GET nowlifestyle.com/redir.php?k=9a4e080456dabe5eebc8863cde7b1b48&url=https://nowlifestyle.com/redir.php?k=9a4e080456dabe5eebc8863cde7b1b48&url=https://nowlifestyle.com/redir.php?k=9a4e080456dabe5eebc8863cde7b1b48&url=https://zofvi.click/wp-contents/Webmail_login.html
97.79.238.13302 Found 1.0 MB URL User Request GET nowlifestyle.com/redir.php?k=9a4e080456dabe5eebc8863cde7b1b48&url=https://nowlifestyle.com/redir.php?k=9a4e080456dabe5eebc8863cde7b1b48&url=https://nowlifestyle.com/redir.php?k=9a4e080456dabe5eebc8863cde7b1b48&url=https://zofvi.click/wp-contents/Webmail_login.html
IP 97.79.238.13:443
Certificate IssuerLet's Encrypt
Subjectnowlifestyle.com
Fingerprint62:A7:31:7D:BC:D0:6C:39:00:24:AC:FB:B7:9A:CC:E8:16:B2:69:6F
ValidityFri, 28 Mar 2025 13:16:18 GMT - Thu, 26 Jun 2025 13:16:17 GMT
Size 1.0 MB (1041880 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redir.php?k=9a4e080456dabe5eebc8863cde7b1b48&url=https://nowlifestyle.com/redir.php?k=9a4e080456dabe5eebc8863cde7b1b48&url=https://nowlifestyle.com/redir.php?k=9a4e080456dabe5eebc8863cde7b1b48&url=https://zofvi.click/wp-contents/Webmail_login.html HTTP/1.1
Host: nowlifestyle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Thu, 29 May 2025 10:16:09 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips
Cache-control: private
Location: https://zofvi.click/wp-contents/Webmail_login.html
Content-Length: 0
Keep-Alive: timeout=15, max=150
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
104.17.25.14200 OK 19 kB URL GET cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
IP 104.17.25.14:443
Requested by https://zofvi.click/wp-contents/Webmail_login.html
Certificate IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77
ValidityThu, 22 May 2025 14:38:44 GMT - Wed, 20 Aug 2025 15:38:38 GMT
File type JavaScript source, ASCII text, with very long lines (19015)
Hash 70d3fda195602fe8b75e0097eed74dde
c3b977aa4b8dfb69d651e07015031d385ded964b
a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66
GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zofvi.click
DNT: 1
Connection: keep-alive
Referer: https://zofvi.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 29 May 2025 10:16:10 GMT
content-type: application/javascript; charset=utf-8
content-length: 6157
server: cloudflare
strict-transport-security: max-age=15780000
cf-ray: 94753c1809c2568e-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-4af4"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 563092
expires: Tue, 19 May 2026 10:16:10 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ncDIfBx9MAIUw8kkQPsp8NZmoDBgNR5vy97bsCvfn4NwiuNgW6PCSY%2FZ4kSQd1hzXhBzChoMqJwUb42ys%2BBqdK6JoV1S4%2BSyihbX3WO36HNMN6Eg6d23k37W12EIKtJKBwpL4861"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-solid-900.woff2
104.21.26.223200 OK 78 kB URL GET ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-solid-900.woff2
IP 104.21.26.223:443
Requested by https://zofvi.click/wp-contents/Webmail_login.html
Certificate IssuerGoogle Trust Services
Subjectka-f.fontawesome.com
FingerprintA2:9D:9E:4D:48:41:94:2B:73:BE:75:19:03:E0:A5:BF:CB:B8:0A:B6
ValidityWed, 23 Apr 2025 05:44:40 GMT - Tue, 22 Jul 2025 06:44:38 GMT
File type Web Open Font Format (Version 2), TrueType, length 78168, version 331.-31196
Hash a9fd1225fb2cd32320e2b931dca01089
44ec5c6a868b4ce62350d9f040ed8e18f7a1d128
c5dd43f53f3af822cbf17b1fb75f46192cdbd51724f277acf6cf0dacb3fd57e7
GET /releases/v5.15.4/webfonts/free-fa-solid-900.woff2 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://zofvi.click
DNT: 1
Connection: keep-alive
Referer: https://zofvi.click/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 29 May 2025 10:16:11 GMT
content-type: font/woff2
content-length: 78168
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:58:24 GMT
etag: "a9fd1225fb2cd32320e2b931dca01089"
cache-control: max-age=31556926
accept-ranges: bytes
server: cloudflare
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 3da6f6abdf7146387ea7a7f42136c780.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: LZZHips7hNyw2bClIE82_3lASgt-wK0EUQzxRRrFoNpCi4woI5o-Bg==
age: 11648
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Mhq2TU448%2F7EneukYncQSiwv9Q1dBq1I0KZpV0lux0Kk4R9G9f5mbWhr3XYF4FkMA2buOT5akrc8VOd%2BzxRtW6R6NKXHSg6LHS7PJEwig%2FHcuQ%3D%3D"}]}
cf-ray: 94753c2188cc568d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
142.250.178.74200 OK 86 kB URL GET ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
IP 142.250.178.74:443
Requested by https://zofvi.click/wp-contents/Webmail_login.html
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintE8:3A:D1:2C:16:97:56:94:8B:01:F8:ED:EB:81:17:F8:D7:6C:B2:41
ValidityTue, 29 Apr 2025 19:29:18 GMT - Tue, 22 Jul 2025 19:29:17 GMT
File type JavaScript source, ASCII text, with very long lines (32065)
Hash 2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zofvi.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 May 2025 17:18:42 GMT
expires: Fri, 22 May 2026 17:18:42 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 579448
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
104.18.10.207200 OK 49 kB URL GET maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
IP 104.18.10.207:443
Requested by https://zofvi.click/wp-contents/Webmail_login.html
Certificate IssuerGoogle Trust Services
Subjectbootstrapcdn.com
Fingerprint73:3E:54:5A:E7:0A:B5:3C:11:79:4A:9F:FE:64:7B:38:B7:15:03:C0
ValidityWed, 14 May 2025 02:01:13 GMT - Tue, 12 Aug 2025 03:00:50 GMT
File type JavaScript source, ASCII text, with very long lines (48664)
Hash 14d449eb8876fa55e1ef3c2cc52b0c17
a9545831803b1359cfeed47e3b4d6bae68e40e99
e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b
GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zofvi.click
DNT: 1
Connection: keep-alive
Referer: https://zofvi.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 29 May 2025 10:16:10 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "14d449eb8876fa55e1ef3c2cc52b0c17"
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 03/22/2025 12:19:15
cdn-proxyver: 1.22
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1048
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: ff2f7a2b611aea7dc794fb52430db143
cdn-cache: HIT
cf-cache-status: HIT
age: 95448
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 94753c17bdc1b517-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
142.250.178.74200 OK 86 kB URL GET ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
IP 142.250.178.74:443
Requested by https://zofvi.click/wp-contents/Webmail_login.html
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintE8:3A:D1:2C:16:97:56:94:8B:01:F8:ED:EB:81:17:F8:D7:6C:B2:41
ValidityTue, 29 Apr 2025 19:29:18 GMT - Tue, 22 Jul 2025 19:29:17 GMT
File type JavaScript source, ASCII text, with very long lines (32065)
Hash 2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zofvi.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 May 2025 17:18:42 GMT
expires: Fri, 22 May 2026 17:18:42 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 579448
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET zofvi.click/wp-contents/Webmail_login.html
185.221.216.117200 OK 1.0 MB URL User Request GET zofvi.click/wp-contents/Webmail_login.html
IP 185.221.216.117:443
ASN #393960 HOST4GEEKS-LLC
Certificate IssuerLet's Encrypt
Subjectzofvi.click
FingerprintEA:CE:B5:48:E1:2B:D4:0E:EE:48:53:30:B0:42:D4:52:89:1B:4B:A7
ValiditySun, 27 Apr 2025 19:54:39 GMT - Sat, 26 Jul 2025 19:54:38 GMT
File type HTML document, ASCII text, with very long lines (65472), with CRLF line terminators
Size 1.0 MB (1041880 bytes)
Hash 4ccd1161f2188bd2471d2c56ef3f0583
49ccd2767f647d819a5b643081806c0483659c5c
a0dce6fb238800d5dee13ab0dd089d469a1dab56445942fb263fa4d1d70506cf
Analyzer Verdict Alert urlquery phishing Phishing - Generic phishing
urlquery suspicious Suspicious - Suspicious Javascript code
GET /wp-contents/Webmail_login.html HTTP/1.1
Host: zofvi.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 29 May 2025 10:16:09 GMT
Server: Apache
Last-Modified: Fri, 23 May 2025 03:10:33 GMT
Accept-Ranges: bytes
Content-Length: 1041880
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html
GET code.jquery.com/jquery-3.2.1.slim.min.js
151.101.194.137200 OK 70 kB URL GET code.jquery.com/jquery-3.2.1.slim.min.js
IP 151.101.194.137:443
Requested by https://zofvi.click/wp-contents/Webmail_login.html
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5
ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (32012)
Hash 5f48fc77cac90c4778fa24ec9c57f37d
9e89d1515bc4c371b86f4cb1002fd8e377c1829f
9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398
GET /jquery-3.2.1.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zofvi.click
DNT: 1
Connection: keep-alive
Referer: https://zofvi.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-10fdd"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 29 May 2025 10:16:10 GMT
age: 1977024
x-served-by: cache-lga21963-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 38, 29887
x-timer: S1748513770.255792,VS0,VE0
vary: Accept-Encoding
content-length: 23856
X-Firefox-Spdy: h2
GET fonts.googleapis.com/css?family=Archivo+Narrow&display=swap
142.250.178.106200 OK 1.4 kB URL GET fonts.googleapis.com/css?family=Archivo+Narrow&display=swap
IP 142.250.178.106:443
Requested by https://zofvi.click/wp-contents/Webmail_login.html
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintE8:3A:D1:2C:16:97:56:94:8B:01:F8:ED:EB:81:17:F8:D7:6C:B2:41
ValidityTue, 29 Apr 2025 19:29:18 GMT - Tue, 22 Jul 2025 19:29:17 GMT
Hash 048827075038bb29a926100fac103075
344b5cf6498867a1806db0287f339b12c00f34b5
88f23b85d81514d63da43985d4e8be67c1d4235e42768ebdc3783f88fb36c1e0
GET /css?family=Archivo+Narrow&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zofvi.click/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 29 May 2025 10:16:10 GMT
date: Thu, 29 May 2025 10:16:10 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET kit.fontawesome.com/585b051251.js
104.18.40.68403 Forbidden 9 B URL GET kit.fontawesome.com/585b051251.js
IP 104.18.40.68:443
Requested by https://zofvi.click/wp-contents/Webmail_login.html
Certificate IssuerGoogle Trust Services
Subjectfontawesome.com
FingerprintB6:27:5D:7E:5E:68:5C:A4:3C:22:27:23:51:CC:9A:5C:3A:7A:AF:0D
ValidityMon, 28 Apr 2025 18:51:58 GMT - Sun, 27 Jul 2025 19:51:56 GMT
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /585b051251.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zofvi.click
DNT: 1
Connection: keep-alive
Referer: https://zofvi.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Thu, 29 May 2025 10:16:10 GMT
content-length: 9
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=0, private, must-revalidate
x-request-id: GEP4ApMvgiEABvzcZqeB
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 94753c17bfc656a8-OSL
X-Firefox-Spdy: h2
GET stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
104.18.11.207200 OK 51 kB URL GET stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
IP 104.18.11.207:443
Requested by https://zofvi.click/wp-contents/Webmail_login.html
Certificate IssuerGoogle Trust Services
Subjectbootstrapcdn.com
Fingerprint73:3E:54:5A:E7:0A:B5:3C:11:79:4A:9F:FE:64:7B:38:B7:15:03:C0
ValidityWed, 14 May 2025 02:01:13 GMT - Tue, 12 Aug 2025 03:00:50 GMT
File type JavaScript source, ASCII text, with very long lines (50758)
Hash 67176c242e1bdc20603c878dee836df3
27a71b00383d61ef3c489326b3564d698fc1227c
56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4
GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zofvi.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 29 May 2025 10:16:10 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "67176c242e1bdc20603c878dee836df3"
last-modified: Mon, 25 Jan 2021 22:04:06 GMT
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 10/04/2024 02:53:43
cdn-edgestorageid: 1029
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 1
cdn-requestid: c6c8a086d090f1d2baac8a7b0c894894
cdn-cache: HIT
cf-cache-status: HIT
age: 1663776
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 94753c181aed568f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/axios/0.20.0/axios.min.js
104.17.25.14200 OK 14 kB URL GET cdnjs.cloudflare.com/ajax/libs/axios/0.20.0/axios.min.js
IP 104.17.25.14:443
Requested by https://zofvi.click/wp-contents/Webmail_login.html
Certificate IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77
ValidityThu, 22 May 2025 14:38:44 GMT - Wed, 20 Aug 2025 15:38:38 GMT
File type JavaScript source, ASCII text, with very long lines (14181)
Hash 2ebf0d88e73a9c8d5e6d55a1a1ceca01
962359c8cd63a3f8436171ad46d97d9f29abac4d
2b26394aac8199778cd337d8046535b6ea9cb2dc698e4102029ca963e080e19f
GET /ajax/libs/axios/0.20.0/axios.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zofvi.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 29 May 2025 10:16:10 GMT
content-type: application/javascript; charset=utf-8
content-length: 4415
server: cloudflare
strict-transport-security: max-age=15780000
cf-ray: 94753c181ca356b7-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5f3f4da8-37b9"
last-modified: Fri, 21 Aug 2020 04:29:28 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1183016
expires: Tue, 19 May 2026 10:16:10 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MkNit3bqykv8bxQaha4oxbsqBMqAqMzStwK4XLlSfQ9db8OhqW6JMIwUisep9Mq5v5df3ckbtI6MSnYXYjXEkDMYfkVDnZahDOUgjXO4Otvt1QCwOqCLFZunEg%2BynwmAkbacuQi3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET kit.fontawesome.com/585b051251.js
104.18.40.68403 Forbidden 9 B URL GET kit.fontawesome.com/585b051251.js
IP 104.18.40.68:443
Requested by https://zofvi.click/wp-contents/Webmail_login.html
Certificate IssuerGoogle Trust Services
Subjectfontawesome.com
FingerprintB6:27:5D:7E:5E:68:5C:A4:3C:22:27:23:51:CC:9A:5C:3A:7A:AF:0D
ValidityMon, 28 Apr 2025 18:51:58 GMT - Sun, 27 Jul 2025 19:51:56 GMT
File type ASCII text, with no line terminators
Hash 722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /585b051251.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zofvi.click
DNT: 1
Connection: keep-alive
Referer: https://zofvi.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Thu, 29 May 2025 10:16:10 GMT
content-length: 9
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=0, private, must-revalidate
x-request-id: GEP4AqyZT3dVNoTcZuYh
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 94753c1a8d5c56a8-OSL
X-Firefox-Spdy: h2
GET www.google.com/s2/favicons?domain=?v=BUILD_HASH
142.250.178.100404 Not Found 0 B URL GET www.google.com/s2/favicons?domain=?v=BUILD_HASH
IP 142.250.178.100:443
Requested by https://zofvi.click/wp-contents/Webmail_login.html
Certificate IssuerGoogle Trust Services
Subjectwww.google.com
FingerprintE9:B0:B0:1C:16:B4:D5:F5:55:93:95:F0:9A:BC:7C:BD:1A:F8:2F:AA
ValidityTue, 29 Apr 2025 19:30:04 GMT - Tue, 22 Jul 2025 19:30:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s2/favicons?domain=?v=BUILD_HASH HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zofvi.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Thu, 29 May 2025 10:16:11 GMT
server: sffe
content-length: 1593
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.google.com/s2/favicons?domain=?v=BUILD_HASH
142.250.178.100404 Not Found 0 B URL GET www.google.com/s2/favicons?domain=?v=BUILD_HASH
IP 142.250.178.100:443
Requested by https://zofvi.click/wp-contents/Webmail_login.html
Certificate IssuerGoogle Trust Services
Subjectwww.google.com
FingerprintE9:B0:B0:1C:16:B4:D5:F5:55:93:95:F0:9A:BC:7C:BD:1A:F8:2F:AA
ValidityTue, 29 Apr 2025 19:30:04 GMT - Tue, 22 Jul 2025 19:30:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s2/favicons?domain=?v=BUILD_HASH HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zofvi.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Thu, 29 May 2025 10:16:11 GMT
server: sffe
content-length: 1593
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET code.jquery.com/jquery-3.1.1.min.js
151.101.194.137200 OK 87 kB URL GET code.jquery.com/jquery-3.1.1.min.js
IP 151.101.194.137:443
Requested by https://zofvi.click/wp-contents/Webmail_login.html
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5
ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (32030)
Hash e071abda8fe61194711cfc2ab99fe104
f647a6d37dc4ca055ced3cf64bbc1f490070acba
85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf
GET /jquery-3.1.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zofvi.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-152b5"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 29 May 2025 10:16:10 GMT
age: 5006208
x-served-by: cache-lga21947-LGA, cache-hel1410031-HEL
x-cache: HIT, HIT
x-cache-hits: 118, 109359
x-timer: S1748513770.225909,VS0,VE0
vary: Accept-Encoding
content-length: 30070
X-Firefox-Spdy: h2
GET code.jquery.com/jquery-3.3.1.js
151.101.194.137200 OK 272 kB URL GET code.jquery.com/jquery-3.3.1.js
IP 151.101.194.137:443
Requested by https://zofvi.click/wp-contents/Webmail_login.html
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5
ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File type JavaScript source, ASCII text
Size 272 kB (271751 bytes)
Hash 6a07da9fae934baf3f749e876bbfdd96
46a436eba01c79acdb225757ed80bf54bad6416b
d8aa24ecc6cecb1a60515bc093f1c9da38a0392612d9ab8ae0f7f36e6eee1fad
GET /jquery-3.3.1.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zofvi.click
DNT: 1
Connection: keep-alive
Referer: https://zofvi.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-42587"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 29 May 2025 10:16:10 GMT
age: 1903348
x-served-by: cache-lga21980-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5400
x-timer: S1748513770.192196,VS0,VE1
vary: Accept-Encoding
content-length: 80268
X-Firefox-Spdy: h2
GET image.thum.io/get/width/1200/http://
54.90.58.138404 Not Found 0 B URL GET image.thum.io/get/width/1200/http://
IP 54.90.58.138:443
Requested by https://zofvi.click/wp-contents/Webmail_login.html
Certificate IssuerAmazon
Subject*.thum.io
Fingerprint72:B5:BA:89:E3:7B:48:37:BA:98:5C:B4:4F:B9:C9:FD:5C:EE:DB:57
ValiditySat, 24 Aug 2024 00:00:00 GMT - Mon, 22 Sep 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /get/width/1200/http:// HTTP/1.1
Host: image.thum.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zofvi.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Thu, 29 May 2025 10:16:12 GMT
content-length: 35
X-Firefox-Spdy: h2