Overview

URLftrecoveryvet.com/
IP 192.185.76.253 (United States)
ASN#46606 UNIFIEDLAYER-AS-1
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-12-23 20:36:59 UTC
StatusLoading report..
IDS alerts0
Blocklist alert126
urlquery alerts No alerts detected
Tags None

Domain Summary (11)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
fonts.googleapis.com (2) 8877 2012-05-23 12:41:44 UTC 2022-12-23 06:49:24 UTC 142.250.74.106
r3.o.lencr.org (9) 344 2020-12-02 08:52:13 UTC 2022-12-23 04:09:02 UTC 95.101.11.115
www.ftrecoveryvet.com (80) 0 2017-08-28 17:07:29 UTC 2022-11-19 16:05:38 UTC 192.185.76.253 Unknown ranking
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-12-23 04:13:38 UTC 34.117.237.239
ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-12-23 07:07:22 UTC 93.184.220.29
ftrecoveryvet.com (1) 0 2017-04-08 02:33:16 UTC 2022-12-22 17:45:50 UTC 192.185.76.253 Unknown ranking
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2022-12-23 04:09:10 UTC 52.13.69.101
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-12-23 04:09:28 UTC 34.120.237.76
ocsp.pki.goog (2) 175 2017-06-14 07:23:31 UTC 2022-12-23 04:10:04 UTC 216.58.211.3
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2022-12-23 04:09:14 UTC 35.241.9.150
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-12-23 04:09:06 UTC 34.160.144.191

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-23 2 ftrecoveryvet.com/ Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/plugins/revslider/public/assets/css/rs6.cs (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.3 Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/plugins/contact-form-7/includes/css/styles (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/plugins/essential-grid/public/assets/font/ (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/plugins/essential-addons-for-elementor-lit (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/plugins/header-footer-elementor/assets/css (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/uploads/essential-addons-elementor/eael-42 (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/plugins/contact-form-7/includes/js/index.j (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-includes/js/wp-util.min.js?ver=6.0.3 Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-includes/js/mediaelement/wp-mediaelement.min.js?ve (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/plugins/elementor/assets/lib/font-awesome/ (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/uploads/essential-addons-elementor/eael-42 (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/plugins/elementor/assets/lib/eicons/css/el (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/plugins/elementskit-lite/widgets/init/asse (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/ Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/plugins/wpforms-lite/assets/js/integration (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-includes/js/mediaelement/wp-mediaelement.min.css?v (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/plugins/elementor/assets/lib/animations/an (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/themes/tails/js/superfish.js Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/uploads/elementor/css/post-42.css?ver=1640 (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/plugins/elementor/assets/lib/font-awesome/ (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/plugins/elementor/assets/lib/waypoints/way (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/plugins/elementskit-lite/widgets/init/asse (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3 Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/plugins/elementor/assets/lib/font-awesome/ (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-includes/js/underscore.min.js?ver=1.13.3 Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/plugins/elementskit-lite/modules/elementsk (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/plugins/header-footer-elementor/inc/widget (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/plugins/trx_addons/js/magnific/jquery.magn (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/themes/tails/css/fontello/css/fontello-emb (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/plugins/trx_addons/css/font-icons/css/trx_ (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/themes/tails/js/__scripts.js Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/plugins/trx_addons/js/swiper/swiper.jquery (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/themes/tails/css/responsive.css?ver=6.0.3 Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0 Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/plugins/wp-gdpr-compliance/Assets/js/front (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/plugins/trx_addons/js/trx_addons.js Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/plugins/elementor/assets/css/frontend.min. (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/plugins/revslider/public/assets/js/rbtools (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/plugins/elementskit-lite/widgets/init/asse (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/plugins/elementor/assets/js/frontend-modul (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/plugins/revslider/public/assets/js/rs6.min (...) Malware
2022-12-23 2 www.ftrecoveryvet.com/wp-content/plugins/elementor/assets/js/frontend.min.j (...) Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed
2022-12-23 2 ftrecoveryvet.com Sinkholed


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 192.185.76.253
Date UQ / IDS / BL URL IP
2023-01-22 18:09:29 +0000 0 - 0 - 22 10xbotapp.com/user 192.185.76.253
2022-12-23 20:36:59 +0000 0 - 0 - 126 ftrecoveryvet.com/ 192.185.76.253
2022-11-18 23:16:49 +0000 0 - 0 - 3 wickeddevarea.com/oiq/index.php?qbot.zip 192.185.76.253
2022-11-17 20:57:02 +0000 0 - 0 - 5 wickeddevarea.com/oiq/index.php?qbot.zip 192.185.76.253
2022-11-16 19:59:58 +0000 0 - 0 - 1 wickeddevarea.com/oiq/index.php?qbot.zip 192.185.76.253


Last 5 reports on ASN: UNIFIEDLAYER-AS-1
Date UQ / IDS / BL URL IP
2023-03-30 21:48:36 +0000 0 - 1 - 3 declotmart.cf/a1b2c3/f6dd19d602856b46bd3872d6 (...) 162.240.234.31
2023-03-30 21:43:20 +0000 0 - 3 - 12 paypal-support.com.desenvolvedortheosbank.com (...) 162.241.60.162
2023-03-30 21:42:59 +0000 23 - 2 - 11 www.huntington-banking.bhipvitality.com/login (...) 162.241.218.142
2023-03-30 21:42:41 +0000 3 - 0 - 0 shopclassicstyles.com/Email/verification/xxhk (...) 69.49.244.31
2023-03-30 21:41:39 +0000 3 - 0 - 1 pwanlekki.com/Email/verification/z7hz3xg/jtof (...) 162.214.68.182


Last 5 reports on domain: ftrecoveryvet.com
Date UQ / IDS / BL URL IP
2022-12-23 20:36:59 +0000 0 - 0 - 126 ftrecoveryvet.com/ 192.185.76.253
2022-10-13 18:56:45 +0000 0 - 0 - 2 ftrecoveryvet.com/qnui/iaoleebr 192.185.76.253
2022-10-13 18:56:45 +0000 0 - 0 - 2 ftrecoveryvet.com/qnui/idaiuqs 192.185.76.253
2022-10-13 18:56:37 +0000 0 - 0 - 2 ftrecoveryvet.com/qnui/suuneraqecadi 192.185.76.253
2022-10-13 18:56:29 +0000 0 - 0 - 2 ftrecoveryvet.com/qnui/altuqspoasuv 192.185.76.253


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-03-30 14:40:13 +0000 0 - 0 - 4 adagro.com.br/bNSI6/jEqEz8 162.241.62.76
2023-03-30 14:09:01 +0000 0 - 0 - 3 makeupuccino.com/purveyance.php 202.138.242.1
2023-03-30 14:07:35 +0000 0 - 0 - 5 www.izeltelekom.com/exportable.php 93.89.224.6
2023-03-30 14:07:25 +0000 0 - 0 - 6 www.vivacuscoperu.com/annotator.php 160.153.72.162
2023-03-30 13:56:05 +0000 0 - 0 - 2 gbsports.theapplab.org/refreshment.php 192.169.136.66

JavaScript

Executed Scripts (12)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (106)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "446C9BF6BC38A43F5758F6F44F89AD76EFF44EB8779CF7E62BBFEB002B298DEE"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7298
Expires: Fri, 23 Dec 2022 22:38:26 GMT
Date: Fri, 23 Dec 2022 20:36:48 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4E9AAFF330CE0C9C11F6BB8502FE21296B1845151BACE75F73908A3194D5D0A1"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5745
Expires: Fri, 23 Dec 2022 22:12:33 GMT
Date: Fri, 23 Dec 2022 20:36:48 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 23 Dec 2022 19:46:11 GMT
age: 3037
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    dcd75ca6daca51c5e39d431468511793
Sha1:   07f76d3bf23d65c9110d810fa71a994e39e085d3
Sha256: 73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D5578D537296DA18F3F349A98465E9FE930DCA60A8ED62C183E9C9F6EB53F493"
Last-Modified: Wed, 21 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15711
Expires: Sat, 24 Dec 2022 00:58:39 GMT
Date: Fri, 23 Dec 2022 20:36:48 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: Bc1kS/OYPa/sIUDzfgq0F/5qpitWBgd6cLt+1s1bBJdq+wM1AmolDhl4KykWVu8Ggna8yvEPhEBDt1JIg7N4nA==
x-amz-request-id: B4TX9W9R4D6EPPTF
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 23 Dec 2022 19:56:19 GMT
age: 2429
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    b1fcd419a4245617397846e8d17233f6
Sha1:   2a037ce244587640b27ead9a0ec2af4f862d91b2
Sha256: e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Fri, 23 Dec 2022 20:36:48 GMT
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Length, ETag, Pragma, Last-Modified, Expires, Alert, Content-Type, Retry-After, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 23 Dec 2022 20:33:25 GMT
age: 203
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6228
Cache-Control: 'max-age=158059'
Date: Fri, 23 Dec 2022 20:36:49 GMT
Last-Modified: Fri, 23 Dec 2022 18:53:01 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         192.185.76.253
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 23 Dec 2022 20:36:48 GMT
Server: Apache
X-LiteSpeed-Tag: 8f4_HTTP.200,8f4_HTTP.301
X-Redirect-By: WordPress
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: https://www.ftrecoveryvet.com/
Content-Length: 0
Keep-Alive: timeout=5, max=75


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0YXleOqM40vneLyPIE0m3A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.13.69.101
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: eqMH7vCMi/8ZIyRmkj/1e41G5z8=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "2A3315B95B69E9D3BADC5587C7E7F76C24416FA070B3276D3A2D7280C9382CDF"
Last-Modified: Thu, 22 Dec 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sat, 24 Dec 2022 02:36:50 GMT
Date: Fri, 23 Dec 2022 20:36:50 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "7D7CED4A7DA10564449DDEC77F05D85557A2B2F7E8FE2A7D15541C7B52AEE928"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9593
Expires: Fri, 23 Dec 2022 23:16:43 GMT
Date: Fri, 23 Dec 2022 20:36:50 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "7D7CED4A7DA10564449DDEC77F05D85557A2B2F7E8FE2A7D15541C7B52AEE928"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9593
Expires: Fri, 23 Dec 2022 23:16:43 GMT
Date: Fri, 23 Dec 2022 20:36:50 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "7D7CED4A7DA10564449DDEC77F05D85557A2B2F7E8FE2A7D15541C7B52AEE928"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9593
Expires: Fri, 23 Dec 2022 23:16:43 GMT
Date: Fri, 23 Dec 2022 20:36:50 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "7D7CED4A7DA10564449DDEC77F05D85557A2B2F7E8FE2A7D15541C7B52AEE928"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9593
Expires: Fri, 23 Dec 2022 23:16:43 GMT
Date: Fri, 23 Dec 2022 20:36:50 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "7D7CED4A7DA10564449DDEC77F05D85557A2B2F7E8FE2A7D15541C7B52AEE928"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9593
Expires: Fri, 23 Dec 2022 23:16:43 GMT
Date: Fri, 23 Dec 2022 20:36:50 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7bd09861-a6e6-4462-b7cf-0572eabdfd71.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7117
x-amzn-requestid: 470b959f-7f5f-4a64-8d8d-bfc91856fad2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dUnBBFhZIAMFhiQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e8539-3916bad034c86d5503e456f2;Sampled=0
x-amzn-remapped-date: Sun, 18 Dec 2022 03:12:57 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UIB-d7y4AawAml6oXhsAeoIud_U-fhQzha7VwRqY9AgNaYtJ49nlzg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 05:06:41 GMT
age: 55809
etag: "d161c613f1491ae6ab63b536c50c6630e80d6382"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7117
Md5:    61b1b9ece5581fe0b212144f45243f1a
Sha1:   d161c613f1491ae6ab63b536c50c6630e80d6382
Sha256: f5a2b23b66a05734b86755986573c07c5f75bc6cbe67d2b769aee9ef402b2c14
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c1a3c98-ff73-4c90-ad24-b2223ae207cd.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7763
x-amzn-requestid: 298c4f10-c248-43a4-878e-8f119819bdc8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dhBhLFy8IAMFtMw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a37c6d-30fed0cc51ee789b0f7e6fcc;Sampled=0
x-amzn-remapped-date: Wed, 21 Dec 2022 21:36:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: TY2LKtYdHxtj1hfP7lFi4R1E6mJmDUZkr-SbobElcCXqBlNXJEtXsA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Dec 2022 22:33:01 GMT
age: 79429
etag: "7f0c20921a04f92e79393ea10c85db9460f9d165"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7763
Md5:    181fbb7e44b44baa067e51cdc7f4d4e2
Sha1:   7f0c20921a04f92e79393ea10c85db9460f9d165
Sha256: 1cd612257cd0388e48cc855a4c03b6b167da3bd60afd6b4a41d9c6a7922efdbd
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a06f1b4-7136-4077-b835-37444f8dfbc2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8838
x-amzn-requestid: 0dc7c87e-41a8-4bb9-94d3-fe58274100c4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dkUhqFaxoAMFk-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a4ce0a-58fd6c175081eb4b11663189;Sampled=0
x-amzn-remapped-date: Thu, 22 Dec 2022 21:37:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: iI3L3JYjnY8hPns-f2AQwmQTZgsnPsLUFHPF4GyNC0D-JdYWsdCm1A==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Dec 2022 21:49:55 GMT
age: 82015
etag: "fdd5a2c09ec16ffccd33bde9f503171607b65653"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8838
Md5:    88dede3fbbab789a953b46f7abd99bec
Sha1:   fdd5a2c09ec16ffccd33bde9f503171607b65653
Sha256: a45d65e7e99c7eca94d2ded3741d1823a8ff1358065021e837b65247fd0e96ce
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46c838f6-5365-43bb-981e-8ddefc5f3f14.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5659
x-amzn-requestid: bc225a93-868b-42d4-aa94-c8fa16ef2c64
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dk33gHUqIAMFg1A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a50696-7710727f0f086a791a0e7939;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 01:38:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FGP2S7V05eAwwnHzdlYQJC9ZW-5xLD8Aqi7XBCcJtaqbVoNCocGFhw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 01:50:42 GMT
age: 67568
etag: "98fb13feecfada3cc8b467aa48d7cdf1ed8ab001"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5659
Md5:    2d4cf077d410b94f1326e942304f9e9b
Sha1:   98fb13feecfada3cc8b467aa48d7cdf1ed8ab001
Sha256: ec82cd83bfd4da849888b0535c9764cd4d462ef9e12c5934512858375908dfe4
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5fe4d96f-b35a-4cc6-9fe3-c52ed693df34.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11471
x-amzn-requestid: 20d9459a-710b-4fcf-bfce-9f0c5f513740
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dbNEqGPnoAMFcDg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a12884-4a93ab9047181db109d328e2;Sampled=0
x-amzn-remapped-date: Tue, 20 Dec 2022 03:14:12 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: qFwWS-f0U1hSbrFFgBiGNzXRvZyvR90n_MI7jfYfWsyv2W6jH8D-9w==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 a06140ffee86972bad90c57fc682df36.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 04:54:20 GMT
age: 56550
etag: "552f216608b819b4f65f0574e421f4a761f0d721"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11471
Md5:    5dd6622433d537fbb91a04bd3b57d873
Sha1:   552f216608b819b4f65f0574e421f4a761f0d721
Sha256: 5e9b03133d928378a775ab52ec6e58cd7753aa2975a4966534353c0d6bc46af5
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F580b4499-2ffd-427f-93ed-4c39a78dd125.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 12794
x-amzn-requestid: 82617475-f461-429b-b38d-0c84eee33754
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dk55IGPioAMFi1Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a509d3-0dfc997d3853974a08914362;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 01:52:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: -24dBoLhaZcF6kjZCYp8EJSAYmslMmv15G3oPgPAydPxVA0j51Vs3w==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 01:52:20 GMT
age: 67470
etag: "48ff42e4329102d6a006b8f947bfaf29c0a5de17"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12794
Md5:    7ee73339f3e7eaeb4c1ecab1a24632a8
Sha1:   48ff42e4329102d6a006b8f947bfaf29c0a5de17
Sha256: ae5787d0df124d7d95ccaaf58148bb46c931610ca908cd58787748da5b75a1c0
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Dec 2022 20:36:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Dec 2022 20:36:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/plugins/vc-extensions-bundle/css/admin_icon.css?ver=6.0.3 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 14 Oct 2022 20:15:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1476
date: Fri, 23 Dec 2022 20:36:51 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   1476
Md5:    b93a0de0664f751bce23c570a80a3e38
Sha1:   f03ba71cf5d874a8d97e6667700b6789fad74082
Sha256: 91bc9268077d3e1e7874892fa5bb7a757d2ae1a5493272627f3c819e2ec180cf

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /css?family=Raleway%3A400%2C500%2C700%2C800%2C900%7CRoboto+Slab%3A400%2C700%7CPacifico%3A400&subset=latin%2Clatin-ext&ver=6.0.3 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 23 Dec 2022 20:36:51 GMT
date: Fri, 23 Dec 2022 20:36:51 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1316
Md5:    8683a413f82d5d4ef03c55ce1f956584
Sha1:   a5e78e9d50c792dc4edbb1863435b188bd61afd4
Sha256: 6c074d5c1842c6b0d8838701146b6a2ceae5a8f5d4fbee99ea6de8e77b1b356a
                                        
                                            GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.2.23 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 14 Oct 2022 20:15:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 16832
date: Fri, 23 Dec 2022 20:36:51 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators
Size:   16832
Md5:    26654e907c542b3da66723d35ee26a50
Sha1:   cf957dec7ff9801be13555ea2e9c533ec9ff5995
Sha256: f507e289ed85a71bbdd7a4c938d25043d929d84f392b6791732faee714c70b3d

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.3 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 04 Jul 2022 22:40:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 16594
date: Fri, 23 Dec 2022 20:36:51 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (43771)
Size:   16594
Md5:    2a67a4888baa44de739f3fe56203ce07
Sha1:   da175eae57f26b655747d79f055477e3fee1abb9
Sha256: 3a4d7627476a0099ca4bcc101685f27de04cb49dd66ef842d72c6cda270599dd

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.3 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 409 Conflict
content-type: text/html; charset=iso-8859-1
                                        
date: Fri, 23 Dec 2022 20:36:51 GMT
server: Apache
content-length: 83
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   83
Md5:    26267cd8990f15d3bbea71684a6d5995
Sha1:   ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
Sha256: 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/trx_addons/js/magnific/magnific-popup.min.css HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 14 Oct 2022 20:14:29 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1819
date: Fri, 23 Dec 2022 20:36:51 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (5156), with no line terminators
Size:   1819
Md5:    db28824b9b89c9af4e3f9765969f0502
Sha1:   5ef3b04d624e525f11d86054efda42a0cea227a3
Sha256: 6dc8e857ce759d3431c26ec50f900e491473e7b0cc0e4778374d5784a9dbb158

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/essential-grid/public/assets/font/fontello/css/fontello.css?ver=3.0.7 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 14 Oct 2022 20:15:55 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2441
date: Fri, 23 Dec 2022 20:36:51 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text
Size:   2441
Md5:    c4793d4c5f37223118865b6a8b93d546
Sha1:   ac6045f732cd75b8218df26ee33bd099aa2fd3bb
Sha256: c4d3046b4ee1e66a3363225cb0ffb5d7d4400c19f15d39d8b2f41c12555c5dc4

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/trx_addons/js/swiper/swiper.min.css HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 14 Oct 2022 20:14:29 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3851
date: Fri, 23 Dec 2022 20:36:51 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (17459), with CRLF line terminators
Size:   3851
Md5:    3750714ca73a862c4c806e5c767de701
Sha1:   a12cffe428854840ec9a6ba92dc4bd684111b1cc
Sha256: 8d6438c35204ef834b14e5cc8aff818538a8913e1c7ae7fb341824437439b4bd

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/essential-grid/public/assets/css/settings.css?ver=3.0.7 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 14 Oct 2022 20:15:55 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 11603
date: Fri, 23 Dec 2022 20:36:51 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7136)
Size:   11603
Md5:    1707b8c654affcd7e08b88efa1596c6d
Sha1:   8a59129c3fe7514e5248b7c7a15b7202d32a98fd
Sha256: 72f49b243582c7ec1af9b7a1f1724c8c2ce4fe7d6940f30a98da5c23c49e866f

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/uploads/elementor/css/post-1155.css?ver=1640022809 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 20 Dec 2021 17:53:29 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 329
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (949), with no line terminators
Size:   329
Md5:    3f4067046c221488bd64ea24f9d1d2e9
Sha1:   292228f81bd6b3069b8983048839d8fd28270981
Sha256: 95a602df9c5695b6f6b67acbf7928504d56136046d6b57ef3f5f8c4311143af7

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.3.2 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 14 Oct 2022 20:11:30 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 900
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3432)
Size:   900
Md5:    1e0ef5b4ebd931aecd01564980628978
Sha1:   e618b92e03a6c4bd4abffed22abb1e835c05a601
Sha256: 1deef467f6db854d82e8c6288086664c7cf60a41b18bb7216d63bb83061ba878

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.13 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 14 Oct 2022 20:17:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 323
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   323
Md5:    b24c24b7da3ffeed6ae8ade102a4d317
Sha1:   c4445b3977ce704b927508108e100213eea67a3c
Sha256: 5421ad49b70f379553eaceec744d753e74d4b065966c08aa7c7dd949553ca9a8

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/uploads/essential-addons-elementor/eael-42.js?ver=1634118118 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 14 Oct 2022 20:11:37 GMT
accept-ranges: bytes
content-length: 0
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 409 Conflict
content-type: text/html; charset=iso-8859-1
                                        
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
content-length: 83
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   83
Md5:    26267cd8990f15d3bbea71684a6d5995
Sha1:   ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
Sha256: 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 409 Conflict
content-type: text/html; charset=iso-8859-1
                                        
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
content-length: 83
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   83
Md5:    26267cd8990f15d3bbea71684a6d5995
Sha1:   ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
Sha256: 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-includes/js/wp-util.min.js?ver=6.0.3 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Sat, 26 Jun 2021 01:20:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 709
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1305)
Size:   709
Md5:    e9edb7bac979409cf7dbc48d7ab8aca7
Sha1:   ed3f941a8fe41e3994a3ca5e620219328628f532
Sha256: 2a0742cad9937c742b2f51c1ea2ae48359ce8d88d8b56f6d8910c0a267d631b5

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/uploads/elementor/css/post-1529.css?ver=1640022811 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 20 Dec 2021 17:53:31 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 846
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4185), with no line terminators
Size:   846
Md5:    71c261d130f832e8b7a43bc168a12e7d
Sha1:   2e6e605d68e3a7129cc730941ebd45cb93e30c74
Sha256: 69104566abdc39511e6d53d42817c510460e09908706d1a34aed0663d9a868f9

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/elementskit-lite/libs/framework/assets/js/frontend-script.js?ver=2.7.2 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 14 Oct 2022 20:45:24 GMT
accept-ranges: bytes
content-length: 40
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   40
Md5:    94d041d462db321cdb888066586f2068
Sha1:   717d2f9da7fb9f9e2bf2058a8177a0344f8a8647
Sha256: b8166c5475df6a64ab2456e95f64564164ed697d258e8bfed8cebca40efd6fa5

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.0.3 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 21 Jan 2021 01:05:18 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 483
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (906), with no line terminators
Size:   483
Md5:    961b384bf5b28ac673051be024563f79
Sha1:   606ebba9fa8aec74cf413098b084500c8b16b85c
Sha256: a9c17b0e5a9c12428c6ed8d0c4622ddbae112a9ac19bccf451f125972cd91935

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/uploads/2021/05/Bone.png HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Sat, 15 May 2021 05:52:58 GMT
accept-ranges: bytes
content-length: 1259
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 129 x 133, 8-bit colormap, non-interlaced\012- data
Size:   1259
Md5:    a192a62febcfab6e167f5efa1d6b2752
Sha1:   3c7dcc4da8735fbc007745bfbdaf7626aa362c0e
Sha256: a8b3beb23a33933a23b329b62a154d20f4dbcfc326e85bee4bc34c6f4b50d08a

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.0.3 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Sat, 09 Apr 2022 06:37:18 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 540
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1191), with no line terminators
Size:   540
Md5:    cea5e0013ee4b14895dc0f6c424a03e8
Sha1:   b21c776891ff57c003b385a1aa62ba613b292a21
Sha256: 1cfe89d6aa36aea0e986e379590ab23877257e8416764d18105d1176dfcd64d9

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 14 Oct 2022 20:10:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 308
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (489)
Size:   308
Md5:    0a08469d24387f830bbaaa00b3c228ae
Sha1:   01f5dfeb8f93a32c9a8f66fe5940758109771fcd
Sha256: 3c7c29e5fc1193ff7ce24f72f77b2dc129e1a9434a97ef7b625f6f715531803c

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/uploads/essential-addons-elementor/eael-42.css?ver=1634118118 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 14 Oct 2022 20:11:37 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4617
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (45695)
Size:   4617
Md5:    98dc23e34ad27dd702ec87399d417b5b
Sha1:   2018a19b6469e35eada255f506969194a42dccf7
Sha256: 360b441b062ff3e729c3a30bd1ae407b67ac1901296ff2f357fa975e4e26b97b

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 14 Oct 2022 20:10:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4008
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (19233)
Size:   4008
Md5:    2701214b028ad24fa347df8335b36d12
Sha1:   156bc8a7ad2657f00881890637f07c6052636499
Sha256: 9a6e62615ceeec7a9763e4f9614e4715d04fd87873b23db2b3ead06c996cad27

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.7.8 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 14 Oct 2022 20:10:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4436
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (26516)
Size:   4436
Md5:    fdd462f58aee3f9349eabdefb5ca0b57
Sha1:   bb6e017d5537630516ccb98952593690a8c69864
Sha256: ca51806fcedbe90dd613c4c28673af8693381806a5cb3b43dce2ea4f43e8b314

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/elementskit-lite/widgets/init/assets/css/responsive.css?ver=2.7.2 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 14 Oct 2022 20:45:24 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4436
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (30283), with no line terminators
Size:   4436
Md5:    c2c381b76f533a3992b1060b1e8275ed
Sha1:   8441603d412df07e265d70d72569bd3ed90c51ee
Sha256: 6b1c02e5f7f5a04d0320c0a69a67651c6c322b81dfcf1ad9ca29e0f7374cf613

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET / HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
x-litespeed-tag: 8f4_HTTP.200
link: <https://www.ftrecoveryvet.com/wp-json/>; rel="https://api.w.org/", <https://www.ftrecoveryvet.com/wp-json/wp/v2/pages/42>; rel="alternate"; type="application/json", <https://www.ftrecoveryvet.com/>; rel=shortlink
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 23 Dec 2022 20:36:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Size:   29931
Md5:    b5276718ee9acae545513b067eb258ac
Sha1:   43306714a572b7a01f9e4a4107cf31143739b407
Sha256: 984df8f9f8dbc3e37de001347065b1238badbe160be88e000d45881ce3baef4a

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min.js?ver=1.7.7.2 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 14 Oct 2022 20:40:13 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 374
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (754), with no line terminators
Size:   374
Md5:    ef785f463505633971eae5c08ad626d4
Sha1:   624e22257f386801822229db3a4bbd2e24b25e2f
Sha256: b2a0dc77f0f79d81698a7e3893e16ecba7b0d980b80a5233656d9b11f1d8160d

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.0.3 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Sat, 08 Jun 2019 07:15:02 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1298
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4186), with no line terminators
Size:   1298
Md5:    91bab39b98d7e5c1632717b9ebe349e4
Sha1:   e639a447d06fc7827be5b5b35d603ff16b5f7bb1
Sha256: 47ff151faeb23a5654f6ec58b404e51193f6714849a69de241c2ee79662f74c6

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.7.8 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 14 Oct 2022 20:10:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2313
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4918)
Size:   2313
Md5:    a8a064f7e05640436a939b0839c64a66
Sha1:   e9bbdd085a3038acd63d108accba8dfb5499f4c0
Sha256: 2173daddf76795f8194c34463bfc5c9be793aecc545b4672ed5a6f9afcb473c3

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Wed, 30 Sep 2020 02:23:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3239
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11256), with no line terminators
Size:   3239
Md5:    1054d0d53548e8bae51665b11acc6413
Sha1:   2eea6a05fe18db61fff58c431d34a86b3e0b7ade
Sha256: cb8b0f0f3f871d9776da32ee6d9e1af9277a211be61e97a831c7f8c98fbebfae

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.7.8 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 14 Oct 2022 20:10:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2997
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (10019)
Size:   2997
Md5:    c2b5af6052f630a96e450e5e2a3cea52
Sha1:   00ca76a8828a1bbec1534eb10786804fd36492f2
Sha256: 58f6cc2d4fa3e528622102975fb62949dc0170bd47b588a67318d18552a57d59

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/tails/js/superfish.js HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 13 May 2021 17:14:21 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2809
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   2809
Md5:    8971db75fcb3fde7c314286687cc447c
Sha1:   fa91f0f55c8b8830a6fb403b72994189b302572d
Sha256: 8e6fb4c2d24665c97cdb23a2a6113b10cdc369c193bac4f2611bf0cd5f8ba403

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/uploads/elementor/css/post-42.css?ver=1640022811 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 20 Dec 2021 17:53:31 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4421
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (24580), with no line terminators
Size:   4421
Md5:    4d46ec3f705b34f48dcff743567b4265
Sha1:   7e01572e83eacb8c48d330b18b44b182d449980a
Sha256: 766022c88e2b0c8e02dc584bad9ff468f0b0f9d5dd2f6b77e2498798bea8109e

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/uploads/elementor/css/post-1153.css?ver=1640022811 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 20 Dec 2021 17:53:31 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4218
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (10432)
Size:   4218
Md5:    ca3582d1bb8a15ea3ab986e0d04570c0
Sha1:   d934c5c676efe2df6bd8a3242d0fb58e61ee1c47
Sha256: 852cb59c29c60618385b0964a0e067d973b75a855372fc50dfd98aec03ade164

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.7.8 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 14 Oct 2022 20:10:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4359
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (14869)
Size:   4359
Md5:    7bab7ad64ffbd7846dd6819250b93e2e
Sha1:   c924918d540389aff62220088b6761f38a5da272
Sha256: 045250efe67364c953a91f6a60cf407ebb5cfdb2da04e84c3d98e5bab5eca9ba

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 14 Oct 2022 20:10:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3747
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (12198), with no line terminators
Size:   3747
Md5:    e2a8decccf4d0a6b925af707a36077a9
Sha1:   26a0febc9c3d91e75410f74b9ec62099ba1cbe90
Sha256: 09e0e638a6f53c0fdcfeeb8ae91f3a404bef47b471324e335e29be14a2aa87f7

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 18 Nov 2020 20:36:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4618
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11126)
Size:   4618
Md5:    acdb97105af28a7066790c6748ae2e1e
Sha1:   65794d2c5a9d04f747faf370bc8bacd330e69e5a
Sha256: dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.3.2 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 14 Oct 2022 20:11:30 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2938
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (8016), with no line terminators
Size:   2938
Md5:    3fb911c81f788558bc6d1107199f3531
Sha1:   6dc32db62563450febea4e0f43b7da34defbb99a
Sha256: 7ac7ac2450edf5bb80788a92c271b0a0e806aacbfd4cced63e941a3035cf43c1

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/trx_addons/css/trx_addons.animation.css?ver=6.0.3 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 14 Oct 2022 20:14:29 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8905
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   8905
Md5:    978e6b32acf1b2999cc2a2c99a933380
Sha1:   2663d72074a099d9639544daf661dcf37263a847
Sha256: 8430aad66779f18f8dcc91fd668b92214f5ea08a2d18e134de293f58295c28b7

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/wp-gdpr-compliance/Assets/css/front.css?ver=1665780462 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 14 Oct 2022 20:47:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7611
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (26316), with no line terminators
Size:   7611
Md5:    4d40cdf2b15e88640b0d96fbccf7352e
Sha1:   1c7d08bcd670048b5a13c0988a9078cdfed5a414
Sha256: 07f5d9bd41c5d8b5170786c4d021f840a071636784b18862d479bb7d37046ed0

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/elementskit-lite/widgets/init/assets/js/elementor.js?ver=2.7.2 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 14 Oct 2022 20:45:24 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6018
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (17948), with no line terminators
Size:   6018
Md5:    aad24bfb1effbb2666b3ae0b63250010
Sha1:   a0bccf4c48990fba25fb33a5226f33cd3240e6cd
Sha256: 0a4d91682a1f0fcb8e807f558cd7cf720bd43b0af087d1b4dd25328a8f3a7c7b

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.3 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 12 Apr 2022 16:26:22 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5321
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (15660)
Size:   5321
Md5:    710f8b142ea44c0682dc2c30f318f065
Sha1:   49144e9b3a76d3d383b1d4359cf7a25e947f4233
Sha256: 708bb5819879a2a2c7670abc20a58cca68a415ffd621011cbc4c3c9d82dddc50

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.7.8 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 14 Oct 2022 20:10:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 12862
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (59158)
Size:   12862
Md5:    e6b67e11736ae36a062b381717f2ea9f
Sha1:   a663a79bc8d42aa58bfea1351cc27e0d0b09c9b2
Sha256: a07a94d36246d0b3e5b9b18e274e31995d0e23cda955babf5e350e91a879523d

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.4.0 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 14 Oct 2022 20:15:57 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7335
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (20478)
Size:   7335
Md5:    e34c030051d30092bdf697a6a7fd9301
Sha1:   bf82868c5e4d4fef1c91d2a2b1d5dd03c3ce6055
Sha256: b61de97a96167040b51ba14693e8c2c20bdb9f0a221997df0a788e9bad60c254

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-includes/js/underscore.min.js?ver=1.13.3 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 28 Apr 2022 01:09:20 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8313
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (18876)
Size:   8313
Md5:    61a4a3c276f704185a925bfa0f4d8b1b
Sha1:   0176eb701bb114d9cb170193f6208ec4fbb35f71
Sha256: f0875cbb46e9eeb5e497dd52d8c33725509228193c2dbe9ab464f62a15c2f0e2

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/css/ekiticons.css?ver=2.7.2 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 14 Oct 2022 20:45:24 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 12707
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   12707
Md5:    2586b72a57d56fcc09dfabcd84488de5
Sha1:   58d34cec79898ec005ba78f3b9cc600d1cd4ec96
Sha256: 21a7ae5c7541cd7322cdd1d73bcf1c5d1b47b830dd864079e6d8337a47d32839

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 14 Oct 2022 20:10:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 12577
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (57726)
Size:   12577
Md5:    dc63c0a8e2d5857cc7a00a4b5456dabb
Sha1:   ee29df5eb2a4bf3eb805b160551c1afd84b42599
Sha256: 035ef40b1dd3df1eefb2dd3c8c2096425727fb939b06f3aa0bc6ef91dafd5441

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.6.13 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 14 Oct 2022 20:17:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 11654
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (1646)
Size:   11654
Md5:    e56098a703c5beb99abc9c3a870be594
Sha1:   76e54634e0628ab91310c760d619360151e26be1
Sha256: 0eb4438e57550f2c2a321d45a5cb1c92fb22d58f6dbcc9c189fc3bd1e4f78b8f

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Sat, 09 Apr 2022 06:37:18 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8169
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (8189)
Size:   8169
Md5:    a0a1c8194f131320e1798f90a7b1262a
Sha1:   3346d35be1f2e4886f19e7fcc0cc96ee4753d9ed
Sha256: 7f618ab13cec0933ec2c61fa2b580ad77ca41522028649677494219fa9ce56db

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/trx_addons/js/magnific/jquery.magnific-popup.min.js HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 14 Oct 2022 20:14:29 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 9206
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (20087), with CRLF line terminators
Size:   9206
Md5:    988289756c037bb0681eb46c632c3ba5
Sha1:   8327b20ee783345d4333df7ad1f69e2dd2767f5f
Sha256: abcf4d4666ef0f6e42ef979c17894322d0f4022efeb7b95db5ed8cdf562d5479

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/trx_addons/css/trx_addons.css HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 14 Oct 2022 20:14:29 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 23 Dec 2022 20:36:51 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/tails/style.css HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 13 May 2021 17:14:21 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/tails/css/fontello/css/fontello-embedded.css?ver=6.0.3 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 13 May 2021 17:14:21 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/trx_addons/css/font-icons/css/trx_addons_icons-embedded.css?ver=6.0.3 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 14 Oct 2022 20:14:29 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 23 Dec 2022 20:36:51 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/tails/js/__scripts.js HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 06 Jul 2021 13:01:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/trx_addons/js/swiper/swiper.jquery.min.js HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 14 Oct 2022 20:14:29 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/tails/css/responsive.css?ver=6.0.3 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 13 May 2021 17:14:21 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.4.0 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 14 Oct 2022 20:15:57 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CLemonada%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CBungee%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRaleway%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CInter%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.0.3 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 23 Dec 2022 20:36:51 GMT
date: Fri, 23 Dec 2022 20:36:51 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 11 Mar 2021 02:37:24 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.16 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 30 Sep 2020 02:23:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/wp-gdpr-compliance/Assets/js/front.min.js?ver=1665780462 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 14 Oct 2022 20:47:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/trx_addons/js/trx_addons.js HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 14 Oct 2022 20:14:29 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.7.8 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 14 Oct 2022 20:10:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/uploads/2021/05/01mvso.png HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Sat, 15 May 2021 16:36:46 GMT
accept-ranges: bytes
content-length: 17069
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/tails/css/__styles.css?ver=6.0.3 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 06 Jul 2021 13:01:35 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/uploads/2021/05/01meso.png HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Sat, 15 May 2021 16:36:43 GMT
accept-ranges: bytes
content-length: 10584
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.2.23 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 14 Oct 2022 20:15:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/tails/css/__colors.css?ver=6.0.3 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 06 Jul 2021 13:01:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/uploads/2021/05/house-2.png HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Sat, 15 May 2021 18:01:51 GMT
accept-ranges: bytes
content-length: 41711
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/uploads/2021/05/01mpso.png HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Sat, 15 May 2021 16:36:45 GMT
accept-ranges: bytes
content-length: 17012
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/uploads/2021/05/vet.png HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Sat, 15 May 2021 18:00:44 GMT
accept-ranges: bytes
content-length: 29803
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/uploads/2021/05/print.png HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Sat, 15 May 2021 18:06:38 GMT
accept-ranges: bytes
content-length: 32166
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/uploads/elementor/thumbs/fav-p75vibc7ak72rtiibpgeqi1q99tlfsfp5nt5wcouri.png HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Fri, 14 May 2021 16:19:12 GMT
accept-ranges: bytes
content-length: 12807
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/uploads/2021/05/stethoscope.png HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Sat, 15 May 2021 18:10:21 GMT
accept-ranges: bytes
content-length: 33980
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/elementskit-lite/widgets/init/assets/css/widget-styles.css?ver=2.7.2 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Fri, 14 Oct 2022 20:45:24 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.7.8 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 14 Oct 2022 20:10:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 13281
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.2.23 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 14 Oct 2022 20:15:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /wp-content/uploads/2021/05/pet.png HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Sat, 15 May 2021 18:17:11 GMT
accept-ranges: bytes
content-length: 28351
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js?ver=2.7.2 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 14 Oct 2022 20:45:24 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.7.8 HTTP/1.1 
Host: www.ftrecoveryvet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ftrecoveryvet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         192.185.76.253
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 14 Oct 2022 20:10:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 16151
date: Fri, 23 Dec 2022 20:36:52 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed