 OK 471 B IP
Hash 5479444ef227af03029fbb9d154f0107
0563678ec07ab3707b716ca4c638ece4c8ad7de4
4850d49786a140003b90ae108104ffbfe80a6e0d9f584656a09f0fff11dc9d0d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3044
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 09 Oct 2022 03:44:12 GMT
Last-Modified: Sun, 09 Oct 2022 02:53:28 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: qzoaB84az/3vdRl7ssCsvQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: CA48Ml1yY12cP0jkF1NR/sRJgwY=
3piltd.com/wp-includes/js/wp-emoji-release.min.js?ver=5.5.10
200 OK 14 kB URL HTTP/1.1 3piltd.com/wp-includes/js/wp-emoji-release.min.js?ver=5.5.10
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (11272)
Hash 878184c5d285d4d52d926d36ef19b718
dd260ffe0f8e3f38f58efd23cac8a1e5c788dad9
07e4203b9f313b587b1d53f896e63771ec85f9b0d4c2ac5fa64089457784d847
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.5.10 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:12 GMT
Server: Apache
Last-Modified: Fri, 16 Apr 2021 01:01:10 GMT
Accept-Ranges: bytes
Content-Length: 14229
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
fonts.googleapis.com/css?family=Montserrat%3A400%2C700%7CRoboto%3A100%2C300%2C400%2C700&ver=5.5.10
200 OK 833 B URL HTTP/1.1 fonts.googleapis.com/css?family=Montserrat%3A400%2C700%7CRoboto%3A100%2C300%2C400%2C700&ver=5.5.10
IP
Hash a59784d5bff5e2657be5e7032ac004ae
9cb277105e35fac2316ec4c7c52c205d31986338
0a351583a0da954cd2aee83043c58d7585a77870964d3ef1edc3dc3d175ddbea
GET /css?family=Montserrat%3A400%2C700%7CRoboto%3A100%2C300%2C400%2C700&ver=5.5.10 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Sun, 09 Oct 2022 03:44:12 GMT
Date: Sun, 09 Oct 2022 03:44:12 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
3piltd.com/eft/G@Y4.zip
200 OK 62 kB IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2758), with CRLF, LF line terminators
Hash 18ecb1af2d1df787518635e2cadcaf5e
e56d0dbf583bce4060f55452d1d50be1ffb4e2e9
b5eeb3ff702a82b7a49668c917d7561903372927df0baf02d7ba5d5dcb1ec9b7
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /eft/G@Y4.zip HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:11 GMT
Server: Apache
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ee96d771e1664e3afe56cf32bfe45eee
3ab9109d6f7a952cf2f7071ecb5ee186f9eebf6a
df7a23267a1a0bddc477d2b3f4c870b6a6ab7b4dca5fc38164d814ccae2b2fdd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 09 Oct 2022 03:44:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/packages/select2/select2.min.css?ver=5.13.6
200 OK 15 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/packages/select2/select2.min.css?ver=5.13.6
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (14965), with CRLF line terminators
Hash ba5948c0bda0f5f26bd3068ce565deaa
6d28595693ce13f1a79db7d5c73bd82b13cf63b5
c2a282dd6dac10a3fbf469b4e67f489608777854e6d157bf11233dfbaa16851e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/modern-events-calendar-lite/assets/packages/select2/select2.min.css?ver=5.13.6 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:12 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:32 GMT
Accept-Ranges: bytes
Content-Length: 14967
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/packages/tooltip/tooltip.css?ver=5.5.10
200 OK 6.5 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/packages/tooltip/tooltip.css?ver=5.5.10
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (6495), with no line terminators
Hash b15ef24270546e5fe896d3ea387ea134
63910103e8cc5e4bdeb2c289cfbf41f89966ea5b
41ce2509fa9959868717986010e16b6334885fd46bc64d0d3c745a73ed3c41e4
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/modern-events-calendar-lite/assets/packages/tooltip/tooltip.css?ver=5.5.10 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:12 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:32 GMT
Accept-Ranges: bytes
Content-Length: 6495
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/packages/colorbrightness/colorbrightness.min.js?ver=5.13.6
200 OK 942 B URL HTTP/1.1 3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/packages/colorbrightness/colorbrightness.min.js?ver=5.13.6
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (677), with CRLF line terminators
Hash c3a249307f1f750df1c56de3953c1845
9078186ebd5f6a6bfe51b224b89c1506b4e52f13
1396662705b0c8e4aece9ae751982e526b27e9e1271276d3bc02168d3491361e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/modern-events-calendar-lite/assets/packages/colorbrightness/colorbrightness.min.js?ver=5.13.6 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:12 GMT
Server: Apache
Last-Modified: Thu, 19 Nov 2020 03:50:00 GMT
Accept-Ranges: bytes
Content-Length: 942
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/packages/tooltip/tooltipster-sideTip-shadow.min.css?ver=5.5.10
200 OK 1.7 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/packages/tooltip/tooltipster-sideTip-shadow.min.css?ver=5.5.10
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1684), with no line terminators
Hash 963b1810e2903311c299866636e46062
46287cdb4aaa5cd840e3a7b16ad4e331c29db271
970fb3515835fc779193ba0f88531ff29972b3c9cd76aba2fb1222fb97beeab6
GET /wp-content/plugins/modern-events-calendar-lite/assets/packages/tooltip/tooltipster-sideTip-shadow.min.css?ver=5.5.10 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:12 GMT
Server: Apache
Last-Modified: Thu, 19 Nov 2020 03:50:00 GMT
Accept-Ranges: bytes
Content-Length: 1684
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/packages/featherlight/featherlight.css?ver=5.5.10
200 OK 4.0 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/packages/featherlight/featherlight.css?ver=5.5.10
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 513382a9289a46f26896cd7c42ae34dc
54f0a49c4d013d801e0c53b23f93a461c3418e08
3bb51227d2ff534e4834ff3137f722a77dc2a8a9c6f1fda503116c0d7f9f7b47
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/modern-events-calendar-lite/assets/packages/featherlight/featherlight.css?ver=5.5.10 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:12 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:32 GMT
Accept-Ranges: bytes
Content-Length: 4046
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/packages/lity/lity.min.css?ver=5.5.10
200 OK 3.5 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/packages/lity/lity.min.css?ver=5.5.10
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (3469), with no line terminators
Hash 5ce2a01b43625d65e4417b43208c99c9
a6c6b5d298c2783e02a4ef56bebacb765b7d054c
19fb1c3c4a52d399f2b32a80c3fa35d97dde81f33e20bb7da6d95d4087c49ed6
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/modern-events-calendar-lite/assets/packages/lity/lity.min.css?ver=5.5.10 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:12 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:32 GMT
Accept-Ranges: bytes
Content-Length: 3469
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/css/iconfonts.css?ver=5.5.10
200 OK 42 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/css/iconfonts.css?ver=5.5.10
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with CRLF line terminators
Hash 351215e684a1d9ddc85ff89dd0db4645
d2244a4b07a619e6b15646d35ddfc7a04e9183c8
482c5169117c7346bc495964e23ab5190db8fb8b1a09e6edf8494f9bef869eda
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/modern-events-calendar-lite/assets/css/iconfonts.css?ver=5.5.10 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:12 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 41459
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/themes/jupiterx/lib/assets/dist/css/icons-admin.css?ver=1.17.0
200 OK 6.6 kB URL HTTP/1.1 3piltd.com/wp-content/themes/jupiterx/lib/assets/dist/css/icons-admin.css?ver=1.17.0
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with CRLF, CR line terminators
Hash c87768f9ea10b3e00aba87d693ba9610
6797e09214b0acc0e7fc14432852de25ea1880fc
80111259751e4f93d6a536e2080c74b1db4603b7288bfa9c68d3a1e59a64361f
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/jupiterx/lib/assets/dist/css/icons-admin.css?ver=1.17.0 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:12 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:36 GMT
Accept-Ranges: bytes
Content-Length: 6600
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-includes/css/dashicons.min.css?ver=5.5.10
200 OK 59 kB URL HTTP/1.1 3piltd.com/wp-includes/css/dashicons.min.css?ver=5.5.10
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (58980)
Hash b4ac0603c1a204a16b9069713e765cb7
f0d0f36de34b08f93e9ce8bff66f36574884a37d
b7203ef7f18e8e70e9991515982b3bbd43524cf048e9591b7aab1e80db938774
GET /wp-includes/css/dashicons.min.css?ver=5.5.10 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:12 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2022 03:16:55 GMT
Accept-Ranges: bytes
Content-Length: 59015
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/menu-icons/css/extra.min.css?ver=0.12.5
200 OK 815 B URL HTTP/1.1 3piltd.com/wp-content/plugins/menu-icons/css/extra.min.css?ver=0.12.5
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (815), with no line terminators
Hash 27fa14302689f7f32e20359095766e4d
1f3db901d6f8746008838a7e5f2be30feeaeef83
968ab8ae6f33119ee267a11ce60920934e0d5e9d4714a3eb6b47cb9f05e42a0f
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/menu-icons/css/extra.min.css?ver=0.12.5 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:12 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 815
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-includes/css/dist/block-library/theme.min.css?ver=5.5.10
200 OK 2.2 kB URL HTTP/1.1 3piltd.com/wp-includes/css/dist/block-library/theme.min.css?ver=5.5.10
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (2218), with no line terminators
Hash 9bd313fbce9688ed85c407ad4d0a7c13
e1253db86329a7d257b2f653b288b425992a284d
5d5575c28819cc80d5cf47729e998387ddc2d510a6adf37ce5a19b8f2127ee05
GET /wp-includes/css/dist/block-library/theme.min.css?ver=5.5.10 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:32 GMT
Accept-Ranges: bytes
Content-Length: 2218
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/jet-engine/assets/css/frontend.css?ver=2.5.4
200 OK 44 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/jet-engine/assets/css/frontend.css?ver=2.5.4
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (43590)
Hash 0edeeb5d76d505e33d2cc8984f3e8f29
de802a6d97d03f5413b918bacabe4520ce38e5c7
89870cfacdd6af762e28743648a5ead8973b69bd4237bc6d0e9fe6ab2a86e5fc
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/jet-engine/assets/css/frontend.css?ver=2.5.4 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 43591
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.3
200 OK 1.9 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.3
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
Hash a2e915fb21387a23a3578cb1b2b5a724
c3601301dacf90fc9eede9363f2698d922c05327
fbf8ab57db7f9981bd71d79c7daaa01a3c578ffa0aa8e9b4a9b2bfe2e9927427
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.3 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 1920
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/motopress-hotel-booking-lite/vendors/kbwood/datepick/jquery.datepick.css?ver=3.8.7
200 OK 4.4 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/motopress-hotel-booking-lite/vendors/kbwood/datepick/jquery.datepick.css?ver=3.8.7
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with CRLF line terminators
Hash 89ef37b89beeee5055aa28173d7c6937
ca2c4e05347d4b9ed003ca4e08564b1d90f251f9
26a56d3bbfe55c7dcfa254eda8a3b43d00545fdcd3a2e3ed98a43a5ad9d78d27
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/motopress-hotel-booking-lite/vendors/kbwood/datepick/jquery.datepick.css?ver=3.8.7 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 4438
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/motopress-hotel-booking-lite/assets/css/mphb.min.css?ver=3.8.7
200 OK 9.8 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/motopress-hotel-booking-lite/assets/css/mphb.min.css?ver=3.8.7
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (9753), with no line terminators
Hash b2a442c92f0dd1b9fdda169bbc454215
8d49a5a21ace0e7229efee47a2f6a18c50103f5a
0b4d728c7110420d1c00562fff545b18b3750fe8e580461cf0b7eafb7c3bc462
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/motopress-hotel-booking-lite/assets/css/mphb.min.css?ver=3.8.7 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 9753
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/recent-tweets-widget/tp_twitter_plugin.css?ver=1.0
200 OK 529 B URL HTTP/1.1 3piltd.com/wp-content/plugins/recent-tweets-widget/tp_twitter_plugin.css?ver=1.0
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with CRLF line terminators
Hash b655ad4016c052d438708a50654f7957
046aa8f2e76f9f0c7412b5f6e7a52b8ceed20421
3109fef8b2a9ab71fca698483d2bae36d8fed772517c259dacce872e739bb690
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/recent-tweets-widget/tp_twitter_plugin.css?ver=1.0 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 529
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/stripe-payments/public/assets/css/public.css?ver=2.0.37
200 OK 4.6 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/stripe-payments/public/assets/css/public.css?ver=2.0.37
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with CRLF line terminators
Hash 1f02e275eacc700f5e393c22466d60f2
1c82ca9af467fd6f1eba2c0d3cc12bc9a2f8c0bd
8cc63bbc0909c61913044fcb995664904cf4f4fdbd91853ea3a4c58a810d93bc
GET /wp-content/plugins/stripe-payments/public/assets/css/public.css?ver=2.0.37 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 4648
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/jet-menu/assets/public/lib/font-awesome/css/all.min.css?ver=5.12.0
200 OK 57 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/jet-menu/assets/public/lib/font-awesome/css/all.min.css?ver=5.12.0
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (56934)
Hash 36527bed3df95c7522b710ebf312f2be
45b5e725d5b9b05ed2c54f7543a9f625067d80d9
f92ad7384f67b19ba46d117b79c363fda5fc7cdae461a52b4ba3632845f8694f
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/jet-menu/assets/public/lib/font-awesome/css/all.min.css?ver=5.12.0 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 57120
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-includes/css/dist/block-library/style.min.css?ver=5.5.10
200 OK 54 kB URL HTTP/1.1 3piltd.com/wp-includes/css/dist/block-library/style.min.css?ver=5.5.10
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (27100)
Hash 2e7e1d1c1d4d446a1b6b63295757d859
27a1d9dcbdc4aff486016b5c9f3ece6ad0c028c1
8c626f0f9b5c109539b256b73e72c02b300a184f46b4535c2eb86599215c78af
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.5.10 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:32 GMT
Accept-Ranges: bytes
Content-Length: 53907
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/jet-menu/assets/public/css/public.css?ver=2.0.6
200 OK 30 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/jet-menu/assets/public/css/public.css?ver=2.0.6
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (30392)
Hash 50797b1bb1428ee0d4958f8d3c1ae5c2
6316c5b2babf9bbbf7da2b5c74ebf2dcedd30235
a6df7e1a54840782a0438e0e6beaebdc988cb5d818ef566765f776292bde510b
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/jet-menu/assets/public/css/public.css?ver=2.0.6 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 30393
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/jet-popup/assets/css/jet-popup-frontend.css?ver=1.4.1
200 OK 16 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/jet-popup/assets/css/jet-popup-frontend.css?ver=1.4.1
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (15939)
Hash 4d2047d3be02b3e372bf986457073250
ff8dde206ed700357c90ef1ef6db445de3ef88eb
89c4d75c7cf410456dec27b30d28708b5b152c14725021bb7e3561f02f4db8f2
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/jet-popup/assets/css/jet-popup-frontend.css?ver=1.4.1 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 15940
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/masterslider/public/assets/css/masterslider.main.css?ver=3.2.14
200 OK 81 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/masterslider/public/assets/css/masterslider.main.css?ver=3.2.14
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type Unicode text, UTF-8 text, with CRLF, LF line terminators
Hash a268097794c650a0d7b3eeea6f9e1594
9aaf6c0c2b6f6950ffd4d645a94c669655068963
89b3bb667432bca678f0d2529dafe50eb8670bfdc4d5ce12f91d314b087508b8
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/masterslider/public/assets/css/masterslider.main.css?ver=3.2.14 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:36 GMT
Accept-Ranges: bytes
Content-Length: 81249
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/jet-menu/assets/public/lib/font-awesome/css/v4-shims.min.css?ver=5.12.0
200 OK 27 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/jet-menu/assets/public/lib/font-awesome/css/v4-shims.min.css?ver=5.12.0
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (26516)
Hash 55ab7f65f6025cf7f088dd2e5897bb29
66b2c37c3f7be5f83f33ab07087645168fc1851f
4b8b06e8edfab1dd4475c13ee021e4f582b075677a9018e2f0ba56cc3fc2f0b6
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/jet-menu/assets/public/lib/font-awesome/css/v4-shims.min.css?ver=5.12.0 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 26702
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/uploads/masterslider/custom.css?ver=1.1
200 OK 266 B URL HTTP/1.1 3piltd.com/wp-content/uploads/masterslider/custom.css?ver=1.1
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
Hash 48a9f5734939f50e785f554f2ceb6cb8
5d42633b640833ebf15fd09f6b15b2d74536aa94
1b4e2c3b84fe75916b109ac323d0eb39e3881a892f7b7a21970a0cb9e694b3d7
GET /wp-content/uploads/masterslider/custom.css?ver=1.1 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:36 GMT
Accept-Ranges: bytes
Content-Length: 266
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/jet-elements/assets/css/jet-elements-skin.css?ver=2.3.3
200 OK 17 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/jet-elements/assets/css/jet-elements-skin.css?ver=2.3.3
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (17381)
Hash fb7eff2c1dd15b3c4f9f36c91bdaa110
8e7f2915216ef9e957d576a164f452ef44a37202
b95b30ea27294933157b928bc2b187e07edd98976bcf1db1b2e1ef36d7388cbd
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/jet-elements/assets/css/jet-elements-skin.css?ver=2.3.3 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 17382
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.9.1
200 OK 17 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.9.1
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (16548)
Hash 0153d4a2981f275b4aed2081ab9126a1
5f4622e2b51398457b64943cd6cf2f37345274c2
7c1462e18c5243921d0647e86db29600d07cdbae381fad166ca93ae2b8c1e054
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.9.1 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 16593
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.0.5
200 OK 18 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.0.5
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (10019)
Hash 4601ba55044413706c2022cb6c1c3d05
5103ec2fbb389568ebf5cfe4fd721f3df2ff7aec
fe513ef974b767510d0a2b9f1b4d3afa53185b89ab617c869e5e3d6db960192c
GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.0.5 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 18468
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.0.5
200 OK 3.9 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.0.5
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (3815)
Hash 20fc6e4af9bf80771064a7698c92e525
85f3c50dbe5a267cbfdd9ab6613ec3a8e763c9e2
de5051d947d1911b19b0ee770b6d12fa92bb54053f96a22d2af36d8ab2c9232e
GET /wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.0.5 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 3854
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/uploads/jupiterx/compiler/jupiterx/c26855e.css?ver=1.17.0
200 OK 140 kB URL HTTP/1.1 3piltd.com/wp-content/uploads/jupiterx/compiler/jupiterx/c26855e.css?ver=1.17.0
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (65536), with no line terminators
Size 140 kB (140006 bytes)
Hash bf8e74a12fdd21f17a6f4b6017cdec10
a553b7c1852ffd9fc0ebe6038f3ad73367f156ef
488c04f08487b5901747258bd95645d5915a99266af46aaa238592ab797b21e6
GET /wp-content/uploads/jupiterx/compiler/jupiterx/c26855e.css?ver=1.17.0 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:36 GMT
Accept-Ranges: bytes
Content-Length: 140006
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/menu-icons/vendor/codeinwp/icon-picker/css/types/font-awesome.min.css?ver=4.7.0
200 OK 31 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/menu-icons/vendor/codeinwp/icon-picker/css/types/font-awesome.min.css?ver=4.7.0
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (30612)
Hash f60e27add026636bbed248d63f7b1a63
b9873493080ac1d92f6e806aee0e53486d1d42aa
7aec749fb92fe9fb2e6c35a3a5f9eed8a9bd0c9e1e9389fe89c2dea58a699d28
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/menu-icons/vendor/codeinwp/icon-picker/css/types/font-awesome.min.css?ver=4.7.0 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 30774
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/uploads/elementor/css/post-1811.css?ver=1607186597
200 OK 949 B URL HTTP/1.1 3piltd.com/wp-content/uploads/elementor/css/post-1811.css?ver=1607186597
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (949), with no line terminators
Hash 82bbfefe3774724114bc58f6c083f974
2b0008f6bca6d3662739278f0443436ce6e7f823
000f1eb077a3c2da0dca2323c68cf900fb07e4a432b584cc233360b1c61c969c
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/elementor/css/post-1811.css?ver=1607186597 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:36 GMT
Accept-Ranges: bytes
Content-Length: 949
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/jet-elements/assets/css/jet-elements.css?ver=2.3.3
200 OK 228 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/jet-elements/assets/css/jet-elements.css?ver=2.3.3
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (65536), with no line terminators
Size 228 kB (228400 bytes)
Hash b477ce55b4620f7755625bcffeb023cf
6a4d130f32ad67e00c0570c312dd2f92e12a26cb
153cbaad01fc89f7761f2272d503a007f457fb0c64299f0d192e5fee10463d8d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/jet-elements/assets/css/jet-elements.css?ver=2.3.3 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 228400
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.0.5
200 OK 112 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.0.5
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (65497)
Size 112 kB (112468 bytes)
Hash f46239e92431cb2025f9b6e249dda6ea
3798af937db4024d8a1304b79b6cd1bd7f671ac7
5522f3679aaf104928506eb78516c27f3e08aa80a08ddbec4b851420b1f8d3c9
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.0.5 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 112468
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/jet-tabs/assets/css/jet-tabs-frontend.css?ver=2.1.8
200 OK 38 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/jet-tabs/assets/css/jet-tabs-frontend.css?ver=2.1.8
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (38323)
Hash 535c74e22bbfc7495357e3091f3beabc
28d5198182d18bb2cd1a277284fefab598003ff2
c9eff5844e473ec3f4d0924ad52b295d00d3c25d756e7d17aa2e6db9c4828e2b
GET /wp-content/plugins/jet-tabs/assets/css/jet-tabs-frontend.css?ver=2.1.8 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:36 GMT
Accept-Ranges: bytes
Content-Length: 38324
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/jet-tricks/assets/css/jet-tricks-frontend.css?ver=1.3.0
200 OK 22 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/jet-tricks/assets/css/jet-tricks-frontend.css?ver=1.3.0
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (21755)
Hash 3126da068a68d83b6f13530ba4d8fb37
3f993a347b044a443ebfd65ecd3d9235ea87c1d0
e5b2ed0b03408ba4e86b76231e36d5f396d1054cb2b35d2ec6dc6310325079af
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/jet-tricks/assets/css/jet-tricks-frontend.css?ver=1.3.0 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:36 GMT
Accept-Ranges: bytes
Content-Length: 21756
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/raven/assets/css/frontend.min.css?ver=1.11.0
200 OK 103 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/raven/assets/css/frontend.min.css?ver=1.11.0
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (65536), with no line terminators
Size 103 kB (102586 bytes)
Hash af043f904f24592fb5a26a919516b9aa
9a3ad58c025301b802effbcb6bba35d28ead24dc
1fabcbe539bf43eaffd85b75bba158a98e2863994898ff42bba5b3acff9d7509
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/raven/assets/css/frontend.min.css?ver=1.11.0 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:36 GMT
Accept-Ranges: bytes
Content-Length: 102586
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/elementor/assets/lib/flatpickr/flatpickr.min.css?ver=4.1.4
200 OK 17 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/elementor/assets/lib/flatpickr/flatpickr.min.css?ver=4.1.4
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (13854)
Hash 1f2d2303bc2c3905b9b891e45b3db53c
a6cb16992379fcea85265f2583d5ee570d5fca9f
8de1252af1f9de4f2c30be2cea5a2a94db91aadb6cf6d0da24c962c9bc07279f
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/flatpickr/flatpickr.min.css?ver=4.1.4 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 17222
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/uploads/elementor/css/post-193.css?ver=1605759239
200 OK 14 kB URL HTTP/1.1 3piltd.com/wp-content/uploads/elementor/css/post-193.css?ver=1605759239
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (13792), with no line terminators
Hash 3dea250c2cb7e25d42991fb904259d0a
d588ed55556dd043d948d8dcc0622a2e49da9c8f
0af1418b4cc7224e68e98545d6563d9bee761b312be2942e320867b3dec0a57a
GET /wp-content/uploads/elementor/css/post-193.css?ver=1605759239 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:36 GMT
Accept-Ranges: bytes
Content-Length: 13792
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/uploads/elementor/css/post-213.css?ver=1607608627
200 OK 14 kB URL HTTP/1.1 3piltd.com/wp-content/uploads/elementor/css/post-213.css?ver=1607608627
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (14475), with no line terminators
Hash 0a6e6d4cbaf16aba6ad3f969b45ad15a
d8f054dd47d936a51b4f027d264e5906004c4e1b
644cd71968e898eb6e61a61b41d7dd9ceb5b5e15fe3527cee171475ff569a195
GET /wp-content/uploads/elementor/css/post-213.css?ver=1607608627 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:36 GMT
Accept-Ranges: bytes
Content-Length: 14475
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.12.0
200 OK 56 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.12.0
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (55567)
Hash fc6ece0b999d414f53c25c3999397fee
c114a2225aa88cdd1bd3f6f58e22047709eab086
8a814f594ba0f0aa1b298a89c192f7afe2e7d22bfa6b5016d01fce2ce2941996
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.12.0 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 55753
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.12.0
200 OK 641 B URL HTTP/1.1 3piltd.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.12.0
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (455)
Hash 5762e75dce3b687e51c06b265b11d456
f1e4676649dc7e0d06abfd7fe17b39dcf84c1736
44ecaa4f235929ddef5555d93359d7b8ceccee13ee773edaf15db86d5b38b8f1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.12.0 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 641
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp
200 OK 97 kB URL HTTP/1.1 3piltd.com/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (31997)
Hash 49edccea2e7ba985cadc9ba0531cbed1
f8747f8ee704d9af31d0950015e01d3f9635b070
1db21d816296e6939ba1f42962496e4134ae2b0081e26970864c40c6d02bb1df
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery.js?ver=1.12.4-wp HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:32 GMT
Accept-Ranges: bytes
Content-Length: 96873
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRubik%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CBarlow%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&ver=5.5.10
200 OK 3.0 kB URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRubik%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CBarlow%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&ver=5.5.10
IP
Hash c4f403c61542b5f5bf021f776265e93e
c81350633ee6d5934ffb64cd48f14b66b0523b46
bd6ded15a462044c7101d7d6d6b66d22dcf976973c24d3d5cb3fd9a98c3e9d6a
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRubik%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CBarlow%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&ver=5.5.10 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://3piltd.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 09 Oct 2022 03:44:12 GMT
date: Sun, 09 Oct 2022 03:44:12 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/js/events.js?ver=5.13.6
200 OK 23 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/js/events.js?ver=5.13.6
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with CRLF line terminators
Hash ebdad5537507534cdf38ed02e39ade5b
2ec98738d3638937c34fc07f3317d23439f36bc0
c52684f4d01182fb48089b8ec870448eb023f4afa60a628429bf01a3e4b755cc
GET /wp-content/plugins/modern-events-calendar-lite/assets/js/events.js?ver=5.13.6 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 22580
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
3piltd.com/wp-content/plugins/masterslider/includes/modules/elementor/assets/js/elementor-widgets.js?ver=3.2.14
200 OK 711 B URL HTTP/1.1 3piltd.com/wp-content/plugins/masterslider/includes/modules/elementor/assets/js/elementor-widgets.js?ver=3.2.14
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
Hash 6075968a977fbd0224f902b67698e475
cf9a5fedb2b7f80e19eb64be86e09c400fac94d5
67a3e2d573652c0b3f7d1100dceff7803df9ea1fddec4d724eacfde163d6567d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/masterslider/includes/modules/elementor/assets/js/elementor-widgets.js?ver=3.2.14 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:36 GMT
Accept-Ranges: bytes
Content-Length: 711
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
3piltd.com/wp-content/themes/jupiterx/lib/admin/assets/lib/webfont/webfont.min.js?ver=1.6.26
200 OK 12 kB URL HTTP/1.1 3piltd.com/wp-content/themes/jupiterx/lib/admin/assets/lib/webfont/webfont.min.js?ver=1.6.26
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type Unicode text, UTF-8 text, with very long lines (12335), with no line terminators
Hash 64d8dc89295dffadb3b0b2e319aecadc
4319346908ccef2fe4dd8c711cecc4ef3ca3d806
bac9ef0fea3a4c2100500b28e1ac9f652a4249117e055dc05fc3900505fe7f0b
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/jupiterx/lib/admin/assets/lib/webfont/webfont.min.js?ver=1.6.26 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:36 GMT
Accept-Ranges: bytes
Content-Length: 12358
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
3piltd.com/wp-content/themes/jupiterx/lib/assets/dist/js/utils.min.js?ver=1.17.0
200 OK 354 B URL HTTP/1.1 3piltd.com/wp-content/themes/jupiterx/lib/assets/dist/js/utils.min.js?ver=1.17.0
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (354), with no line terminators
Hash b66a9b7056dd7c8555b992cfd7375910
c19e9987b2b63334be46fcc121b251bef73dfaca
aa9c59d0cf5ba30915b06e02b5b779e93ceb253c49ba934998e660d2db82a9e9
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/jupiterx/lib/assets/dist/js/utils.min.js?ver=1.17.0 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:36 GMT
Accept-Ranges: bytes
Content-Length: 354
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/javascript
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b5cf0255a785469b033344c2ec0ed394
a4a700c1c250cb10f175e67b4b11f2c94afb2bdb
191e75d8e785c03eb558af6f3efe0d557669b65b94d17b42a1b9b7f623947c6f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "191E75D8E785C03EB558AF6F3EFE0D557669B65B94D17B42A1B9B7F623947C6F"
Last-Modified: Fri, 07 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13941
Expires: Sun, 09 Oct 2022 07:36:34 GMT
Date: Sun, 09 Oct 2022 03:44:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b5cf0255a785469b033344c2ec0ed394
a4a700c1c250cb10f175e67b4b11f2c94afb2bdb
191e75d8e785c03eb558af6f3efe0d557669b65b94d17b42a1b9b7f623947c6f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "191E75D8E785C03EB558AF6F3EFE0D557669B65B94D17B42A1B9B7F623947C6F"
Last-Modified: Fri, 07 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13941
Expires: Sun, 09 Oct 2022 07:36:34 GMT
Date: Sun, 09 Oct 2022 03:44:13 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F461cb654-aa5c-4bd5-8076-2b7c4291ac37.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F461cb654-aa5c-4bd5-8076-2b7c4291ac37.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d7ff33d7cf07f18638e733b28ae76053
21e92f0d2fb0413ef2ecc21ded768fa18bcbb4d8
e26b05fd7eec348e429a90c58839a5dc3181ecf3030c6e233c4b2edcf95d0c4c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F461cb654-aa5c-4bd5-8076-2b7c4291ac37.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9689
x-amzn-requestid: 07492912-9d27-4e58-83cd-dad5c3740f22
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zm5fNEfrIAMFoCg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f6f94-7553d5f46fdc8512728118ab;Sampled=0
x-amzn-remapped-date: Fri, 07 Oct 2022 00:15:16 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: EpJuSmWn3ewTFx4CA7UQ4hE6PGLxdMcJvhKO-yiGgowiuulCC1c0NA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sat, 08 Oct 2022 22:04:54 GMT
age: 20359
etag: "21e92f0d2fb0413ef2ecc21ded768fa18bcbb4d8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3ade344-507f-44c8-8fe3-b03ac965aee2.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3ade344-507f-44c8-8fe3-b03ac965aee2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ff8cfe3904cca89e3bdfa8186ae382ba
0b9dce744f5facad9a0a136d81cf24e928211856
a6f0925a9666a43d018c05d717310f57b86316290fb4a7cdd309c35842e557a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3ade344-507f-44c8-8fe3-b03ac965aee2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7674
x-amzn-requestid: 126f9400-fa43-413b-b496-338908efb777
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZeqScHUVoAMFrRg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633c240f-1b7cff3e3415299a4d17e19e;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 12:16:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PGFGAFQp9bXlIYhRdRNE58sRhfrsLE1-qguCEC_FL-JRfGDaIHr2VA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 08 Oct 2022 21:58:33 GMT
age: 20740
etag: "0b9dce744f5facad9a0a136d81cf24e928211856"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0524849b-0616-46fe-9940-c4934dc5fba0.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0524849b-0616-46fe-9940-c4934dc5fba0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 013a1c2ceea4c7055b2d8d5272e68e07
db90a35ecc3262efe4bf8ad7aca5f92e2e13e0d0
94c614b3414f27f0d9dfe5c4ebd6b1745431a5e8d221ca7b85e8b63cf911e72b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0524849b-0616-46fe-9940-c4934dc5fba0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 5926
x-amzn-requestid: a9cb9682-9f41-467c-8ab2-c95461ada103
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZkE9uF_8IAMFzlg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633e4ebe-3c42cb491380d48712eeb124;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 03:42:54 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: am-hU_JUwIRnVRcNdZ-cn1dzK5tUeipIeYIZLqkBeWiInYlUQjbB2Q==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Sat, 08 Oct 2022 21:44:18 GMT
age: 21595
etag: "db90a35ecc3262efe4bf8ad7aca5f92e2e13e0d0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1599fbb-2511-4bc2-8ca8-c4005f192889.jpeg
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1599fbb-2511-4bc2-8ca8-c4005f192889.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fa302105ffc3d3c3eb8c61fb9c74eb44
748429ef5ace5733a115fbff5d775825a6d7a406
4214b707ce6018e1f70d36515f270d3e5c7575b2f2c2c3affa670b5f48d6e195
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1599fbb-2511-4bc2-8ca8-c4005f192889.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7332
x-amzn-requestid: f1570fe8-21a8-4d77-87d5-cd186eff2987
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZtHgOH9boAMFRzg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6341ec67-25e96c4777da7ced0b003869;Sampled=0
x-amzn-remapped-date: Sat, 08 Oct 2022 21:32:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: R-xUSJxrEHLgDmS9e0vaVMeoG51jQTdugiGQeRwZlv0HqW_sM2EZBw==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Sat, 08 Oct 2022 21:51:56 GMT
etag: "748429ef5ace5733a115fbff5d775825a6d7a406"
content-type: image/jpeg
age: 21137
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49c879b8-77d0-4424-8724-c68b3bd47121.png
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49c879b8-77d0-4424-8724-c68b3bd47121.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fdcc106f8037576ca719c2395ddad198
adcffabc52d32d5750787a3465db489dc0d37d97
82acb9b9811427e3e93bdca774949502b12d21617476341409fa1a237a37aa5c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49c879b8-77d0-4424-8724-c68b3bd47121.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 13770
x-amzn-requestid: fe2d711e-e69d-4c7a-9aad-812a6487869f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zf_WZHr5IAMFRBQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633cac28-16481cdc13a977b32a898793;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 21:56:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: HFgnZToHe8f5q2WNSSGEN-daSKh7mOE0aOQRma--gnFEkPQHfJuiug==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sat, 08 Oct 2022 21:44:29 GMT
age: 21584
etag: "adcffabc52d32d5750787a3465db489dc0d37d97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b5cf0255a785469b033344c2ec0ed394
a4a700c1c250cb10f175e67b4b11f2c94afb2bdb
191e75d8e785c03eb558af6f3efe0d557669b65b94d17b42a1b9b7f623947c6f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "191E75D8E785C03EB558AF6F3EFE0D557669B65B94D17B42A1B9B7F623947C6F"
Last-Modified: Fri, 07 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13941
Expires: Sun, 09 Oct 2022 07:36:34 GMT
Date: Sun, 09 Oct 2022 03:44:13 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F58ddd605-8bb7-489e-88f0-51ba1cc6095c.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F58ddd605-8bb7-489e-88f0-51ba1cc6095c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5cbd50295a4fbc6734f47c8f4ef6f94c
bb9122e3f153a3100b89688c6c08ba938a7e7db3
97ae4592605581e855fda6e523760f600a34dd5f10a4195d0c8df8e220fdd77e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F58ddd605-8bb7-489e-88f0-51ba1cc6095c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4957
x-amzn-requestid: 97457aca-e435-437e-a326-59e317bec853
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZtHgaFrjoAMFslw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6341ec68-2ca87ddb370532f75b236149;Sampled=0
x-amzn-remapped-date: Sat, 08 Oct 2022 21:32:24 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: XenzEoRSNQwOe0HuMcMT132V0ofdwUBJfnYrAuMdo7VR_mGtgoiJhw==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 08 Oct 2022 21:44:20 GMT
age: 21593
etag: "bb9122e3f153a3100b89688c6c08ba938a7e7db3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
3piltd.com/wp-content/uploads/elementor/css/post-15.css?ver=1605764490
200 OK 3.5 kB URL HTTP/1.1 3piltd.com/wp-content/uploads/elementor/css/post-15.css?ver=1605764490
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (3505), with no line terminators
Hash e3aa13a801baa7bae44852aa2bc7f4a3
af3039adb0b8f0449a29e5eb4ce154be0dd2c60c
cc8f8216a09089e97b8fc319e9c28cec22ebcf463e3c209fb4b3702a3324ced8
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/elementor/css/post-15.css?ver=1605764490 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Thu, 19 Nov 2020 05:41:30 GMT
Accept-Ranges: bytes
Content-Length: 3505
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: text/css
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b5cf0255a785469b033344c2ec0ed394
a4a700c1c250cb10f175e67b4b11f2c94afb2bdb
191e75d8e785c03eb558af6f3efe0d557669b65b94d17b42a1b9b7f623947c6f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "191E75D8E785C03EB558AF6F3EFE0D557669B65B94D17B42A1B9B7F623947C6F"
Last-Modified: Fri, 07 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13941
Expires: Sun, 09 Oct 2022 07:36:34 GMT
Date: Sun, 09 Oct 2022 03:44:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b5cf0255a785469b033344c2ec0ed394
a4a700c1c250cb10f175e67b4b11f2c94afb2bdb
191e75d8e785c03eb558af6f3efe0d557669b65b94d17b42a1b9b7f623947c6f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "191E75D8E785C03EB558AF6F3EFE0D557669B65B94D17B42A1B9B7F623947C6F"
Last-Modified: Fri, 07 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13941
Expires: Sun, 09 Oct 2022 07:36:34 GMT
Date: Sun, 09 Oct 2022 03:44:13 GMT
Connection: keep-alive
3piltd.com/wp-includes/js/jquery/ui/core.min.js?ver=1.11.4
200 OK 3.9 kB URL HTTP/1.1 3piltd.com/wp-includes/js/jquery/ui/core.min.js?ver=1.11.4
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (3704)
Hash e6784d91bf2c668bc4093063c5b15113
687e1d2e957a821280dbd205ae66182f16dfdc30
194ebae85ff853319e8668f23a4c5bf371a7d9f5d550a40980ab53026ddaaa17
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.11.4 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:32 GMT
Accept-Ranges: bytes
Content-Length: 3929
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript
3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/js/jquery.typewatch.js?ver=5.13.6
200 OK 3.0 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/js/jquery.typewatch.js?ver=5.13.6
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with CRLF line terminators
Hash b54528a5397b9522a0886b4733cbaca9
2afb4116097dd2b1b5f35d7d1ea67ef7b7e98a4c
28aa95a989d5e46ee060bb0d443fcd699d31db7320673379fad857f77fc776a8
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/modern-events-calendar-lite/assets/js/jquery.typewatch.js?ver=5.13.6 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 3013
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
3piltd.com/wp-includes/js/jquery/ui/datepicker.min.js?ver=1.11.4
200 OK 36 kB URL HTTP/1.1 3piltd.com/wp-includes/js/jquery/ui/datepicker.min.js?ver=1.11.4
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (35947)
Hash a236bd4097fcbfb009f64238dc4443a1
ddbeeaa10749e4a74fe624ced0531b9243235dd2
2c3f3b95a692312d9b75815ecb949a40c2a701ff148fe865fde55556c810a22c
GET /wp-includes/js/jquery/ui/datepicker.min.js?ver=1.11.4 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:32 GMT
Accept-Ranges: bytes
Content-Length: 36172
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/packages/featherlight/featherlight.js?ver=5.13.6
200 OK 31 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/packages/featherlight/featherlight.js?ver=5.13.6
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 11c182e0f84b20b8f7f97d228d77dd56
4d387661d534f50cb58de1469634bdfad2ade25f
87a4d24f8fb09eae43f4e07568e22c9f714ad5a86296516dd3721d7328922d71
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/modern-events-calendar-lite/assets/packages/featherlight/featherlight.js?ver=5.13.6 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:32 GMT
Accept-Ranges: bytes
Content-Length: 30811
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: application/javascript
3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/js/frontend.js?ver=5.13.6
200 OK 206 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/js/frontend.js?ver=5.13.6
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (411), with CRLF line terminators
Size 206 kB (206037 bytes)
Hash f93b396224e2b008703c66dc91061095
9fd0935fcd46242943d86fd5aec7084dc4cb5bfa
69df6794e4850b77fca5b2e88950f98b75e3f00f58f83fae95d3f1aa5a5426c1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/modern-events-calendar-lite/assets/js/frontend.js?ver=5.13.6 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 206037
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/packages/select2/select2.full.min.js?ver=5.13.6
200 OK 79 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/packages/select2/select2.full.min.js?ver=5.13.6
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type Unicode text, UTF-8 text, with very long lines (64130), with CRLF line terminators
Hash 5d60184be7813e6a51b6a7f929aaf50a
7eca639e5048fbb8952ba6d1b72ad7ce9b7e75ea
fe5f91e8750420e8c460358e4ddf588f781c252c2426741e59132f238d6e6203
GET /wp-content/plugins/modern-events-calendar-lite/assets/packages/select2/select2.full.min.js?ver=5.13.6 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:32 GMT
Accept-Ranges: bytes
Content-Length: 78557
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/packages/tooltip/tooltip.js?ver=5.13.6
200 OK 40 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/packages/tooltip/tooltip.js?ver=5.13.6
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (32056), with CRLF line terminators
Hash e63e72beda2a9b4113814de083867f0a
62a13e9e707cebea9232b208b0e56c3c4730261d
b763b49b4a8f7afccef98cc8a40f450a31d6c69150d30acb3438d81331222d41
GET /wp-content/plugins/modern-events-calendar-lite/assets/packages/tooltip/tooltip.js?ver=5.13.6 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:32 GMT
Accept-Ranges: bytes
Content-Length: 39901
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/javascript
3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/packages/lity/lity.min.js?ver=5.13.6
200 OK 6.3 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/packages/lity/lity.min.js?ver=5.13.6
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (6169), with CRLF line terminators
Hash fe8ca85f2ef23ed06b3b53c870d4cf05
246692a381377536145113f0ecc2c8d9208821e9
3b1ae6cec7f06d999f0695e08022868275f74821104092579bc1a848db0f34de
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/modern-events-calendar-lite/assets/packages/lity/lity.min.js?ver=5.13.6 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:32 GMT
Accept-Ranges: bytes
Content-Length: 6287
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/packages/owl-carousel/owl.carousel.min.js?ver=5.13.6
200 OK 110 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/packages/owl-carousel/owl.carousel.min.js?ver=5.13.6
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with CRLF line terminators
Size 110 kB (109930 bytes)
Hash 6927b61fe343d41bb968ce61dff2f67e
81ef5259cb46a2da7cfb29ef25ebab447de1d367
2253d28cf7e038400244b19b4fe87d90240a0388e16f0a145deeff4eaf47b14a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/modern-events-calendar-lite/assets/packages/owl-carousel/owl.carousel.min.js?ver=5.13.6 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Thu, 19 Nov 2020 03:50:00 GMT
Accept-Ranges: bytes
Content-Length: 109930
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: application/javascript
3piltd.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.3
200 OK 14 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.3
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
Hash f89263c0c2f24398a1df52eead69f5f8
850e9cfb1680eb1df4365889724e69f38df7bb9e
125ec330f66081e7dc9f2814e9ec18f4e2d0baa1936d497375eedfda7ac12e5c
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.3 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 14280
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
3piltd.com/wp-content/plugins/motopress-hotel-booking-lite/vendors/canjs/can.custom.min.js?ver=3.8.7
200 OK 25 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/motopress-hotel-booking-lite/vendors/canjs/can.custom.min.js?ver=3.8.7
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (3717), with CRLF line terminators
Hash e5d8abfc6ee6be26c08e3f8055cf752c
808a425ea016767becce479e34fb1fb0a91c17e3
fb9bebcae4fd227b83b1828ee0ebe5a69130c063e07c94ea6696e1ba99d75ec4
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/motopress-hotel-booking-lite/vendors/canjs/can.custom.min.js?ver=3.8.7 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 25385
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript
3piltd.com/wp-content/plugins/motopress-hotel-booking-lite/vendors/kbwood/datepick/jquery.datepick.min.js?ver=3.8.7
200 OK 38 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/motopress-hotel-booking-lite/vendors/kbwood/datepick/jquery.datepick.min.js?ver=3.8.7
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (37442), with CRLF line terminators
Hash 38183b0b3dc654615cf7739159f520b3
8f115ad6af00a1e06e1408fb915be6b82a801ba9
3290d7caff002e9c425bdd1e86ed41e82942aa7d0a885518ca5348d39c096dc6
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/motopress-hotel-booking-lite/vendors/kbwood/datepick/jquery.datepick.min.js?ver=3.8.7 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 37715
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript
3piltd.com/wp-content/plugins/motopress-hotel-booking-lite/vendors/kbwood/datepick/jquery.plugin.min.js?ver=3.8.7
200 OK 3.2 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/motopress-hotel-booking-lite/vendors/kbwood/datepick/jquery.plugin.min.js?ver=3.8.7
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type Unicode text, UTF-8 (with BOM) text, with very long lines (2986), with CRLF line terminators
Hash 8f84414b05f6548c7fb0ba714f2290fc
90294fbfdbe6c7c74b8025d57a1d7bbf5aa896fc
2def6264ea6df3e6a162ddfae71a8dc978dd03cf5316492e30f2fda4d58fb983
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/motopress-hotel-booking-lite/vendors/kbwood/datepick/jquery.plugin.min.js?ver=3.8.7 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Thu, 19 Nov 2020 03:44:13 GMT
Accept-Ranges: bytes
Content-Length: 3184
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: application/javascript
3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/css/frontend.min.css?ver=5.13.6
200 OK 345 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/modern-events-calendar-lite/assets/css/frontend.min.css?ver=5.13.6
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (65536), with no line terminators
Size 345 kB (345447 bytes)
Hash 7f541bd3b2ef7bdcf10a0e364b5eb80f
0e2082b766a4de0810a61226e6545719cd6aeee7
7f69add4bf8f5764e5ed86e05087b2b36fc563f0cdef0b2692ffed5d8e0014e9
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/modern-events-calendar-lite/assets/css/frontend.min.css?ver=5.13.6 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:13 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 345447
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: text/css
3piltd.com/wp-content/plugins/motopress-hotel-booking-lite/assets/js/public/mphb.min.js?ver=3.8.7
200 OK 63 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/motopress-hotel-booking-lite/assets/js/public/mphb.min.js?ver=3.8.7
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (63209), with no line terminators
Hash 707925593e4cab0813fdc6dea97e4575
f0c1d5b0b381f57c6d9b3469ab7ddadc032d4036
e5d78c9ad98b5790a7acf25fc49a573e30cadd04762fc606f4806484884711b3
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/motopress-hotel-booking-lite/assets/js/public/mphb.min.js?ver=3.8.7 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 63209
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: application/javascript
3piltd.com/wp-content/plugins/stripe-payments/public/assets/js/stripe-handler-ng.js?ver=2.0.37
200 OK 8.0 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/stripe-payments/public/assets/js/stripe-handler-ng.js?ver=2.0.37
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (365)
Hash 6f1564fa1cc6178a83b74ae2c4e8fb7e
ce8545e93d13d9b9808bdd9436c18f8cbc7c0f6b
a66cbbea906904aa710185244c0b2dc3e216a4eac2e81894e80c3e81afa2557e
GET /wp-content/plugins/stripe-payments/public/assets/js/stripe-handler-ng.js?ver=2.0.37 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 7971
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
3piltd.com/wp-includes/js/underscore.min.js?ver=1.8.3
200 OK 16 kB URL HTTP/1.1 3piltd.com/wp-includes/js/underscore.min.js?ver=1.8.3
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (16010)
Hash 203eeb8dd53e84fb53b7aeffb562d825
b4b4361a61ee78717bdcffe5c46ea79cdc3e04ae
6cd0d6897b3d4779f7d88ce72531f22fbf75851b195fb14e6f3f23d051b3d1e9
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/underscore.min.js?ver=1.8.3 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:32 GMT
Accept-Ranges: bytes
Content-Length: 16045
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/javascript
fonts.googleapis.com/css?family=Barlow:100,200,300,400,500,600,700,800,900,100italic,200italic,300italic,400italic,500italic,600italic,700italic,800italic,900italic%7CRubik:100,200,300,400,500,600,700,800,900,100italic,200italic,300italic,400italic,500italic,600italic,700italic,800italic,900italic
200 OK 1.4 kB URL HTTP/1.1 fonts.googleapis.com/css?family=Barlow:100,200,300,400,500,600,700,800,900,100italic,200italic,300italic,400italic,500italic,600italic,700italic,800italic,900italic%7CRubik:100,200,300,400,500,600,700,800,900,100italic,200italic,300italic,400italic,500italic,600italic,700italic,800italic,900italic
IP
Hash 857c3bcecbc83fd360fd6ce7a0d23259
2ad9fc0212f90d01780ea499e03c3edb018025c5
86b225f23e0023bbb2030329046310c3fd89799f5dba2618cb462cf9bc055759
GET /css?family=Barlow:100,200,300,400,500,600,700,800,900,100italic,200italic,300italic,400italic,500italic,600italic,700italic,800italic,900italic%7CRubik:100,200,300,400,500,600,700,800,900,100italic,200italic,300italic,400italic,500italic,600italic,700italic,800italic,900italic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Sun, 09 Oct 2022 03:44:14 GMT
Date: Sun, 09 Oct 2022 03:44:14 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
3piltd.com/wp-content/plugins/jet-menu/assets/public/js/vue.min.js?ver=2.6.11
200 OK 94 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/jet-menu/assets/public/js/vue.min.js?ver=2.6.11
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (65449)
Hash 6c81f02ad0bf8e12a66c18cab188d029
abd239f02966b2d324b0512c203bdbaf82a4ed7a
9e0156dd49c03744e79bbea60eebbbb94b5811c1b71b91f5fb38a8270dedfbaf
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/jet-menu/assets/public/js/vue.min.js?ver=2.6.11 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 93670
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: application/javascript
3piltd.com/wp-content/plugins/jet-menu/assets/public/js/jet-menu-public-script.js?ver=2.0.6
200 OK 41 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/jet-menu/assets/public/js/jet-menu-public-script.js?ver=2.0.6
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type HTML document, Unicode text, UTF-8 text, with very long lines (2070)
Hash 735b0eb61f12c20e06456f324d0cadf7
f55b8476c71f9dc7e13f00fcdd94d4e4c10dbd55
19114f4aa56ffd642784138c178e926f7481b497e14111a431496ca8972b473f
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/jet-menu/assets/public/js/jet-menu-public-script.js?ver=2.0.6 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 41147
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/javascript
3piltd.com/wp-includes/js/wp-embed.min.js?ver=5.5.10
200 OK 1.4 kB URL HTTP/1.1 3piltd.com/wp-includes/js/wp-embed.min.js?ver=5.5.10
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1391)
Hash 905225d5711b559d3092387d5ffbedbd
6f6c39075263bafb9e8c10f1b34a1a0f7ee03c9d
5be614bce53f767993a5f5f14a6badd6aae6bf3af7cbdbf4d31520de49e27991
GET /wp-includes/js/wp-embed.min.js?ver=5.5.10 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:32 GMT
Accept-Ranges: bytes
Content-Length: 1426
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a5bb2ca079b8c15c921933d39c57ae47
7ae6e38c3e12ef05164b04df7f2a65be3a3ec440
336607c0f56b4a97511339d2437520aa8c9d6cb07b5b5ddf535efe65561d2890
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 09 Oct 2022 03:44:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
3piltd.com/wp-content/plugins/raven/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.1.0
200 OK 24 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/raven/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.1.0
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (24315), with no line terminators
Hash 17b985f20d718f8d7bd0d9efc4260a00
321ca1801128ba6b4006ea7160eb261acfdc211e
34da25bb178a44425393bc37e0e0892c906de7ea3ba9f280b49f8ee0d18f4558
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/raven/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.1.0 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:36 GMT
Accept-Ranges: bytes
Content-Length: 24315
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript
maps.google.com/maps?q=103%20Woodford%20Street%2C%20Newtown%20Port-Of%3DSpain%20Trinidad&t=m&z=10&output=embed&iwloc=near
301 Moved Permanently 322 B URL HTTP/2 maps.google.com/maps?q=103%20Woodford%20Street%2C%20Newtown%20Port-Of%3DSpain%20Trinidad&t=m&z=10&output=embed&iwloc=near
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash f28e7b75f22af8aa6d9dc8757623f30e
f9efbc6c545159575d751f9b201911bafe637f2d
3890713fd5be6af18e3ea83f8622c47fe00faf087c398faa17a5619d3ed19cf4
GET /maps?q=103%20Woodford%20Street%2C%20Newtown%20Port-Of%3DSpain%20Trinidad&t=m&z=10&output=embed&iwloc=near HTTP/1.1
Host: maps.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://3piltd.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sun, 09 Oct 2022 03:44:14 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://www.google.com/maps/embed?origin=mfe&pb=!1m4!2m1!1s103+Woodford+Street,+Newtown+Port-Of%3DSpain+Trinidad!5e0!6i10
content-type: text/html; charset=UTF-8
server: mafe
content-length: 322
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jupiterx.artbees.net/manufacture/wp-content/uploads/sites/392/2020/04/404-style.png
200 OK 56 kB URL HTTP/2 jupiterx.artbees.net/manufacture/wp-content/uploads/sites/392/2020/04/404-style.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 877e452e4554d3406cddc98078462f7f
8e8f8ef79608a95f7addab2526c275514c4c3ef2
9064b87f18d2706e8abfe7f480334c1b7f91789f07a546842a3fd3112a135d81
GET /manufacture/wp-content/uploads/sites/392/2020/04/404-style.png HTTP/1.1
Host: jupiterx.artbees.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://3piltd.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 09 Oct 2022 03:44:14 GMT
content-type: image/webp
content-length: 55862
cache-control: max-age=2592000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=63165
content-disposition: inline; filename="404-style.webp"
access-control-allow-origin: *
etag: "5f474495-f6bd"
expires: Sun, 23 Oct 2022 01:51:51 GMT
last-modified: Thu, 27 Aug 2020 05:28:53 GMT
vary: Accept
cf-cache-status: HIT
age: 143762
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Eg%2FnkDFLjnFGepduQBsJo79rjAATJwvXhA6kvee8KP4UTeoNCHZ4%2B42yyj7ZQi%2BmOrLY7pOyoO1dNSWe2SRfNMsGL9LI31mzHPATm%2BoPhphsmCHFLEchJ4yhDFB9WsYXU%2Fb5DcuS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75741dd90d48b50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
3piltd.com/wp-content/plugins/raven/assets/lib/url-polyfill/url-polyfill.min.js?ver=1.1.7
200 OK 6.2 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/raven/assets/lib/url-polyfill/url-polyfill.min.js?ver=1.1.7
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (6241), with no line terminators
Hash ebd287afc5ef2fd741602dcf5bb4b62d
8ef0c6b3eda857600272b744e6091f307bcfdfa2
65001aec283e0668be83e9d8af7761f7c5a29d3cc00f213786725d16cc279173
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/raven/assets/lib/url-polyfill/url-polyfill.min.js?ver=1.1.7 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:36 GMT
Accept-Ranges: bytes
Content-Length: 6241
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: application/javascript
3piltd.com/wp-content/themes/jupiterx/lib/assets/dist/js/frontend.min.js?ver=1.17.0
200 OK 127 kB URL HTTP/1.1 3piltd.com/wp-content/themes/jupiterx/lib/assets/dist/js/frontend.min.js?ver=1.17.0
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (65536), with no line terminators
Size 127 kB (127262 bytes)
Hash 6b15c0c307b3fd788fe47576070fd9d5
f9eb5bcdc531966a8d7db4fb66eac87d6a516788
c6229b32af7d1a2f89a6cd7210d9bb8bedb051c193c397819042a57c1538c932
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/jupiterx/lib/assets/dist/js/frontend.min.js?ver=1.17.0 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:36 GMT
Accept-Ranges: bytes
Content-Length: 127262
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/javascript
3piltd.com/wp-content/plugins/raven/assets/lib/parallax-scroll/jquery.parallax-scroll.min.js?ver=1.0.0
200 OK 3.1 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/raven/assets/lib/parallax-scroll/jquery.parallax-scroll.min.js?ver=1.0.0
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (3133)
Hash 884372f9593d9c105a36f61f1ff7e7f2
3288cc99feefbf992e4fe034dcbeb9be2f636085
140c417e6e52ea65c3e5e012d6c4b0c0523d4944f09fabfa1c8ada5c34b9bb1f
GET /wp-content/plugins/raven/assets/lib/parallax-scroll/jquery.parallax-scroll.min.js?ver=1.0.0 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:36 GMT
Accept-Ranges: bytes
Content-Length: 3134
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8a2449aeb44e755b2e6897d30993dda0
16cd83b0e0975ebf09e7035c26bbda168af42ac8
fd80527f810be13b70107c447b6f6f226c6145fbcc3b5446f9c834bca2f1597b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 09 Oct 2022 03:44:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/rubik/v21/iJWKBXyIfDnIV7nBrXw.woff2
200 OK 34 kB URL HTTP/2 fonts.gstatic.com/s/rubik/v21/iJWKBXyIfDnIV7nBrXw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 33580, version 1.0\012- data
Hash 848cd2ecd011428969dc6b90431bc482
6b1a7b562a56bd54510e0f6f95e26babca331a1b
981307dcbbd348f6fb4e3eab184077392f9ee15097ea868f630debefad9044e9
GET /s/rubik/v21/iJWKBXyIfDnIV7nBrXw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 03 Oct 2022 21:08:19 GMT
expires: Tue, 03 Oct 2023 21:08:19 GMT
cache-control: public, max-age=31536000
age: 455755
last-modified: Mon, 18 Jul 2022 19:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
3piltd.com/wp-includes/js/jquery/ui/position.min.js?ver=1.11.4
200 OK 6.4 kB URL HTTP/1.1 3piltd.com/wp-includes/js/jquery/ui/position.min.js?ver=1.11.4
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (6217)
Hash d1c2e97eeca08ca067ccf2c5736f0390
5281985542fcc8c5a651d1991296e12c39bfcb82
0ce51090b148a45a0e3d652719ed6ef7f1a38e5d272dbf874f86a49664e897a3
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/ui/position.min.js?ver=1.11.4 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:32 GMT
Accept-Ranges: bytes
Content-Length: 6438
Keep-Alive: timeout=5, max=85
Connection: Keep-Alive
Content-Type: application/javascript
3piltd.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.0.5
200 OK 64 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.0.5
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type Unicode text, UTF-8 text, with very long lines (47301), with LF, NEL line terminators
Hash df1b5191f27d5c524c55103cc3ba7de6
800beb443e1171f0918075ccabc217c2df0fac1d
2db95f954c76f0f48b6bd034572e46d393a31cd2f0d364c99c441a95d8e5dc05
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.0.5 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 64115
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8a2449aeb44e755b2e6897d30993dda0
16cd83b0e0975ebf09e7035c26bbda168af42ac8
fd80527f810be13b70107c447b6f6f226c6145fbcc3b5446f9c834bca2f1597b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 09 Oct 2022 03:44:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8a2449aeb44e755b2e6897d30993dda0
16cd83b0e0975ebf09e7035c26bbda168af42ac8
fd80527f810be13b70107c447b6f6f226c6145fbcc3b5446f9c834bca2f1597b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 09 Oct 2022 03:44:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8a2449aeb44e755b2e6897d30993dda0
16cd83b0e0975ebf09e7035c26bbda168af42ac8
fd80527f810be13b70107c447b6f6f226c6145fbcc3b5446f9c834bca2f1597b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 09 Oct 2022 03:44:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 14:07:32 GMT
expires: Thu, 05 Oct 2023 14:07:32 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
age: 308202
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a5bb2ca079b8c15c921933d39c57ae47
7ae6e38c3e12ef05164b04df7f2a65be3a3ec440
336607c0f56b4a97511339d2437520aa8c9d6cb07b5b5ddf535efe65561d2890
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 09 Oct 2022 03:44:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 89a17c02cdf926b852220408f32d6ad4
c22fb94c77a74cfc00d6b2cc88643afa0563abbe
2a4d9286d35271838cb99d265e2c8dbb851fa80ac2ca293571125188e684a7e3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 09 Oct 2022 03:44:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
3piltd.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.8.1
200 OK 11 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.8.1
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (10725)
Hash 58baf0f238d7afc7ab926b8d51e5b559
8515e5f578269e29c048450f78c107935d325dff
2989e0b9e836cb9de3274d641ec6a58c2052f039e790ddd59b22303930bfdeeb
GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.8.1 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 10863
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/javascript
fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3_-gs51os.woff2
200 OK 21 kB URL HTTP/2 fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3_-gs51os.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 20960, version 1.0\012- data
Hash d312d179276a175029c56c50e9bc9d0b
aa9285dd6183c696fc39ec31c221581e2d4959c1
7c0597b1b0c771139c958982210f05b275993037f0f3ba20d7a9300a0741dc80
GET /s/barlow/v12/7cHqv4kjgoGqM7E3_-gs51os.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20960
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 00:06:03 GMT
expires: Thu, 05 Oct 2023 00:06:03 GMT
cache-control: public, max-age=31536000
age: 358691
last-modified: Tue, 19 Apr 2022 19:18:28 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E30-8s51os.woff2
200 OK 22 kB URL HTTP/2 fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E30-8s51os.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 21796, version 1.0\012- data
Hash 8074c760fbdd366fc1c33ce702911abf
b68cdebfb413c4ad60fa131dc29e36da4b3ce45c
2b14e8397d552f351a4396dec25ec5da1348865683100e94c4ab0faea4a9a254
GET /s/barlow/v12/7cHqv4kjgoGqM7E30-8s51os.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21796
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Oct 2022 22:37:16 GMT
expires: Wed, 04 Oct 2023 22:37:16 GMT
cache-control: public, max-age=31536000
age: 364018
last-modified: Tue, 19 Apr 2022 19:35:19 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/barlow/v12/7cHpv4kjgoGqM7E_DMs5.woff2
200 OK 21 kB URL HTTP/2 fonts.gstatic.com/s/barlow/v12/7cHpv4kjgoGqM7E_DMs5.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 21144, version 1.0\012- data
Hash 2bc7630144496092dc786ce63109e560
723df3658078cfed03c85e47f15fc439eb4331be
7c9c80a6c32c0619d61c28f28723e68c5f8f75163e77ee5cf64c39e640e0d71e
GET /s/barlow/v12/7cHpv4kjgoGqM7E_DMs5.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21144
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Oct 2022 22:36:59 GMT
expires: Wed, 04 Oct 2023 22:36:59 GMT
cache-control: public, max-age=31536000
age: 364035
last-modified: Tue, 19 Apr 2022 19:43:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8a2449aeb44e755b2e6897d30993dda0
16cd83b0e0975ebf09e7035c26bbda168af42ac8
fd80527f810be13b70107c447b6f6f226c6145fbcc3b5446f9c834bca2f1597b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 09 Oct 2022 03:44:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
3piltd.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
200 OK 12 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (12198), with no line terminators
Hash 3819c3569da71daec283a75483735f7e
ecd40a5cc6f0b76200c454ca880210dc301cfab8
214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 12198
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: application/javascript
3piltd.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6
200 OK 139 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (65280)
Size 139 kB (139151 bytes)
Hash 189d11221485db0f979bc459acd37c4d
d8d6495b60c26bbf1270f0ea5b4b18399df4c18f
97dfc2d1b067f431b1a34f54f9426ba50a3e1b6bd23049d4e1dccb23831f00a8
GET /wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 139151
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: application/javascript
3piltd.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.0.5
200 OK 2.6 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.0.5
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (2634)
Hash 40b7fbab8b1a9cd4d500fe48a3de90db
a3562e9b54db671903c0c0f05f0cc946d34af643
20d67dc1d22cadd6326639e1510929bd3bfdefe7a3a4bd2d78160514b3aa6f50
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.0.5 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 2635
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: application/javascript
fonts.gstatic.com/s/barlow/v12/7cHrv4kjgoGqM7E3b_s7wH8.woff2
200 OK 20 kB URL HTTP/2 fonts.gstatic.com/s/barlow/v12/7cHrv4kjgoGqM7E3b_s7wH8.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 20424, version 1.0\012- data
Hash de9b3aab0cd838dac94553f2f4aaf6f5
5355facde197f12fc2578381566f04c4b5f36cbf
f91f44c1f7fbae5c1e92b83989432a43fb43bdaf5b3054f5acb95aa01e476aed
GET /s/barlow/v12/7cHrv4kjgoGqM7E3b_s7wH8.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20424
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 20:34:34 GMT
expires: Thu, 05 Oct 2023 20:34:34 GMT
cache-control: public, max-age=31536000
age: 284980
last-modified: Tue, 19 Apr 2022 19:18:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3w-os51os.woff2
200 OK 21 kB URL HTTP/2 fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3w-os51os.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 20712, version 1.0\012- data
Hash 70bad2e5fa320f5ebc4f640be04ac2d9
4cd93511cb4b3ba0a957865fd2a5c607a3a729d3
815f02681d0fd52b5f52e8c3fca5e754fefb3c83c2eed47b63fd3c3228628cd6
GET /s/barlow/v12/7cHqv4kjgoGqM7E3w-os51os.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20712
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 09:17:59 GMT
expires: Thu, 05 Oct 2023 09:17:59 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 19 Apr 2022 18:55:56 GMT
content-type: font/woff2
age: 325575
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3p-ks51os.woff2
200 OK 21 kB URL HTTP/2 fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3p-ks51os.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 20992, version 1.0\012- data
Hash 9bbb36e16c6af8205e564346df9579c0
8dc297321f4b344e6ea16b549734b10097594860
6563f08627fa2cd60c0c300318405b6f545f0d7f469df6ba87c9e31ecc987217
GET /s/barlow/v12/7cHqv4kjgoGqM7E3p-ks51os.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20992
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 19:43:45 GMT
expires: Thu, 05 Oct 2023 19:43:45 GMT
cache-control: public, max-age=31536000
age: 288029
last-modified: Tue, 19 Apr 2022 19:13:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/barlow/v12/7cHrv4kjgoGqM7E3b_s7wH8.woff2
200 OK 20 kB URL HTTP/1.1 fonts.gstatic.com/s/barlow/v12/7cHrv4kjgoGqM7E3b_s7wH8.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 20424, version 1.0\012- data
Hash de9b3aab0cd838dac94553f2f4aaf6f5
5355facde197f12fc2578381566f04c4b5f36cbf
f91f44c1f7fbae5c1e92b83989432a43fb43bdaf5b3054f5acb95aa01e476aed
GET /s/barlow/v12/7cHrv4kjgoGqM7E3b_s7wH8.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 20424
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 04 Oct 2022 16:01:16 GMT
Expires: Wed, 04 Oct 2023 16:01:16 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 19 Apr 2022 19:18:18 GMT
Content-Type: font/woff2
Age: 387778
fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3w-os51os.woff2
200 OK 21 kB URL HTTP/1.1 fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3w-os51os.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 20712, version 1.0\012- data
Hash 70bad2e5fa320f5ebc4f640be04ac2d9
4cd93511cb4b3ba0a957865fd2a5c607a3a729d3
815f02681d0fd52b5f52e8c3fca5e754fefb3c83c2eed47b63fd3c3228628cd6
GET /s/barlow/v12/7cHqv4kjgoGqM7E3w-os51os.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 20712
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 07:22:03 GMT
Expires: Thu, 05 Oct 2023 07:22:03 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 19 Apr 2022 18:55:56 GMT
Content-Type: font/woff2
Age: 332531
fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3t-4s51os.woff2
200 OK 22 kB URL HTTP/2 fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3t-4s51os.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 21724, version 1.0\012- data
Hash c3609c36a150ce088ea4dcab92b7c00b
0c18236a183e962533a4f61bff3ae2581313561a
65a47caa5183b035bf78d0f93adbe5cea500333410259c54abf2de356740df7e
GET /s/barlow/v12/7cHqv4kjgoGqM7E3t-4s51os.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21724
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Oct 2022 22:37:04 GMT
expires: Wed, 04 Oct 2023 22:37:04 GMT
cache-control: public, max-age=31536000
age: 364030
last-modified: Tue, 19 Apr 2022 19:29:44 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3p-ks51os.woff2
200 OK 21 kB URL HTTP/1.1 fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3p-ks51os.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 20992, version 1.0\012- data
Hash 9bbb36e16c6af8205e564346df9579c0
8dc297321f4b344e6ea16b549734b10097594860
6563f08627fa2cd60c0c300318405b6f545f0d7f469df6ba87c9e31ecc987217
GET /s/barlow/v12/7cHqv4kjgoGqM7E3p-ks51os.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 20992
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 06 Oct 2022 23:03:34 GMT
Expires: Fri, 06 Oct 2023 23:03:34 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 19 Apr 2022 19:13:23 GMT
Content-Type: font/woff2
Age: 189640
fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3q-0s51os.woff2
200 OK 22 kB URL HTTP/2 fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3q-0s51os.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22052, version 1.0\012- data
Hash f27acc0d33d769a3da576516ca236c41
a678c0f6905303906a2537c1ff983258286a9263
1f132510bc7b665bbe5fb9227b0d2daafa5513296a72f88f88d38179eded9277
GET /s/barlow/v12/7cHqv4kjgoGqM7E3q-0s51os.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22052
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 03 Oct 2022 22:45:15 GMT
expires: Tue, 03 Oct 2023 22:45:15 GMT
cache-control: public, max-age=31536000
age: 449939
last-modified: Tue, 19 Apr 2022 19:05:17 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/barlow/v12/7cHpv4kjgoGqM7E_DMs5.woff2
200 OK 21 kB URL HTTP/1.1 fonts.gstatic.com/s/barlow/v12/7cHpv4kjgoGqM7E_DMs5.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 21144, version 1.0\012- data
Hash 2bc7630144496092dc786ce63109e560
723df3658078cfed03c85e47f15fc439eb4331be
7c9c80a6c32c0619d61c28f28723e68c5f8f75163e77ee5cf64c39e640e0d71e
GET /s/barlow/v12/7cHpv4kjgoGqM7E_DMs5.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 21144
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 06 Oct 2022 17:28:23 GMT
Expires: Fri, 06 Oct 2023 17:28:23 GMT
Cache-Control: public, max-age=31536000
Age: 209751
Last-Modified: Tue, 19 Apr 2022 19:43:23 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3q-0s51os.woff2
200 OK 22 kB URL HTTP/1.1 fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3q-0s51os.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22052, version 1.0\012- data
Hash f27acc0d33d769a3da576516ca236c41
a678c0f6905303906a2537c1ff983258286a9263
1f132510bc7b665bbe5fb9227b0d2daafa5513296a72f88f88d38179eded9277
GET /s/barlow/v12/7cHqv4kjgoGqM7E3q-0s51os.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 22052
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 06 Oct 2022 14:57:47 GMT
Expires: Fri, 06 Oct 2023 14:57:47 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 19 Apr 2022 19:05:17 GMT
Content-Type: font/woff2
Age: 218787
3piltd.com/wp-content/plugins/jet-elements/assets/js/jet-elements.min.js?ver=2.3.3
200 OK 57 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/jet-elements/assets/js/jet-elements.min.js?ver=2.3.3
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (56999), with no line terminators
Hash f35800d2d4aa7a4e9ed63468f1cfbdee
7dc99d7dabca91d90fda2a3963eff9010bd9847d
5e612ae7e5f41896b637751b40e17b2d01f5d3fba07a1eb7c5910cb9ef57c7f2
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/jet-elements/assets/js/jet-elements.min.js?ver=2.3.3 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 56999
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: application/javascript
fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3_-gs51os.woff2
200 OK 21 kB URL HTTP/1.1 fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3_-gs51os.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 20960, version 1.0\012- data
Hash d312d179276a175029c56c50e9bc9d0b
aa9285dd6183c696fc39ec31c221581e2d4959c1
7c0597b1b0c771139c958982210f05b275993037f0f3ba20d7a9300a0741dc80
GET /s/barlow/v12/7cHqv4kjgoGqM7E3_-gs51os.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 20960
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 22:58:01 GMT
Expires: Thu, 05 Oct 2023 22:58:01 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 19 Apr 2022 19:18:28 GMT
Content-Type: font/woff2
Age: 276373
fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3j-ws51os.woff2
200 OK 21 kB URL HTTP/2 fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3j-ws51os.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 21416, version 1.0\012- data
Hash d258461a8f2c53d244500969828bdd3f
c796103e6ca328dd6a92bfecf72cda8f0a143158
f9bfb04a18c8be687fadacd7f67647b65113ee8d1aabcb0f410eac21681fa7ef
GET /s/barlow/v12/7cHqv4kjgoGqM7E3j-ws51os.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21416
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 03:20:09 GMT
expires: Thu, 05 Oct 2023 03:20:09 GMT
cache-control: public, max-age=31536000
age: 347045
last-modified: Tue, 19 Apr 2022 18:56:36 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
3piltd.com/wp-content/plugins/jet-menu/assets/public/js/jet-menu-widgets-scripts.js?ver=2.0.6
200 OK 11 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/jet-menu/assets/public/js/jet-menu-widgets-scripts.js?ver=2.0.6
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (2070)
Hash 84ee92b4e4ce7be02d0c00366089c6eb
c4fe6e2962d8de07d4aa1eeb20a4b02712392b16
f3a7ddd6363de195ad182e5e26cdc0addd8ad09e6deba53fcd22831f9cb28803
GET /wp-content/plugins/jet-menu/assets/public/js/jet-menu-widgets-scripts.js?ver=2.0.6 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 11361
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: application/javascript
fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E30-8s51os.woff2
200 OK 22 kB URL HTTP/1.1 fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E30-8s51os.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 21796, version 1.0\012- data
Hash 8074c760fbdd366fc1c33ce702911abf
b68cdebfb413c4ad60fa131dc29e36da4b3ce45c
2b14e8397d552f351a4396dec25ec5da1348865683100e94c4ab0faea4a9a254
GET /s/barlow/v12/7cHqv4kjgoGqM7E30-8s51os.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 21796
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 21:00:50 GMT
Expires: Thu, 05 Oct 2023 21:00:50 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 19 Apr 2022 19:35:19 GMT
Content-Type: font/woff2
Age: 283404
fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3t-4s51os.woff2
200 OK 22 kB URL HTTP/1.1 fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3t-4s51os.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 21724, version 1.0\012- data
Hash c3609c36a150ce088ea4dcab92b7c00b
0c18236a183e962533a4f61bff3ae2581313561a
65a47caa5183b035bf78d0f93adbe5cea500333410259c54abf2de356740df7e
GET /s/barlow/v12/7cHqv4kjgoGqM7E3t-4s51os.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 21724
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 06 Oct 2022 04:26:57 GMT
Expires: Fri, 06 Oct 2023 04:26:57 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 19 Apr 2022 19:29:44 GMT
Content-Type: font/woff2
Age: 256637
fonts.gstatic.com/s/barlow/v12/7cHtv4kjgoGqM7E_CfNY8H0JmA.woff2
200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/barlow/v12/7cHtv4kjgoGqM7E_CfNY8H0JmA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22852, version 1.0\012- data
Hash 8f3186b6c380e6636e7441514e299772
9fa8e2bb2e4028556db61b88b2a98f8780611639
41f20fc90d5fbe2fc00e83034dbc98796323199196453c7302462f3b9a73195f
GET /s/barlow/v12/7cHtv4kjgoGqM7E_CfNY8H0JmA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22852
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 06 Oct 2022 06:57:44 GMT
expires: Fri, 06 Oct 2023 06:57:44 GMT
cache-control: public, max-age=31536000
age: 247590
last-modified: Tue, 19 Apr 2022 19:18:13 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/barlow/v12/7cHtv4kjgoGqM7E_CfNY8H0JmA.woff2
200 OK 23 kB URL HTTP/1.1 fonts.gstatic.com/s/barlow/v12/7cHtv4kjgoGqM7E_CfNY8H0JmA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22852, version 1.0\012- data
Hash 8f3186b6c380e6636e7441514e299772
9fa8e2bb2e4028556db61b88b2a98f8780611639
41f20fc90d5fbe2fc00e83034dbc98796323199196453c7302462f3b9a73195f
GET /s/barlow/v12/7cHtv4kjgoGqM7E_CfNY8H0JmA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 22852
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 07 Oct 2022 22:01:36 GMT
Expires: Sat, 07 Oct 2023 22:01:36 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 19 Apr 2022 19:18:13 GMT
Content-Type: font/woff2
Age: 106958
fonts.gstatic.com/s/barlow/v12/7cHsv4kjgoGqM7E_CfP04WouvTo.woff2
200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/barlow/v12/7cHsv4kjgoGqM7E_CfP04WouvTo.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23120, version 1.0\012- data
Hash 928cdeb3df698908a5e67ee3b6e7d3d7
d08bcdd338624d33415ca972b7305c17f2f22f8e
333c8986d1ba8412b2e111826ccee7f74c121ad7bbd3c415193503b3fe73f810
GET /s/barlow/v12/7cHsv4kjgoGqM7E_CfP04WouvTo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23120
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 06 Oct 2022 05:13:52 GMT
expires: Fri, 06 Oct 2023 05:13:52 GMT
cache-control: public, max-age=31536000
age: 253822
last-modified: Tue, 19 Apr 2022 19:40:24 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/barlow/v12/7cHrv4kjgoGqM7E_Cfs7wH8.woff2
200 OK 24 kB URL HTTP/1.1 fonts.gstatic.com/s/barlow/v12/7cHrv4kjgoGqM7E_Cfs7wH8.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23564, version 1.0\012- data
Hash 382a3f64145254f4ff2bc4319435f167
30f7aa4199ffc48563c666bc6e78664191a660a6
51d0115090b2cfd0cb581cbf62ee79bb94fdcb3f9c2432d39d3adacd8888ccef
GET /s/barlow/v12/7cHrv4kjgoGqM7E_Cfs7wH8.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 23564
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 06 Oct 2022 01:59:35 GMT
Expires: Fri, 06 Oct 2023 01:59:35 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 19 Apr 2022 19:09:09 GMT
Content-Type: font/woff2
Age: 265479
fonts.gstatic.com/s/barlow/v12/7cHsv4kjgoGqM7E_CfOQ4mouvTo.woff2
200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/barlow/v12/7cHsv4kjgoGqM7E_CfOQ4mouvTo.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23388, version 1.0\012- data
Hash 4f481ce97affe17d0f92169395d7f399
c9da82947c38d68a54d1d5388872d2ea5384f8e8
7db7907222218c6679ef11fac3adaef38ccc2c08b10e42864d665f4bd1baba10
GET /s/barlow/v12/7cHsv4kjgoGqM7E_CfOQ4mouvTo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23388
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 06:41:01 GMT
expires: Thu, 05 Oct 2023 06:41:01 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 19 Apr 2022 19:13:34 GMT
content-type: font/woff2
age: 334993
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/barlow/v12/7cHrv4kjgoGqM7E_Cfs7wH8.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/barlow/v12/7cHrv4kjgoGqM7E_Cfs7wH8.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23564, version 1.0\012- data
Hash 382a3f64145254f4ff2bc4319435f167
30f7aa4199ffc48563c666bc6e78664191a660a6
51d0115090b2cfd0cb581cbf62ee79bb94fdcb3f9c2432d39d3adacd8888ccef
GET /s/barlow/v12/7cHrv4kjgoGqM7E_Cfs7wH8.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23564
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 01:15:20 GMT
expires: Thu, 05 Oct 2023 01:15:20 GMT
cache-control: public, max-age=31536000
age: 354534
last-modified: Tue, 19 Apr 2022 19:09:09 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/barlow/v12/7cHsv4kjgoGqM7E_CfPI42ouvTo.woff2
200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/barlow/v12/7cHsv4kjgoGqM7E_CfPI42ouvTo.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23424, version 1.0\012- data
Hash d790fd3d8f9d343eb58d5694433bc750
512e26f17c5b3e6bdd86b7af3288af831214be4b
cca6c2dd9540ac7b8194f52ad49c3e6312705d4aa25c4cc29d68e9dbb8a3a118
GET /s/barlow/v12/7cHsv4kjgoGqM7E_CfPI42ouvTo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23424
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 11:14:24 GMT
expires: Thu, 05 Oct 2023 11:14:24 GMT
cache-control: public, max-age=31536000
age: 318590
last-modified: Tue, 19 Apr 2022 19:28:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/barlow/v12/7cHsv4kjgoGqM7E_CfPk5GouvTo.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/barlow/v12/7cHsv4kjgoGqM7E_CfPk5GouvTo.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23456, version 1.0\012- data
Hash 91efb416cebcc25bb87dfed8182a1d96
48f907856f9b97ee4ae14eb993383fbd7fb7c63c
432dfedeee5ed05e0cc879da4003c304ac55cc0b9370ef84dd8066dc82226e40
GET /s/barlow/v12/7cHsv4kjgoGqM7E_CfPk5GouvTo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23456
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 06:28:35 GMT
expires: Thu, 05 Oct 2023 06:28:35 GMT
cache-control: public, max-age=31536000
age: 335739
last-modified: Tue, 19 Apr 2022 19:13:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/barlow/v12/7cHsv4kjgoGqM7E_CfOA5WouvTo.woff2
200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/barlow/v12/7cHsv4kjgoGqM7E_CfOA5WouvTo.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23368, version 1.0\012- data
Hash 638375e573fd65784db505c40a27c433
94eaa1567979680b6888870d4cd4408298684b13
fb5b9606af67dddd2d12d66ae06688d5b57725f9774d68a7c7c4fb409b54efa3
GET /s/barlow/v12/7cHsv4kjgoGqM7E_CfOA5WouvTo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23368
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 03 Oct 2022 20:08:08 GMT
expires: Tue, 03 Oct 2023 20:08:08 GMT
cache-control: public, max-age=31536000
age: 459366
last-modified: Tue, 19 Apr 2022 19:11:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3j-ws51os.woff2
200 OK 21 kB URL HTTP/1.1 fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3j-ws51os.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 21416, version 1.0\012- data
Hash d258461a8f2c53d244500969828bdd3f
c796103e6ca328dd6a92bfecf72cda8f0a143158
f9bfb04a18c8be687fadacd7f67647b65113ee8d1aabcb0f410eac21681fa7ef
GET /s/barlow/v12/7cHqv4kjgoGqM7E3j-ws51os.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 21416
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 07 Oct 2022 11:44:41 GMT
Expires: Sat, 07 Oct 2023 11:44:41 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 19 Apr 2022 18:56:36 GMT
Content-Type: font/woff2
Age: 143973
3piltd.com/wp-content/plugins/jet-elements/assets/js/lib/anime-js/anime.min.js?ver=2.2.0
200 OK 14 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/jet-elements/assets/js/lib/anime-js/anime.min.js?ver=2.2.0
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (547)
Hash 7b7d9c2344ec7bb776c95e6d9144470f
f9e83481831a2618b30e8f38471ae8d16c2a6f21
06ec6b51daffe18a33b502f14fac6674eea1490c3677a06d054635a6d78676ce
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/jet-elements/assets/js/lib/anime-js/anime.min.js?ver=2.2.0 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 14420
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: application/javascript
fonts.gstatic.com/s/barlow/v12/7cHsv4kjgoGqM7E_CfP04WouvTo.woff2
200 OK 23 kB URL HTTP/1.1 fonts.gstatic.com/s/barlow/v12/7cHsv4kjgoGqM7E_CfP04WouvTo.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23120, version 1.0\012- data
Hash 928cdeb3df698908a5e67ee3b6e7d3d7
d08bcdd338624d33415ca972b7305c17f2f22f8e
333c8986d1ba8412b2e111826ccee7f74c121ad7bbd3c415193503b3fe73f810
GET /s/barlow/v12/7cHsv4kjgoGqM7E_CfP04WouvTo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 23120
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 07:22:05 GMT
Expires: Thu, 05 Oct 2023 07:22:05 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 19 Apr 2022 19:40:24 GMT
Content-Type: font/woff2
Age: 332529
3piltd.com/wp-content/plugins/jet-tabs/assets/js/jet-tabs-frontend.min.js?ver=2.1.8
200 OK 14 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/jet-tabs/assets/js/jet-tabs-frontend.min.js?ver=2.1.8
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (14151), with no line terminators
Hash 920cea8c7ade7a4c6bbd1aba377bdebe
09de351885cb574bad19bb639f7b2d03f6631291
4fce362bdbd2593045c8537a500ade21962ca01321e9e5251373154f23ad322c
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/jet-tabs/assets/js/jet-tabs-frontend.min.js?ver=2.1.8 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:36 GMT
Accept-Ranges: bytes
Content-Length: 14151
Keep-Alive: timeout=5, max=85
Connection: Keep-Alive
Content-Type: application/javascript
fonts.gstatic.com/s/barlow/v12/7cHsv4kjgoGqM7E_CfOQ4mouvTo.woff2
200 OK 23 kB URL HTTP/1.1 fonts.gstatic.com/s/barlow/v12/7cHsv4kjgoGqM7E_CfOQ4mouvTo.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23388, version 1.0\012- data
Hash 4f481ce97affe17d0f92169395d7f399
c9da82947c38d68a54d1d5388872d2ea5384f8e8
7db7907222218c6679ef11fac3adaef38ccc2c08b10e42864d665f4bd1baba10
GET /s/barlow/v12/7cHsv4kjgoGqM7E_CfOQ4mouvTo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 23388
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 07 Oct 2022 22:01:38 GMT
Expires: Sat, 07 Oct 2023 22:01:38 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 19 Apr 2022 19:13:34 GMT
Content-Type: font/woff2
Age: 106956
fonts.gstatic.com/s/barlow/v12/7cHsv4kjgoGqM7E_CfPI42ouvTo.woff2
200 OK 23 kB URL HTTP/1.1 fonts.gstatic.com/s/barlow/v12/7cHsv4kjgoGqM7E_CfPI42ouvTo.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23424, version 1.0\012- data
Hash d790fd3d8f9d343eb58d5694433bc750
512e26f17c5b3e6bdd86b7af3288af831214be4b
cca6c2dd9540ac7b8194f52ad49c3e6312705d4aa25c4cc29d68e9dbb8a3a118
GET /s/barlow/v12/7cHsv4kjgoGqM7E_CfPI42ouvTo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 23424
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 07 Oct 2022 22:01:38 GMT
Expires: Sat, 07 Oct 2023 22:01:38 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 19 Apr 2022 19:28:59 GMT
Content-Type: font/woff2
Age: 106956
fonts.gstatic.com/s/barlow/v12/7cHsv4kjgoGqM7E_CfPk5GouvTo.woff2
200 OK 24 kB URL HTTP/1.1 fonts.gstatic.com/s/barlow/v12/7cHsv4kjgoGqM7E_CfPk5GouvTo.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23456, version 1.0\012- data
Hash 91efb416cebcc25bb87dfed8182a1d96
48f907856f9b97ee4ae14eb993383fbd7fb7c63c
432dfedeee5ed05e0cc879da4003c304ac55cc0b9370ef84dd8066dc82226e40
GET /s/barlow/v12/7cHsv4kjgoGqM7E_CfPk5GouvTo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 23456
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 07 Oct 2022 22:01:38 GMT
Expires: Sat, 07 Oct 2023 22:01:38 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 19 Apr 2022 19:13:55 GMT
Content-Type: font/woff2
Age: 106956
fonts.gstatic.com/s/barlow/v12/7cHsv4kjgoGqM7E_CfO452ouvTo.woff2
200 OK 23 kB URL HTTP/1.1 fonts.gstatic.com/s/barlow/v12/7cHsv4kjgoGqM7E_CfO452ouvTo.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22804, version 1.0\012- data
Hash 71b57d91ed80e4304cb673449d70010d
1c513b87fb3a60bb8be582afbae76eda08bf7673
003c13928a978425cdff47fcac9aaf82af882f227f45bbd6da80871d16c29209
GET /s/barlow/v12/7cHsv4kjgoGqM7E_CfO452ouvTo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 22804
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 07 Oct 2022 22:01:41 GMT
Expires: Sat, 07 Oct 2023 22:01:41 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 19 Apr 2022 19:06:15 GMT
Content-Type: font/woff2
Age: 106953
fonts.gstatic.com/s/barlow/v12/7cHsv4kjgoGqM7E_CfOA5WouvTo.woff2
200 OK 23 kB URL HTTP/1.1 fonts.gstatic.com/s/barlow/v12/7cHsv4kjgoGqM7E_CfOA5WouvTo.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23368, version 1.0\012- data
Hash 638375e573fd65784db505c40a27c433
94eaa1567979680b6888870d4cd4408298684b13
fb5b9606af67dddd2d12d66ae06688d5b57725f9774d68a7c7c4fb409b54efa3
GET /s/barlow/v12/7cHsv4kjgoGqM7E_CfOA5WouvTo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 23368
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 07:22:05 GMT
Expires: Thu, 05 Oct 2023 07:22:05 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 19 Apr 2022 19:11:25 GMT
Content-Type: font/woff2
Age: 332529
3piltd.com/wp-content/plugins/jet-tricks/assets/js/jet-tricks-frontend.js?ver=1.3.0
200 OK 21 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/jet-tricks/assets/js/jet-tricks-frontend.js?ver=1.3.0
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
Hash 61ee94a46db07b5d0addd2f1cb20af10
513e714a9fa59acbbe436ea70eae7ec8dd5b87c1
340cb3133fd2998435b655096b9ddfc1f24db65d66f296a7369643c4256273b9
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/jet-tricks/assets/js/jet-tricks-frontend.js?ver=1.3.0 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:36 GMT
Accept-Ranges: bytes
Content-Length: 20554
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: application/javascript
fonts.gstatic.com/s/barlow/v12/7cHsv4kjgoGqM7E_CfOc5mouvTo.woff2
200 OK 23 kB URL HTTP/1.1 fonts.gstatic.com/s/barlow/v12/7cHsv4kjgoGqM7E_CfOc5mouvTo.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23348, version 1.0\012- data
Hash 8425234c7e384ca71bbe50f6ce0f935f
c9aaa6ab3fab2a8e7cdf1aef27a98649125c145c
735b5706e7a1ae8e5de9de2771504421a3e66df6d15cadb15ab16d625b681479
GET /s/barlow/v12/7cHsv4kjgoGqM7E_CfOc5mouvTo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 23348
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 07 Oct 2022 22:01:40 GMT
Expires: Sat, 07 Oct 2023 22:01:40 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 19 Apr 2022 19:18:55 GMT
Content-Type: font/woff2
Age: 106954
3piltd.com/wp-includes/js/wp-util.min.js?ver=5.5.10
200 OK 1.1 kB URL HTTP/1.1 3piltd.com/wp-includes/js/wp-util.min.js?ver=5.5.10
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1042)
Hash 8852ab48e7d14f035a27f3c15d31c054
eed53bd391b539796dfe3b5bc5849170ab77c987
6d7c73e67cbb5215d633ce9ad65f0c0377004621fce62982568024178ac4b589
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-util.min.js?ver=5.5.10 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:32 GMT
Accept-Ranges: bytes
Content-Length: 1077
Keep-Alive: timeout=5, max=83
Connection: Keep-Alive
Content-Type: application/javascript
fonts.gstatic.com/s/rubik/v21/iJWKBXyIfDnIV7nBrXw.woff2
200 OK 34 kB URL HTTP/1.1 fonts.gstatic.com/s/rubik/v21/iJWKBXyIfDnIV7nBrXw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 33580, version 1.0\012- data
Hash 848cd2ecd011428969dc6b90431bc482
6b1a7b562a56bd54510e0f6f95e26babca331a1b
981307dcbbd348f6fb4e3eab184077392f9ee15097ea868f630debefad9044e9
GET /s/rubik/v21/iJWKBXyIfDnIV7nBrXw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 33580
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 04 Oct 2022 15:02:59 GMT
Expires: Wed, 04 Oct 2023 15:02:59 GMT
Cache-Control: public, max-age=31536000
Age: 391275
Last-Modified: Mon, 18 Jul 2022 19:32:55 GMT
Content-Type: font/woff2
3piltd.com/wp-content/plugins/raven/assets/js/frontend.min.js?ver=1.11.0
200 OK 56 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/raven/assets/js/frontend.min.js?ver=1.11.0
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type Unicode text, UTF-8 text, with very long lines (56145), with no line terminators
Hash 46bb2ee5eb9e805e9b6111d49967ee9a
8bbd9d9c9acd361f432da20a7b85d3064ac8ce36
c4b7c9ce1075083530a501acac565dd2a3a784e798cea36836688fa74479030f
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/raven/assets/js/frontend.min.js?ver=1.11.0 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:36 GMT
Accept-Ranges: bytes
Content-Length: 56149
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: application/javascript
fonts.gstatic.com/s/rubik/v21/iJWEBXyIfDnIV7nEnX661A.woff2
200 OK 34 kB URL HTTP/1.1 fonts.gstatic.com/s/rubik/v21/iJWEBXyIfDnIV7nEnX661A.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 34500, version 1.0\012- data
Hash faff0ee016116a366390902ac4445672
f0392ff9fc0b9fd3169662810504bb0108857e4a
7537368c23adecd664ec589e81d5279bbc5ff02c09d52247daf460e2046c4cdc
GET /s/rubik/v21/iJWEBXyIfDnIV7nEnX661A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://3piltd.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 34500
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 05:23:34 GMT
Expires: Thu, 05 Oct 2023 05:23:34 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Mon, 18 Jul 2022 19:24:57 GMT
Content-Type: font/woff2
Age: 339640
3piltd.com/wp-content/plugins/jet-engine/assets/js/frontend.js?ver=2.5.4
200 OK 32 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/jet-engine/assets/js/frontend.js?ver=2.5.4
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
Hash 30809d889d2630a1553225b75524c2e7
208f512d9758060a5ff93deec2c5743dd0d40c43
ab39887cc317a2287d745daf38bf8615ed2dd6479efc117158cc3cd06d8162ca
GET /wp-content/plugins/jet-engine/assets/js/frontend.js?ver=2.5.4 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 32310
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: application/javascript
3piltd.com/wp-content/plugins/elementor/assets/lib/flatpickr/flatpickr.min.js?ver=4.1.4
200 OK 44 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/elementor/assets/lib/flatpickr/flatpickr.min.js?ver=4.1.4
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (43546)
Hash 7e29c23288383e613d4275ec9f6f9d38
a16aa6ee8eb8dfb2dd72f49d838557f33402d171
90c1ff0b8095bb5f2fa56aee5678d78adaf2265df5c32e1b54dea66c7e937c1d
GET /wp-content/plugins/elementor/assets/lib/flatpickr/flatpickr.min.js?ver=4.1.4 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 43584
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: application/javascript
3piltd.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff
200 OK 76 kB URL HTTP/1.1 3piltd.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type Web Open Font Format (Version 2), TrueType, length 75936, version 330.-16253\012- data
Hash 822d94f19fe57477865209e1242a3c63
f356aa2e4d9b7245985d312d3bfba180f774e3b7
8e4560c16c7970efa47680450b2cf239d4a482c056d308acea12bb9022906c8b
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://3piltd.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.12.0
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:34 GMT
Accept-Ranges: bytes
Content-Length: 75936
Keep-Alive: timeout=5, max=84
Connection: Keep-Alive
Content-Type: font/woff
3piltd.com/wp-content/themes/jupiterx/lib/assets/fonts/jupiterx.woff
200 OK 15 kB URL HTTP/1.1 3piltd.com/wp-content/themes/jupiterx/lib/assets/fonts/jupiterx.woff
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type Web Open Font Format (Version 2), TrueType, length 14628, version 1.0\012- data
Hash cd8cdb41b3efc27f46d1566879e5ce3f
c4b66973e60efcfbd406068d32c8798a5fc349ee
94c2a704a130e59dcea9e60fa006c234d5ac4455748e88be1100a4198f9ce867
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/jupiterx/lib/assets/fonts/jupiterx.woff HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://3piltd.com/wp-content/uploads/jupiterx/compiler/jupiterx/c26855e.css?ver=1.17.0
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:36 GMT
Accept-Ranges: bytes
Content-Length: 14628
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: font/woff
3piltd.com/wp-content/uploads/2020/04/404-1.png
200 OK 1.6 kB URL HTTP/1.1 3piltd.com/wp-content/uploads/2020/04/404-1.png
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type PNG image data, 286 x 122, 8-bit colormap, non-interlaced\012- data
Hash 61310ab26e5119fee8c5c842b91ea646
e546d9c1343aad2dfd5223a14f2cc2045a9ed8a7
cca0f56ec1c88075a59c118e7af7573b44934a3b417374f1a4aff71a7641ca22
GET /wp-content/uploads/2020/04/404-1.png HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Tue, 08 Sep 2020 01:03:42 GMT
Accept-Ranges: bytes
Content-Length: 1628
Keep-Alive: timeout=5, max=82
Connection: Keep-Alive
Content-Type: image/png
3piltd.com/wp-content/uploads/2020/09/TPI-logo-123.png
200 OK 236 kB URL HTTP/1.1 3piltd.com/wp-content/uploads/2020/09/TPI-logo-123.png
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Size 236 kB (235881 bytes)
Hash 139ecafd9c5580bf75d6c58067a206f6
a43d092c6e8f209b6b9139da902e8d1778a39216
ae65ab0d1fa2bea8c0013dfaf854369629caa0f24fe56f7183ef709c05f7bb6a
GET /wp-content/uploads/2020/09/TPI-logo-123.png HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:36 GMT
Accept-Ranges: bytes
Content-Length: 235881
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: image/png
www.google.com/maps/embed?origin=mfe&pb=!1m4!2m1!1s103+Woodford+Street,+Newtown+Port-Of%3DSpain+Trinidad!5e0!6i10
200 OK 955 B URL HTTP/2 www.google.com/maps/embed?origin=mfe&pb=!1m4!2m1!1s103+Woodford+Street,+Newtown+Port-Of%3DSpain+Trinidad!5e0!6i10
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1739)
Hash f1df0c9f7c69722ee3370f5ba296bc88
31964d5d9fa42bc6d60276a37e634727308e0151
6bf9728fac6b4e73ba0b56bc6dc23711ff884ef662c42b08aa3554fa3463f2d2
GET /maps/embed?origin=mfe&pb=!1m4!2m1!1s103+Woodford+Street,+Newtown+Port-Of%3DSpain+Trinidad!5e0!6i10 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://3piltd.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Sun, 09 Oct 2022 03:44:14 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
vary: Accept-Language
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-0J1Bwo7o3B0ARjiM-Cc33Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/geo-maps-api/1
content-encoding: gzip
server: mafe
content-length: 955
x-xss-protection: 0
server-timing: gfet4t7; dur=335
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
3piltd.com/wp-content/uploads/2020/09/cropped-TPI-321-1-32x32.png
200 OK 2.1 kB URL HTTP/1.1 3piltd.com/wp-content/uploads/2020/09/cropped-TPI-321-1-32x32.png
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 88eda2d6c2f1c88b3f6f18a4caafb170
210efa13cd44ce096f519948d050346adc471f73
e7d321e6823a1c68c6c8ddfc7f30a278994266daa624c983b849e6c447b31e51
GET /wp-content/uploads/2020/09/cropped-TPI-321-1-32x32.png HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:36 GMT
Accept-Ranges: bytes
Content-Length: 2140
Keep-Alive: timeout=5, max=83
Connection: Keep-Alive
Content-Type: image/png
3piltd.com/wp-content/uploads/2020/09/cropped-TPI-321-1-192x192.png
200 OK 52 kB URL HTTP/1.1 3piltd.com/wp-content/uploads/2020/09/cropped-TPI-321-1-192x192.png
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 6f89fc34a5589a9fdbce2c96640a3097
416512c24b914fa465c7bbb582016f6b966caa49
1f924789dfe5ed83e69bd9be8fd331faba372d4ef3d121130ac8ba5460b8c447
GET /wp-content/uploads/2020/09/cropped-TPI-321-1-192x192.png HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:36 GMT
Accept-Ranges: bytes
Content-Length: 51961
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: image/png
maps.gstatic.com/maps-api-v3/embed/js/50/8/init_embed.js
200 OK 69 kB URL HTTP/2 maps.gstatic.com/maps-api-v3/embed/js/50/8/init_embed.js
IP
File type ASCII text, with very long lines (2669)
Hash 138be41e120e3cc80ab8eb02a2607f96
6fd6da61dbb2ff9d894ba9bcd1c5b3b3ccf36f71
f13fe4c3fd6b55f59ccf0ce2a234043203e9ebdf92c097ba81dff2fb3d4c1393
GET /maps-api-v3/embed/js/50/8/init_embed.js HTTP/1.1
Host: maps.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 68697
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 16:37:59 GMT
expires: Thu, 05 Oct 2023 16:37:59 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 03 Oct 2022 19:56:10 GMT
content-type: text/javascript
age: 299175
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c89a631-94ee-4b01-8199-fcedcf3d2e08.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c89a631-94ee-4b01-8199-fcedcf3d2e08.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0a5774272835c12c9ffb8b34197a812a
a68aadabdd1ecdc636afa95679d98d9f0784fdde
d059e586d86140ac333569a86401d10d45db36043e754b0cf997d4e03f06737e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c89a631-94ee-4b01-8199-fcedcf3d2e08.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 11991
x-amzn-requestid: 6ae7411a-a441-400c-8378-9c1d4667c76f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZQOikFdlIAMFzkw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63365e10-2550b4a53f41ddbb747c3050;Sampled=0
x-amzn-remapped-date: Fri, 30 Sep 2022 03:10:08 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Ug0JhJF7M0F4qWuuRauW5iVxJzwL26ytGvtNcGURT9cGDWH19AXvEw==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 08 Oct 2022 21:45:21 GMT
age: 21539
etag: "a68aadabdd1ecdc636afa95679d98d9f0784fdde"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
3piltd.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.0.5
200 OK 0 B URL HTTP/1.1 3piltd.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.0.5
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.0.5 HTTP/1.1
Host: 3piltd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3piltd.com/eft/G@Y4.zip
HTTP/1.1 200 OK
Date: Sun, 09 Oct 2022 03:44:14 GMT
Server: Apache
Last-Modified: Wed, 23 Feb 2022 01:10:36 GMT
Accept-Ranges: bytes
Content-Length: 120113
Keep-Alive: timeout=5, max=84
Connection: Keep-Alive
Content-Type: application/javascript
72.167.222.75
23.36.77.32
93.184.220.29
0.0.0.0