Report - billgoodrich.com/

Report Overview

Submitted URL
billgoodrich.com/
IP
162.241.30.178
ASN
#46606 UNIFIEDLAYER-AS-1
Submitted
2022-11-28 08:56:46
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
24

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
www.billgoodrich.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	9.3 kB	307 kB	162.241.30.178
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	44.238.202.79
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.0 kB	2.7 kB	23.36.76.226
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	682 B	1.5 kB	93.184.220.29
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.8 kB	78 kB	34.120.237.76
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140
billgoodrich.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	348 B	308 B	162.241.30.178
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-11-28	medium	billgoodrich.com/	Phishing
2022-11-28	medium	www.billgoodrich.com/	Phishing
2022-11-28	medium	www.billgoodrich.com/wp-content/themes/Glider/epanel/shortcodes/shortcodes.css?ver=1.7	Phishing
2022-11-28	medium	www.billgoodrich.com/wp-content/themes/Glider/js/cufon-yui.js	Phishing
2022-11-28	medium	www.billgoodrich.com/wp-content/themes/Glider/js/jquery.scrollTo-min.js	Phishing
2022-11-28	medium	www.billgoodrich.com/wp-content/themes/Glider/epanel/page_templates/js/fancybox/jquery.easing-1.3.pack.js?ver=1.3.4	Phishing
2022-11-28	medium	www.billgoodrich.com/wp-content/themes/Glider/epanel/page_templates/js/fancybox/jquery.fancybox-1.3.4.pack.js?ver=1.3.4	Phishing
2022-11-28	medium	www.billgoodrich.com/wp-content/themes/Glider/js/colaborate_thin.js	Phishing
2022-11-28	medium	www.billgoodrich.com/wp-content/themes/Glider/epanel/page_templates/js/et-ptemplates-frontend.js?ver=1.1	Phishing
2022-11-28	medium	www.billgoodrich.com/wp-includes/js/wp-embed.min.js?ver=4.5.28	Phishing
2022-11-28	medium	www.billgoodrich.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1	Phishing
2022-11-28	medium	www.billgoodrich.com/wp-includes/js/jquery/jquery.js?ver=1.12.4	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (14)

	URL	Size	First Seen	Last Seen
	www.billgoodrich.com/wp-content/themes/Glider/epanel/page_templates/js/et-ptemplates-frontend.js?ver=1.1	5.1 kB	2023-03-07	2024-03-31
Pretty URL www.billgoodrich.com/wp-content/themes/Glider/epanel/page_templates/js/et-ptemplates-frontend.js?ver=1.1 IP 162.241.30.178 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:03:51 Last Seen2024-03-31 15:46:47 Times Seen30 Hash ff20dc1ac182222ff10fb8c0c76c52df 48f0561bd76e224f57cc1884d0a6768e3628ab80 05d4d09f8b9b0dace1147b8a00dd3896a9fd5204364397a40a172dc8faca3fbf Loading...

	www.billgoodrich.com/wp-content/themes/Glider/js/jquery.scrollTo-min.js	2.3 kB	2023-03-07	2024-04-18
Pretty URL www.billgoodrich.com/wp-content/themes/Glider/js/jquery.scrollTo-min.js IP 162.241.30.178 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:04:33 Last Seen2024-04-18 00:01:31 Times Seen307 Hash 4aa3e2dfa3123d9373c817b77456aa25 1746eba0698bedcab4bc3fc106c51da6bbaa1d65 1cd02bdd539cb152085e4e1583428bcb06c8128a9ec912195f8a42ed8179804f Loading...

	www.billgoodrich.com/	47 B	2023-03-07	2023-03-11
Pretty URL www.billgoodrich.com/ IP 162.241.30.178 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:03:51 Last Seen2023-03-11 21:50:19 Times Seen1 Hash 32bc361e4cdf6ac3b97c4882a44359f6 6d61f7dfaded0b6f1e896c3c3553ce16889e97ee 65946f7c3f3a9dabed35fd83291d83eb88e86c1a49a231d0868d29f6effbe6eb Loading...

	www.billgoodrich.com/	1.9 kB	2023-03-08	2023-03-11
Pretty URL www.billgoodrich.com/ IP 162.241.30.178 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 23:42:16 Last Seen2023-03-11 21:50:19 Times Seen1 Hash 103a2c45dd016d281b6f04b0c4d5f7c9 fe9f54f48a82d60c6165a76df92b7914a3588d89 0f8b0c19724b360a551776e55986b6e0cae3900e45dd0a72042d8f3db075c9ee Loading...

	www.billgoodrich.com/wp-content/themes/Glider/epanel/shortcodes/js/et_shortcodes_frontend.js?ver=1.7	8.4 kB	2023-03-07	2023-11-11
Pretty URL www.billgoodrich.com/wp-content/themes/Glider/epanel/shortcodes/js/et_shortcodes_frontend.js?ver=1.7 IP 162.241.30.178 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:03:51 Last Seen2023-11-11 11:57:30 Times Seen7 Hash b4c1ca0f5f4d2a29dffad60f35961847 c51e5df80cb698fe6a0411ae0d9b45539f49a7a3 3422253ca393f5dd1f08c1e073e5826aa954cfa515f76d48ffaa616843f85ae4 Loading...

	www.billgoodrich.com/wp-content/themes/Glider/epanel/page_templates/js/fancybox/jquery.fancybox-1.3.4.pack.js?ver=1.3.4	16 kB	2023-03-07	2024-04-15
Pretty URL www.billgoodrich.com/wp-content/themes/Glider/epanel/page_templates/js/fancybox/jquery.fancybox-1.3.4.pack.js?ver=1.3.4 IP 162.241.30.178 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:42:15 Last Seen2024-04-15 08:20:20 Times Seen1214 Hash 8bc36a08c46719377528d962966ce37c caeb31e930068ce5820b239d44d8415f95957138 d84bac3710c2842dc8d5d5ae6e324007443cbd8ae26b909dd89bc2bdc31c8561 Loading...

	www.billgoodrich.com/wp-includes/js/jquery/jquery.js?ver=1.12.4	97 kB	2023-03-07	2024-04-18
Pretty URL www.billgoodrich.com/wp-includes/js/jquery/jquery.js?ver=1.12.4 IP 162.241.30.178 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:45 Last Seen2024-04-18 21:08:33 Times Seen10179 Hash dc5ba5044fccc0297be7b262ce669a7c f137ff98ae379e35b0702967d3b6866a0a40e3be cf34e1b87bbfd9d9b185dec994924a496e279d8dc9387ad8d35bc0110134c4d3 Loading...

	www.billgoodrich.com/	2.8 kB	2023-03-07	2023-03-11
Pretty URL www.billgoodrich.com/ IP 162.241.30.178 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:03:51 Last Seen2023-03-11 21:50:19 Times Seen1 Hash b329f4f9b838e62dd2e4bcbc024586f5 91ff3134b6f881deaf993486af5c5067362e6e0c 55fdcbc92004999590373d451fd5706b1894a43c9a21af96eef9bcf2c578550c Loading...

	www.billgoodrich.com/wp-includes/js/wp-embed.min.js?ver=4.5.28	1.4 kB	2023-03-07	2024-02-27
Pretty URL www.billgoodrich.com/wp-includes/js/wp-embed.min.js?ver=4.5.28 IP 162.241.30.178 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:16:41 Last Seen2024-02-27 20:06:46 Times Seen393 Hash 2a9a2f64687bc94523f4c50c9335cc0f 33c874cafe5df3ea8c8756be8642f675f9cf5289 4114f99c5992bab27f43ae5e3c7c196ce63fac0b4b43915af913c1a30ca1f3da Loading...

	www.billgoodrich.com/wp-content/themes/Glider/js/cufon-yui.js	18 kB	2023-03-07	2024-03-29
Pretty URL www.billgoodrich.com/wp-content/themes/Glider/js/cufon-yui.js IP 162.241.30.178 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:03:51 Last Seen2024-03-29 13:53:49 Times Seen113 Hash 2ef30245466e5023c2187d138075cb5a 313f78eae9b872f98fb188af4675e99a40da90ac 27d7d958c79fe067447031f573e4b3296a3021169f6f7668fedddbdd7390a158 Loading...

	www.billgoodrich.com/wp-content/themes/Glider/epanel/page_templates/js/fancybox/jquery.easing-1.3.pack.js?ver=1.3.4	6.7 kB	2023-03-07	2024-04-19
Pretty URL www.billgoodrich.com/wp-content/themes/Glider/epanel/page_templates/js/fancybox/jquery.easing-1.3.pack.js?ver=1.3.4 IP 162.241.30.178 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:05:05 Last Seen2024-04-19 15:00:31 Times Seen452 Hash def257dbb0ab805c4996fd8abb1a6b49 55d99c8d1e3e5867724a274df57ad05e3168a5cc 9a7f76fdc1930049302dff8d3cb5e6e0cbfcf8feb6d1b1a06ef16a7445b05111 Loading...

	www.billgoodrich.com/wp-content/themes/Glider/js/colaborate_thin.js	55 kB	2023-03-07	2023-04-07
Pretty URL www.billgoodrich.com/wp-content/themes/Glider/js/colaborate_thin.js IP 162.241.30.178 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:03:51 Last Seen2023-04-07 11:24:30 Times Seen4 Hash b00da17ebd2e6242f76b01ced00c5aab b9754fb3ae7f1fd71e0f9b600e035be9854f034b 3df7f9124c3f997d4a6df950be3815af9f5608ea5bcb3f3e1514f521f3e2c2c3 Loading...

	www.billgoodrich.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1	10 kB	2023-03-07	2024-04-19
Pretty URL www.billgoodrich.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 IP 162.241.30.178 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:37 Last Seen2024-04-19 17:56:33 Times Seen37101 Hash 7121994eec5320fbe6586463bf9651c2 90532aff6d4121954254cdf04994d834f7ec169b 48eb8b500ae6a38617b5738d2b3faec481922a7782246e31d2755c034a45cd5d Loading...

		Size	First Seen	Last Seen
	#1 Eval - d33b79de1420c17e48209a9131b25ea0	3.6 kB	2023-03-07	2024-04-19
Pretty Observations First Seen2023-03-07 01:10:34 Last Seen2024-04-19 15:00:29 Times Seen739 Hash d33b79de1420c17e48209a9131b25ea0 49ab1bd5cc167d0f8a62c6c5f6c9293219c9e26d 76067d77e066cb2fde2ebbb215b589a36c00e22a493027d662ecc84e31fc162e Loading...

HTTP Transactions (44)

URL IP Response Size

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
cdbad2434b7d127a4fc769807a9dc3e7
fa98cd9fc2309ab4423f33f683d17bdb17d76713
560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1"
Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12358
Expires: Mon, 28 Nov 2022 12:22:32 GMT
Date: Mon, 28 Nov 2022 08:56:34 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
64b2a23eab6e5ae8c010ec7242be930c
0673e4385ba01a5a245711bab96cafc34f765793
64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4274
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 08:56:34 GMT
Last-Modified: Mon, 28 Nov 2022 07:45:20 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 28 Nov 2022 08:19:32 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2222
alt-svc: clear
X-Firefox-Spdy: h2

billgoodrich.com/

162.241.30.178

301 Moved Permanently

0 B

URL HTTP/1.1
billgoodrich.com/
IP
162.241.30.178:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: billgoodrich.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Date: Mon, 28 Nov 2022 08:56:34 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: http://www.billgoodrich.com/
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 0
Keep-Alive: timeout=5, max=75
Content-Type: text/html; charset=UTF-8

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11134
Expires: Mon, 28 Nov 2022 12:02:09 GMT
Date: Mon, 28 Nov 2022 08:56:35 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: 7NrN3Xmx9/QZiKLWRqTc2nvSQhXAa3DYIKFZNwGlzEfBP0X6BkiApve2b1HYo2R7SLRwAavoAp4=
x-amz-request-id: K1R1W456Y2J7MM2A
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 28 Nov 2022 08:44:58 GMT
age: 697
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 08:56:35 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 28 Nov 2022 08:08:55 GMT
cache-control: public,max-age=3600
age: 2860
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

www.billgoodrich.com/

162.241.30.178

200 OK

4.4 kB

URL HTTP/1.1
www.billgoodrich.com/
IP
162.241.30.178:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1711), with CRLF, LF line terminators
Size
4.4 kB (4405 bytes)
Hash
e607800573115b424f486035e5ec1d06
82caa1dbce06a0f5e4b59ea4651c3acdefc3d18d
eca9a79e40e310ad3b96f4a92c1f4b05fadc87aa35942a44b672256fda83aaa8

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: www.billgoodrich.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 08:56:35 GMT
Server: Apache
Link: <http://www.billgoodrich.com/?rest_route=/>; rel="https://api.w.org/"
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 4405
Keep-Alive: timeout=5, max=75
Content-Type: text/html; charset=UTF-8

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
a6fee11dfe1b88cd768a0ca3e2bd0c89
59cec9a44a4a92467678afe65f347f68641a2174
50870c499aae4d5dfd6df25a36cd04b6d185b66ef0590e46933984bf52e2483f

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6596
Cache-Control: max-age=93613
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 08:56:35 GMT
Etag: "638328ac-1d7"
Expires: Tue, 29 Nov 2022 10:56:48 GMT
Last-Modified: Sun, 27 Nov 2022 09:06:52 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471

www.billgoodrich.com/wp-content/themes/Glider/style.css

162.241.30.178

200 OK

5.7 kB

URL HTTP/1.1
www.billgoodrich.com/wp-content/themes/Glider/style.css
IP
162.241.30.178:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (348), with CRLF line terminators
Size
5.7 kB (5683 bytes)
Hash
f11b74b11024913624fc14e24fb3cebc
8c82e08411db57d1c30adc910b4bc58f065f1df0
f403d997a3c8c34a0b86d4c760cbad0bbecc9578a8cd750310a326110f658b9e

HTTP Headers

GET /wp-content/themes/Glider/style.css HTTP/1.1
Host: www.billgoodrich.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.billgoodrich.com/

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 08:56:35 GMT
Server: Apache
Last-Modified: Thu, 23 Jun 2011 02:47:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 5683
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css

push.services.mozilla.com/

44.238.202.79

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
44.238.202.79:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: f34gGOklsJarPi9TWBYmdg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: WTfpJfoeWnVpPsYMQU0gdHd9Mms=

www.billgoodrich.com/wp-content/themes/Glider/epanel/page_templates/js/fancybox/jquery.fancybox-1.3.4.css

162.241.30.178

200 OK

2.0 kB

URL HTTP/1.1
www.billgoodrich.com/wp-content/themes/Glider/epanel/page_templates/js/fancybox/jquery.fancybox-1.3.4.css
IP
162.241.30.178:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with CRLF line terminators
Size
2.0 kB (2007 bytes)
Hash
8249a24a16f029d145687f6dcac7e29d
742ed0a284dd754a993147d9da2744fd832c3a51
36fc00f8726ee5fedfda511883ba1a9d9154eacd81333a794c19123adc789621

HTTP Headers

GET /wp-content/themes/Glider/epanel/page_templates/js/fancybox/jquery.fancybox-1.3.4.css HTTP/1.1
Host: www.billgoodrich.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.billgoodrich.com/

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 08:56:35 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 23 Jun 2011 02:47:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 2007
Keep-Alive: timeout=5, max=75
Content-Type: text/css

www.billgoodrich.com/wp-content/themes/Glider/epanel/page_templates/page_templates.css

162.241.30.178

200 OK

2.6 kB

URL HTTP/1.1
www.billgoodrich.com/wp-content/themes/Glider/epanel/page_templates/page_templates.css
IP
162.241.30.178:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with CRLF line terminators
Size
2.6 kB (2565 bytes)
Hash
0094c5fd55c84c371f9bbc38213f4b1b
3e77262ddefd56feb833c9c47bfd84cae642b411
05557c34f880797f99d8812cdefcbd2092baf74a3a8ccbe57f16335063ee906d

HTTP Headers

GET /wp-content/themes/Glider/epanel/page_templates/page_templates.css HTTP/1.1
Host: www.billgoodrich.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.billgoodrich.com/

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 08:56:35 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 23 Jun 2011 02:47:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 2565
Keep-Alive: timeout=5, max=75
Content-Type: text/css

www.billgoodrich.com/wp-content/themes/Glider/epanel/shortcodes/shortcodes.css?ver=1.7

162.241.30.178

200 OK

7.1 kB

URL HTTP/1.1
www.billgoodrich.com/wp-content/themes/Glider/epanel/shortcodes/shortcodes.css?ver=1.7
IP
162.241.30.178:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (447), with CRLF line terminators
Size
7.1 kB (7052 bytes)
Hash
c19bf63bfc6a15c180256261ca922f1e
2cd6cf6d68ae76a4d8a8e40b03024d29390a2676
602d7c9af0d4f349ddc91f61d52be9eac1f1402588933d9ff421f74f0dfcd8a6

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /wp-content/themes/Glider/epanel/shortcodes/shortcodes.css?ver=1.7 HTTP/1.1
Host: www.billgoodrich.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.billgoodrich.com/

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 08:56:35 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 23 Jun 2011 02:47:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 7052
Keep-Alive: timeout=5, max=75
Content-Type: text/css

www.billgoodrich.com/wp-content/themes/Glider/epanel/shortcodes/js/et_shortcodes_frontend.js?ver=1.7

162.241.30.178

200 OK

2.7 kB

URL HTTP/1.1
www.billgoodrich.com/wp-content/themes/Glider/epanel/shortcodes/js/et_shortcodes_frontend.js?ver=1.7
IP
162.241.30.178:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
HTML document, ASCII text
Size
2.7 kB (2684 bytes)
Hash
16a1a3948342327faa12a9ac6b9319be
5fbeaff7deff3fbfce1ff596da5c3a4aa78491b3
1389eb48a47bbfe69688873a62e3d6da6079ad18fc43d5a2f969af1ee4ba082f

HTTP Headers

GET /wp-content/themes/Glider/epanel/shortcodes/js/et_shortcodes_frontend.js?ver=1.7 HTTP/1.1
Host: www.billgoodrich.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.billgoodrich.com/

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 08:56:35 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 23 Jun 2011 02:47:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 2684
Keep-Alive: timeout=5, max=75
Content-Type: application/javascript

www.billgoodrich.com/wp-content/themes/Glider/js/cufon-yui.js

162.241.30.178

200 OK

8.8 kB

URL HTTP/1.1
www.billgoodrich.com/wp-content/themes/Glider/js/cufon-yui.js
IP
162.241.30.178:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (18158), with CRLF line terminators
Size
8.8 kB (8798 bytes)
Hash
ba2d04829889323369bd63f02ffe1fce
f1107298162ee8b809ccbd55202ef0503d03089a
a3eb642e286552eb17a1410e25590f89ec63e7d2c5777395e148e4a140c32f47

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /wp-content/themes/Glider/js/cufon-yui.js HTTP/1.1
Host: www.billgoodrich.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.billgoodrich.com/

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 08:56:35 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 23 Jun 2011 02:47:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 8798
Keep-Alive: timeout=5, max=75
Content-Type: application/javascript

www.billgoodrich.com/wp-content/themes/Glider/js/jquery.scrollTo-min.js

162.241.30.178

200 OK

1.3 kB

URL HTTP/1.1
www.billgoodrich.com/wp-content/themes/Glider/js/jquery.scrollTo-min.js
IP
162.241.30.178:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (1927), with CRLF line terminators
Size
1.3 kB (1250 bytes)
Hash
5c97cf28e145a7425921542e8ee337fa
8c37c0541f3487c8e23575a54ed1409fd50fc3e7
a98dd4318ffc8e750f811a70e903479b4465044ddb644885b2b9e4693ce8fb55

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /wp-content/themes/Glider/js/jquery.scrollTo-min.js HTTP/1.1
Host: www.billgoodrich.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.billgoodrich.com/

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 08:56:36 GMT
Server: Apache
Last-Modified: Thu, 23 Jun 2011 02:47:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 1250
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: application/javascript

www.billgoodrich.com/wp-content/themes/Glider/epanel/page_templates/js/fancybox/jquery.easing-1.3.pack.js?ver=1.3.4

162.241.30.178

200 OK

3.0 kB

URL HTTP/1.1
www.billgoodrich.com/wp-content/themes/Glider/epanel/page_templates/js/fancybox/jquery.easing-1.3.pack.js?ver=1.3.4
IP
162.241.30.178:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
Unicode text, UTF-8 text, with very long lines (3199)
Size
3.0 kB (2962 bytes)
Hash
017b1101e659e8201d7d47f3cf1b5102
f6a4128d7298391edb153059459d892b30959eca
2f5641a9375b4db04de44db628292a18525d41b0fda058b3fbe886ee9d982293

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /wp-content/themes/Glider/epanel/page_templates/js/fancybox/jquery.easing-1.3.pack.js?ver=1.3.4 HTTP/1.1
Host: www.billgoodrich.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.billgoodrich.com/

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 08:56:36 GMT
Server: Apache
Last-Modified: Thu, 23 Jun 2011 02:47:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 2962
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: application/javascript

www.billgoodrich.com/wp-content/themes/Glider/epanel/page_templates/js/fancybox/jquery.fancybox-1.3.4.pack.js?ver=1.3.4

162.241.30.178

200 OK

6.8 kB

URL HTTP/1.1
www.billgoodrich.com/wp-content/themes/Glider/epanel/page_templates/js/fancybox/jquery.fancybox-1.3.4.pack.js?ver=1.3.4
IP
162.241.30.178:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (752)
Size
6.8 kB (6809 bytes)
Hash
0fa3feda6a65652335aa86ffd16b3c2d
a29f45eb87c69cef12607fbb210d055f5c108608
2e6a31b4973c959b70d3d80b55abf7abc0745dc90003aa016886bbd1da37e19d

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /wp-content/themes/Glider/epanel/page_templates/js/fancybox/jquery.fancybox-1.3.4.pack.js?ver=1.3.4 HTTP/1.1
Host: www.billgoodrich.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.billgoodrich.com/

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 08:56:36 GMT
Server: Apache
Last-Modified: Thu, 23 Jun 2011 02:47:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 6809
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: application/javascript

www.billgoodrich.com/wp-content/themes/Glider/js/colaborate_thin.js

162.241.30.178

200 OK

18 kB

URL HTTP/1.1
www.billgoodrich.com/wp-content/themes/Glider/js/colaborate_thin.js
IP
162.241.30.178:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (54102), with CRLF line terminators
Size
18 kB (18265 bytes)
Hash
894c8d80e66f8381fc7f6c8851f8faa4
3e2ce0b9a44b2bb56b094e6f769211a32522f19b
a676796e051a35e82933f8fe281e320d0188c93e411d3796891d668a7db66f30

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /wp-content/themes/Glider/js/colaborate_thin.js HTTP/1.1
Host: www.billgoodrich.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.billgoodrich.com/

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 08:56:35 GMT
Server: Apache
Last-Modified: Thu, 23 Jun 2011 02:47:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript

www.billgoodrich.com/wp-content/themes/Glider/epanel/page_templates/js/et-ptemplates-frontend.js?ver=1.1

162.241.30.178

200 OK

1.6 kB

URL HTTP/1.1
www.billgoodrich.com/wp-content/themes/Glider/epanel/page_templates/js/et-ptemplates-frontend.js?ver=1.1
IP
162.241.30.178:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text
Size
1.6 kB (1592 bytes)
Hash
04ef3ff6125338eee3b7bc3e1c93422f
56a1c72ecb9a8b09314b1b96a861749d33c92414
69993ab4c6914119335825eb89ab35b0450e8632d2d2e177f744eea381cafc31

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /wp-content/themes/Glider/epanel/page_templates/js/et-ptemplates-frontend.js?ver=1.1 HTTP/1.1
Host: www.billgoodrich.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.billgoodrich.com/

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 08:56:36 GMT
Server: Apache
Last-Modified: Thu, 23 Jun 2011 02:47:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 1592
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: application/javascript

www.billgoodrich.com/wp-includes/js/wp-embed.min.js?ver=4.5.28

162.241.30.178

200 OK

745 B

URL HTTP/1.1
www.billgoodrich.com/wp-includes/js/wp-embed.min.js?ver=4.5.28
IP
162.241.30.178:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (1384), with no line terminators
Size
745 B (745 bytes)
Hash
9c6f1b6f8936fa69072c8a98f56e3618
b925ce0d82a9dd4710df8ad6f3301bb5496b0701
c15354cb467aed36e646dffd467bb0123c407affc84fae74471b396593f35a8b

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /wp-includes/js/wp-embed.min.js?ver=4.5.28 HTTP/1.1
Host: www.billgoodrich.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.billgoodrich.com/

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 08:56:36 GMT
Server: Apache
Last-Modified: Thu, 13 May 2021 04:04:05 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 745
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: application/javascript

www.billgoodrich.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1

162.241.30.178

200 OK

4.4 kB

URL HTTP/1.1
www.billgoodrich.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
IP
162.241.30.178:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (9959)
Size
4.4 kB (4444 bytes)
Hash
1e40dfe689f1e989e1a3de2e3c6e26bf
4196eddc5203fd18f63e90065d777f757088ca2f
b40b1ef07db6e093ad2df064e8cb582906eb2448e1caacc2f5b721cd5d0e3cb4

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1
Host: www.billgoodrich.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.billgoodrich.com/

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 08:56:36 GMT
Server: Apache
Last-Modified: Wed, 22 Jun 2016 23:47:08 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Content-Length: 4444
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: application/javascript

www.billgoodrich.com/wp-includes/js/jquery/jquery.js?ver=1.12.4

162.241.30.178

200 OK

43 kB

URL HTTP/1.1
www.billgoodrich.com/wp-includes/js/jquery/jquery.js?ver=1.12.4
IP
162.241.30.178:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (31997)
Size
43 kB (42766 bytes)
Hash
58d326e4cc09f905eb0020706c6b2b95
c19bd9030a7117699a3dd57dc1b69a3889409f61
63cd2e517cb5c7de07842d11640edb2d11359c76f7227160bc339347e39c1001

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1
Host: www.billgoodrich.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.billgoodrich.com/

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 08:56:36 GMT
Server: Apache
Last-Modified: Thu, 05 Sep 2019 08:14:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript

www.billgoodrich.com/wp-content/themes/Glider/images/right-bg.jpg

162.241.30.178

200 OK

21 kB

URL HTTP/1.1
www.billgoodrich.com/wp-content/themes/Glider/images/right-bg.jpg
IP
162.241.30.178:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 230x234, components 3\012- data
Size
21 kB (20930 bytes)
Hash
b9fb95376583376dd12d0e63a6dcba7e
bb9b0bfd0811c8f2784fbf5010d24ae9e15799ea
4e2deba329c8b3175668f85a499902012aadcb1b11e47c1939163373d1a50441

HTTP Headers

GET /wp-content/themes/Glider/images/right-bg.jpg HTTP/1.1
Host: www.billgoodrich.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.billgoodrich.com/wp-content/themes/Glider/style.css

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 08:56:36 GMT
Server: Apache
Last-Modified: Thu, 23 Jun 2011 02:47:45 GMT
Accept-Ranges: bytes
Content-Length: 20930
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: image/jpeg

www.billgoodrich.com/wp-content/themes/Glider/images/leftarea-topbg.png

162.241.30.178

200 OK

158 B

URL HTTP/1.1
www.billgoodrich.com/wp-content/themes/Glider/images/leftarea-topbg.png
IP
162.241.30.178:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
PNG image data, 1 x 26, 8-bit colormap, non-interlaced\012- data
Size
158 B (158 bytes)
Hash
8a1ddb5102341712e37037c8c2cb548d
e1f61d4ccda9733f5c153cd40e1237bd27f3565a
9f59546fb775dcddd21db914a62f56083bcd0b04a16d4df0b81a2de9c0ef8b89

HTTP Headers

GET /wp-content/themes/Glider/images/leftarea-topbg.png HTTP/1.1
Host: www.billgoodrich.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.billgoodrich.com/wp-content/themes/Glider/style.css

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 08:56:36 GMT
Server: Apache
Last-Modified: Thu, 23 Jun 2011 02:47:45 GMT
Accept-Ranges: bytes
Content-Length: 158
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: image/png

www.billgoodrich.com/wp-content/themes/Glider/images/active-arrow.png

162.241.30.178

200 OK

641 B

URL HTTP/1.1
www.billgoodrich.com/wp-content/themes/Glider/images/active-arrow.png
IP
162.241.30.178:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
PNG image data, 16 x 24, 8-bit/color RGB, non-interlaced\012- data
Size
641 B (641 bytes)
Hash
04450a60a545f7346d77169907c92a43
f9ff300e7a88e76b5a6ff7c1589d241f4e9ac0d3
6175dd7b9eb8f709a8996962c84f410f6d5e3c61d4194144923b19168b51e604

HTTP Headers

GET /wp-content/themes/Glider/images/active-arrow.png HTTP/1.1
Host: www.billgoodrich.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.billgoodrich.com/wp-content/themes/Glider/style.css

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 08:56:36 GMT
Server: Apache
Last-Modified: Thu, 23 Jun 2011 02:47:45 GMT
Accept-Ranges: bytes
Content-Length: 641
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: image/png

www.billgoodrich.com/wp-content/themes/Glider/images/glow-bg.png

162.241.30.178

200 OK

11 kB

URL HTTP/1.1
www.billgoodrich.com/wp-content/themes/Glider/images/glow-bg.png
IP
162.241.30.178:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
PNG image data, 415 x 438, 8-bit/color RGBA, non-interlaced\012- data
Size
11 kB (10722 bytes)
Hash
f65eb3d3eab4d7a741d7117466c41555
5d2f1db453c31b4bca931e75c736f118b1c0cef2
28ad3945bb5bdc0b72bba926c6f940d6f416df1b7e8d76495cd4b44a838642ba

HTTP Headers

GET /wp-content/themes/Glider/images/glow-bg.png HTTP/1.1
Host: www.billgoodrich.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.billgoodrich.com/wp-content/themes/Glider/style.css

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 08:56:36 GMT
Server: Apache
Last-Modified: Thu, 23 Jun 2011 02:47:45 GMT
Accept-Ranges: bytes
Content-Length: 10722
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: image/png

www.billgoodrich.com/wp-content/themes/Glider/images/logo.png

162.241.30.178

200 OK

64 kB

URL HTTP/1.1
www.billgoodrich.com/wp-content/themes/Glider/images/logo.png
IP
162.241.30.178:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
PNG image data, 187 x 261, 8-bit/color RGBA, non-interlaced\012- data
Size
64 kB (63573 bytes)
Hash
7d53a0aee523af9fd229d46cf15780a3
23db12686fe0b2150d86413df82962906790eb9d
6806d22774b6eb73cb876197602c7fad64d3f1153315c929d3953b732acb0b2a

HTTP Headers

GET /wp-content/themes/Glider/images/logo.png HTTP/1.1
Host: www.billgoodrich.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.billgoodrich.com/

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 08:56:36 GMT
Server: Apache
Last-Modified: Thu, 23 Jun 2011 02:47:45 GMT
Accept-Ranges: bytes
Content-Length: 63573
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: image/png

www.billgoodrich.com/wp-content/themes/Glider/images/border-bg.png

162.241.30.178

200 OK

464 B

URL HTTP/1.1
www.billgoodrich.com/wp-content/themes/Glider/images/border-bg.png
IP
162.241.30.178:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
PNG image data, 15 x 107, 8-bit/color RGBA, non-interlaced\012- data
Size
464 B (464 bytes)
Hash
79dc4883b1cbc427307550134dd54aac
e2d7152f73fb5ee96f06c1bbfd4ecdfbe6038b4e
eda401b21f9395d6a6a4fc2b9b34d2f666b7c8d8b8ac50557e655e247539e477

HTTP Headers

GET /wp-content/themes/Glider/images/border-bg.png HTTP/1.1
Host: www.billgoodrich.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.billgoodrich.com/wp-content/themes/Glider/style.css

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 08:56:36 GMT
Server: Apache
Last-Modified: Thu, 23 Jun 2011 02:47:45 GMT
Accept-Ranges: bytes
Content-Length: 464
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: image/png

www.billgoodrich.com/wp-content/themes/Glider/images/rightarea-topbg.png

162.241.30.178

200 OK

202 B

URL HTTP/1.1
www.billgoodrich.com/wp-content/themes/Glider/images/rightarea-topbg.png
IP
162.241.30.178:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
PNG image data, 3 x 269, 8-bit/color RGBA, non-interlaced\012- data
Size
202 B (202 bytes)
Hash
8c7fc2d868f9db423a75d605f8a851fc
f5d8210e08de00539459176741675f97e59632be
6670105c49d57306fc3c83e536fdc7370d5106986730fdc280a4d4d08603fc2f

HTTP Headers

GET /wp-content/themes/Glider/images/rightarea-topbg.png HTTP/1.1
Host: www.billgoodrich.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.billgoodrich.com/wp-content/themes/Glider/style.css

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 08:56:36 GMT
Server: Apache
Last-Modified: Thu, 23 Jun 2011 02:47:45 GMT
Accept-Ranges: bytes
Content-Length: 202
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: image/png

www.billgoodrich.com/wp-content/themes/Glider/images/tagline-bg.png

162.241.30.178

200 OK

30 kB

URL HTTP/1.1
www.billgoodrich.com/wp-content/themes/Glider/images/tagline-bg.png
IP
162.241.30.178:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
PNG image data, 655 x 116, 8-bit/color RGBA, non-interlaced\012- data
Size
30 kB (29879 bytes)
Hash
575854136527e4b4da37ba6b632b927c
8195a55a02b30b59507afa9192b084dc4072247a
ae8d81b193aa277a988eed312c954238862dbdfefd69e410427d465a6995aa3f

HTTP Headers

GET /wp-content/themes/Glider/images/tagline-bg.png HTTP/1.1
Host: www.billgoodrich.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.billgoodrich.com/wp-content/themes/Glider/style.css

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 08:56:36 GMT
Server: Apache
Last-Modified: Thu, 23 Jun 2011 02:47:45 GMT
Accept-Ranges: bytes
Content-Length: 29879
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: image/png

www.billgoodrich.com/wp-content/themes/Glider/images/content-area-bottombg.png

162.241.30.178

200 OK

126 B

URL HTTP/1.1
www.billgoodrich.com/wp-content/themes/Glider/images/content-area-bottombg.png
IP
162.241.30.178:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
PNG image data, 1 x 19, 8-bit colormap, non-interlaced\012- data
Size
126 B (126 bytes)
Hash
b2d85a744f62f92a3d29ccae69dfc29c
0fff2243fb0415a80f5f4eb7b1023749229bd319
4ac28be6733bef5ffd2c1a9149231082edfad70d88acbd6009f02ff870d44ca5

HTTP Headers

GET /wp-content/themes/Glider/images/content-area-bottombg.png HTTP/1.1
Host: www.billgoodrich.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.billgoodrich.com/wp-content/themes/Glider/style.css

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 08:56:36 GMT
Server: Apache
Last-Modified: Thu, 23 Jun 2011 02:47:45 GMT
Accept-Ranges: bytes
Content-Length: 126
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: image/png

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3007
Expires: Mon, 28 Nov 2022 09:46:44 GMT
Date: Mon, 28 Nov 2022 08:56:37 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa915ba56-f7bc-48fc-b725-b932389634d5.jpeg

34.120.237.76

200 OK

16 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa915ba56-f7bc-48fc-b725-b932389634d5.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
16 kB (15639 bytes)
Hash
0a4e0bb1e2748bdce6bbf685a910f0fc
5b97bfd787afcb912cdbef0f137f78a059082992
a7bc9adeb22cb57675e907bd961a6f554e6b7a46414ed782bcc9b53d68b1c328

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa915ba56-f7bc-48fc-b725-b932389634d5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 15639
x-amzn-requestid: 98e846b4-287f-4698-9529-25bcc2727a4a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR78dGReoAMFiDw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d9e9-62c41b2717bd8e6f3b3797da;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: AhbL-wXc_eYsgxdjf0DIEJD7Z3XfXMjXwDC52Bz_SnvmmWAhl3g99A==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:51:38 GMT
age: 39899
etag: "5b97bfd787afcb912cdbef0f137f78a059082992"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.4 kB (9430 bytes)
Hash
1f434933b5bd6377d299ada22d1ae7ef
075531f525e625b117b2497f31139c9824d0e9c5
b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 9430
x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7wyGCIIAMFhgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NMMuQ1NNks65LJK_HDAK69MfCJ3pS0Y6VzBs8_5Oku64v4FSWADCdw==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:46 GMT
age: 39291
etag: "075531f525e625b117b2497f31139c9824d0e9c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.4 kB (6376 bytes)
Hash
78b1389f425425d0450c94d900404dc4
53b12a8702f7c5b7cc697e2a24da824d9434be65
0c1659ab3afc6e45f9e3acb12f8865bb99e4668f7df4501b1cc740e53f5b62ed

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6376
x-amzn-requestid: 25b82353-9c15-44c0-ada5-55f4697de935
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_KGeaoAMFb_Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-71711cca7c063030292c5e47;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: odmAWkNyUMevvXStu7zRJyckokhyBjUwu7-JSvj8by-JWJ9eAm9P5Q==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:46 GMT
age: 39291
etag: "53b12a8702f7c5b7cc697e2a24da824d9434be65"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd94c980-e701-4603-9381-0bd47116d31d.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.0 kB (5989 bytes)
Hash
fa848cb85e85df184b078fe7aa95ae52
21aa6418f3a0d2b64925b66d5fb9079b7e84a11c
37d299c166e3350dee6dee647e98a86f8bd916d186bae12c42764ed0a3177085

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd94c980-e701-4603-9381-0bd47116d31d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 5989
x-amzn-requestid: db10fcc5-80ab-4650-af49-d5afe36706f3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR78LHQqIAMF9_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d9e7-4cbd19e3227894844807742c;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: A5n6y1-hpgr4vynnRXkEZNvCvjlNGH6brl7eYMsdN1MST7YoD2BPgA==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:51:13 GMT
age: 39924
etag: "21aa6418f3a0d2b64925b66d5fb9079b7e84a11c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a11c6ec-01ab-453a-a13d-c7804535dc69.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.8 kB (8771 bytes)
Hash
b0bd385532089b45a14e461abbecc1af
3da359b1ba09138a425094715b9f3a2f8d0257fe
803001528f2aefc1ea90e585d48de435975862861a1cbe8d898e5cd7ebd297dd

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a11c6ec-01ab-453a-a13d-c7804535dc69.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8771
x-amzn-requestid: 995d3904-9be1-4b40-9813-ff47e60639ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_MEAPoAMF0xw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d861-3fdb7958064e0c4b1aed2136;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vrBB4JkuL3nbZnDWitQ4dvTruO9M6hSt8mw9NuJliCmcNOw8xvfWhw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:16:08 GMT
age: 38429
etag: "3da359b1ba09138a425094715b9f3a2f8d0257fe"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ff6b6f2-e6dd-4654-9894-50de6f502f83.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (11255 bytes)
Hash
6e240caa3153ea25c34d07185b47f8a5
602e8ba5c6671ff947acfda757577ddc8ecec6ec
c2b37bf1ef003ceffaaf4612f2001b6f7998d5b95cd55b32c79fefcb24ccad7f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ff6b6f2-e6dd-4654-9894-50de6f502f83.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11255
x-amzn-requestid: ce06e0cc-3874-4a3d-a6c5-5cc1cb342138
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7w8EEOIAMF_6w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99f-5ca652aa369ee1690b0d08cc;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 6qKDE2jlIb8D2Mhg-OcsfU1haVtyGYfcMcs1NJT_HPlTv-O26tR60w==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:54:34 GMT
age: 39723
etag: "602e8ba5c6671ff947acfda757577ddc8ecec6ec"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

www.billgoodrich.com/wp-content/themes/Glider/images/leftarea-bg.jpg

162.241.30.178

200 OK

59 kB

URL HTTP/1.1
www.billgoodrich.com/wp-content/themes/Glider/images/leftarea-bg.jpg
IP
162.241.30.178:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 430x836, components 3\012- data
Size
59 kB (58671 bytes)
Hash
c5282b30240c35febfa28210a2fad5ac
904e8835fcc73cd82aafddc5fb7c527252a7ac1b
6ffc7d28cabff8facaa055bb7828319cac544654140ba49843819565e66d7c47

HTTP Headers

GET /wp-content/themes/Glider/images/leftarea-bg.jpg HTTP/1.1
Host: www.billgoodrich.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.billgoodrich.com/wp-content/themes/Glider/style.css

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 08:56:36 GMT
Server: Apache
Last-Modified: Thu, 23 Jun 2011 02:47:45 GMT
Accept-Ranges: bytes
Content-Length: 58671
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: image/jpeg

www.billgoodrich.com/favicon.ico

162.241.30.178

200 OK

822 B

URL HTTP/1.1
www.billgoodrich.com/favicon.ico
IP
162.241.30.178:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
PC bitmap, Windows 3.x format, 16 x 16 x 24, image size 768, resolution 7874 x 7874 px/m, cbSize 822, bits offset 54\012- data
Size
822 B (822 bytes)
Hash
e1e8bdc3ce87340ab6ebe467519cf245
6cd6fa4c9ccb80024d57721a3914ef18206fda4c
c3aece6f00821bd986da195aa15e2b0891b2c81a862cccf2a3069204b9a92186

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.billgoodrich.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.billgoodrich.com/

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 08:56:37 GMT
Server: Apache
Last-Modified: Sun, 07 May 2006 20:22:00 GMT
Accept-Ranges: bytes
Content-Length: 822
Cache-Control: max-age=604800
Expires: Mon, 05 Dec 2022 08:56:37 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: image/x-icon

34.120.237.76

200 OK

13 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbfe1c9b5-b323-496c-a65c-09c1511f882f.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
13 kB (12555 bytes)
Hash
f20d5c4b208740dd4c737b9d95c0e1d0
c843c5422499736a83a80c2b07475a8dbbb8860f
f8d048a2c911aaedfa53b7d6e134638e8c36db0700a874fe99e0d8f847970a1b

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbfe1c9b5-b323-496c-a65c-09c1511f882f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 12555
x-amzn-requestid: 2d9827ba-fc88-4deb-9844-f5b42764b2e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_MHPWIAMFQMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d861-42986aeb284115943c849306;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: up0DWugUp4S0jAtsA-KBRapBAHtcHCdTwWJock-y22fqyL6_YVFeqg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:51:09 GMT
age: 39934
etag: "c843c5422499736a83a80c2b07475a8dbbb8860f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (14)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations