firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 28 Sep 2022 11:15:39 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ly65wvPcmYbH_q3dncEwHdqNw7HM5Bl04Jzwt4hlCHhL9ObGIXxShQ==
Age: 3351
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7fb7c70f7f4e2cee27eb0e7d875931f7
98fca3817a551b1daecebae103a48e718b8b5a53
2a40f957a6b1734aa3f87cff51b673f0536732db15b09033dd604879692df349
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A40F957A6B1734AA3F87CFF51B673F0536732DB15B09033DD604879692DF349"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9618
Expires: Wed, 28 Sep 2022 14:51:48 GMT
Date: Wed, 28 Sep 2022 12:11:30 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 09:24:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: a9TlvxHvuc-tgKM9TtJP-x1ayJta2dJEI3k7clO2rftTPhAycYyd_A==
age: 24184
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 28 Sep 2022 12:11:30 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
200 OK 24 kB URL HTTP/1.1 www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (20707)
Hash 43f9e83c6d5ac9985150bf46722db737
706154c5455be6476a371cca7aebb49aa55b25fa
8af41a1db2973b7feb8e11c635aaf0d17970addd22357b9b2a45faa3bc08dccd
Analyzer Verdict Alert fortinet Malware
GET /krbk-springfield/coconut-layer-cake-near-me HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:30 GMT
Server: Apache
Upgrade: h2
Connection: Upgrade, Keep-Alive
Cache-Control: max-age=600
Expires: Wed, 28 Sep 2022 12:21:30 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Keep-Alive: timeout=5, max=100
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
fonts.googleapis.com/css?family=Source+Sans+Pro%3A300%2C400%2C600%2C400italic%7COpen+Sans%3A400%7CDroid+Serif%3A400italic%7CMontserrat%3A400%2C700%7CRaleway%3A400%7CCrimson+Text%3A400Italic%7CLato%3A700&ver=1.0
200 OK 1.3 kB URL HTTP/1.1 fonts.googleapis.com/css?family=Source+Sans+Pro%3A300%2C400%2C600%2C400italic%7COpen+Sans%3A400%7CDroid+Serif%3A400italic%7CMontserrat%3A400%2C700%7CRaleway%3A400%7CCrimson+Text%3A400Italic%7CLato%3A700&ver=1.0
IP
Hash f20c2cfbc39d0ac98efc279ebc9d10bc
888eb6e0140edf6dbe49abb5bef0a2d7625cb2c9
20fc628a31dc9614ba6f127c913a6c10949d009724c5d4e2ae12bde30bff34d7
GET /css?family=Source+Sans+Pro%3A300%2C400%2C600%2C400italic%7COpen+Sans%3A400%7CDroid+Serif%3A400italic%7CMontserrat%3A400%2C700%7CRaleway%3A400%7CCrimson+Text%3A400Italic%7CLato%3A700&ver=1.0 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Wed, 28 Sep 2022 12:11:30 GMT
Date: Wed, 28 Sep 2022 12:11:30 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
www.yasseraggour.net/wp-content/plugins/be-gdpr/public/css/be-gdpr-public.css?ver=1.1.2
200 OK 2.0 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/plugins/be-gdpr/public/css/be-gdpr-public.css?ver=1.1.2
IP
Hash 531bccad8b5f346730147bfea8d44d8c
8a4f3421e0bf9e37f930d64b5b2dc97121685858
aeacf6f9be5c67d47a0d43c516fd1e518e52fb92b1b3eb94c76c7225fabcf5c9
GET /wp-content/plugins/be-gdpr/public/css/be-gdpr-public.css?ver=1.1.2 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:30 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:39:43 GMT
ETag: "1fee-5b8cc766bd4d7-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:30 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1975
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
www.yasseraggour.net/wp-content/plugins/be-gdpr/public/css/magnific-popup.css?ver=1.1.2
200 OK 1.8 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/plugins/be-gdpr/public/css/magnific-popup.css?ver=1.1.2
IP
Hash c2c161e2e6c6999648f75bb2a9dd40a7
78fe13dc0cc74a019f4003084143cce0a7e0be2d
54b55e31cce3ffd9ee293e9af38ba4ab3994c6a991152cc04c2602c4a817970f
GET /wp-content/plugins/be-gdpr/public/css/magnific-popup.css?ver=1.1.2 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:30 GMT
Server: Apache
Upgrade: h2
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 13 Jan 2021 18:39:43 GMT
ETag: "1b26-5b8cc766bd4d7-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:30 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1836
Keep-Alive: timeout=5, max=100
Content-Type: text/css
www.yasseraggour.net/wp-includes/css/dist/block-library/style.min.css?ver=6.0
200 OK 12 kB URL HTTP/1.1 www.yasseraggour.net/wp-includes/css/dist/block-library/style.min.css?ver=6.0
IP
File type ASCII text, with very long lines (43771)
Hash 253fca80a2a3bc1bb2499a44e90d3ac1
6f6484c56273070c13695020b6feaaae138c7e07
46c571bdadb9630162ac9e75d88021eae5434c239c78ecab9c55280fcd84f546
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:30 GMT
Server: Apache
Upgrade: h2
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 02 Jun 2022 16:45:41 GMT
ETag: "15b26-5e079bc7d0806-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:30 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 12149
Keep-Alive: timeout=5, max=100
Content-Type: text/css
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Wed, 28 Sep 2022 11:29:33 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Wed, 28 Sep 2022 12:03:34 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: f42A6djHyHOfJasrwt_h6fdocV17xCZdE9B1giEFkjU_5_2iNELvMA==
Age: 2517
www.yasseraggour.net/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.3.4
200 OK 13 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.3.4
IP
File type Unicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators
Hash ca78c320b1d7fb4a7e1417ac39d4b18d
3a34c5e9b9e33537edf4d7bd9c4bf0eaed8c5024
ea38b69d4a57b62eb97764c2ef5db5c99f9d6124545fb6290264f44300702dde
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.3.4 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:30 GMT
Server: Apache
Upgrade: h2
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 13 Jan 2021 18:40:35 GMT
ETag: "eb91-5b8cc7987d65c-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:30 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 12842
Keep-Alive: timeout=5, max=100
Content-Type: text/css
www.yasseraggour.net/wp-content/plugins/typehub/public/css/typehub-public.css?ver=2.0.4
200 OK 106 B URL HTTP/1.1 www.yasseraggour.net/wp-content/plugins/typehub/public/css/typehub-public.css?ver=2.0.4
IP
Hash 8af7d01cc8f7698605260aa25a37f45e
854439cb106afae13bace1acbdfd03e0ec2daee4
8b46abceed3ee90f0e9053977b5dcb569c09784270d0e5fff5aebf80256501e0
GET /wp-content/plugins/typehub/public/css/typehub-public.css?ver=2.0.4 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:30 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:39:19 GMT
ETag: "62-5b8cc75005fab-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:30 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 106
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
www.yasseraggour.net/wp-content/plugins/tatsu/public/css/tatsu.min.css?ver=3.3.7
200 OK 23 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/plugins/tatsu/public/css/tatsu.min.css?ver=3.3.7
IP
File type ASCII text, with very long lines (51889)
Hash 28f1224b9197f923f2f7cf46660c9720
c49c60b7aeab4ac82b828dd9cd2a8125f59b05af
11a758e509d3c1258b9d9535bdbc9c4b3fdbdd30a1289811f8b1157fdc79b179
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/tatsu/public/css/tatsu.min.css?ver=3.3.7 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:30 GMT
Server: Apache
Upgrade: h2
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 29 Mar 2022 17:37:41 GMT
ETag: "2564c-5db5ee2c3fadc-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:30 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Keep-Alive: timeout=5, max=100
Transfer-Encoding: chunked
Content-Type: text/css
www.yasseraggour.net/wp-content/plugins/oshine-modules/public/css/oshine-modules.min.css?ver=3.2
200 OK 22 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/plugins/oshine-modules/public/css/oshine-modules.min.css?ver=3.2
IP
File type ASCII text, with very long lines (40365)
Hash 33ce17f4f9bbcb23353b3ba29b18647c
73a33af5cb22f1f1b8365ea26132bff7ebff819a
f1eebe65387114c412947171ad701f88bf405c62e3ff0e5f33e413ad2f6d55f3
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/oshine-modules/public/css/oshine-modules.min.css?ver=3.2 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:30 GMT
Server: Apache
Upgrade: h2
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 13 Jan 2021 18:39:09 GMT
ETag: "2348a-5b8cc74648dc6-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:30 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Keep-Alive: timeout=5, max=100
Transfer-Encoding: chunked
Content-Type: text/css
www.yasseraggour.net/wp-content/themes/oshin/bb-press/bb-press.css?ver=6.0
200 OK 835 B URL HTTP/1.1 www.yasseraggour.net/wp-content/themes/oshin/bb-press/bb-press.css?ver=6.0
IP
Hash 0edaed0c36114fc3c6160e4e6bda960d
3cf30dff6fb42d90ec7d60ea0b5da06507ea35a3
ce97d88f2da2f244969b2e85034bb1fc71874c397cede36cb15d5f6cdd6a8c8c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/oshin/bb-press/bb-press.css?ver=6.0 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:30 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:28:13 GMT
ETag: "a5f-5b8cc4d55d6a3-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:30 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 835
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
ocsp.digicert.com/
200 OK 471 B IP
Hash 3526d5ce1381ba26cbc553db057e1915
fe01c920696448e8bf12e6fff877bce8281d34a2
09604aed7cbca7971bfcb5afcb53591600b944f28eff21aa65dc601e78cdda53
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3824
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 12:11:31 GMT
Last-Modified: Wed, 28 Sep 2022 11:07:47 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
www.yasseraggour.net/wp-content/themes/oshin/css/headers/responsive-header.min.css?ver=6.9.7
200 OK 430 B URL HTTP/1.1 www.yasseraggour.net/wp-content/themes/oshin/css/headers/responsive-header.min.css?ver=6.9.7
IP
File type ASCII text, with very long lines (1134), with no line terminators
Hash 5b468176fccfee70305a18a45dc268f0
87fc2c10bc10d92e0fe742b1474900be59f94006
9c7ed04414d3ea8c98543278e3e964b35dfaa2983ccae1dcdbeb637b8e3956f4
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/oshin/css/headers/responsive-header.min.css?ver=6.9.7 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:31 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:28:13 GMT
ETag: "46e-5b8cc4d5672e2-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 430
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
www.yasseraggour.net/wp-content/themes/oshin/fonts/icomoon/style.min.css?ver=6.9.7
200 OK 5.8 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/themes/oshin/fonts/icomoon/style.min.css?ver=6.9.7
IP
File type ASCII text, with very long lines (34770), with no line terminators
Hash 96481247ac76f184a6e7fd1b57c41fba
d907efc348f64dbed78897fc3e14e45c1af8a16f
ce788bfc379936c15be33d259bae960ae43b815fd086bd6ed09c7cd93621e3d3
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/oshin/fonts/icomoon/style.min.css?ver=6.9.7 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:30 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:28:14 GMT
ETag: "87d2-5b8cc4d583800-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:30 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 5846
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
www.yasseraggour.net/wp-content/themes/oshin/css/main.min.css?ver=6.9.7
200 OK 20 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/themes/oshin/css/main.min.css?ver=6.9.7
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash e10a5e6f846f383277233b50a078d79c
a34a55f190fa6ddba639c125296f950d46b840bf
48350f455d77dd6cd48ac5df0ca5607eb084287cf1895325ca4095bcc61c36e5
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/oshin/css/main.min.css?ver=6.9.7 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:31 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:28:13 GMT
ETag: "1b73e-5b8cc4d569222-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css
www.yasseraggour.net/wp-content/themes/oshin/css/headers/left-header.min.css?ver=6.9.7
200 OK 1.3 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/themes/oshin/css/headers/left-header.min.css?ver=6.9.7
IP
File type ASCII text, with very long lines (7054), with no line terminators
Hash 2a10acc5728e2aff5a4e93c174b1cffd
9f9fe74e819302850d514cad5df442de94d2898c
9bfb53ef66be05aa0b17198a4fdf10cb7e7b775235cdc7f121e5fc9e966e2151
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/oshin/css/headers/left-header.min.css?ver=6.9.7 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:31 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:28:13 GMT
ETag: "1b8e-5b8cc4d5672e2-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1343
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
www.yasseraggour.net/wp-content/themes/oshin/css/headers/multilevel-menu.min.css?ver=6.9.7
200 OK 1.5 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/themes/oshin/css/headers/multilevel-menu.min.css?ver=6.9.7
IP
File type ASCII text, with very long lines (12915), with no line terminators
Hash 39157f6ee0f6e422d9b03550d4a6d2d2
ceec17d75857bb5de82bb5e81b0617219f09b994
14b3b5d99ef104c1b489f4813da232d520fcb9c02fd540ef4e020cdb09f273e3
GET /wp-content/themes/oshin/css/headers/multilevel-menu.min.css?ver=6.9.7 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:31 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:28:13 GMT
ETag: "3273-5b8cc4d5672e2-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1475
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
www.yasseraggour.net/wp-content/themes/oshin/css/layout.min.css?ver=6.9.7
200 OK 3.0 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/themes/oshin/css/layout.min.css?ver=6.9.7
IP
File type ASCII text, with very long lines (14409), with no line terminators
Hash 20db450904b61b44d33c1445768abdad
8a460d442939257dac1d255cb7ef292e3b2b0d09
631bea32ea57bd56e41929a06cd8b2916dd39f916cd345606e43ad3ac6b58b3e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/oshin/css/layout.min.css?ver=6.9.7 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:31 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:28:13 GMT
ETag: "3849-5b8cc4d569222-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 2997
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
www.yasseraggour.net/wp-content/themes/oshin/fonts/fonts.min.css?ver=6.9.7
200 OK 300 B URL HTTP/1.1 www.yasseraggour.net/wp-content/themes/oshin/fonts/fonts.min.css?ver=6.9.7
IP
File type ASCII text, with very long lines (1829), with no line terminators
Hash 269721ae4e87f3d43d7634d4ada6d01b
b035925085a59e7db1d067767e2b058a4c7556c0
ff43c43ab8bbf6293176c055bfa6ac5683761a103e122a1fde66107a8f2ad052
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/oshin/fonts/fonts.min.css?ver=6.9.7 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:31 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:28:14 GMT
ETag: "725-5b8cc4d585740-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 300
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
www.yasseraggour.net/wp-content/themes/oshin/style.css?ver=6.9.7
200 OK 316 B URL HTTP/1.1 www.yasseraggour.net/wp-content/themes/oshin/style.css?ver=6.9.7
IP
Hash d9273f81ca90ed44421dc80990e15d10
61bcb9eddf792134bb1359b45abdab59977c0157
9705f0ff095d43708f5258506c39526af3e5e7688183224d6b5f13bee7a5a538
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/oshin/style.css?ver=6.9.7 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:31 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:28:14 GMT
ETag: "1ce-5b8cc4d5fd917-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 316
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
www.yasseraggour.net/wp-content/uploads/oshine_dynamic_css/be_dynamic.css?ver=6.9.7
200 OK 6.1 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/uploads/oshine_dynamic_css/be_dynamic.css?ver=6.9.7
IP
File type ASCII text, with very long lines (35435), with no line terminators
Hash afa67ebee222645bae1a7751177a1ae9
5d98e5647a86f80d4a7ab2c6fb343a77ac8e85b1
0c18b0e85211a0c4f23f645ea3d2411652c36e74bbb3591616047a00995d298a
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/oshine_dynamic_css/be_dynamic.css?ver=6.9.7 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:31 GMT
Server: Apache
Last-Modified: Wed, 20 Jan 2021 16:35:03 GMT
ETag: "8a6b-5b9578977f155-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 6134
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
www.yasseraggour.net/wp-content/themes/oshin/css/vendor/vendor.min.css?ver=6.9.7
200 OK 4.0 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/themes/oshin/css/vendor/vendor.min.css?ver=6.9.7
IP
File type ASCII text, with very long lines (7908)
Hash 81e932d398aa2cf10e9860909a2b32d6
79aa4b5d08d6adf7066c984f6a94a5a745a59c66
bccdbffcc6a9ccdeafbff74e3d3650af441fc18c9280e0d0cac19a2a662e7940
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/oshin/css/vendor/vendor.min.css?ver=6.9.7 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:31 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:28:13 GMT
ETag: "4ae0-5b8cc4d569222-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 3969
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
www.yasseraggour.net/wp-content/uploads/masterslider/custom.css?ver=1.1
200 OK 140 B URL HTTP/1.1 www.yasseraggour.net/wp-content/uploads/masterslider/custom.css?ver=1.1
IP
Hash 0f6a35283580e787a847b4e9dbc6daf9
db53b4fcdc953d08b1d36838d2f07a7a28d08a4f
0dd27e43d37fd1713d3f246f7de1b623d92a0b686c5d33123c39ed87c152fe18
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/masterslider/custom.css?ver=1.1 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:31 GMT
Server: Apache
Last-Modified: Sun, 17 Jan 2021 22:24:16 GMT
ETag: "10a-5b92010d8b9fb-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 140
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: vATWMzHqbl5VVTLkxXlBDQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: gSdags9sO32nXRtRyXXkNVzRwwo=
www.yasseraggour.net/wp-content/plugins/be-gdpr/public/js/be-gdpr-public.js?ver=1.1.2
200 OK 2.0 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/plugins/be-gdpr/public/js/be-gdpr-public.js?ver=1.1.2
IP
Hash 98665fc74313f0178791d965c468947c
c021f111857d68ec0d411bb1e2aaf8e70ef20c39
4b356cbf34135db2b092db2115112a5d0eb90a8d7abebfe76c25f140aa14449c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/be-gdpr/public/js/be-gdpr-public.js?ver=1.1.2 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:31 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:39:43 GMT
ETag: "159c-5b8cc766bf417-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1979
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
www.yasseraggour.net/wp-content/plugins/masterslider/public/assets/css/masterslider.main.css?ver=3.4.7
200 OK 11 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/plugins/masterslider/public/assets/css/masterslider.main.css?ver=3.4.7
IP
Hash 9fdd97f54280407a252cbe6e3b7911b2
199a3780b475020c683562d052d69f65c0b86d9f
423b8f8621f37522994646bd1e0b65bce28738c650fe066e160da6e9468d9f6e
GET /wp-content/plugins/masterslider/public/assets/css/masterslider.main.css?ver=3.4.7 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:31 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:40:23 GMT
ETag: "135c4-5b8cc78d81ecf-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 10850
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
www.yasseraggour.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.8 kB URL HTTP/1.1 www.yasseraggour.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
File type ASCII text, with very long lines (11126)
Hash da08b2f62879d11d578ed5502bf4eae8
3a431582d16b532ed767f76a08952dd1c1ccb975
dd2b5666f35cd7fd4a114ba9c956491416a21568346bc99dfbce65f05c7512db
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:31 GMT
Server: Apache
Last-Modified: Tue, 21 Jun 2022 16:24:24 GMT
ETag: "36e2-5e1f7a756f183-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 4814
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
www.yasseraggour.net/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 32 kB URL HTTP/1.1 www.yasseraggour.net/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
File type ASCII text, with very long lines (62621)
Hash fa6498f5adf3c63e589a0f615761cc77
df757483138c407874a34d62cf89c70d4e46aebd
b221d5304e76e862da5014eab7bf7e23643d6c3fc1cb8e4707c581d89efaa497
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:31 GMT
Server: Apache
Last-Modified: Tue, 21 Jun 2022 16:24:23 GMT
ETag: "168bb-5e1f7a7533867-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
www.yasseraggour.net/wp-content/plugins/typehub/public/js/webfont.min.js?ver=6.0
200 OK 5.0 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/plugins/typehub/public/js/webfont.min.js?ver=6.0
IP
File type Unicode text, UTF-8 text, with very long lines (12207), with no line terminators
Hash 50b11448e1c99789d23aab2c0d173e88
d3ffb9915e45494d70c39c0705e36a1cb19458f8
233b11cd15755971630dd660f8490113c489b4790c29efacbcd1c79430ced419
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/typehub/public/js/webfont.min.js?ver=6.0 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:31 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:39:19 GMT
ETag: "2fc6-5b8cc75007eeb-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 4956
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
www.yasseraggour.net/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.3.4
200 OK 47 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.3.4
IP
File type ASCII text, with very long lines (42889)
Hash 31d1df3079fc0546fa3ceafa10c92e2a
e4eb29c4da9a383b1982c5fc62c4c0614f98ec7e
de3cd682aa9764717d89423d308c3e13db9c9597323782de1bfffee7ea6c0577
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.3.4 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:31 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:40:35 GMT
ETag: "1db7a-5b8cc7988d05b-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
www.yasseraggour.net/wp-content/themes/oshin/js/vendor/modernizr.min.js?ver=6.0
200 OK 5.9 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/themes/oshin/js/vendor/modernizr.min.js?ver=6.0
IP
File type HTML document, ASCII text, with very long lines (14412), with no line terminators
Hash f124caf60d1364b0df3862a733234a6e
3b20b723aecbfe38919d28d1191833e3f495b861
66c81554b9f9964001cbd3191b4c1d4082ed9583154f2d7ba0558abfe00abce0
GET /wp-content/themes/oshin/js/vendor/modernizr.min.js?ver=6.0 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:31 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:28:14 GMT
ETag: "384c-5b8cc4d5b83bc-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 5853
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
www.yasseraggour.net/wp-includes/js/wp-emoji-release.min.js?ver=6.0
200 OK 5.1 kB URL HTTP/1.1 www.yasseraggour.net/wp-includes/js/wp-emoji-release.min.js?ver=6.0
IP
File type ASCII text, with very long lines (15660)
Hash 3971154f76bf26e704b4910111d124ba
60dfcafe9593005b92cd0ce40f429b241ae3b287
549584b85b7433e767b71e774e5fcef37c40c19169e3979597b6ab7f8314b3c4
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:31 GMT
Server: Apache
Last-Modified: Thu, 02 Jun 2022 16:45:44 GMT
ETag: "48b9-5e079bcaddbcc-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 5085
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
www.yasseraggour.net/wp-content/plugins/be-gdpr/public/js/magnificpopup.min.js?ver%5B0%5D=jquery
200 OK 7.2 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/plugins/be-gdpr/public/js/magnificpopup.min.js?ver%5B0%5D=jquery
IP
File type ASCII text, with very long lines (19987), with no line terminators
Hash 1d06bcbacb929e147aa43f05afd1869f
70cf0647e251e4d6afecb34aec33f176cbbfbada
b94d0e7b2ea94f6ca78f4edd686d9c7fd28f8391e701cac35286a8f26905a461
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/be-gdpr/public/js/magnificpopup.min.js?ver%5B0%5D=jquery HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:31 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:39:43 GMT
ETag: "4e13-5b8cc766bf417-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 7240
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
www.yasseraggour.net/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.3.4
200 OK 87 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.3.4
IP
File type ASCII text, with very long lines (64270)
Hash c0b2c515832f7cc1f8401ababb08d2c6
f5c9e679c636bde5b9c1000aa593809dff7b87cd
927a2b1d564d76ebf16e3031d215e0aae3477056b15196c177662e50fc2c4dd2
GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.3.4 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:31 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:40:35 GMT
ETag: "51cbe-5b8cc7988d05b-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
www.yasseraggour.net/wp-includes/js/comment-reply.min.js?ver=6.0
200 OK 1.4 kB URL HTTP/1.1 www.yasseraggour.net/wp-includes/js/comment-reply.min.js?ver=6.0
IP
File type ASCII text, with very long lines (2946)
Hash 28214bc78b9edfcfbc9c7b651fb4f56c
fb0847abdb33dd943a2dcda4c4b905fb5cdd116c
11691bc1acc1f3a7ab8ef7c67fb720ca58fb72e52f510009f7b0cbc2589d45e0
GET /wp-includes/js/comment-reply.min.js?ver=6.0 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:31 GMT
Server: Apache
Last-Modified: Thu, 02 Jun 2022 16:45:44 GMT
ETag: "ba5-5e079bcaaaf50-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1351
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
www.yasseraggour.net/wp-content/plugins/oshine-modules/public/js/vendor/asyncloader.min.js?ver=1.0
200 OK 372 B URL HTTP/1.1 www.yasseraggour.net/wp-content/plugins/oshine-modules/public/js/vendor/asyncloader.min.js?ver=1.0
IP
File type ASCII text, with very long lines (574), with no line terminators
Hash be4c1ade1c63a4540f6ef0c50f264f84
3f339ca086deed422133950df1305b568960589c
93ca37e2d987b71f586d714ade8d2abe84f796842f87ab2f9ac62c379fd3b396
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/oshine-modules/public/js/vendor/asyncloader.min.js?ver=1.0 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:31 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:39:09 GMT
ETag: "23e-5b8cc7465d5e4-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 372
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
www.yasseraggour.net/wp-includes/js/jquery/ui/accordion.min.js?ver=1.13.1
200 OK 2.8 kB URL HTTP/1.1 www.yasseraggour.net/wp-includes/js/jquery/ui/accordion.min.js?ver=1.13.1
IP
File type ASCII text, with very long lines (8632)
Hash 779bc7c21dd4a0ae2b9f1c798bf33e28
d9482a711fa1632734bd319a5fda8fd3eabfbc3e
3bab005a54458881573cee5bae747683b169b7933e50cb181ddb9ba98a007497
GET /wp-includes/js/jquery/ui/accordion.min.js?ver=1.13.1 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:31 GMT
Server: Apache
Last-Modified: Thu, 02 Jun 2022 16:45:44 GMT
ETag: "226e-5e079bca511d7-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 2776
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
www.yasseraggour.net/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
200 OK 7.0 kB URL HTTP/1.1 www.yasseraggour.net/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
IP
File type Unicode text, UTF-8 text, with very long lines (8189)
Hash 45e1868027bc9cb6c3f5a771305e8e3a
b14d1f21e3b563ae645f71510673020c498f6458
befa02ace50b24a2ea5bae5857f9ffa84672c56a6f91c87bd85d51e85e9bc946
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:31 GMT
Server: Apache
Last-Modified: Thu, 02 Jun 2022 16:45:44 GMT
ETag: "50eb-5e079bca39ad8-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 6967
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
www.yasseraggour.net/wp-content/plugins/oshine-modules/public/js/oshine-modules.min.js?ver=3.2
200 OK 11 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/plugins/oshine-modules/public/js/oshine-modules.min.js?ver=3.2
IP
File type ASCII text, with very long lines (44376), with no line terminators
Hash 1c6e3d3d29c5423680676b4e39471a3b
ca85b24a4eb62898b50756b0a6aab185568fe141
ead66a5a595c187779e4cabe1dd07f3854187367713e1a607f28ea1604cc3ba9
GET /wp-content/plugins/oshine-modules/public/js/oshine-modules.min.js?ver=3.2 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:31 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:39:09 GMT
ETag: "ad58-5b8cc74666284-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 11039
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
www.yasseraggour.net/wp-includes/js/jquery/ui/tabs.min.js?ver=1.13.1
200 OK 4.0 kB URL HTTP/1.1 www.yasseraggour.net/wp-includes/js/jquery/ui/tabs.min.js?ver=1.13.1
IP
File type ASCII text, with very long lines (11760)
Hash 8b00c96e5809e150a2d3f4996eaf706b
5fc46c7941c61b890abe87af6a4c94e54cf59434
839981ad82941e7336a2dd154fcd20b9e7d9ff91ff343b6fc0f37b18bc01d0e3
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/tabs.min.js?ver=1.13.1 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:31 GMT
Server: Apache
Last-Modified: Thu, 02 Jun 2022 16:45:44 GMT
ETag: "2ea1-5e079bca37b99-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 3962
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
200 OK 17 kB URL HTTP/1.1 fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16740, version 1.0\012- data
Hash e43b535855a4ae53bd5b07a6eeb3bf67
6507312d9491156036316484bf8dc41e8b52ddd9
b34551ae25916c460423b82beb8e0675b27f76a9a2908f18286260fbd6de6681
GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.yasseraggour.net
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 16740
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 19:01:11 GMT
Expires: Tue, 26 Sep 2023 19:01:11 GMT
Cache-Control: public, max-age=31536000
Age: 148221
Last-Modified: Mon, 15 Aug 2022 18:14:44 GMT
Content-Type: font/woff2
www.yasseraggour.net/wp-content/plugins/tatsu/public/js/helpers.min.js?ver=3.3.7
200 OK 830 B URL HTTP/1.1 www.yasseraggour.net/wp-content/plugins/tatsu/public/js/helpers.min.js?ver=3.3.7
IP
File type ASCII text, with very long lines (1805), with no line terminators
Hash 2c1a5ca6e91e092f76195eb74450fb3b
ad52a9148f82b46e7e8b0eddd7efe0a16a38323c
f284f5946f075ad8aa0a9ec946ba3abc9748192510d14a58d62d3c37ee491034
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/tatsu/public/js/helpers.min.js?ver=3.3.7 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:31 GMT
Server: Apache
Last-Modified: Tue, 29 Mar 2022 17:37:41 GMT
ETag: "70d-5db5ee2c5623a-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 830
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
fonts.gstatic.com/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
200 OK 13 kB URL HTTP/1.1 fonts.gstatic.com/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13036, version 1.0\012- data
Hash 0ad032b3d07aaf33b160ac4799dda40f
06b931e0d0bf37f5037d9e66d6feedfddd21c0ba
c124c88ca4fcb4336e97617647ef0d32441329371120c8eabaea0fea226560b0
GET /s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.yasseraggour.net
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 13036
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 21 Sep 2022 21:56:50 GMT
Expires: Thu, 21 Sep 2023 21:56:50 GMT
Cache-Control: public, max-age=31536000
Age: 569682
Last-Modified: Wed, 27 Apr 2022 16:04:42 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2
200 OK 13 kB URL HTTP/1.1 fonts.gstatic.com/s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13052, version 1.0\012- data
Hash 7cf79fbd1df848510d7352274efc2401
5540b5a26cc7dfe25294c4eabe011e2c6cd60143
bc9a16cd945457ad9463cdaed95129b01c589466978dfee3d019d9c604b2171a
GET /s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.yasseraggour.net
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 13052
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 22 Sep 2022 02:22:13 GMT
Expires: Fri, 22 Sep 2023 02:22:13 GMT
Cache-Control: public, max-age=31536000
Age: 553759
Last-Modified: Wed, 27 Apr 2022 16:09:03 GMT
Content-Type: font/woff2
www.yasseraggour.net/wp-content/plugins/tatsu/public/js/vendor/es6-promise.auto.min.js?ver=6.0
200 OK 2.3 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/plugins/tatsu/public/js/vendor/es6-promise.auto.min.js?ver=6.0
IP
File type ASCII text, with very long lines (5969), with no line terminators
Hash cb0ad5b5a47d0e8c7d05e96ff9fe8bde
63f13a597d80805e2b043836274e08172159e321
07b4070227cf5c6ccc90590ab2a79d9e51a8ba04cdc79bc9b805b3c8c6c9397a
GET /wp-content/plugins/tatsu/public/js/vendor/es6-promise.auto.min.js?ver=6.0 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:31 GMT
Server: Apache
Last-Modified: Tue, 29 Mar 2022 17:37:41 GMT
ETag: "1751-5db5ee2c4971b-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 2333
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
www.yasseraggour.net/wp-content/plugins/tatsu/public/js/vendor/debouncedresize.min.js?ver=3.3.7
200 OK 234 B URL HTTP/1.1 www.yasseraggour.net/wp-content/plugins/tatsu/public/js/vendor/debouncedresize.min.js?ver=3.3.7
IP
File type ASCII text, with very long lines (359), with no line terminators
Hash 5e278a7761a0ad5a61778a0d875b6d5f
0d4f6d85ab695022baa8507fe7d754c11194fc48
7752bf510c7f366618b2c575f7788d82048489e1e2bad0e616c0bd42082fc342
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/tatsu/public/js/vendor/debouncedresize.min.js?ver=3.3.7 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:31 GMT
Server: Apache
Last-Modified: Tue, 29 Mar 2022 17:37:41 GMT
ETag: "167-5db5ee2c4877b-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 234
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
www.yasseraggour.net/wp-content/themes/oshin/js/vendor/perfect-scrollbar.jquery.min.js?ver=6.0
200 OK 7.1 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/themes/oshin/js/vendor/perfect-scrollbar.jquery.min.js?ver=6.0
IP
File type ASCII text, with very long lines (27234), with no line terminators
Hash a4335bf8771b642ae626af75ef001d22
9abeb82efde79b444e7929c20338f1fc1531fb62
964dcd98b24cc5acdc7dd4bc55e91cda6df92dadecf89cacc261fa2dc916327c
GET /wp-content/themes/oshin/js/vendor/perfect-scrollbar.jquery.min.js?ver=6.0 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:32 GMT
Server: Apache
Last-Modified: Tue, 21 Jun 2022 16:24:24 GMT
ETag: "6a62-5e1f7a76057b8-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:32 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 7106
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
www.yasseraggour.net/wp-content/plugins/tatsu/public/js/tatsu.min.js?ver=3.3.7
200 OK 7.8 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/plugins/tatsu/public/js/tatsu.min.js?ver=3.3.7
IP
File type ASCII text, with very long lines (29172), with no line terminators
Hash fe3caf2632e6dcd0e64b73d733bc12de
5b57e2520ad4b04336feb33db70336b1ca227580
6b14539bb22842de39df19cd42d10987a8427ca92f1dea6d734b4c58d268b927
GET /wp-content/plugins/tatsu/public/js/tatsu.min.js?ver=3.3.7 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:31 GMT
Server: Apache
Last-Modified: Tue, 29 Mar 2022 17:37:41 GMT
ETag: "71f4-5db5ee2c571da-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:31 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 7804
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
www.yasseraggour.net/wp-content/themes/oshin/js/script.min.js?ver=6.9.7
200 OK 11 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/themes/oshin/js/script.min.js?ver=6.9.7
IP
File type ASCII text, with very long lines (44722), with no line terminators
Hash 5664389900357676189fc3da91079589
51114e778204fb5838dc7c17adcd998ae08e3488
d5abd81d40241dddee824c1c74586b852eb7c95edbe143e992e9c1600207571c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/oshin/js/script.min.js?ver=6.9.7 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:32 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:28:14 GMT
ETag: "aeb2-5b8cc4d5bb29c-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:32 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 11322
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2a1e96cc6b98e9193b2ca0b7345f43a6
a60366f31371cf94bcaaad078b96a6cd7510ab1c
a5dfa709a0bc03e768da8c10408b2a07fba58ab688906aa234ce22bf3b2a3215
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A5DFA709A0BC03E768DA8C10408B2A07FBA58AB688906AA234CE22BF3B2A3215"
Last-Modified: Tue, 27 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8099
Expires: Wed, 28 Sep 2022 14:26:31 GMT
Date: Wed, 28 Sep 2022 12:11:32 GMT
Connection: keep-alive
collect.greengoplatform.com/flag.js?v=7.1.3
200 OK 579 B URL HTTP/1.1 collect.greengoplatform.com/flag.js?v=7.1.3
IP
ASN #206638 PE Brezhnev Daniil
File type ASCII text, with very long lines (2336), with no line terminators
Hash 37326b5e1732ea5e8e0c394b19415a25
ec0a58a80d1ae27e1a82edf3343859aa923ef637
e901c7ae1a5dc9925d6db81344847070347420db148d63405b15a9c81dc85d0d
GET /flag.js?v=7.1.3 HTTP/1.1
Host: collect.greengoplatform.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.yasseraggour.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Sep 2022 12:11:32 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
www.yasseraggour.net/wp-content/uploads/2021/01/cropped-logo-2.png
200 OK 5.7 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/uploads/2021/01/cropped-logo-2.png
IP
File type PNG image data, 600 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash da53e518b83e48fd7f55c1b3c4bdfa38
1f49a95464f976d0288ee6a75bfa0a66266c2fd3
41cca237634bbd4df7c80257af398c28b26d99b29351e86bfec9ea4230b6cb3c
GET /wp-content/uploads/2021/01/cropped-logo-2.png HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:32 GMT
Server: Apache
Last-Modified: Mon, 18 Jan 2021 07:08:51 GMT
ETag: "1660-5b92764eff73f"
Accept-Ranges: bytes
Content-Length: 5728
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:32 GMT
Vary: User-Agent,Accept-Encoding
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/png
www.yasseraggour.net/wp-content/themes/oshin/fonts/icomoon/fonts/icomoon.woff?85pf5i
200 OK 116 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/themes/oshin/fonts/icomoon/fonts/icomoon.woff?85pf5i
IP
File type Web Open Font Format, TrueType, length 116136, version 1.0\012- data
Size 116 kB (116136 bytes)
Hash 9d084bf8950ab83a581eeae1fa392b28
80d2ab9017f1548d53008b5eb0e0328a3b203346
fe619191bf1b83a829bd5edd6c54a47ee52c072035517075082e373a16f949a0
GET /wp-content/themes/oshin/fonts/icomoon/fonts/icomoon.woff?85pf5i HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.yasseraggour.net/wp-content/themes/oshin/fonts/icomoon/style.min.css?ver=6.9.7
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:32 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:28:14 GMT
ETag: "1c5a8-5b8cc4d583800"
Accept-Ranges: bytes
Content-Length: 116136
Cache-Control: max-age=172800
Expires: Fri, 30 Sep 2022 12:11:32 GMT
Vary: User-Agent
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/font-woff
www.yasseraggour.net/wp-content/plugins/oshine-modules/public/js/vendor/vivusSVGanimation.min.js
200 OK 3.7 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/plugins/oshine-modules/public/js/vendor/vivusSVGanimation.min.js
IP
File type ASCII text, with very long lines (10871), with no line terminators
Hash b98c3467ffed3ad0bff9f4d635d66d40
b66d8ffd982ee0906bc106691330ae98197eb838
619cf2d9f7a1b82d51cb5c3ea5871999dfbb7d93d2fd9c1ee490073d75904d40
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/oshine-modules/public/js/vendor/vivusSVGanimation.min.js HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:32 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:39:09 GMT
ETag: "2a77-5b8cc74666284-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:32 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 3672
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
www.yasseraggour.net/wp-content/plugins/tatsu/public/js/vendor/tilt.min.js?ver=3.3.7
200 OK 1.8 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/plugins/tatsu/public/js/vendor/tilt.min.js?ver=3.3.7
IP
File type ASCII text, with very long lines (5584), with no line terminators
Hash 72cfc3ee6f22a8cffae30e06a78ef0f6
46f3982f1d1ce94f8573ac642b10f416868f24ef
429fda511d4309c84396eeacac870be32b01c81d350bd0e68a30d077320268ca
GET /wp-content/plugins/tatsu/public/js/vendor/tilt.min.js?ver=3.3.7 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:32 GMT
Server: Apache
Last-Modified: Tue, 29 Mar 2022 17:37:41 GMT
ETag: "15d0-5db5ee2c5623a-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:32 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1771
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
www.yasseraggour.net/wp-content/uploads/2021/01/logo-2.png
200 OK 8.5 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/uploads/2021/01/logo-2.png
IP
File type PNG image data, 600 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash 7a4a0b710fd1a04f249fc695d67a7db5
0c700d5ec8e00bcc295d52779f5f451d311cfccf
12754e16e2b44a3e91d6709e02e900bdce8a07a82a170352346992c61b508f98
GET /wp-content/uploads/2021/01/logo-2.png HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:32 GMT
Server: Apache
Last-Modified: Mon, 18 Jan 2021 00:14:16 GMT
ETag: "215d-5b9219a440a5c"
Accept-Ranges: bytes
Content-Length: 8541
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:32 GMT
Vary: User-Agent,Accept-Encoding
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/png
www.yasseraggour.net/wp-content/themes/oshin/js/vendor/isotope.min.js
200 OK 9.6 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/themes/oshin/js/vendor/isotope.min.js
IP
File type ASCII text, with very long lines (34338), with no line terminators
Hash 8bcc6584898f010c6e6a41437a84b66b
859689c120bc14541c668ca47094e021037bd58d
c83290bae252bf28760c9256a13f1c7e9463a9a616a1b4e85a692fd281c504cd
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/oshin/js/vendor/isotope.min.js HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:32 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:28:14 GMT
ETag: "8622-5b8cc4d5b83bc-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:32 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 9621
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
www.yasseraggour.net/wp-content/plugins/tatsu/public/js/vendor/begrid.min.js?ver=3.3.7
200 OK 1.8 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/plugins/tatsu/public/js/vendor/begrid.min.js?ver=3.3.7
IP
File type ASCII text, with very long lines (5953), with no line terminators
Hash 7fcfcf58a8c7b0a0f993335c37689fb9
770bc0aad11f1d7c95e72361aa15150f7f79d4bd
42357090283f1406ff61e8843e6321f67fc5a41f55d21c725a85965136300381
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/tatsu/public/js/vendor/begrid.min.js?ver=3.3.7 HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:32 GMT
Server: Apache
Last-Modified: Tue, 29 Mar 2022 17:37:41 GMT
ETag: "1741-5db5ee2c4877b-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:32 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1786
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
www.yasseraggour.net/wp-content/themes/oshin/js/vendor/fitvids.min.js
200 OK 757 B URL HTTP/1.1 www.yasseraggour.net/wp-content/themes/oshin/js/vendor/fitvids.min.js
IP
File type HTML document, ASCII text, with very long lines (1683), with no line terminators
Hash 2c99bfb62cecbeaf4d858bbaae5a24ba
8e4f445eaeb01d874e25b48745f6a70bbeb1b40d
46bc5502829e14dc61c09a1115117c59ad82a1a5deb3e77c9bf5442357970b25
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/oshin/js/vendor/fitvids.min.js HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:32 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:28:14 GMT
ETag: "693-5b8cc4d5b741c-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:32 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 757
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
www.yasseraggour.net/wp-content/themes/oshin/js/vendor/superfish.min.js
200 OK 1.6 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/themes/oshin/js/vendor/superfish.min.js
IP
File type ASCII text, with very long lines (3775), with no line terminators
Hash 8914ef4f00f9aa70ecac6d724722f6a2
498f326ec15e1c6af462bcc27e9561c31c310a5b
83bfb9b81b41483c1a02e16c831d154f1516a4a17531ba91010a7c1ba2a6b600
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/oshin/js/vendor/superfish.min.js HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:32 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:28:14 GMT
ETag: "ebf-5b8cc4d5ba2fc-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:32 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1573
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
www.yasseraggour.net/wp-content/themes/oshin/js/vendor/hoverintent.min.js
200 OK 613 B URL HTTP/1.1 www.yasseraggour.net/wp-content/themes/oshin/js/vendor/hoverintent.min.js
IP
File type ASCII text, with very long lines (1350), with no line terminators
Hash 0d4b9c8795ff0322c13aa5f9c4b55b47
5e285e138e5992a7c51dd1a934e0cc0cd8667de8
247dd152bfdca4fc2c6e9a7d1fb321d9f9b0d535b9741a79e450999ec137f8d5
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/oshin/js/vendor/hoverintent.min.js HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:32 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:28:14 GMT
ETag: "546-5b8cc4d5b83bc-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:32 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 613
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript
www.yasseraggour.net/wp-content/themes/oshin/js/vendor/magnificpopup.min.js
200 OK 7.6 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/themes/oshin/js/vendor/magnificpopup.min.js
IP
File type ASCII text, with very long lines (20722), with no line terminators
Hash f0a9dcac1fe6ed36f491b9b096273b58
1389e12c48a12a0bb1f5537950ddedd339556dc1
050697cbc380402e6ac6a5f989a369cb624d2768904cd440023e9121c2395885
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/oshin/js/vendor/magnificpopup.min.js HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:32 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:28:14 GMT
ETag: "50f2-5b8cc4d5b83bc-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:32 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 7559
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript
www.yasseraggour.net/wp-content/themes/oshin/js/vendor/transparentheader.min.js
200 OK 676 B URL HTTP/1.1 www.yasseraggour.net/wp-content/themes/oshin/js/vendor/transparentheader.min.js
IP
File type ASCII text, with very long lines (1980), with no line terminators
Hash 023aff10659988f3415fa33833a2a556
dd1bccd82a95c497a47eec2dc5e6251d3562f03f
4901ae4819f90f3672c439eb30b6130d8c34fe969d4e3a3bce30f83c3a67a3ec
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/oshin/js/vendor/transparentheader.min.js HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:32 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:28:14 GMT
ETag: "7bc-5b8cc4d5ba2fc-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:32 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 676
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
www.yasseraggour.net/wp-content/themes/oshin/js/vendor/easing.min.js
200 OK 789 B URL HTTP/1.1 www.yasseraggour.net/wp-content/themes/oshin/js/vendor/easing.min.js
IP
File type ASCII text, with very long lines (3209), with no line terminators
Hash ae42bf2c2eabf50a1df338b2d18bc90f
b91d05c2ecfcf99ae1a1a364d5b8fd3bf3d0ee62
2252c3e2f0528fa26b1ec5aee19f49a60890a14754415d372f82ba9de043525d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/oshin/js/vendor/easing.min.js HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:32 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:28:14 GMT
ETag: "c89-5b8cc4d5b741c-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:32 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 789
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript
www.yasseraggour.net/wp-content/themes/oshin/js/vendor/modernizr.min.js
200 OK 5.9 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/themes/oshin/js/vendor/modernizr.min.js
IP
File type HTML document, ASCII text, with very long lines (14412), with no line terminators
Hash f124caf60d1364b0df3862a733234a6e
3b20b723aecbfe38919d28d1191833e3f495b861
66c81554b9f9964001cbd3191b4c1d4082ed9583154f2d7ba0558abfe00abce0
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/oshin/js/vendor/modernizr.min.js HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:32 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:28:14 GMT
ETag: "384c-5b8cc4d5b83bc-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:32 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 5853
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
www.yasseraggour.net/wp-content/themes/oshin/js/vendor/classie.min.js
200 OK 330 B URL HTTP/1.1 www.yasseraggour.net/wp-content/themes/oshin/js/vendor/classie.min.js
IP
File type ASCII text, with very long lines (653), with no line terminators
Hash 79c3ab97e3d8eb09577ed6b46d9ba34a
1fe044a42eb09ba99d4ef0d411536032b47dfe7b
e8edfcb3ad9449340d9cf0de65cc761eaf12388d94892d3bf3aa1d032b40dc0c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/oshin/js/vendor/classie.min.js HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:32 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:28:14 GMT
ETag: "28d-5b8cc4d5b741c-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:32 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 330
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 139d64e28724086d1d5ab6d2f534ff25
2c717905e83564a17bd8ca61dd934133416f629b
a37afafc8ee712ae7ae935d3ed564f3cf46dd09005debbc5e2650f8b434d1e00
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11321
Expires: Wed, 28 Sep 2022 15:20:13 GMT
Date: Wed, 28 Sep 2022 12:11:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 139d64e28724086d1d5ab6d2f534ff25
2c717905e83564a17bd8ca61dd934133416f629b
a37afafc8ee712ae7ae935d3ed564f3cf46dd09005debbc5e2650f8b434d1e00
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11321
Expires: Wed, 28 Sep 2022 15:20:13 GMT
Date: Wed, 28 Sep 2022 12:11:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 139d64e28724086d1d5ab6d2f534ff25
2c717905e83564a17bd8ca61dd934133416f629b
a37afafc8ee712ae7ae935d3ed564f3cf46dd09005debbc5e2650f8b434d1e00
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11321
Expires: Wed, 28 Sep 2022 15:20:13 GMT
Date: Wed, 28 Sep 2022 12:11:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 139d64e28724086d1d5ab6d2f534ff25
2c717905e83564a17bd8ca61dd934133416f629b
a37afafc8ee712ae7ae935d3ed564f3cf46dd09005debbc5e2650f8b434d1e00
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11321
Expires: Wed, 28 Sep 2022 15:20:13 GMT
Date: Wed, 28 Sep 2022 12:11:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 139d64e28724086d1d5ab6d2f534ff25
2c717905e83564a17bd8ca61dd934133416f629b
a37afafc8ee712ae7ae935d3ed564f3cf46dd09005debbc5e2650f8b434d1e00
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11321
Expires: Wed, 28 Sep 2022 15:20:13 GMT
Date: Wed, 28 Sep 2022 12:11:32 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F693de74c-173e-4d9b-8317-35601f30ffd7.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F693de74c-173e-4d9b-8317-35601f30ffd7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ad84ed0c5b2090df7996007514cf1984
651600f2ef18cecc2e38370069bbb5e1d86f68e0
a3d0729e1d43afeadd2dd8273c858b8839d9e476f773c8ec9d96b5969a9e0b4a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F693de74c-173e-4d9b-8317-35601f30ffd7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13299
x-amzn-requestid: 926df8b6-beec-470d-b0b3-33be326cd379
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3UPF8YIAMF3Nw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c1a-343e91e735af43d01fc83ddd;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:33:14 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: fcxclGRP3zfWwb6opjYU2bL9VAq_mCSNjFtfp9iMLq6tbZu57EDqpQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:50:04 GMT
etag: "651600f2ef18cecc2e38370069bbb5e1d86f68e0"
content-type: image/jpeg
age: 51688
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7445e03-094d-46db-8826-9dd6e4d86694.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7445e03-094d-46db-8826-9dd6e4d86694.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c21ecdb581352e1d308477130b4c8504
d08e24264a8860483e76e761d8a7f4e969eda046
2cf56469cf3aaad83ddb52d270658b9fc59ef5dbe99f710bcbf58992abed1fe7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7445e03-094d-46db-8826-9dd6e4d86694.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5196
x-amzn-requestid: 85a783fa-ca3b-4ff9-a5fd-82acfce1c33a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3xUFenoAMFSxQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336cd5-3a67e7e55d700dc0245bb2fc;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:36:21 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 0rABUqFd2EJ4USfCkPlkPGvzUtqllgEXckXBCXbwmk_8aAjP3DxN6A==
via: 1.1 79880188a81becf1687ba18c0e064230.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:57:21 GMT
age: 51251
etag: "d08e24264a8860483e76e761d8a7f4e969eda046"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ffa6dde-b51e-43f8-bfcb-3f442d674928.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ffa6dde-b51e-43f8-bfcb-3f442d674928.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6139c878a7d2bd32c61fc8287996eb5b
9c4692ea64832895fbd107d91f879728b6a440c7
3839df92f0a10c1433d5b576df50c9f7953912ae4f425012262f08ee8a59ce2e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ffa6dde-b51e-43f8-bfcb-3f442d674928.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8500
x-amzn-requestid: 626c21ec-f29b-4b69-b275-c22c864c2409
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3VmENnIAMFeTQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c23-75eccc381fbd6e5d4ff59c06;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:33:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Eyy8qoYVCJbt6b6hTGJ-rOrYex9RuX1InyZbpHkeu9yQqPUEvowKcw==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:48:58 GMT
etag: "9c4692ea64832895fbd107d91f879728b6a440c7"
content-type: image/jpeg
age: 51754
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0369629e-f44d-439f-a279-b5ae6ecc0cf1.png
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0369629e-f44d-439f-a279-b5ae6ecc0cf1.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash aa5cad224dbddd71881bd07255beb4da
bc214d60be395d4cf753216ff8f9691c33d25e75
82935e52aa59929a448d17a5a2d58fda86bb5c25bf6628a05bd904f82517dada
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0369629e-f44d-439f-a279-b5ae6ecc0cf1.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14464
x-amzn-requestid: 5cbbafdb-3f69-4ee2-9e46-c1ff0ed4ef14
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3UPFiooAMFulA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c1a-633a649700e040b91deadb64;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:33:14 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: cNryG5vkxZuFATZfcNW9Z1-0teUBWLRyWslX1onwYlDCQBUjU2xVdA==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:46:03 GMT
age: 51929
etag: "bc214d60be395d4cf753216ff8f9691c33d25e75"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F63a7aeb3-999a-4e57-9255-c40e0376d08e.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F63a7aeb3-999a-4e57-9255-c40e0376d08e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 46e31aa06b8e86a9a5f9ba1cc3feca08
75df3341e30281fcbf78c7074980356fdf0be8e2
d1fd4f81b7e0f43de960f0ee024d9e87bcb395f032a4ab0360e3829d1ec8a42b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F63a7aeb3-999a-4e57-9255-c40e0376d08e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5319
x-amzn-requestid: 74191b02-ebea-48bd-8522-f05bf8080f31
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFlOKFtsIAMFyGQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321bf4-1f2daa9d7906bf9812e10953;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:39:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Y0gjPs-l9_JD9F-LSH_i1uL2Nz0UcWCG-9PmDmRH8cN_cNAeSchJTA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:32:06 GMT
age: 52766
etag: "75df3341e30281fcbf78c7074980356fdf0be8e2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad593ee0-d404-46e3-b129-229e09b263b0.png
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad593ee0-d404-46e3-b129-229e09b263b0.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4b794c6812cb546de0295e087ebe66a7
a54803cca7d3c509c195f65961e1110c8ec56f55
6a207f75eb3951f3dea5252bc8d185cd604d3d657f15b838774e8087e91f37f5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad593ee0-d404-46e3-b129-229e09b263b0.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12016
x-amzn-requestid: ec1b3715-5d0f-4045-aa5b-b70a55c81d72
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e3EtyIAMFdZg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5e-201dd1ef1426a09965c68dab;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: pR4b1-lZZRMnWf-PdXFGXaHBCGAfOyp3AjeuCvtu5imWmf9N9l2wKQ==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:48:38 GMT
age: 51774
etag: "a54803cca7d3c509c195f65961e1110c8ec56f55"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.yasseraggour.net/wp-content/themes/oshin/js/vendor/old_menu_animation.min.js
200 OK 1.7 kB URL HTTP/1.1 www.yasseraggour.net/wp-content/themes/oshin/js/vendor/old_menu_animation.min.js
IP
File type ASCII text, with very long lines (7585), with no line terminators
Hash 0d2dba9131f20afa231d30d959171be6
043d195d5ea7b75a0df2814ccbfdfffbdda3c46c
f04f3f5deedda56b330770aeae7044e4fa03489beea231ecd39d34e57aaa973b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/oshin/js/vendor/old_menu_animation.min.js HTTP/1.1
Host: www.yasseraggour.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yasseraggour.net/krbk-springfield/coconut-layer-cake-near-me
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 12:11:32 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 18:28:14 GMT
ETag: "1da1-5b8cc4d5b935c-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 28 Oct 2022 12:11:32 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1713
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript
cdn.weatherplllatform.com/result.js?v=000
200 OK 2.1 kB URL HTTP/2 cdn.weatherplllatform.com/result.js?v=000
IP
ASN #206638 PE Brezhnev Daniil
File type ASCII text, with very long lines (6188), with no line terminators
Hash d868962b4e4d69fd837a3e1556c7381b
b8652d5ae1fb0f2d0fd0c5743a53c838a4a392ae
675e3090a5bd969bd83b2db91451dcb981568b53f63b383069b92fd5eb305170
GET /result.js?v=000 HTTP/1.1
Host: cdn.weatherplllatform.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.yasseraggour.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 28 Sep 2022 12:11:32 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 26 Sep 2022 14:46:59 GMT
vary: Accept-Encoding
etag: W/"6331bb63-182c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=15768000;
content-encoding: gzip
X-Firefox-Spdy: h2
away.bettershitecolumn.com/track.php?nid=54889&yid=9554-66-457679-29
302 Found 0 B URL HTTP/2 away.bettershitecolumn.com/track.php?nid=54889&yid=9554-66-457679-29
IP
ASN #206638 PE Brezhnev Daniil
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /track.php?nid=54889&yid=9554-66-457679-29 HTTP/1.1
Host: away.bettershitecolumn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.yasseraggour.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 28 Sep 2022 12:11:33 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://away.bettershitecolumn.com/track.php?tid=54889&lid=9554-66-457679-29
x-powered-by: PHP/7.3.33
strict-transport-security: max-age=15768000;
X-Firefox-Spdy: h2
away.bettershitecolumn.com/track.php?tid=54889&lid=9554-66-457679-29
200 OK 816 B URL HTTP/2 away.bettershitecolumn.com/track.php?tid=54889&lid=9554-66-457679-29
IP
ASN #206638 PE Brezhnev Daniil
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 70889a1ea5f735dd017171320754e238
a342fad45ba4dabf184e38bbedc4d00459b4487c
f3674c84c4eb6cf4597027b557afba4d5c5dbc27a13418bad878b9fef7c048dd
Analyzer Verdict Alert quad9 Sinkholed
GET /track.php?tid=54889&lid=9554-66-457679-29 HTTP/1.1
Host: away.bettershitecolumn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.yasseraggour.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 28 Sep 2022 12:11:34 GMT
content-type: text/html; charset=UTF-8
content-length: 816
vary: Accept-Encoding
x-powered-by: PHP/7.3.33
strict-transport-security: max-age=15768000;
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9a669944aee7bfc47b01f6e6ba63a44a
7e5d7b1c8746cbc9bbc33799def9c1ccc046f215
5a2eaae890aa00169d6c3e523a9c448b75e02f5a6cadbdd85eb5a909027bf349
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5A2EAAE890AA00169D6C3E523A9C448B75E02F5A6CADBDD85EB5A909027BF349"
Last-Modified: Tue, 27 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2176
Expires: Wed, 28 Sep 2022 12:47:50 GMT
Date: Wed, 28 Sep 2022 12:11:34 GMT
Connection: keep-alive
silverlinetogther.net/go/he2tszrzmq5dcmbugayq?sub2=dpicer4
200 OK 18 kB URL HTTP/2 silverlinetogther.net/go/he2tszrzmq5dcmbugayq?sub2=dpicer4
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (7731)
Hash f784e7e57f0d235e00bd42271690fc28
130558c299f9e15f8197d17d0dfdfd5fd2982fa8
dd51ab9d69e168a4576a0da940c9be172487914e3d020791cbfb6be4cdd3f7b7
GET /go/he2tszrzmq5dcmbugayq?sub2=dpicer4 HTTP/1.1
Host: silverlinetogther.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://away.bettershitecolumn.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 28 Sep 2022 12:11:34 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
set-cookie: uuid=8ae082db-2821-456c-9205-33cd0c7d031c; expires=Fri, 28-Oct-2022 12:11:34 GMT; Max-Age=2592000; path=/; domain=silverlinetogther.net
strict-transport-security: max-age=31536000
content-security-policy: img-src https: data:; upgrade-insecure-requests
X-Firefox-Spdy: h2
silverlinetogther.net/favicon.ico
204 No Content 0 B URL HTTP/2 silverlinetogther.net/favicon.ico
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: silverlinetogther.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://silverlinetogther.net/go/he2tszrzmq5dcmbugayq?sub2=dpicer4
Cookie: uuid=8ae082db-2821-456c-9205-33cd0c7d031c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Wed, 28 Sep 2022 12:11:34 GMT
strict-transport-security: max-age=31536000
content-security-policy: img-src https: data:; upgrade-insecure-requests
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fc26ff659a860bcd281f915dd2bed0c1
0577a80461741034a8fdedeff9155a820a38f2c4
2d29f63de5979404d46e782b454461582c9062d69463e7d2345a7819958695d4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2D29F63DE5979404D46E782B454461582C9062D69463E7D2345A7819958695D4"
Last-Modified: Tue, 27 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10330
Expires: Wed, 28 Sep 2022 15:03:44 GMT
Date: Wed, 28 Sep 2022 12:11:34 GMT
Connection: keep-alive
0.silverlinetogther.net/index.php?p=he2tszrzmq5dcmbugayq&sub2=dpicer4
200 OK 12 kB URL HTTP/2 0.silverlinetogther.net/index.php?p=he2tszrzmq5dcmbugayq&sub2=dpicer4
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (7729)
Hash 7f6d1b4db5144fc5481e33e335b378bd
945f952fb83cc4f7fc319d6a8efb5219b5953c17
23ca053d9a576602403c56d613a08115ce5815e402f9a70b3088189db08dfdcc
GET /index.php?p=he2tszrzmq5dcmbugayq&sub2=dpicer4 HTTP/1.1
Host: 0.silverlinetogther.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://silverlinetogther.net/
Cookie: uuid=8ae082db-2821-456c-9205-33cd0c7d031c
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 28 Sep 2022 12:11:35 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
set-cookie: uuid=8ae082db-2821-456c-9205-33cd0c7d031c; expires=Fri, 28-Oct-2022 12:11:35 GMT; Max-Age=2592000; path=/; domain=0.silverlinetogther.net
strict-transport-security: max-age=31536000
content-security-policy: img-src https: data:; upgrade-insecure-requests
X-Firefox-Spdy: h2
0.silverlinetogther.net/favicon.ico
204 No Content 0 B URL HTTP/2 0.silverlinetogther.net/favicon.ico
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: 0.silverlinetogther.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://0.silverlinetogther.net/index.php?p=he2tszrzmq5dcmbugayq&sub2=dpicer4
Cookie: uuid=8ae082db-2821-456c-9205-33cd0c7d031c; uuid=8ae082db-2821-456c-9205-33cd0c7d031c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Wed, 28 Sep 2022 12:11:35 GMT
strict-transport-security: max-age=31536000
content-security-policy: img-src https: data:; upgrade-insecure-requests
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 90cd30a4529be222738d4911b00df969
bfaa6dbeb50cddf1f30a961886fdfe19f3c83bbb
38d0c553af103992efe5decef04a08884be9292dc095792c9897f56334a5fc5d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "38D0C553AF103992EFE5DECEF04A08884BE9292DC095792C9897F56334A5FC5D"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2934
Expires: Wed, 28 Sep 2022 13:00:29 GMT
Date: Wed, 28 Sep 2022 12:11:35 GMT
Connection: keep-alive
browork3er.cc/sw/bro.js
200 OK 1.4 kB IP
Hash 57b44c6c58640afa1dbc8ea67a60dfd9
2a94bc42bbe9487e11514c56920713b98e287ea5
abf988b1596979ad8ef5719d82e2c159a2fb4023e174339344e972a74a554e5d
GET /sw/bro.js HTTP/1.1
Host: browork3er.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://0.silverlinetogther.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 28 Sep 2022 12:11:35 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
expires: Thu, 28 Sep 2023 12:11:35 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
content-security-policy: img-src https: data:; upgrade-insecure-requests
X-Firefox-Spdy: h2
di4.biz/?auf=gbsgcntgme5dcnrqgixtcmbugays6mjzf44tgm3eguztmyrpgi2c6mjwgy2dgnrxga4tk&p=b&sub1=&sub2=dpicer4&sub3=&sub4=&cpc=0&cpm=0
200 OK 0 B URL HTTP/2 di4.biz/?auf=gbsgcntgme5dcnrqgixtcmbugays6mjzf44tgm3eguztmyrpgi2c6mjwgy2dgnrxga4tk&p=b&sub1=&sub2=dpicer4&sub3=&sub4=&cpc=0&cpm=0
IP
ASN #39572 DataWeb Global Group B.V.
Analyzer Verdict Alert quad9 Sinkholed
GET /?auf=gbsgcntgme5dcnrqgixtcmbugays6mjzf44tgm3eguztmyrpgi2c6mjwgy2dgnrxga4tk&p=b&sub1=&sub2=dpicer4&sub3=&sub4=&cpc=0&cpm=0 HTTP/1.1
Host: di4.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://0.silverlinetogther.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 28 Sep 2022 12:11:35 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
set-cookie: uuid=a084f813-f3ae-4df9-abb0-f5280e917de5; expires=Fri, 28-Oct-2022 12:11:35 GMT; Max-Age=2592000; path=/
strict-transport-security: max-age=31536000
content-security-policy: img-src https: data:; upgrade-insecure-requests
X-Firefox-Spdy: h2
browork3er.cc/sw/bro.js
200 OK 0 B IP
GET /sw/bro.js HTTP/1.1
Host: browork3er.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://silverlinetogther.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 28 Sep 2022 12:11:34 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
expires: Thu, 28 Sep 2023 12:11:34 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
content-security-policy: img-src https: data:; upgrade-insecure-requests
X-Firefox-Spdy: h2
208.113.222.9
91.211.91.112
93.184.220.29
23.36.77.32
212.129.18.219