r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 96367f956a4177aec7e7e80221539d58
8dcad10fde96c139d1ef212388cb6755fe3fe077
f4f9bdb5180359dfd734cef1e6f1b54bc9d8f72cae557366eb74f22100b94dc4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F4F9BDB5180359DFD734CEF1E6F1B54BC9D8F72CAE557366EB74F22100B94DC4"
Last-Modified: Thu, 15 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16446
Expires: Sat, 17 Dec 2022 17:43:20 GMT
Date: Sat, 17 Dec 2022 13:09:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ae86164fd9297dfdc05d67d69284d70e
5e5f27e3fd492f715baa6820f05c0fafde4040b3
be20f6ae6a51d20611cb4d350b52a5d0a339af6722fe9b2482ef58826c1e9de0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BE20F6AE6A51D20611CB4D350B52A5D0A339AF6722FE9B2482EF58826C1E9DE0"
Last-Modified: Thu, 15 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2189
Expires: Sat, 17 Dec 2022 13:45:43 GMT
Date: Sat, 17 Dec 2022 13:09:14 GMT
Connection: keep-alive
www.byamukama.com/
301 Moved Permanently 0 B IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: www.byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Dec 2022 13:09:14 GMT
Server: nginx/1.23.2
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
X-Redirect-By: WordPress
Location: https://www.byamukama.com/
X-Endurance-Cache-Level: 2
X-nginx-cache: WordPress
X-Server-Cache: true
X-Proxy-Cache: MISS
Set-Cookie: PHPSESSID=453aa3cccf0a4a46ea77fcafc0febcfa; path=/; secure; HttpOnly
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 17 Dec 2022 12:34:10 GMT
content-type: application/json
age: 2104
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 555fc6e99ad3bf077d1c4b9b805e428d
4e800fc8e809a950288df0e94992084647762561
fac00cada519279717e2a13528cb202d292fc92ed5eb42782c41f8e7b9509eaf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FAC00CADA519279717E2A13528CB202D292FC92ED5EB42782C41F8E7B9509EAF"
Last-Modified: Fri, 16 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4474
Expires: Sat, 17 Dec 2022 14:23:48 GMT
Date: Sat, 17 Dec 2022 13:09:14 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: cOP1nwwcxFQ+AxkD2l8DimiUS8BLtC9qLiZd1OmzvQdBiePNh6MzYgApLxep4OK22HeeEOOqBY06p8MUEM9QGg==
x-amz-request-id: TMTK1AK9XQKB7AP6
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 17 Dec 2022 12:53:39 GMT
age: 935
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 13:09:14 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Backoff, Content-Length, Pragma, Alert, Expires, Last-Modified, Retry-After, ETag, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 17 Dec 2022 13:08:00 GMT
age: 75
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash de513736d9547b9dedefdcdee4a58934
ec313f96901a2c704d6972330cc606238db91185
0a1f8368f8d4c324f36415b55527c151d6418bd6d624ef228b069feb5899270a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0A1F8368F8D4C324F36415B55527C151D6418BD6D624EF228B069FEB5899270A"
Last-Modified: Fri, 16 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21490
Expires: Sat, 17 Dec 2022 19:07:25 GMT
Date: Sat, 17 Dec 2022 13:09:15 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 2d1752cd6eb7f48e7494373911a5b996
43d9c23c4d03cccce0fc478f0e12c0874dc762fd
aded7fd1d638c001b0b462fdfeee0549d2ed61b51ced88eb83690e2e20ed36d8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2189
Cache-Control: max-age=160445
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 13:09:15 GMT
Etag: "639d86ab-1d7"
Expires: Mon, 19 Dec 2022 09:43:20 GMT
Last-Modified: Sat, 17 Dec 2022 09:06:51 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 280 B IP
Hash 46d5ddccf708d1e5c5c659a928a881ae
54cf5b01a1f9cd6fdd7e2f87085c8f7bb18aca09
aa7c526867f352860bb0bb8dae4f2663143a082c28701011a6cf08e48298ca8a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1431
Cache-Control: max-age=152152
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 13:09:15 GMT
Etag: "639d693c-118"
Expires: Mon, 19 Dec 2022 07:25:07 GMT
Last-Modified: Sat, 17 Dec 2022 07:01:16 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 280
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 385bad1390edf4dc694548a3f7b16281
57536fa694ef8306c436a37dbfc2f82af2344120
e6ad8e17f7b82dc9b46e5e99a73b59fa284fa72cf737dada269da9cf856b7736
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 13:09:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 385bad1390edf4dc694548a3f7b16281
57536fa694ef8306c436a37dbfc2f82af2344120
e6ad8e17f7b82dc9b46e5e99a73b59fa284fa72cf737dada269da9cf856b7736
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 13:09:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b56a3548738502fa3cc2d975411a7900
e6584e903da8e7e6062fd14d0c927495f6819b83
8b4ed97669a9d9a093cb9b4c92f1676681ea9c279ac47105042fa922bb32057b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 13:09:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 385bad1390edf4dc694548a3f7b16281
57536fa694ef8306c436a37dbfc2f82af2344120
e6ad8e17f7b82dc9b46e5e99a73b59fa284fa72cf737dada269da9cf856b7736
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 13:09:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
byamukama.com/wp-content/plugins/LayerSlider/static/css/layerslider.css?ver=5.6.2
200 OK 4.0 kB URL HTTP/2 byamukama.com/wp-content/plugins/LayerSlider/static/css/layerslider.css?ver=5.6.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 2f910db065a31f59f4310cebfd9d1c3e
b43ba621373edcbfcbb3401d894d3d62254dbbbd
48f6c9ac893f3ffe11b70262cb4f7a34d93d57ccc8b6b791b1a9ebe08c734bb6
GET /wp-content/plugins/LayerSlider/static/css/layerslider.css?ver=5.6.2 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Apr 2017 22:14:58 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Mon, 16 Jan 2023 13:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 3960
content-type: text/css
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-includes/css/dist/block-library/style.min.css?ver=5.8.6
200 OK 15 kB URL HTTP/2 byamukama.com/wp-includes/css/dist/block-library/style.min.css?ver=5.8.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (33376)
Hash 6ebc7a4d773cb1f29a93f605933fba76
b113ca39afc5fd44cbc06dca58945bb5e9fb771e
7a12133f8cb48c1b5b4631ee9e9a0eebe36bbf2bbe1eb792b0f9fc630c18bd76
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.8.6 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 06 Dec 2021 04:45:39 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Mon, 16 Jan 2023 13:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 14560
content-type: text/css
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-content/plugins/official-mailerlite-sign-up-forms/assets/css/mailerlite_forms.css?ver=1.4.6
200 OK 265 B URL HTTP/2 byamukama.com/wp-content/plugins/official-mailerlite-sign-up-forms/assets/css/mailerlite_forms.css?ver=1.4.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 001dc9ea9e34f0f142dbd1e75e1f19c2
250fc7c5cee870f06c030313daf3f2ceb27716af
832c2660dab4db3eb483ba0dd3323236a1098deec36fe8996b6a6ee9f1ecd914
GET /wp-content/plugins/official-mailerlite-sign-up-forms/assets/css/mailerlite_forms.css?ver=1.4.6 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 11 Jun 2020 10:38:44 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Mon, 16 Jan 2023 13:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 265
content-type: text/css
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 46d5ddccf708d1e5c5c659a928a881ae
54cf5b01a1f9cd6fdd7e2f87085c8f7bb18aca09
aa7c526867f352860bb0bb8dae4f2663143a082c28701011a6cf08e48298ca8a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1431
Cache-Control: max-age=152152
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 13:09:15 GMT
Etag: "639d693c-118"
Expires: Mon, 19 Dec 2022 07:25:07 GMT
Last-Modified: Sat, 17 Dec 2022 07:01:16 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 280
maps.google.com/maps/api/js?key&ver=5.8.6
200 OK 53 kB URL HTTP/2 maps.google.com/maps/api/js?key&ver=5.8.6
IP
File type ASCII text, with very long lines (2342)
Hash 84a35a4e014d22e68550499f8294bad5
1c37871eede93dc03f1fe570f7ec5cde441ca940
c9c38c618aadd1409f9d70905db01c6f41599b39ee55477adadff01ea21cd5ef
GET /maps/api/js?key&ver=5.8.6 HTTP/1.1
Host: maps.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
date: Sat, 17 Dec 2022 13:09:15 GMT
expires: Sat, 17 Dec 2022 13:39:15 GMT
cache-control: public, max-age=1800
vary: Accept-Language
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 53431
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=11
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: +Q2pJhEopWmcBejXzIRpuQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: d6z3sGF4D6gUR4LQYt2th1bK6Ak=
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 385bad1390edf4dc694548a3f7b16281
57536fa694ef8306c436a37dbfc2f82af2344120
e6ad8e17f7b82dc9b46e5e99a73b59fa284fa72cf737dada269da9cf856b7736
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 13:09:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b56a3548738502fa3cc2d975411a7900
e6584e903da8e7e6062fd14d0c927495f6819b83
8b4ed97669a9d9a093cb9b4c92f1676681ea9c279ac47105042fa922bb32057b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 13:09:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
byamukama.com/wp-content/plugins/monarch/css/style.css?ver=1.3.4
200 OK 18 kB URL HTTP/2 byamukama.com/wp-content/plugins/monarch/css/style.css?ver=1.3.4
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (718)
Hash ccf808c0b454548b60df194976805618
30f8d05e43c4a198acf2c70435aadeaf19446887
04bbe211c97d3100e6402b253f732a0ee92902320985afab0d0bc5b935add6b8
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/monarch/css/style.css?ver=1.3.4 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 01 May 2017 12:08:59 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Mon, 16 Jan 2023 13:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 17923
content-type: text/css
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-content/plugins/tk-shortcodes/public/css/tk-shortcodes-public.css?ver=2.0.0
200 OK 4.7 kB URL HTTP/2 byamukama.com/wp-content/plugins/tk-shortcodes/public/css/tk-shortcodes-public.css?ver=2.0.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (684)
Hash 5ad67af65dde22ea4e17c9c12cebd426
888ce970c00f876e6f0a61cd91e71319ee0f2779
43102c892282ae0b5f554edced958462318e03b1110e1676ac0b9d52086d2c86
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/tk-shortcodes/public/css/tk-shortcodes-public.css?ver=2.0.0 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 28 Apr 2017 11:31:36 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Mon, 16 Jan 2023 13:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 4668
content-type: text/css
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-content/themes/huntt/huntt/js/fancybox/fancybox.css?ver=5.8.6
200 OK 1.7 kB URL HTTP/2 byamukama.com/wp-content/themes/huntt/huntt/js/fancybox/fancybox.css?ver=5.8.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 48a9b9e5c607c3248003cecf57c595e6
1e915fef70d4f4894ff33f92d41f064ecc3587b6
eb7cd04c84cc77d851be03f87fb79cfb72db355ace4024641d20dcbcd89842e2
GET /wp-content/themes/huntt/huntt/js/fancybox/fancybox.css?ver=5.8.6 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 28 Apr 2017 11:25:43 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Mon, 16 Jan 2023 13:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1662
content-type: text/css
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-content/themes/huntt/huntt/layouts/icons.css?ver=5.8.6
200 OK 856 B URL HTTP/2 byamukama.com/wp-content/themes/huntt/huntt/layouts/icons.css?ver=5.8.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 7aa946b342401bc1d128dfca034d5dd4
37dad444630ed35035202436c57700a16173180f
f4ba8731099c746bfe78db6967641dd454d4eee69fe9099e71ed38c74d9460a1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/huntt/huntt/layouts/icons.css?ver=5.8.6 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 28 Apr 2017 11:25:29 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Mon, 16 Jan 2023 13:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 856
content-type: text/css
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-content/themes/huntt/huntt/layouts/jquery.mCustomScrollbar.min.css?ver=5.8.6
200 OK 6.5 kB URL HTTP/2 byamukama.com/wp-content/themes/huntt/huntt/layouts/jquery.mCustomScrollbar.min.css?ver=5.8.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (43184), with no line terminators
Hash 17fda83709494b2fc3ee465cd97c6c86
28f7165fc97c6c51e7d96f475794b14327a0dcf6
18f17f071f0e912f488b2e2aa3e1e4c73f6c5312ca144571bdc34817231692af
GET /wp-content/themes/huntt/huntt/layouts/jquery.mCustomScrollbar.min.css?ver=5.8.6 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 28 Apr 2017 11:25:30 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Mon, 16 Jan 2023 13:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 6472
content-type: text/css
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-content/themes/huntt/huntt/inc/apis/live-ajax-search/assets/styles/style.css?ver=1.1
200 OK 388 B URL HTTP/2 byamukama.com/wp-content/themes/huntt/huntt/inc/apis/live-ajax-search/assets/styles/style.css?ver=1.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash b274a6927c7c63b6d18b6688ad758ccc
09af0be3c3b50a0cbfd21e76bd234540d1745b60
b14906ea209e73a3c353e9f6b4eec2d03b533bbbb99382284d77ea6093855e85
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/huntt/huntt/inc/apis/live-ajax-search/assets/styles/style.css?ver=1.1 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 28 Apr 2017 11:29:00 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Mon, 16 Jan 2023 13:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 388
content-type: text/css
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-content/plugins/LayerSlider/static/js/layerslider.transitions.js?ver=5.6.2
200 OK 3.4 kB URL HTTP/2 byamukama.com/wp-content/plugins/LayerSlider/static/js/layerslider.transitions.js?ver=5.6.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (20890)
Hash 34e1dde2e4596e176bdd461abd8c51d9
3c8472ee181bfa0d149d7efd732753af5555657e
1af1fd1b2dc3ebbdbeb7d4dde91405130a05e58449b316749f12128940add38b
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/LayerSlider/static/js/layerslider.transitions.js?ver=5.6.2 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Apr 2017 22:14:58 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 17 Dec 2022 19:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 3421
content-type: application/javascript
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-content/plugins/tk-shortcodes/public/js/tk-shortcodes-public.js?ver=2.0.0
200 OK 1.1 kB URL HTTP/2 byamukama.com/wp-content/plugins/tk-shortcodes/public/js/tk-shortcodes-public.js?ver=2.0.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 23a2e88740a88218b19670eb434ca653
7b77ce5a7ab3f9e4bbd080b044e708c956e8fa46
19c6ef059039ca2d460a34beaf829617b9453fb98a0e689cc708f3fff2beb2a7
GET /wp-content/plugins/tk-shortcodes/public/js/tk-shortcodes-public.js?ver=2.0.0 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 28 Apr 2017 11:31:36 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 17 Dec 2022 19:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1138
content-type: application/javascript
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-includes/js/wp-emoji-release.min.js?ver=5.8.6
200 OK 5.2 kB URL HTTP/2 byamukama.com/wp-includes/js/wp-emoji-release.min.js?ver=5.8.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (15224)
Hash 00af0ddf324f69fcb25f0d2e5d08910a
df0379ab0e1b2902957c8aba77f89d88e1239b59
f0a06ed3b8d3917b358def04d87668001cd1c6da31a5cb4bb452313feb64a2a7
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.8.6 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 06 Dec 2021 04:45:39 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 17 Dec 2022 19:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 5243
content-type: application/javascript
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-content/plugins/monarch/js/idle-timer.min.js?ver=1.3.4
200 OK 1.0 kB URL HTTP/2 byamukama.com/wp-content/plugins/monarch/js/idle-timer.min.js?ver=1.3.4
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2400)
Hash 98ed8e29cece236591351e447a3ee7ae
0bdddc45d95f4bb96f02eb76e6ecfc6e2ca16a62
0295caa344a691f2eff3bf92e9dd74714c25c5c5f36495045359bdf0081f06d6
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/monarch/js/idle-timer.min.js?ver=1.3.4 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 01 May 2017 12:09:03 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 17 Dec 2022 19:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1008
content-type: application/javascript
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-includes/js/jquery/ui/tabs.min.js?ver=1.12.1
200 OK 4.7 kB URL HTTP/2 byamukama.com/wp-includes/js/jquery/ui/tabs.min.js?ver=1.12.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (11738)
Hash e75316d4188ff262734321ba233f94d9
7dcac4408194b7e1faa68a94938111059820fc6b
06af2a413b8586dda3634d04e439fff7045855ca680fdf724e38e77fcba05257
GET /wp-includes/js/jquery/ui/tabs.min.js?ver=1.12.1 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 06 Dec 2021 04:45:40 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 17 Dec 2022 19:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 4746
content-type: application/javascript
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-includes/js/imagesloaded.min.js?ver=4.1.4
200 OK 2.1 kB URL HTTP/2 byamukama.com/wp-includes/js/imagesloaded.min.js?ver=4.1.4
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (5477)
Hash f0bd7ad12acdee26cbb2701c1ba3610b
53c5d15129860868b60b74cb010b2c6050a64f69
e6d0cb19e56d22e8e511c23ca2bd233bedb40e3c7cf4ff38fe6f059bc7e0c64f
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 06 Dec 2021 04:45:39 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 17 Dec 2022 19:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 2103
content-type: application/javascript
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-content/plugins/monarch/js/custom.js?ver=1.3.4
200 OK 7.6 kB URL HTTP/2 byamukama.com/wp-content/plugins/monarch/js/custom.js?ver=1.3.4
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (351)
Hash acccf6353f28783b529a159c1db57856
ecb8ba053c652080c0c1e6532061008cf0a800a4
9bb52e68a6d7e925296604a5d6622673c9107e4f29aa0b9bb7987b0a9644760b
GET /wp-content/plugins/monarch/js/custom.js?ver=1.3.4 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 01 May 2017 12:09:03 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 17 Dec 2022 19:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 7606
content-type: application/javascript
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-content/themes/huntt/huntt/js/fancybox/helpers/jquery.fancybox-media.js?ver=5.8.6
200 OK 2.1 kB URL HTTP/2 byamukama.com/wp-content/themes/huntt/huntt/js/fancybox/helpers/jquery.fancybox-media.js?ver=5.8.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 733fa04ec3f525a0940cf3a8a6072c0f
4f701e75fa37845d24db9f57aa16c1581634e423
710ceebdffbdb3d0dc5e231b48548202c27c59b3cd2f1d8d27007256e8665b51
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/huntt/huntt/js/fancybox/helpers/jquery.fancybox-media.js?ver=5.8.6 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 28 Apr 2017 11:26:07 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 17 Dec 2022 19:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 2105
content-type: application/javascript
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-content/themes/huntt/huntt/js/infinite-scroll/infinite-scroll.min.js?ver=5.8.6
200 OK 13 kB URL HTTP/2 byamukama.com/wp-content/themes/huntt/huntt/js/infinite-scroll/infinite-scroll.min.js?ver=5.8.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (20834)
Hash 69b16649747ad7c768132e5fe9b6c393
90206e983de122cdc7c56aa596179cd32de76b64
a03e4ae1d262922f1a18cbcd53987281430dfe5a598389f401f8bd774be295ba
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/huntt/huntt/js/infinite-scroll/infinite-scroll.min.js?ver=5.8.6 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 28 Apr 2017 11:25:51 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 17 Dec 2022 19:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 12976
content-type: application/javascript
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-content/themes/huntt/huntt/js/navigation.js?ver=20120206
200 OK 438 B URL HTTP/2 byamukama.com/wp-content/themes/huntt/huntt/js/navigation.js?ver=20120206
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash fc5c38525941160675e0ef9d8ca5ad9d
98d717f655f89f1af5b2090992a0f20c75ef8e8f
9e7a3889ce6aa13da2c20f66b2747d897ea0437d682aa5266b0caf73ab03d423
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/huntt/huntt/js/navigation.js?ver=20120206 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 28 Apr 2017 11:25:26 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 17 Dec 2022 19:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 438
content-type: application/javascript
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-includes/js/jquery/ui/core.min.js?ver=1.12.1
200 OK 8.2 kB URL HTTP/2 byamukama.com/wp-includes/js/jquery/ui/core.min.js?ver=1.12.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (7973)
Hash 6e3b0317803aa9f226979ad7a7e77593
c95b4f532fd03f3754bf63139a57aab65fbe8a25
84520e8f7a292cb992fa9c62932245f598c6fa043fd4e19eadb6ad9a767dca6f
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.12.1 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 06 Dec 2021 04:45:40 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 17 Dec 2022 19:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 8223
content-type: application/javascript
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-content/uploads/2017/04/Byamukama-Logo-Retina-01.png
200 OK 27 kB URL HTTP/2 byamukama.com/wp-content/uploads/2017/04/Byamukama-Logo-Retina-01.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 782 x 393, 8-bit/color RGBA, non-interlaced\012- data
Hash a172be76c4729a7a907158bdc7f93816
d99f784588d1ed760aa3990606c252c8d87dbfdf
ab62bbbe09d3971a84d1824083f5bba5e69e9ee6324d78a8b44b821ff47999b9
GET /wp-content/uploads/2017/04/Byamukama-Logo-Retina-01.png HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 29 Apr 2017 08:48:25 GMT
accept-ranges: bytes
content-length: 27268
cache-control: max-age=31536000
expires: Sun, 17 Dec 2023 13:09:15 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/png
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-content/themes/huntt/huntt/js/mcustomscrollbar/jquery.mCustomScrollbar.concat.min.js?ver=5.8.6
200 OK 16 kB URL HTTP/2 byamukama.com/wp-content/themes/huntt/huntt/js/mcustomscrollbar/jquery.mCustomScrollbar.concat.min.js?ver=5.8.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (32108)
Hash fb68056c075358107080799b278809f5
94b94da4be885a77adfb80ca3d9eae261e4527a0
44cdbc6edacc41b2c4f6a3cc53bff07a6eb2ce2e85bcec12b807f3454732e62f
GET /wp-content/themes/huntt/huntt/js/mcustomscrollbar/jquery.mCustomScrollbar.concat.min.js?ver=5.8.6 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 28 Apr 2017 11:25:51 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 17 Dec 2022 19:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 15857
content-type: application/javascript
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-includes/js/wp-embed.min.js?ver=5.8.6
200 OK 777 B URL HTTP/2 byamukama.com/wp-includes/js/wp-embed.min.js?ver=5.8.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1391)
Hash 06ece4d01ee88297957c9f4cdcaa4df5
2b3321654a8ead1e1493eac9b5f1fdfb65e2037f
0b17eb6ab02e69f50ac52ca157375bd69853ae4f4796eb48a35eb4a12fc7af8b
GET /wp-includes/js/wp-embed.min.js?ver=5.8.6 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Apr 2021 03:46:20 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 17 Dec 2022 19:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 777
content-type: application/javascript
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-content/themes/huntt/huntt/js/fancybox/fancybox.pack.js?ver=5.8.6
200 OK 10 kB URL HTTP/2 byamukama.com/wp-content/themes/huntt/huntt/js/fancybox/fancybox.pack.js?ver=5.8.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (645)
Hash 044b6bfd4fde3124f72eb20a984516ad
dcc4f52687b9d058c9a5e5268ee45e25575fd963
5430ab8c730223d31b9350d2735eb11b8fb9d5594d61dbe653957fa34a967131
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/huntt/huntt/js/fancybox/fancybox.pack.js?ver=5.8.6 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 28 Apr 2017 11:25:44 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 17 Dec 2022 19:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 10428
content-type: application/javascript
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-content/plugins/wp-spamshield/js/jscripts-ftr-min.js
200 OK 676 B URL HTTP/2 byamukama.com/wp-content/plugins/wp-spamshield/js/jscripts-ftr-min.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1216), with no line terminators
Hash d781bf2fda022bf8976c0ba08ff2e6f5
591718946345a965c3fe73b6779fad26e16f3a5c
360a839fa3fe3e62063976979f602e6748529a77c783f073028ed5874d472a1c
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wp-spamshield/js/jscripts-ftr-min.js HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 28 Oct 2017 04:13:57 GMT
accept-ranges: bytes
cache-control: max-age=15552000, must-revalidate
expires: Sun, 17 Dec 2023 13:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 676
content-type: application/javascript
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-content/themes/huntt/huntt/js/skip-link-focus-fix.js?ver=20130115
200 OK 379 B URL HTTP/2 byamukama.com/wp-content/themes/huntt/huntt/js/skip-link-focus-fix.js?ver=20130115
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash b1f6fbeb350edd1c0abe2caa7940fa93
a5e1adadf006f39bc28e401d2f2317d9c8ca9217
df972baac69f7bb098b9e79ae1c183643d9bc71733c650b9be434bc8788f0de8
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/huntt/huntt/js/skip-link-focus-fix.js?ver=20130115 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 28 Apr 2017 11:25:26 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 17 Dec 2022 19:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 379
content-type: application/javascript
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-content/plugins/official-mailerlite-sign-up-forms/assets/js/jquery.validate.min.js?ver=5.8.6
200 OK 8.3 kB URL HTTP/2 byamukama.com/wp-content/plugins/official-mailerlite-sign-up-forms/assets/js/jquery.validate.min.js?ver=5.8.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (21388)
Hash fdc851bce927c55f9135e8d104a93a30
b78fc33508087118cb69fd672ea5c54b0bcac700
8daac0f6b693de77f9eebc3b8878e561f52b51299e4fe13b563c4e936706cff8
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/official-mailerlite-sign-up-forms/assets/js/jquery.validate.min.js?ver=5.8.6 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 11 Jun 2020 10:38:44 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 17 Dec 2022 19:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 8263
content-type: application/javascript
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-content/themes/huntt/huntt/inc/apis/live-ajax-search/assets/javascript/searchwp-live-search.min.js?ver=1.1
200 OK 3.7 kB URL HTTP/2 byamukama.com/wp-content/themes/huntt/huntt/inc/apis/live-ajax-search/assets/javascript/searchwp-live-search.min.js?ver=1.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (8040), with no line terminators
Hash 1fc57c807321fe5ac766540df1507558
b354b55e11ba02cafb2103fcdcbcfc2a0b9f31ce
c4e62aa8a572e2668f31084bba123a58a99410a3afa5f41ea631ef7012a343f0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/huntt/huntt/inc/apis/live-ajax-search/assets/javascript/searchwp-live-search.min.js?ver=1.1 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 28 Apr 2017 11:29:00 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 17 Dec 2022 19:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 3697
content-type: application/javascript
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.6 kB URL HTTP/2 byamukama.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (11126)
Hash acdb97105af28a7066790c6748ae2e1e
65794d2c5a9d04f747faf370bc8bacd330e69e5a
dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 06 Dec 2021 04:45:40 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 17 Dec 2022 19:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 4618
content-type: application/javascript
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-content/themes/huntt/huntt/js/common.js?ver=5.8.6
200 OK 8.1 kB URL HTTP/2 byamukama.com/wp-content/themes/huntt/huntt/js/common.js?ver=5.8.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text
Hash e4672e81b7397ded1ff92debc33d0c59
677f684108c8ad94befea8d3d62b1e7d41d2c043
78306d2b2b088661c3e9aa656712c71776e926dca5ecb9fc7027077e02cbcef1
GET /wp-content/themes/huntt/huntt/js/common.js?ver=5.8.6 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 28 Apr 2017 11:25:27 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 17 Dec 2022 19:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 8144
content-type: application/javascript
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-includes/js/masonry.min.js?ver=4.2.2
200 OK 9.2 kB URL HTTP/2 byamukama.com/wp-includes/js/masonry.min.js?ver=4.2.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (23966)
Hash 2a730dafa34e6ff81513d31e486cdbdb
1fce17d256f67ae086d74092a03006997d9b0add
7a5fd36a453a3a7471fa93b8169579f9a98e2df7a262c44d28d3de41a0f7ae1c
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/masonry.min.js?ver=4.2.2 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 06 Dec 2021 04:45:39 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 17 Dec 2022 19:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 9216
content-type: application/javascript
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-content/plugins/wp-spamshield/js/jscripts.php
200 OK 512 B URL HTTP/2 byamukama.com/wp-content/plugins/wp-spamshield/js/jscripts.php
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (744)
Hash e4433ba6cc50f78a836cfa6b8c1ce8ae
ccd2b6b06e734f6b669da2f4323515518e694162
96b95b51121422426f1bb9fca1a9bd9cd1111d9564a0d3bf49deed885ecd82a2
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wp-spamshield/js/jscripts.php HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
content-type: application/javascript; charset=UTF-8
content-length: 512
cache-control: private, no-store, no-cache, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0, no-transform
surrogate-control: no-cache, must-revalidate, max-age=0
pragma: no-cache
expires: Sat, 26 Jul 1997 05:00:00 GMT
vary: *,Accept-Encoding
x-robots-tag: none
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
x-server-cache: true
x-proxy-cache: MISS
set-cookie: PHPSESSID=edaa9cfdb0bef9ac2f4bc55aa7a52620; path=/
0056f131647401333f4d7f0e62b6a3f7=851019b83f4accb2e3263b6d2e2564de; expires=Sat, 17-Dec-2022 17:09:15 GMT; Max-Age=14400; path=/; domain=byamukama.com; secure; HttpOnly
ckon2212=sject2212_8ec6eb7fbd936; expires=Sat, 17-Dec-2022 13:14:15 GMT; Max-Age=300; path=/; domain=byamukama.com; secure; HttpOnly
X-Firefox-Spdy: h2
byamukama.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.3.2
409 Conflict 83 B URL HTTP/2 byamukama.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.3.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.3.2 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 409 Conflict
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
byamukama.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.3.2
409 Conflict 83 B URL HTTP/2 byamukama.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.3.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.3.2 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 409 Conflict
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
byamukama.com/wp-content/plugins/tk-contact-form/js/script.js?ver=5.8.6
409 Conflict 83 B URL HTTP/2 byamukama.com/wp-content/plugins/tk-contact-form/js/script.js?ver=5.8.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/tk-contact-form/js/script.js?ver=5.8.6 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 409 Conflict
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash adcdbcc032f763fb6df3452d06cec25f
92a7bf8209930989013619971c6abf39b5c639d4
25ac98be2316dd7238a2ef038b27642270be777b7425bbfcdb1ca09f8bedcb5f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 13:09:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Open+Sans:400,700
200 OK 1.1 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,700
IP
Hash 168e085d5078225bcb689660b0e23ff2
7c70280696c499dc4662b56841212693b2d9f179
b8c662932a3f45a90ab64855cf7f1c05aec4fc06b0f90dff99f7e897d16a4b5c
GET /css?family=Open+Sans:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 17 Dec 2022 13:09:15 GMT
date: Sat, 17 Dec 2022 13:09:15 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
byamukama.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.3.2
409 Conflict 83 B URL HTTP/2 byamukama.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.3.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.3.2 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Cookie: PHPSESSID=edaa9cfdb0bef9ac2f4bc55aa7a52620; 0056f131647401333f4d7f0e62b6a3f7=851019b83f4accb2e3263b6d2e2564de; ckon2212=sject2212_8ec6eb7fbd936; SJECT2212=CKON2212
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 409 Conflict
date: Sat, 17 Dec 2022 13:09:16 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.byamukama.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Dec 2022 19:34:15 GMT
expires: Thu, 14 Dec 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 236101
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.byamukama.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Dec 2022 19:33:54 GMT
expires: Thu, 14 Dec 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 236122
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
byamukama.com/wp-content/uploads/2017/04/geometry2.png
200 OK 2.1 kB URL HTTP/2 byamukama.com/wp-content/uploads/2017/04/geometry2.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 400 x 400, 8-bit colormap, non-interlaced\012- data
Hash 8b9eb18dd056013d16b945613a1ca86f
ba5223e46bfd45025382d62f2a80c57c13ffc675
902aea46ddcf9dfa6979d00934cc4b691fe11f88b66405484ab649fbb3b72474
GET /wp-content/uploads/2017/04/geometry2.png HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Cookie: PHPSESSID=edaa9cfdb0bef9ac2f4bc55aa7a52620; 0056f131647401333f4d7f0e62b6a3f7=851019b83f4accb2e3263b6d2e2564de; ckon2212=sject2212_8ec6eb7fbd936; SJECT2212=CKON2212
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 28 Apr 2017 19:19:02 GMT
accept-ranges: bytes
content-length: 2138
cache-control: max-age=31536000
expires: Sun, 17 Dec 2023 13:09:16 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/png
date: Sat, 17 Dec 2022 13:09:16 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-content/themes/huntt/huntt/layouts/fonts/HansKendrickLight/HansKendrick-Light-webfont.woff
200 OK 28 kB URL HTTP/2 byamukama.com/wp-content/themes/huntt/huntt/layouts/fonts/HansKendrickLight/HansKendrick-Light-webfont.woff
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format, TrueType, length 27804, version 1.0\012- data
Hash d4733c7a980eba5e025d83d0bef2c1d9
a1b46886b25a0d62c037b062a947a9b4a53db5eb
714a82c81f673792299631247c7eb10927bdcafe628662e4a3fba1b9c9a6961a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/huntt/huntt/layouts/fonts/HansKendrickLight/HansKendrick-Light-webfont.woff HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.byamukama.com
Connection: keep-alive
Referer: https://byamukama.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 28 Apr 2017 11:26:34 GMT
accept-ranges: bytes
content-length: 27804
cache-control: max-age=21600
expires: Sat, 17 Dec 2022 19:09:16 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: font/woff
date: Sat, 17 Dec 2022 13:09:16 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash adcdbcc032f763fb6df3452d06cec25f
92a7bf8209930989013619971c6abf39b5c639d4
25ac98be2316dd7238a2ef038b27642270be777b7425bbfcdb1ca09f8bedcb5f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 13:09:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
byamukama.com/wp-content/themes/huntt/huntt/layouts/fonts/HansKendrickHeavy/HansKendrick-Heavy-webfont.woff
200 OK 29 kB URL HTTP/2 byamukama.com/wp-content/themes/huntt/huntt/layouts/fonts/HansKendrickHeavy/HansKendrick-Heavy-webfont.woff
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format, TrueType, length 28916, version 1.0\012- data
Hash ad81a8c1eb0674225be51fb5ba285e38
f872d9a43599ae6a3b86f1e1881010967a2f7936
04fcd4286d4f3897099b4929b73f3b3037170a792ec4eaee2317ac2732102517
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/huntt/huntt/layouts/fonts/HansKendrickHeavy/HansKendrick-Heavy-webfont.woff HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.byamukama.com
Connection: keep-alive
Referer: https://byamukama.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 28 Apr 2017 11:26:15 GMT
accept-ranges: bytes
content-length: 28916
cache-control: max-age=21600
expires: Sat, 17 Dec 2022 19:09:16 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: font/woff
date: Sat, 17 Dec 2022 13:09:16 GMT
server: Apache
X-Firefox-Spdy: h2
static.mailerlite.com/js/universal.js?167128
200 OK 10 kB URL HTTP/2 static.mailerlite.com/js/universal.js?167128
IP
File type ASCII text, with very long lines (16459), with no line terminators
Hash 6fddaf5ca078192e18524579e0026e90
d56f4ba28e021bb652e79fb1d98effc9181a508d
d8ee2163034775533ed1f19d7f74511df264cec74eb01bd9cb6bf1d53542794b
GET /js/universal.js?167128 HTTP/1.1
Host: static.mailerlite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 17 Dec 2022 13:09:16 GMT
content-type: application/javascript
last-modified: Wed, 14 Dec 2022 14:08:38 GMT
vary: Accept-Encoding
etag: W/"6399d8e6-404b"
strict-transport-security: max-age=63072000
via: 1.1 google
cf-cache-status: HIT
age: 3309
expires: Thu, 22 Dec 2022 13:09:16 GMT
cache-control: public, max-age=432000
server: cloudflare
cf-ray: 77afe469ad561c0e-OSL
content-encoding: br
X-Firefox-Spdy: h2
byamukama.com/wp-content/themes/huntt/huntt/layouts/fonts/HansKendrickRegular/HansKendrick-Regular-webfont.woff
200 OK 28 kB URL HTTP/2 byamukama.com/wp-content/themes/huntt/huntt/layouts/fonts/HansKendrickRegular/HansKendrick-Regular-webfont.woff
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format, TrueType, length 27664, version 1.0\012- data
Hash 5471a0b64d653d6740331461afa919cc
9e16dd8e5c9d8dafb2cc40c8756ada6926b458a2
cb763a5b333aa81803772cbbf532b295106db7992d0eeff3d5ffb3b6f849ddf7
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/huntt/huntt/layouts/fonts/HansKendrickRegular/HansKendrick-Regular-webfont.woff HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.byamukama.com
Connection: keep-alive
Referer: https://byamukama.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 28 Apr 2017 11:26:56 GMT
accept-ranges: bytes
content-length: 27664
cache-control: max-age=21600
expires: Sat, 17 Dec 2022 19:09:16 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: font/woff
date: Sat, 17 Dec 2022 13:09:16 GMT
server: Apache
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Lato:100,300,regular,700,900%7COpen+Sans:300%7CIndie+Flower:regular%7COswald:300,regular,700&subset=latin%2Clatin-ext
200 OK 38 kB URL HTTP/2 fonts.googleapis.com/css?family=Lato:100,300,regular,700,900%7COpen+Sans:300%7CIndie+Flower:regular%7COswald:300,regular,700&subset=latin%2Clatin-ext
IP
Hash 5aae9bfde6eb202f221c8567f1f1b32d
c3fab8f53dc26b38fb5fe05f45733b4c8edcd133
e52442ccd19954e39050ac9704b7b8db9cf1713251daf832c195e2444addc0d4
GET /css?family=Lato:100,300,regular,700,900%7COpen+Sans:300%7CIndie+Flower:regular%7COswald:300,regular,700&subset=latin%2Clatin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 17 Dec 2022 13:09:15 GMT
date: Sat, 17 Dec 2022 13:09:15 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
byamukama.com/wp-content/uploads/2022/04/pexels-photo-8458816-e1649585289480-1295x479.jpeg
200 OK 79 kB URL HTTP/2 byamukama.com/wp-content/uploads/2022/04/pexels-photo-8458816-e1649585289480-1295x479.jpeg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1295x479, components 3\012- data
Hash c18e5e42ac52862762c4e9a5dbf2f48e
fc186d5a6b7bf5d4346ec6d4d6e49b0e672b33f3
cd8428a06036258ab69aef38de8f64a3af033197ae1fafb2695c36096d9e7751
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2022/04/pexels-photo-8458816-e1649585289480-1295x479.jpeg HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Cookie: PHPSESSID=edaa9cfdb0bef9ac2f4bc55aa7a52620; 0056f131647401333f4d7f0e62b6a3f7=851019b83f4accb2e3263b6d2e2564de; ckon2212=sject2212_8ec6eb7fbd936; SJECT2212=CKON2212
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 13:09:16 GMT
server: Apache
content-type: image/jpeg
content-length: 78882
last-modified: Sun, 10 Apr 2022 10:08:10 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sun, 17 Dec 2023 13:09:16 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
x-server-cache: false
X-Firefox-Spdy: h2
byamukama.com/wp-content/uploads/2022/01/pexels-photo-2599276-e1642845141427-1295x459.jpeg
200 OK 128 kB URL HTTP/2 byamukama.com/wp-content/uploads/2022/01/pexels-photo-2599276-e1642845141427-1295x459.jpeg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1295x459, components 3\012- data
Size 128 kB (127640 bytes)
Hash 93134431491f12b7a9c5b1cd22af3ae1
88e6bab188340af45785ad3504d374a4ec63d850
d6febbf5c73279c6118e7be07cfc587dd4210fda093cce5b58b019ae1dc340d1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2022/01/pexels-photo-2599276-e1642845141427-1295x459.jpeg HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Cookie: PHPSESSID=edaa9cfdb0bef9ac2f4bc55aa7a52620; 0056f131647401333f4d7f0e62b6a3f7=851019b83f4accb2e3263b6d2e2564de; ckon2212=sject2212_8ec6eb7fbd936; SJECT2212=CKON2212
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 13:09:16 GMT
server: Apache
content-type: image/jpeg
content-length: 127640
last-modified: Sat, 22 Jan 2022 09:52:22 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sun, 17 Dec 2023 13:09:16 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
x-server-cache: false
X-Firefox-Spdy: h2
byamukama.com/wp-content/plugins/tk-contact-form/js/script.js?ver=5.8.6
409 Conflict 83 B URL HTTP/2 byamukama.com/wp-content/plugins/tk-contact-form/js/script.js?ver=5.8.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/tk-contact-form/js/script.js?ver=5.8.6 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Cookie: PHPSESSID=edaa9cfdb0bef9ac2f4bc55aa7a52620; 0056f131647401333f4d7f0e62b6a3f7=851019b83f4accb2e3263b6d2e2564de; ckon2212=sject2212_8ec6eb7fbd936; SJECT2212=CKON2212
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 409 Conflict
date: Sat, 17 Dec 2022 13:09:16 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
static.mailerlite.com/css/universal.css?v4
200 OK 22 kB URL HTTP/2 static.mailerlite.com/css/universal.css?v4
IP
Hash c2cb2773e42f0b132ec4ac34c4e14adf
f7fe583600eeaadafb2c863d3b2b00d6fea15e08
03ab88813ecf64434570d730b74c2fbd8c11d17a513ea7c38203e3fcb2dc9038
GET /css/universal.css?v4 HTTP/1.1
Host: static.mailerlite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 13:09:16 GMT
content-type: text/css
last-modified: Wed, 14 Dec 2022 14:08:32 GMT
vary: Accept-Encoding
etag: W/"6399d8e0-30e"
strict-transport-security: max-age=63072000
via: 1.1 google
cf-cache-status: HIT
age: 2611
expires: Thu, 22 Dec 2022 13:09:16 GMT
cache-control: public, max-age=432000
server: cloudflare
cf-ray: 77afe46a0dd21c0e-OSL
content-encoding: br
X-Firefox-Spdy: h2
code.jquery.com/jquery-3.2.1.min.js
200 OK 30 kB URL HTTP/2 code.jquery.com/jquery-3.2.1.min.js
IP
File type ASCII text, with very long lines (32058)
Hash 148f8d3ffd9cc02048c5f4d1cc83c407
9f2b89cfd151be6a29b4d43ad64d164fb8471046
4dc681da48ba2b417e613e8e027ff5322963c3a3697a8ba97973cfefb48def5e
GET /jquery-3.2.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://static.mailerlite.com
Connection: keep-alive
Referer: https://static.mailerlite.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 17 Dec 2022 13:09:16 GMT
content-encoding: gzip
content-length: 30125
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15283"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-sp-metadata: HS256.CIyb95wGEocBCiQ0MjM1YzMyMC0xOGM5LTQwZDMtYWM2MC1kMTY4MDJmZDRmYjAQ+OiCoKvU+wIaBgj8/vacBiIMOTEuOTAuNDIuMTU0KMDjATADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GiwIARIkYzAxOWYyOWQtM2Q3OS00NGNhLTljOGUtZTFkZGZlMzdiZDYyGK3rASIYCAISFGNkczIyMi5zazEuaHdjZG4ubmV0.21UDYmrg/jsb7WvVznKY1A1WUpXdnr3fPxil8awvuMY=
x-hw: 1671282556.dop014.sk1.t,1671282556.cds262.sk1.hn,1671282556.cds222.sk1.c
X-Firefox-Spdy: h2
byamukama.com/wp-content/uploads/2021/12/pexels-photo-4040857-e1638636378152-1295x459.jpeg
200 OK 86 kB URL HTTP/2 byamukama.com/wp-content/uploads/2021/12/pexels-photo-4040857-e1638636378152-1295x459.jpeg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1295x459, components 3\012- data
Hash 1ca6b4c4d24799247ca12af58b21a29a
b2b6b3e072d00756c8cb7cd3a2c4a6ffe5456103
671809c35de53a87d30777fda8ffc3ca7326ea439bb722c2176a850c04a66a1a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2021/12/pexels-photo-4040857-e1638636378152-1295x459.jpeg HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Cookie: PHPSESSID=edaa9cfdb0bef9ac2f4bc55aa7a52620; 0056f131647401333f4d7f0e62b6a3f7=851019b83f4accb2e3263b6d2e2564de; ckon2212=sject2212_8ec6eb7fbd936; SJECT2212=CKON2212
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 13:09:16 GMT
server: Apache
content-type: image/jpeg
content-length: 86214
last-modified: Sat, 04 Dec 2021 16:46:19 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sun, 17 Dec 2023 13:09:16 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
x-server-cache: false
X-Firefox-Spdy: h2
byamukama.com/wp-content/uploads/2021/12/pexels-photo-639110-e1640418925425-1295x456.jpeg
200 OK 114 kB URL HTTP/2 byamukama.com/wp-content/uploads/2021/12/pexels-photo-639110-e1640418925425-1295x456.jpeg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1295x456, components 3\012- data
Size 114 kB (113722 bytes)
Hash b7fcb2ba7254068bb7a26ea9ecb0c1ef
d628d0a9b6b054ed50e33c64ea3672b41a32300e
540a1ca83f2eabe9b7702747651dbd4b4be0e9c8bfae817096126e186ce4e7e5
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2021/12/pexels-photo-639110-e1640418925425-1295x456.jpeg HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Cookie: PHPSESSID=edaa9cfdb0bef9ac2f4bc55aa7a52620; 0056f131647401333f4d7f0e62b6a3f7=851019b83f4accb2e3263b6d2e2564de; ckon2212=sject2212_8ec6eb7fbd936; SJECT2212=CKON2212
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 13:09:16 GMT
server: Apache
content-type: image/jpeg
content-length: 113722
last-modified: Sat, 25 Dec 2021 07:55:26 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sun, 17 Dec 2023 13:09:16 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
x-server-cache: false
X-Firefox-Spdy: h2
byamukama.com/wp-content/themes/huntt/huntt/layouts/fonts/HansKendrickLight/HansKendrick-Light-webfont.ttf
200 OK 65 kB URL HTTP/2 byamukama.com/wp-content/themes/huntt/huntt/layouts/fonts/HansKendrickLight/HansKendrick-Light-webfont.ttf
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type TrueType Font data, 19 tables, 1st "FFTM", 19 names, Microsoft, language 0x409, Copyright (c) 2014 by Hanken Design Co.. All rights reserved.Hans Kendrick LightLight1.000;pyrs;\012- data
Hash d4bef5a85f95966e956bcef74e538934
21026d934183100c84f77152e7766e71f9c7f50b
4895c4281940338215a328d1407a89df4d4305835405393f7167a6567337d46e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/huntt/huntt/layouts/fonts/HansKendrickLight/HansKendrick-Light-webfont.ttf HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.byamukama.com
Connection: keep-alive
Referer: https://byamukama.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 13:09:16 GMT
server: Apache
content-type: font/ttf
content-length: 64564
last-modified: Fri, 28 Apr 2017 11:26:32 GMT
cache-control: max-age=21600
expires: Sat, 17 Dec 2022 15:09:56 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
x-server-cache: true
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
byamukama.com/wp-content/themes/huntt/huntt/layouts/fonts/HansKendrickHeavy/HansKendrick-Heavy-webfont.ttf
200 OK 64 kB URL HTTP/2 byamukama.com/wp-content/themes/huntt/huntt/layouts/fonts/HansKendrickHeavy/HansKendrick-Heavy-webfont.ttf
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type TrueType Font data, 19 tables, 1st "FFTM", 19 names, Microsoft, language 0x409, Copyright (c) 2014 by Hanken Design Co.. All rights reserved.Hans Kendrick HeavyHeavy1.000;pyrs;\012- data
Hash 458e5a945ba234305db8fcd7581e5eac
be2c8b8f1127a046581ba47674da8f5653055def
0412dc32eb0b86874302b40cf9aabcecaf98b5938f6d74ee3cc2a237af97588f
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/huntt/huntt/layouts/fonts/HansKendrickHeavy/HansKendrick-Heavy-webfont.ttf HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.byamukama.com
Connection: keep-alive
Referer: https://byamukama.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 13:09:16 GMT
server: Apache
content-type: font/ttf
content-length: 64356
last-modified: Fri, 28 Apr 2017 11:26:22 GMT
cache-control: max-age=21600
expires: Sat, 17 Dec 2022 15:09:56 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
x-server-cache: true
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
byamukama.com/wp-content/themes/huntt/huntt/layouts/icons/icomoon.ttf?inwjt8
200 OK 5.1 kB URL HTTP/2 byamukama.com/wp-content/themes/huntt/huntt/layouts/icons/icomoon.ttf?inwjt8
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon \012- data
Hash ba70acd68741072353cc559d8357b5b3
3211da671915ef6c350075c6e99296e711f0d3c8
4eca41996223022896b8a4e931772f51cd54597be996e29c47d12110d9b891d4
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/huntt/huntt/layouts/icons/icomoon.ttf?inwjt8 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.byamukama.com
Connection: keep-alive
Referer: https://byamukama.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 13:09:16 GMT
server: Apache
content-type: font/ttf
content-length: 5132
last-modified: Fri, 28 Apr 2017 11:25:49 GMT
cache-control: max-age=21600
expires: Sat, 17 Dec 2022 15:09:56 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
x-server-cache: true
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
byamukama.com/wp-content/themes/huntt/huntt/layouts/fonts/HansKendrickRegular/HansKendrick-Regular-webfont.ttf
200 OK 64 kB URL HTTP/2 byamukama.com/wp-content/themes/huntt/huntt/layouts/fonts/HansKendrickRegular/HansKendrick-Regular-webfont.ttf
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type TrueType Font data, 19 tables, 1st "FFTM", 17 names, Microsoft, language 0x409, Copyright (c) 2014 by Hanken Design Co.. All rights reserved.Hans KendrickRegular1.000;pyrs;Hans\012- data
Hash e22aeb6f6351ec305f6040a52bfc6d94
160bf150493e00d5f891d7ffb889b52f2d2999c2
75a641b9a74cc4e55639bc92dbe7b096d80983617f0600a1f9b62fa61cf89be5
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/huntt/huntt/layouts/fonts/HansKendrickRegular/HansKendrick-Regular-webfont.ttf HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.byamukama.com
Connection: keep-alive
Referer: https://byamukama.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 13:09:16 GMT
server: Apache
content-type: font/ttf
content-length: 63688
last-modified: Fri, 28 Apr 2017 11:26:57 GMT
cache-control: max-age=21600
expires: Sat, 17 Dec 2022 15:09:56 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
x-server-cache: true
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
200 OK 23 B URL HTTP/2 maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
IP
File type JSON data\012- , ASCII text
Hash e3981ca10169a319d5aa062bf43a5fa1
2c6ed584767b65688ce99b1ebe1a3b7448a67421
8b0b8749aba12de93f3cf5d86f9fac9d6de7cac400a17473718f182a34ebb7e9
GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.byamukama.com
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sat, 17 Dec 2022 13:09:16 GMT
server: scaffolding on HTTPServer2
cache-control: private
content-length: 23
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.byamukama.com
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.mailerlite.com/js/w/webforms.min.js?%03vaa4d608450783acdc64d5338ff94f6d5
200 OK 34 kB URL HTTP/2 static.mailerlite.com/js/w/webforms.min.js?%03vaa4d608450783acdc64d5338ff94f6d5
IP
File type ASCII text, with very long lines (9930), with no line terminators
Hash feee8d564fd76b7100015fd2a653ec1c
2ef66c96f3921449ac91053d4c09ccd29797995e
fd7ba5c6ac078268bfa9459da568c42640bbfa548d4f237d58cb8e36a03329e7
GET /js/w/webforms.min.js?%03vaa4d608450783acdc64d5338ff94f6d5 HTTP/1.1
Host: static.mailerlite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.mailerlite.com/data/a/1294/1294870/webforms/n9q7b9/1074/1074970/page.html?v=1671282553
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 13:09:16 GMT
content-type: application/javascript
last-modified: Wed, 14 Dec 2022 14:08:50 GMT
vary: Accept-Encoding
etag: W/"6399d8f2-26ca"
strict-transport-security: max-age=63072000
via: 1.1 google
cf-cache-status: HIT
age: 1217
expires: Thu, 22 Dec 2022 13:09:16 GMT
cache-control: public, max-age=432000
server: cloudflare
cf-ray: 77afe46b0ebf1c0e-OSL
content-encoding: br
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/3.3.7/fonts/glyphicons-halflings-regular.woff2
200 OK 18 kB URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.7/fonts/glyphicons-halflings-regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 18028, version 1.589\012- data
Hash 448c34a56d699c29117adc64c43affeb
ca35b697d99cae4d1b60f2d60fcd37771987eb07
fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c
GET /bootstrap/3.3.7/fonts/glyphicons-halflings-regular.woff2 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://static.mailerlite.com
Connection: keep-alive
Referer: https://maxcdn.bootstrapcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 13:09:16 GMT
content-type: font/woff2
content-length: 18028
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:00 GMT
cdn-cachedat: 08/03/2021 23:23:50
cdn-edgestorageid: 601
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-proxyver: 1.0
cdn-status: 200
cdn-requestid: c13593166f12938265a7af0996ffa928
cdn-cache: HIT
cf-cache-status: HIT
age: 14326604
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 77afe46c587fb51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://static.mailerlite.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Dec 2022 18:52:41 GMT
expires: Tue, 12 Dec 2023 18:52:41 GMT
cache-control: public, max-age=31536000
age: 411395
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
byamukama.com/wp-content/uploads/2017/07/cropped-Byamukama-feather-02-02-02-192x192.png
200 OK 9.2 kB URL HTTP/2 byamukama.com/wp-content/uploads/2017/07/cropped-Byamukama-feather-02-02-02-192x192.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 192 x 192, 8-bit gray+alpha, non-interlaced\012- data
Hash d4dc2cfb18e1e8324aa3b1e5171158f6
daae217134b100598b9c3f4b7685e0591115e6ab
2d3883f3f5bbaae59a920a92c5a6bc09f6ddcd9c0bfadc57d8aafd8f98454e9a
GET /wp-content/uploads/2017/07/cropped-Byamukama-feather-02-02-02-192x192.png HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Cookie: PHPSESSID=edaa9cfdb0bef9ac2f4bc55aa7a52620; 0056f131647401333f4d7f0e62b6a3f7=851019b83f4accb2e3263b6d2e2564de; ckon2212=sject2212_8ec6eb7fbd936; SJECT2212=CKON2212
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 12 Jul 2017 05:38:29 GMT
accept-ranges: bytes
content-length: 9238
cache-control: max-age=31536000
expires: Sun, 17 Dec 2023 13:09:16 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/png
date: Sat, 17 Dec 2022 13:09:16 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-content/uploads/2017/07/cropped-Byamukama-feather-02-02-02-32x32.png
200 OK 736 B URL HTTP/2 byamukama.com/wp-content/uploads/2017/07/cropped-Byamukama-feather-02-02-02-32x32.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced\012- data
Hash add337652eef833f49a9ceb1b6f0e729
3b2b5ac5e1d6223de8ae991b6911783d09dae4a6
8e7ae4dcb026e3f04e4f2e2f88a5581eac50c5eb5432da0aa54f37bf4a87d311
GET /wp-content/uploads/2017/07/cropped-Byamukama-feather-02-02-02-32x32.png HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Cookie: PHPSESSID=edaa9cfdb0bef9ac2f4bc55aa7a52620; 0056f131647401333f4d7f0e62b6a3f7=851019b83f4accb2e3263b6d2e2564de; ckon2212=sject2212_8ec6eb7fbd936; SJECT2212=CKON2212
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 12 Jul 2017 05:38:29 GMT
accept-ranges: bytes
content-length: 736
cache-control: max-age=31536000
expires: Sun, 17 Dec 2023 13:09:16 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/png
date: Sat, 17 Dec 2022 13:09:16 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 36c77ced381d76aaaec891f87712264a
9dc3cebbf2e6604b0f7b784dd357bca3bfce08b9
487aa5ee2e9d91ef03a984020afb55cde622e1c34b032a462adcaed596a8403e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6247
Cache-Control: max-age=95032
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 13:09:16 GMT
Etag: "639c774d-116"
Expires: Sun, 18 Dec 2022 15:33:08 GMT
Last-Modified: Fri, 16 Dec 2022 13:49:01 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 278
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0e5a8cf5962c05bf28a3b45f5c8745e2
9c5d7e8aeab26f9fd2e753ab4dc65d6fa8ea955f
f614642045fcd0ee373ed6cabe67514f4bb54c7fb4f1181b52eaec12d7e0479e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F614642045FCD0EE373ED6CABE67514F4BB54C7FB4F1181B52EAEC12D7E0479E"
Last-Modified: Thu, 15 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10637
Expires: Sat, 17 Dec 2022 16:06:33 GMT
Date: Sat, 17 Dec 2022 13:09:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0e5a8cf5962c05bf28a3b45f5c8745e2
9c5d7e8aeab26f9fd2e753ab4dc65d6fa8ea955f
f614642045fcd0ee373ed6cabe67514f4bb54c7fb4f1181b52eaec12d7e0479e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F614642045FCD0EE373ED6CABE67514F4BB54C7FB4F1181B52EAEC12D7E0479E"
Last-Modified: Thu, 15 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10637
Expires: Sat, 17 Dec 2022 16:06:33 GMT
Date: Sat, 17 Dec 2022 13:09:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0e5a8cf5962c05bf28a3b45f5c8745e2
9c5d7e8aeab26f9fd2e753ab4dc65d6fa8ea955f
f614642045fcd0ee373ed6cabe67514f4bb54c7fb4f1181b52eaec12d7e0479e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F614642045FCD0EE373ED6CABE67514F4BB54C7FB4F1181B52EAEC12D7E0479E"
Last-Modified: Thu, 15 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10637
Expires: Sat, 17 Dec 2022 16:06:33 GMT
Date: Sat, 17 Dec 2022 13:09:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0e5a8cf5962c05bf28a3b45f5c8745e2
9c5d7e8aeab26f9fd2e753ab4dc65d6fa8ea955f
f614642045fcd0ee373ed6cabe67514f4bb54c7fb4f1181b52eaec12d7e0479e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F614642045FCD0EE373ED6CABE67514F4BB54C7FB4F1181B52EAEC12D7E0479E"
Last-Modified: Thu, 15 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10637
Expires: Sat, 17 Dec 2022 16:06:33 GMT
Date: Sat, 17 Dec 2022 13:09:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0e5a8cf5962c05bf28a3b45f5c8745e2
9c5d7e8aeab26f9fd2e753ab4dc65d6fa8ea955f
f614642045fcd0ee373ed6cabe67514f4bb54c7fb4f1181b52eaec12d7e0479e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F614642045FCD0EE373ED6CABE67514F4BB54C7FB4F1181B52EAEC12D7E0479E"
Last-Modified: Thu, 15 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10637
Expires: Sat, 17 Dec 2022 16:06:33 GMT
Date: Sat, 17 Dec 2022 13:09:16 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F716d5374-26a4-47e3-9c6a-62120a177040.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F716d5374-26a4-47e3-9c6a-62120a177040.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2fae5a52ce167de2a060dc814a744e98
4b108a79a4ad796a34f4b2b8950df907137680e3
61e1fe4a8c074a031e0628ca393449e42d70dcf3411481936c26c1fad7a5451b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F716d5374-26a4-47e3-9c6a-62120a177040.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9837
x-amzn-requestid: 7c104466-a4d8-4e03-94e6-79a18bd3bf54
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dQjWiEMlIAMFaaQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639ce5c3-4b0e776f4f0edd533795a6ee;Sampled=0
x-amzn-remapped-date: Fri, 16 Dec 2022 21:40:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: BoDm_UMgTvGhUoJOaM2x6-YXgFOFuLanBV4hjgsPNTFxn_9CQjELUQ==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 21:40:19 GMT
etag: "4b108a79a4ad796a34f4b2b8950df907137680e3"
content-type: image/jpeg
age: 55737
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ae934ee-7c6e-4784-90fd-ef6c864097ef.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ae934ee-7c6e-4784-90fd-ef6c864097ef.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1c3454ef9b4c0d31eecf53e44471cecb
f1182e860380b637388fa7f90c36e0a8c9edd657
c474493452d48121f0050efdd197231909d3c9de0fccbe07bf5706162b848624
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ae934ee-7c6e-4784-90fd-ef6c864097ef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7048
x-amzn-requestid: d2665a61-0c5f-429e-bd9c-f4c6aec4fe14
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dQjEvH6VIAMFd2Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639ce551-65d1775b5f07d8bf10beae48;Sampled=0
x-amzn-remapped-date: Fri, 16 Dec 2022 21:38:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zWO_LMG3fez0GBfCwXtYm9IPAN1LKsomAPVR8ApRb44i2UAf5tOHAw==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 21:40:30 GMT
age: 55726
etag: "f1182e860380b637388fa7f90c36e0a8c9edd657"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a0c4858-28d1-47b1-bfba-b4500f28eeae.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a0c4858-28d1-47b1-bfba-b4500f28eeae.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4fdbd1e175352e7ec7dc2a25f04a5a9d
954bdd8d6b2f3d0ec086631ecf1bbd76c6507fe2
bdba0c3d4509764e87db688c1b8086c309f4a2cbe95d1f2130ce01d184f2fa17
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a0c4858-28d1-47b1-bfba-b4500f28eeae.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9741
x-amzn-requestid: 5d9871d6-1512-4ffa-8b85-3c4c7595b723
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dEj3XGsxoAMFxIQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639819c8-7a65df352cc4e71e5aa518f8;Sampled=0
x-amzn-remapped-date: Tue, 13 Dec 2022 06:20:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: V2j4CWBbvNniyBK3vdt4Hg7ROB-xjuzsvdGBmh2U1BGYGWwkT6JJ_g==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 21:42:32 GMT
age: 55604
etag: "954bdd8d6b2f3d0ec086631ecf1bbd76c6507fe2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F340d7003-71e4-4f8e-a457-d067d05e0525.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F340d7003-71e4-4f8e-a457-d067d05e0525.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dce7a87ac0852f838007018af2e83cb5
379f7844a18284958ec0250cc45f2c91ac1ddfcf
31a5191700b9d5c2e471c0e6db15d43f1804b61c6a0867340e8001c32a0dabb5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F340d7003-71e4-4f8e-a457-d067d05e0525.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11667
x-amzn-requestid: f8f1832c-4269-4c4b-83c0-4c2d8c2fdd8f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dQjC7GLSIAMFd4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639ce545-4c54f9704a32da245a90ab0d;Sampled=0
x-amzn-remapped-date: Fri, 16 Dec 2022 21:38:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: CrmrekFQeOTjAkIBgbGSNGN66ysdrtGK1uuzJV-b6nB1WFrOrtf1OA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 21:40:19 GMT
etag: "379f7844a18284958ec0250cc45f2c91ac1ddfcf"
content-type: image/jpeg
age: 55737
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F65c9cdbb-21b2-465b-8f75-329260ada5cc.webp
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F65c9cdbb-21b2-465b-8f75-329260ada5cc.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 86be9c16e4a62785e7f3a0cc8a956143
6cac191c918ff47d3e66e327e8c8a9c0fec9a88b
81dfec15eb1dc19acae5071663b9deaa9fa11f00378e36871c5b31a548a0626b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F65c9cdbb-21b2-465b-8f75-329260ada5cc.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8002
x-amzn-requestid: bcaeff23-947f-441a-8aea-1e0d54f2cc3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dQjD7GjdoAMFVIA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639ce54c-5fb0d9d76945c4f63d210806;Sampled=0
x-amzn-remapped-date: Fri, 16 Dec 2022 21:38:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: iWxLKwjIxP-hiy4A3yvosYlQAzRu0STuwy4K9LuqK77WphLXQH9m6A==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 21:40:19 GMT
age: 55737
etag: "6cac191c918ff47d3e66e327e8c8a9c0fec9a88b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2b78709f-467b-4047-896c-309ff91c15a3.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2b78709f-467b-4047-896c-309ff91c15a3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 09028c98b40519661edef458438205f9
0e05448c127660266cdcda59aa4ffeb0232b9451
f5587c8519f78b95108fb5246b14b8c5920f039f2789a73526a3543bad6de8e1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2b78709f-467b-4047-896c-309ff91c15a3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6002
x-amzn-requestid: fb816096-b12a-4024-a7ab-0bc162022ba5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dEHqYFCfoAMFR-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6397eca8-7b855af154aaf1464bf71418;Sampled=0
x-amzn-remapped-date: Tue, 13 Dec 2022 03:08:24 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: cpsW3BhW1a2_mUFtDlsNSKP7eTBxCT3-4bffoRl3FPVQINyO3Wkjdg==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 07:03:16 GMT
age: 21960
etag: "0e05448c127660266cdcda59aa4ffeb0232b9451"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
byamukama.com/wp-content/themes/huntt/huntt/theme-images/spinner.gif
200 OK 9.3 kB URL HTTP/2 byamukama.com/wp-content/themes/huntt/huntt/theme-images/spinner.gif
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type GIF image data, version 89a, 52 x 52\012- data
Hash 209a9334a33d4613798f6fe42c739326
d018c12c4c042ac7e1de83377499908e4dfd10f4
e9010882100c5e3606f55d77d1e8642187a18d87aff1f1d358e7a3e3f77093f3
GET /wp-content/themes/huntt/huntt/theme-images/spinner.gif HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Cookie: PHPSESSID=edaa9cfdb0bef9ac2f4bc55aa7a52620; 0056f131647401333f4d7f0e62b6a3f7=851019b83f4accb2e3263b6d2e2564de; ckon2212=sject2212_8ec6eb7fbd936; SJECT2212=CKON2212
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 28 Apr 2017 11:25:32 GMT
accept-ranges: bytes
content-length: 9275
cache-control: max-age=31536000
expires: Sun, 17 Dec 2023 13:09:16 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/gif
date: Sat, 17 Dec 2022 13:09:16 GMT
server: Apache
X-Firefox-Spdy: h2
bucket.mlcdn.com/a/1294/1294870/images/04302a4a85db6583e933691b9bd107f2bc61cdea.jpeg
200 OK 214 kB URL HTTP/2 bucket.mlcdn.com/a/1294/1294870/images/04302a4a85db6583e933691b9bd107f2bc61cdea.jpeg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1880x1245, components 3\012- data
Size 214 kB (213630 bytes)
Hash a4d27de283b34f500c48fbfc29344b4d
1eab799a1bd01144d59bb8dd0439fcd533ae43c9
90e737eeb763f3d0c2f190599d77611d57f35d08bba8c22680850de82eac44b0
GET /a/1294/1294870/images/04302a4a85db6583e933691b9bd107f2bc61cdea.jpeg HTTP/1.1
Host: bucket.mlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.mailerlite.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 17 Dec 2022 13:09:17 GMT
content-type: image/jpeg
content-length: 213630
x-amz-id-2: y6M1RYO8zenuucouF8UkhpagJyS00vgY/wxez7wNfZgyEMs7JU1DNPq0kxblfD1yS2mwp5LdbRE=
x-amz-request-id: W67PQS7BWZ7ADPWM
last-modified: Fri, 12 Oct 2018 23:46:51 GMT
etag: "a4d27de283b34f500c48fbfc29344b4d"
x-amz-version-id: null
cache-control: max-age=691200
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77afe46c98d9b51b-OSL
X-Firefox-Spdy: h2
byamukama.com/wp-content/uploads/2021/10/pexels-photo-5435274-e1633793268595.jpeg
200 OK 26 kB URL HTTP/2 byamukama.com/wp-content/uploads/2021/10/pexels-photo-5435274-e1633793268595.jpeg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1000x387, components 3\012- data
Hash 9d0e15e90d4c01f6e733cd92671bb15e
4b7e03e4e5e77bf7a98483363b73681e281283a8
7730272d82065c37fc64c21d09c402134bc5b67f0dbc28353ed3595326befd52
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2021/10/pexels-photo-5435274-e1633793268595.jpeg HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Cookie: PHPSESSID=edaa9cfdb0bef9ac2f4bc55aa7a52620; 0056f131647401333f4d7f0e62b6a3f7=851019b83f4accb2e3263b6d2e2564de; ckon2212=sject2212_8ec6eb7fbd936; SJECT2212=CKON2212
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 13:09:17 GMT
server: Apache
content-type: image/jpeg
content-length: 26353
last-modified: Sat, 09 Oct 2021 15:27:48 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sun, 17 Dec 2023 13:09:17 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
x-server-cache: false
X-Firefox-Spdy: h2
byamukama.com/wp-content/uploads/2021/04/pexels-photo-6393340-e1619336272384.jpeg
200 OK 52 kB URL HTTP/2 byamukama.com/wp-content/uploads/2021/04/pexels-photo-6393340-e1619336272384.jpeg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1000x355, components 3\012- data
Hash 8eaaed0321246c95021d9f163bffd7ad
68c8f5cb620bd61f90e099cdb79aac84514ae90f
efb503055bb980a60ea2550373e1d2afc1824d6a7bb68f405b2b3d6453e18a2f
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2021/04/pexels-photo-6393340-e1619336272384.jpeg HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Cookie: PHPSESSID=edaa9cfdb0bef9ac2f4bc55aa7a52620; 0056f131647401333f4d7f0e62b6a3f7=851019b83f4accb2e3263b6d2e2564de; ckon2212=sject2212_8ec6eb7fbd936; SJECT2212=CKON2212
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 13:09:17 GMT
server: Apache
content-type: image/jpeg
content-length: 52221
last-modified: Sun, 25 Apr 2021 07:37:52 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sun, 17 Dec 2023 13:09:17 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
x-server-cache: false
X-Firefox-Spdy: h2
byamukama.com/wp-content/uploads/2021/07/pexels-photo-7234249-e1625392739682.jpeg
200 OK 156 kB URL HTTP/2 byamukama.com/wp-content/uploads/2021/07/pexels-photo-7234249-e1625392739682.jpeg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1880x667, components 3\012- data
Size 156 kB (155876 bytes)
Hash 95f012388d0c708c2dfee652b819d6d8
3019843c9fdb7acb82d5c38273b813948aa9a063
f81d9cef8da160f01256c69eabb1936fbcf21bc23c538c3b3afdf9c270ef4b5b
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2021/07/pexels-photo-7234249-e1625392739682.jpeg HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Cookie: PHPSESSID=edaa9cfdb0bef9ac2f4bc55aa7a52620; 0056f131647401333f4d7f0e62b6a3f7=851019b83f4accb2e3263b6d2e2564de; ckon2212=sject2212_8ec6eb7fbd936; SJECT2212=CKON2212
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 13:09:17 GMT
server: Apache
content-type: image/jpeg
content-length: 155876
last-modified: Sun, 04 Jul 2021 09:58:59 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sun, 17 Dec 2023 13:09:17 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
x-server-cache: false
X-Firefox-Spdy: h2
byamukama.com/wp-content/uploads/2021/06/pexels-photo-7581443-e1624376150655.jpeg
200 OK 70 kB URL HTTP/2 byamukama.com/wp-content/uploads/2021/06/pexels-photo-7581443-e1624376150655.jpeg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1238x438, components 3\012- data
Hash 2822f71659f8734a9936f0bf9e0f8e7a
115642ba99a30356fb8ff7d8a15e304b2755289b
3a39b22e0b2d2698c5b6bf213d57eaf208e3c362f06c5b6db6e795ecaf309668
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2021/06/pexels-photo-7581443-e1624376150655.jpeg HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Cookie: PHPSESSID=edaa9cfdb0bef9ac2f4bc55aa7a52620; 0056f131647401333f4d7f0e62b6a3f7=851019b83f4accb2e3263b6d2e2564de; ckon2212=sject2212_8ec6eb7fbd936; SJECT2212=CKON2212
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 13:09:17 GMT
server: Apache
content-type: image/jpeg
content-length: 69976
last-modified: Tue, 22 Jun 2021 15:35:50 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sun, 17 Dec 2023 13:09:17 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
x-server-cache: false
X-Firefox-Spdy: h2
byamukama.com/wp-content/uploads/2021/03/pexels-photo-790561-e1616667698756.jpeg
200 OK 215 kB URL HTTP/2 byamukama.com/wp-content/uploads/2021/03/pexels-photo-790561-e1616667698756.jpeg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1880x667, components 3\012- data
Size 215 kB (215403 bytes)
Hash 6aebf2ff382630a511536f48077754e5
3e673436ecd2d2b7833f9a36e429a92b74afd14a
a4ec611adb20f36c954208e73af959366b745f531926516e059938bfec64b62b
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2021/03/pexels-photo-790561-e1616667698756.jpeg HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Cookie: PHPSESSID=edaa9cfdb0bef9ac2f4bc55aa7a52620; 0056f131647401333f4d7f0e62b6a3f7=851019b83f4accb2e3263b6d2e2564de; ckon2212=sject2212_8ec6eb7fbd936; SJECT2212=CKON2212
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 13:09:17 GMT
server: Apache
content-type: image/jpeg
content-length: 215403
last-modified: Thu, 25 Mar 2021 10:21:38 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Sun, 17 Dec 2023 13:09:17 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
x-server-cache: false
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff51ac90a-c2c5-496b-b25c-c63f50725d46.jpeg
200 OK 3.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff51ac90a-c2c5-496b-b25c-c63f50725d46.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f07a84becb488cb02572fe128497847b
980c7c7808e8df6ba78b8f2567640b7d8f8e05a1
586d4afd9c889128c22ba61144df743d70a65b7b75b07a96f2cda821db1503af
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff51ac90a-c2c5-496b-b25c-c63f50725d46.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 3694
x-amzn-requestid: 49e877d8-c2cd-4497-8658-385caa25a6ae
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dQjEbHJNIAMF8Mw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639ce54f-0c9c4b5d18502bdd5b3c9be9;Sampled=0
x-amzn-remapped-date: Fri, 16 Dec 2022 21:38:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: P_b17hLfntWIkfYHVfgiAvNgG0iZKOqFGLn8Tm56gD8E4NY9ftPYiQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 21:40:19 GMT
age: 55744
etag: "980c7c7808e8df6ba78b8f2567640b7d8f8e05a1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.byamukama.com/
200 OK 0 B IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: www.byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
link: <https://byamukama.com/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
x-server-cache: true
x-proxy-cache: MISS
set-cookie: PHPSESSID=2584c4faa17894cd16fbe46680e16fe9; path=/; secure; HttpOnly
X-Firefox-Spdy: h2
netdna.bootstrapcdn.com/font-awesome/4.0.3/css/font-awesome.css?ver=2.0.0
200 OK 0 B URL HTTP/2 netdna.bootstrapcdn.com/font-awesome/4.0.3/css/font-awesome.css?ver=2.0.0
IP
GET /font-awesome/4.0.3/css/font-awesome.css?ver=2.0.0 HTTP/1.1
Host: netdna.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 17 Dec 2022 13:09:15 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
cdn-edgestorageid: 601, 617, 617
last-modified: Mon, 25 Jan 2021 22:04:53 GMT
cdn-cachedat: 2021-08-03 04:14:00
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 8f9124512e931af8f5e7f3aaf8bf56dc
cdn-status: 200
cdn-cache: HIT
cf-cache-status: HIT
age: 14325838
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 77afe465ec73fab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
byamukama.com/wp-content/themes/huntt/huntt/style.css?ver=5.8.6
200 OK 0 B URL HTTP/2 byamukama.com/wp-content/themes/huntt/huntt/style.css?ver=5.8.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
GET /wp-content/themes/huntt/huntt/style.css?ver=5.8.6 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 29 Apr 2017 09:08:38 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Mon, 16 Jan 2023 13:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: text/css
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto%3A400%2C300%2C300italic%2C400italic%2C500%2C500italic%2C700%2C700italic&subset=latin%2Clatin-ext
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3A400%2C300%2C300italic%2C400italic%2C500%2C500italic%2C700%2C700italic&subset=latin%2Clatin-ext
IP
GET /css?family=Roboto%3A400%2C300%2C300italic%2C400italic%2C500%2C500italic%2C700%2C700italic&subset=latin%2Clatin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 17 Dec 2022 13:09:15 GMT
date: Sat, 17 Dec 2022 13:09:15 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.mailerlite.com/data/a/1294/1294870/webforms/n9q7b9/1074/1074970/page.html?v=1671282553
200 OK 0 B URL HTTP/2 static.mailerlite.com/data/a/1294/1294870/webforms/n9q7b9/1074/1074970/page.html?v=1671282553
IP
GET /data/a/1294/1294870/webforms/n9q7b9/1074/1074970/page.html?v=1671282553 HTTP/1.1
Host: static.mailerlite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 13:09:16 GMT
content-type: text/html
last-modified: Fri, 02 Nov 2018 23:35:24 GMT
vary: Accept-Encoding
etag: W/"5bdcdf3c-52fd"
strict-transport-security: max-age=63072000
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 77afe46a9e571c0e-OSL
content-encoding: br
X-Firefox-Spdy: h2
track.mailerlite.com/webforms/o/1074970/n9q7b9?v1671282556
200 OK 0 B URL HTTP/2 track.mailerlite.com/webforms/o/1074970/n9q7b9?v1671282556
IP
GET /webforms/o/1074970/n9q7b9?v1671282556 HTTP/1.1
Host: track.mailerlite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 13:09:19 GMT
content-type: image/gif
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 77afe47d8c9f1c0e-OSL
X-Firefox-Spdy: h2
byamukama.com/wp-content/plugins/LayerSlider/static/js/greensock.js?ver=1.11.8
200 OK 0 B URL HTTP/2 byamukama.com/wp-content/plugins/LayerSlider/static/js/greensock.js?ver=1.11.8
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/LayerSlider/static/js/greensock.js?ver=1.11.8 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Apr 2017 22:14:58 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 17 Dec 2022 19:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: application/javascript
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 0 B URL HTTP/2 byamukama.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 06 Dec 2021 04:45:40 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 17 Dec 2022 19:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: application/javascript
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
byamukama.com/wp-content/plugins/LayerSlider/static/js/layerslider.kreaturamedia.jquery.js?ver=5.6.2
200 OK 0 B URL HTTP/2 byamukama.com/wp-content/plugins/LayerSlider/static/js/layerslider.kreaturamedia.jquery.js?ver=5.6.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/LayerSlider/static/js/layerslider.kreaturamedia.jquery.js?ver=5.6.2 HTTP/1.1
Host: byamukama.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Apr 2017 22:14:58 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Sat, 17 Dec 2022 19:09:15 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: application/javascript
date: Sat, 17 Dec 2022 13:09:15 GMT
server: Apache
X-Firefox-Spdy: h2
static.mailerlite.com/js/w/ml_jQuery.inputmask.bundle.min.js?v3.3.1
200 OK 0 B URL HTTP/2 static.mailerlite.com/js/w/ml_jQuery.inputmask.bundle.min.js?v3.3.1
IP
GET /js/w/ml_jQuery.inputmask.bundle.min.js?v3.3.1 HTTP/1.1
Host: static.mailerlite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.mailerlite.com/data/a/1294/1294870/webforms/n9q7b9/1074/1074970/page.html?v=1671282553
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 13:09:16 GMT
content-type: application/javascript
last-modified: Wed, 14 Dec 2022 14:08:50 GMT
vary: Accept-Encoding
etag: W/"6399d8f2-1153a"
strict-transport-security: max-age=63072000
via: 1.1 google
cf-cache-status: HIT
age: 337
expires: Thu, 22 Dec 2022 13:09:16 GMT
cache-control: public, max-age=432000
server: cloudflare
cf-ray: 77afe46c0f9b1c0e-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.mailerlite.com/data/a/1294/1294870/universal/u2z4r5a3b5_popups.js?v=1671282553
200 OK 0 B URL HTTP/2 static.mailerlite.com/data/a/1294/1294870/universal/u2z4r5a3b5_popups.js?v=1671282553
IP
GET /data/a/1294/1294870/universal/u2z4r5a3b5_popups.js?v=1671282553 HTTP/1.1
Host: static.mailerlite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.byamukama.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Dec 2022 13:09:16 GMT
content-type: application/javascript
last-modified: Fri, 02 Nov 2018 23:35:24 GMT
vary: Accept-Encoding
etag: W/"5bdcdf3c-2078"
strict-transport-security: max-age=63072000
via: 1.1 google
cf-cache-status: MISS
expires: Thu, 22 Dec 2022 13:09:16 GMT
cache-control: public, max-age=432000
server: cloudflare
cf-ray: 77afe46a0dd61c0e-OSL
content-encoding: br
X-Firefox-Spdy: h2
192.185.160.146
104.18.13.69
93.184.220.29
23.36.76.226