Overview

URL fundaciondarydarse.org/dora-bayer/williambrown-72.zip
IP50.87.146.64
ASNUNIFIEDLAYER-AS-1
Location United States
Report completed2022-10-04 17:52:59 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-10-04 2 fundaciondarydarse.org/dora-bayer/williambrown-72.zip Malware
2022-10-04 2 fundaciondarydarse.org/dora-bayer/williambrown-72.zip Malware
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

No files detected



Passive DNS (18)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-10-04 15:17:25 UTC 93.184.220.29
mnemonic passive DNS maps.gstatic.com (1) 0 2016-01-11 16:55:17 UTC 2022-10-04 05:38:13 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
mnemonic passive DNS stats.g.doubleclick.net (1) 96 2013-06-02 22:47:44 UTC 2022-10-04 05:06:06 UTC 74.125.131.156
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-10-04 04:16:51 UTC 34.117.237.239
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-10-04 04:45:06 UTC 44.237.239.70
mnemonic passive DNS stats.wp.com (2) 2711 2017-01-30 05:06:59 UTC 2022-10-04 04:26:46 UTC 192.0.76.3
mnemonic passive DNS fonts.gstatic.com (4) 0 2014-08-29 13:43:22 UTC 2022-10-04 09:46:16 UTC 216.58.207.195 Domain (gstatic.com) ranked at: 540
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-10-04 04:29:41 UTC 143.204.55.35
mnemonic passive DNS ocsp.pki.goog (10) 175 2017-06-14 07:23:31 UTC 2022-10-04 04:17:09 UTC 142.250.74.3
mnemonic passive DNS fonts.googleapis.com (1) 8877 2013-06-10 20:14:26 UTC 2022-10-04 11:55:48 UTC 142.250.74.10
mnemonic passive DNS pixel.wp.com (1) 2545 2017-01-30 05:31:40 UTC 2022-10-04 04:26:51 UTC 192.0.76.3
mnemonic passive DNS img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-10-04 12:43:11 UTC 34.120.237.76
mnemonic passive DNS www.google-analytics.com (1) 40 2012-10-03 01:04:21 UTC 2022-10-04 16:11:03 UTC 142.250.74.174
mnemonic passive DNS www.gstatic.com (1) 0 2016-07-26 09:37:06 UTC 2022-10-04 10:11:20 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-05-27 20:08:30 UTC 2022-10-04 15:06:58 UTC 143.204.55.115
mnemonic passive DNS r3.o.lencr.org (6) 344 2020-12-02 08:52:13 UTC 2022-10-04 04:17:22 UTC 23.36.76.226
mnemonic passive DNS fundaciondarydarse.org (68) 0 2020-05-04 04:44:19 UTC 2022-10-04 15:34:43 UTC 50.87.146.64 Unknown ranking
mnemonic passive DNS www.googletagmanager.com (1) 75 2012-12-25 14:52:06 UTC 2022-10-04 09:37:43 UTC 142.250.74.168


Recent reports on same IP/ASN/Domain/Screenshot

Last 3 reports on IP: 50.87.146.64

Date UQ / IDS / BL URL IP
2022-10-04 17:52:59 +0000
0 - 0 - 2 fundaciondarydarse.org/dora-bayer/williambrow (...) 50.87.146.64
2022-10-04 15:40:47 +0000
0 - 0 - 2 fundaciondarydarse.org/dora-bayer/sisley_gete (...) 50.87.146.64
2022-10-04 15:39:25 +0000
0 - 0 - 2 fundaciondarydarse.org/dora-bayer/priscilla_m (...) 50.87.146.64

Last 5 reports on ASN: UNIFIEDLAYER-AS-1

Date UQ / IDS / BL URL IP
2022-12-01 13:22:54 +0000
18 - 0 - 33 delivery.imaginedbyjess.co/public/WBWHfowTTcJ (...) 192.232.249.125
2022-12-01 13:22:54 +0000
0 - 0 - 8 delivery.imaginedbyjess.co/public/twTc54rXmWc (...) 192.232.249.125
2022-12-01 13:22:52 +0000
18 - 0 - 33 delivery.imaginedbyjess.co/public/87a3ZKy78Of (...) 192.232.249.125
2022-12-01 13:22:38 +0000
18 - 0 - 33 delivery.imaginedbyjess.co/public/zbCuUPlK73p (...) 192.232.249.125
2022-12-01 12:57:16 +0000
0 - 0 - 19 pisopelvico.com.mx/ 192.185.103.153

Last 3 reports on domain: fundaciondarydarse.org

Date UQ / IDS / BL URL IP
2022-10-04 17:52:59 +0000
0 - 0 - 2 fundaciondarydarse.org/dora-bayer/williambrow (...) 50.87.146.64
2022-10-04 15:40:47 +0000
0 - 0 - 2 fundaciondarydarse.org/dora-bayer/sisley_gete (...) 50.87.146.64
2022-10-04 15:39:25 +0000
0 - 0 - 2 fundaciondarydarse.org/dora-bayer/priscilla_m (...) 50.87.146.64

Last 1 reports with similar screenshot

Date UQ / IDS / BL URL IP
2022-10-04 15:39:25 +0000
0 - 0 - 2 fundaciondarydarse.org/dora-bayer/priscilla_m (...) 50.87.146.64


JavaScript

Executed Scripts (69)


Executed Evals (6)

#1 JavaScript::Eval (size: 15548, repeated: 1) - SHA256: 1bf232e3afa032afeeb821804dac4bdcfae32c16178d33975a668df67e9d0841

                                        /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */
(function() {
    var x = function(U, v) {
            if (!(U = (v = null, A.trustedTypes), U) || !U.createPolicy) return v;
            try {
                v = U.createPolicy("bg", {
                    createHTML: J,
                    createScript: J,
                    createScriptURL: J
                })
            } catch (C) {
                A.console && A.console.error(C.message)
            }
            return v
        },
        A = this || self,
        J = function(U) {
            return U
        };
    (0, eval)(function(U, v) {
        return (v = x()) && 1 === U.eval(v.createScript("1")) ? function(C) {
            return v.createScript(C)
        } : function(C) {
            return "" + C
        }
    }(A)(Array(7824 * Math.random() | 0).join("\n") + '(function(){var vF=function(U,v){if(!(U=(v=null,n.trustedTypes),U)||!U.createPolicy)return v;try{v=U.createPolicy("bg",{createHTML:UK,createScript:UK,createScriptURL:UK})}catch(A){n.console&&n.console.error(A.message)}return v},oh=function(U,v,A,x,e,C){function J(){if(v.P==v){if(v.B){var r=[M,x,U,void 0,e,C,arguments];if(2==A)var N=I(false,false,(L(r,v),v));else if(1==A){var O=!v.u.length;L(r,v),O&&I(false,false,v)}else N=Cw(v,r);return N}e&&C&&e.removeEventListener(C,J,q)}}return J},A4=function(U,v){return U[v]<<24|U[(v|0)+1]<<16|U[(v|0)+2]<<8|U[(v|0)+3]},r0=function(U,v,A,x){return(X(403,A,(xc((x=E(403,A),A.V&&x<A.H?(X(403,A,A.H),J4(v,A)):X(403,A,v),U),A),x)),E)(368,A)},Nn=function(U,v,A,x,e,C,J,r){return(v=[60,32,-94,21,71,(J=U&(r=er,7),74),v,90,56,20],C=V[A.Z](A.Px),C[A.Z]=function(N){J+=6+7*(e=N,U),J&=7},C).concat=function(N){return(e=(N=(N=(N=x%16+1,+v[J+43&7]*x*N-1184*x*e+J+37*e*e+(r()|0)*N)+3*x*x*N-111*x*x*e-N*e-3589*e,v[N]),void 0),v)[(J+21&7)+(U&2)]=N,v[J+(U&2)]=32,N},C},kc=function(U,v,A,x,e){for(e=(x=(U.Px=(U.lG=U[U.Mx=(U.pf=nw,OK),W],lX)(U.Z,{get:function(){return this.concat()}}),U.Hx=V[U.Z](U.Px,{value:{value:{}}}),0),[]);128>x;x++)e[x]=String.fromCharCode(x);I(true,true,(L((L((F(260,function(C,J,r,N,O,l,z,k,a,m,y,f){function u(D,b){for(;l<D;)r|=Q(C)<<l,l+=8;return b=r&(l-=D,(1<<D)-1),r>>=D,b}for(k=((l=(a=S(C),r=0),u(3))|0)+1,O=u(5),J=[],z=m=0;z<O;z++)y=u(1),J.push(y),m+=y?0:1;for(z=(m=((m|0)-1).toString(2).length,N=[],0);z<O;z++)J[z]||(N[z]=u(m));for(m=0;m<O;m++)J[m]&&(N[m]=S(C));for(f=[];k--;)f.push(E(S(C),C));F(a,function(D,b,w,T,t){for(w=(T=[],0),b=[];w<O;w++){if(!J[t=N[w],w]){for(;t>=T.length;)T.push(S(D));t=T[t]}b.push(t)}D.g=mv((D.i=mv(f.slice(),D),b),D)},C)},(U.zk=(X(39,(F(153,function(C,J){J4((J=E(S(C),C),J),C.P)},(F(76,((X(23,U,((F(257,(X(220,(F(203,function(C,J,r,N){J=(r=S(C),N=S(C),S(C)),C.P==C&&(J=E(J,C),N=E(N,C),E(r,C)[N]=J,495==r&&(C.l=void 0,2==N&&(C.v=Z(C,32,false),C.l=void 0)))},(F(77,function(C,J,r,N,O,l,z){for(r=(O=(l=E((N=(z=qn((J=S(C),C)),""),48),C),l.length),0);z--;)r=((r|0)+(qn(C)|0))%O,N+=e[l[r]];X(J,C,N)},(F(197,function(C,J){(J=S(C),C=E(J,C.P),C[0]).removeEventListener(C[1],C[2],q)},(F(145,function(C,J,r,N,O,l){if(!G(C,true,J,true)){if("object"==(r=(l=(r=S((O=S((J=(l=S(C),S(C)),C)),C)),J=E(J,C),E(l,C)),E(r,C)),C=E(O,C),zh(l))){for(N in O=[],l)O.push(N);l=O}for(O=(N=0,C=0<C?C:1,l).length;N<O;N+=C)J(l.slice(N,(N|0)+(C|0)),r)}},(F(204,(X(4,(F(146,(F(319,(F(247,function(C,J,r,N,O){X((J=(O=E((N=E((N=(J=(O=S((r=S(C),C)),S(C)),S(C)),N),C),O),C),E)(J,C),r),C,oh(J,C,N,O))},(X(109,U,((X(368,U,(F(42,(X(217,(F(486,(F(55,(F(226,function(C,J,r,N){!G(C,true,J,false)&&(J=Ih(C),N=J.Bx,r=J.I,C.P==C||r==C.nf&&N==C)&&(X(J.Al,C,r.apply(N,J.S)),C.Y=C.G())},(F(308,(F(436,(U.Y5=(F(483,function(C,J,r,N){if(J=C.a1.pop()){for(N=Q(C);0<N;N--)r=S(C),J[r]=C.B[r];C.B=(J[4]=C.B[J[52]=C.B[52],4],J)}else X(403,C,C.H)},(F(405,function(C){jr(4,C)},(F(475,(X(52,(F(64,function(C,J,r){(r=(r=(J=S(C),S)(C),E)(r,C),0)!=E(J,C)&&X(403,C,r)},(X(491,U,(F(460,(F(131,(X(51,U,(X(((X(403,(((U.H=0,U.V8=(U.o=[],U.B=[],U.g=(U.a1=[],U.O=(U.D=0,false),U.N=void 0,void 0),((U.i=void 0,U).A=(x=window.performance||{},void 0),U).U=(U.X=((U.uG=(U.l=void 0,U.j=false,!(U.R=0,1)),U).h=(U.P=U,U.V=(U.J=(U.W=1,null),[]),U.F=[],0),U.C=void 0,8001),U.K=(U.v=void 0,25),U.Y=0,0),0),U).nf=function(C){this.P=C},U.u=[],U).Gk=x.timeOrigin||(x.timing||{}).navigationStart||0,U),0),X)(105,U,0),208),U,U),[])),function(C,J,r,N){(r=E((N=(J=S((r=(N=S(C),S(C)),C)),E(N,C)),r),C),X)(J,C,N[r])}),U),function(C,J,r,N){r=E((J=S((N=S(C),r=S(C),C)),r),C),N=E(N,C)==r,X(J,C,+N)}),U),R(4))),F(478,function(C,J,r,N){X((r=E((J=E((r=S((J=S(C),C)),N=S(C),J),C),r),C),N),C,J in r|0)},U),U)),U),[]),function(C){Lw(C,4)}),U),U)),U)),0),function(){}),U),function(C,J,r,N,O,l){G(C,true,J,false)||(l=Ih(C.P),N=l.Bx,O=l.I,J=l.Al,l=l.S,r=l.length,N=0==r?new N[O]:1==r?new N[O](l[0]):2==r?new N[O](l[0],l[1]):3==r?new N[O](l[0],l[1],l[2]):4==r?new N[O](l[0],l[1],l[2],l[3]):2(),X(J,C,N))}),U),U)),function(C,J,r,N){X((r=S((N=(J=S(C),Q)(C),C)),r),C,E(J,C)>>>N)}),U),function(C){jr(1,C)}),U),U),[0,0,0]),function(C,J,r,N,O){0!==(J=E((N=(r=E((O=(J=(r=(N=(O=S(C),S(C)),S(C)),S)(C),E(O,C.P)),r),C),E)(N,C),J),C),O)&&(J=oh(J,C,1,r,O,N),O.addEventListener(N,J,q),X(39,C,[O,N,J]))}),U),{})),X)(16,U,n),0)),U)),function(C,J,r,N){r=(J=S(C),N=S(C),S)(C),X(r,C,E(J,C)||E(N,C))}),U),function(C,J,r){X((r=(J=(r=S(C),S(C)),r=E(r,C),zh)(r),J),C,r)}),U),U),2048),function(C,J,r){G(C,true,J,false)||(J=S(C),r=S(C),X(r,C,function(N){return eval(N)}(Mn(E(J,C.P)))))}),U),U)),U)),U)),U)),U),[160,0,0]),function(C){ah(4,C)}),U),F)(366,function(C,J,r){X((r=S(C),J=S(C),J),C,""+E(r,C))},U),426)),F)(395,function(C,J,r,N,O){for(r=(O=qn((J=S(C),C)),N=0,[]);N<O;N++)r.push(Q(C));X(J,C,r)},U),F(341,function(C){ah(3,C)},U),U.dh=0,function(C,J,r,N){r=(J=E((N=(J=S(C),S(C)),J),C),E)(N,C),X(N,C,r+J)}),U),U)),U),0),0),U)),[EK]),U),L([c,v],U),[XV,A]),U),U))},Q=function(U){return U.i?Vg(U.g,U):Z(U,8,true)},lX=function(U,v){return V[U](V.prototype,{call:v,floor:v,length:v,document:v,stack:v,replace:v,console:v,splice:v,prototype:v,pop:v,parent:v,propertyIsEnumerable:v})},R=function(U,v){for(v=[];U--;)v.push(255*Math.random()|0);return v},Cw=function(U,v,A,x,e){if(x=v[0],x==p)U.K=25,U.T(v);else if(x==W){A=v[1];try{e=U.A||U.T(v)}catch(C){K(U,C),e=U.A}A(e)}else if(x==fw)U.T(v);else if(x==c)U.T(v);else if(x==XV){try{for(e=0;e<U.o.length;e++)try{A=U.o[e],A[0][A[1]](A[2])}catch(C){}}catch(C){}(0,v[1])(function(C,J){U.s(C,true,J)},(U.o=[],function(C){L([(C=!U.u.length,D_)],U),C&&I(false,true,U)}))}else{if(x==M)return e=v[2],X(345,U,v[6]),X(368,U,e),U.T(v);x==D_?(U.F=[],U.B=null,U.V=[]):x==EK&&"loading"===n.document.readyState&&(U.J=function(C,J){function r(){J||(J=true,C())}(n.document.addEventListener("DOMContentLoaded",(J=false,r),q),n).addEventListener("load",r,q)})}},jr=function(U,v,A,x){h((A=(x=S(v),S(v)),A),v,H(U,E(x,v)))},I=function(U,v,A,x,e,C){if(A.u.length){A.uG=(A.j=!(A.j&&0(),0),v);try{x=A.G(),A.Y=x,A.N=0,A.U=x,C=yg(A,v),e=A.G()-A.U,A.R+=e,e<(U?0:10)||0>=A.K--||(e=Math.floor(e),A.F.push(254>=e?e:254))}finally{A.j=false}return C}},g,WF=function(U,v,A){if(3==U.length){for(A=0;3>A;A++)v[A]+=U[A];for(A=(U=0,[13,8,13,12,16,5,3,10,15]);9>U;U++)v[3](v,U%3,A[U])}},zh=function(U,v,A){if("object"==(v=typeof U,v))if(U){if(U instanceof Array)return"array";if(U instanceof Object)return v;if("[object Window]"==(A=Object.prototype.toString.call(U),A))return"object";if("[object Array]"==A||"number"==typeof U.length&&"undefined"!=typeof U.splice&&"undefined"!=typeof U.propertyIsEnumerable&&!U.propertyIsEnumerable("splice"))return"array";if("[object Function]"==A||"undefined"!=typeof U.call&&"undefined"!=typeof U.propertyIsEnumerable&&!U.propertyIsEnumerable("call"))return"function"}else return"null";else if("function"==v&&"undefined"==typeof U.call)return"object";return v},Vg=function(U,v){return(U=U.create().shift(),v.i.create()).length||v.g.create().length||(v.g=void 0,v.i=void 0),U},Lw=function(U,v,A,x){for(A=(x=S(U),0);0<v;v--)A=A<<8|Q(U);X(x,U,A)},Y=function(U,v,A){A=this;try{kc(this,U,v)}catch(x){K(this,x),v(function(e){e(A.A)})}},F=function(U,v,A){v[X(U,A,v),EK]=2796},J4=function(U,v){X(403,v,(v.a1.push(v.B.slice()),v.B[403]=void 0,U))},xc=function(U,v,A,x,e,C){if(!v.A){v.h++;try{for(x=(e=0,A=v.H,void 0);--U;)try{if((C=void 0,v).i)x=Vg(v.i,v);else{if(e=E(403,v),e>=A)break;x=(C=(X(105,v,e),S(v)),E)(C,v)}G(v,(x&&x[D_]&2048?x(v,U):d(0,v,[P,21,C]),false),U,false)}catch(J){E(23,v)?d(22,v,J):X(23,v,J)}if(!U){if(v.Zr){xc(335982656583,(v.h--,v));return}d(0,v,[P,33])}}catch(J){try{d(22,v,J)}catch(r){K(v,r)}}v.h--}},G=function(U,v,A,x,e,C,J,r,N){if(U.W+=(U.P=((e=(r=(J=(C=(N=(v||U.N++,0<U.D&&U.j&&U.uG&&1>=U.h&&!U.i&&!U.J&&(!v||1<U.X-A)&&0==document.hidden),4==U.N))||N?U.G():U.Y,J)-U.Y,r>>14),U).v&&(U.v^=e*(r<<2)),e)||U.P,e),C||N)U.Y=J,U.N=0;if(!N||J-U.U<U.D-(x?255:v?5:2))return false;return!(((X(403,(x=E(v?105:403,(U.X=A,U)),U),U.H),U).u.push([fw,x,v?A+1:A]),U).J=FV,0)},Sr=function(U,v,A,x,e){for(v=(e=v[3]|0,v[2]|0),x=0;14>x;x++)U=U>>>8|U<<24,U+=A|0,U^=v+3462,A=A<<3|A>>>29,A^=U,e=e>>>8|e<<24,e+=v|0,e^=x+3462,v=v<<3|v>>>29,v^=e;return[A>>>24&255,A>>>16&255,A>>>8&255,A>>>0&255,U>>>24&255,U>>>16&255,U>>>8&255,U>>>0&255]},Rh=function(U,v,A,x){try{x=U[((v|0)+2)%3],U[v]=(U[v]|0)-(U[((v|0)+1)%3]|0)-(x|0)^(1==v?x<<A:x>>>A)}catch(e){throw e;}},Qg=function(U,v){return U(function(A){A(v)}),[function(){return v}]},K=function(U,v){U.A=((U.A?U.A+"~":"E:")+v.message+":"+v.stack).slice(0,2048)},bX=function(U,v,A,x){function e(){}return x=uX(U,function(C){e&&(v&&FV(v),A=C,e(),e=void 0)},(A=void 0,!!v))[0],{invoke:function(C,J,r,N){function O(){A(function(l){FV(function(){C(l)})},r)}if(!J)return J=x(r),C&&C(J),J;A?O():(N=e,e=function(){(N(),FV)(O)})}}},E=function(U,v){if((v=v.B[U],void 0)===v)throw[P,30,U];if(v.value)return v.create();return v.create(3*U*U+32*U+97),v.prototype},UK=function(U){return U},n=this||self,Ih=function(U,v,A,x,e,C){for(x=(v=(((A=(C=U[Gh]||{},S)(U),C).Al=S(U),C).S=[],U.P)==U?(Q(U)|0)-1:1,S)(U),e=0;e<v;e++)C.S.push(S(U));for(C.Bx=E(x,U);v--;)C.S[v]=E(C.S[v],U);return C.I=E(A,U),C},Z_=function(U,v){((v.push(U[0]<<24|U[1]<<16|U[2]<<8|U[3]),v).push(U[4]<<24|U[5]<<16|U[6]<<8|U[7]),v).push(U[8]<<24|U[9]<<16|U[10]<<8|U[11])},cF=function(U,v,A){return U.s(function(x){A=x},false,v),A},h=function(U,v,A,x,e,C){if(v.P==v)for(e=E(U,v),491==U?(U=function(J,r,N,O){if(e.k5!=(r=(O=e.length,(O|0)-4>>3),r)){r=(r<<(N=[0,0,C[1],(e.k5=r,C[2])],3))-4;try{e.Q8=Sr(A4(e,(r|0)+4),N,A4(e,r))}catch(l){throw l;}}e.push(e.Q8[O&7]^J)},C=E(217,v)):U=function(J){e.push(J)},x&&U(x&255),v=0,x=A.length;v<x;v++)U(A[v])},X=function(U,v,A){if(403==U||105==U)v.B[U]?v.B[U].concat(A):v.B[U]=mv(A,v);else{if(v.O&&495!=U)return;220==U||491==U||51==U||52==U||217==U?v.B[U]||(v.B[U]=Nn(62,A,v,U)):v.B[U]=Nn(97,A,v,U)}495==U&&(v.v=Z(v,32,false),v.l=void 0)},L=function(U,v){v.u.splice(0,0,U)},qn=function(U,v){return(v=Q(U),v)&128&&(v=v&127|Q(U)<<7),v},FV=n.requestIdleCallback?function(U){requestIdleCallback(function(){U()},{timeout:4})}:n.setImmediate?function(U){setImmediate(U)}:function(U){setTimeout(U,0)},yg=function(U,v,A,x){for(;U.u.length;){U.J=null,x=U.u.pop();try{A=Cw(U,x)}catch(e){K(U,e)}if(v&&U.J){(v=U.J,v)(function(){I(true,true,U)});break}}return A},B,ah=function(U,v,A,x,e){h(((A=E((A=S((e=U&4,U&=3,v)),x=S(v),A),v),e&&(A=pw(""+A)),U)&&h(x,v,H(2,A.length)),x),v,A)},d=function(U,v,A,x,e,C){if(!v.O){if((U=(0==(x=E(52,((C=void 0,A)&&A[0]===P&&(U=A[1],C=A[2],A=void 0),v)),x.length)&&(e=E(105,v)>>3,x.push(U,e>>8&255,e&255),void 0!=C&&x.push(C&255)),""),A&&(A.message&&(U+=A.message),A.stack&&(U+=":"+A.stack)),A=E(4,v),3)<A){v.P=(C=(U=(A-=((U=U.slice(0,(A|0)-3),U).length|0)+3,pw)(U),v.P),v);try{h(491,v,H(2,U.length).concat(U),9)}finally{v.P=C}}X(4,v,A)}},H=function(U,v,A,x){for(x=(U|0)-(A=[],1);0<=x;x--)A[(U|0)-1-(x|0)]=v>>8*x&255;return A},S=function(U,v){if(U.i)return Vg(U.g,U);return(v=Z(U,8,true),v&128)&&(v^=128,U=Z(U,2,true),v=(v<<2)+(U|0)),v},q={passive:true,capture:true},uX=function(U,v,A,x){return(x=g[U.substring(0,3)+"_"])?x(U.substring(3),v,A):Qg(v,U)},pw=function(U,v,A,x,e){for(e=(U=U.replace(/\\r\\n/g,"\\n"),A=v=0,[]);A<U.length;A++)x=U.charCodeAt(A),128>x?e[v++]=x:(2048>x?e[v++]=x>>6|192:(55296==(x&64512)&&A+1<U.length&&56320==(U.charCodeAt(A+1)&64512)?(x=65536+((x&1023)<<10)+(U.charCodeAt(++A)&1023),e[v++]=x>>18|240,e[v++]=x>>12&63|128):e[v++]=x>>12|224,e[v++]=x>>6&63|128),e[v++]=x&63|128);return e},mv=function(U,v,A){return((A=V[v.Z](v.Hx),A)[v.Z]=function(){return U},A).concat=function(x){U=x},A},Z=function(U,v,A,x,e,C,J,r,N,O,l,z,k,a){if(N=E(403,U),N>=U.H)throw[P,31];for(l=(z=(r=v,x=U.lG.length,0),N);0<r;)J=l%8,a=8-(J|0),O=l>>3,a=a<r?a:r,k=U.V[O],A&&(e=U,e.l!=l>>6&&(e.l=l>>6,C=E(495,e),e.C=Sr(e.l,[0,0,C[1],C[2]],e.v)),k^=U.C[O&x]),l+=a,z|=(k>>8-(J|0)-(a|0)&(1<<a)-1)<<(r|0)-(a|0),r-=a;return X(403,(A=z,U),(N|0)+(v|0)),A},Gh=String.fromCharCode(105,110,116,101,103,67,104,101,99,107,66,121,112,97,115,115),p=((Y.prototype.mN=void 0,Y.prototype).U3=void 0,Y.prototype.Zr=false,[]),M=(Y.prototype.L="toString",[]),fw=[],P={},XV=[],EK=[],c=[],D_=[],W=[],er=((((((((Z_,function(){})(R),Rh,function(){})(WF),B=Y.prototype,B.vx=function(U,v,A){return U^((v=(v^=v<<13,v^=v>>17,(v^v<<5)&A))||(v=1),v)},B).Tk=function(U,v,A,x,e){for(e=x=0;x<U.length;x++)e+=U.charCodeAt(x),e+=e<<10,e^=e>>6;return(U=(e+=e<<3,e^=e>>11,e+(e<<15))>>>0,x=new Number(U&(1<<v)-1),x)[0]=(U>>>v)%A,x},Y.prototype).Z="create",B.s=function(U,v,A,x,e){if((A="array"===zh(A)?A:[A],this).A)U(this.A);else try{x=[],e=!this.u.length,L([p,x,A],this),L([W,U,x],this),v&&!e||I(true,v,this)}catch(C){K(this,C),U(this.A)}},B).y8=function(){return Math.floor(this.R+(this.G()-this.U))},B).ff=function(U,v,A,x,e,C){for(A=(e=C=0,[]);C<U.length;C++)for(x=x<<v|U[C],e+=v;7<e;)e-=8,A.push(x>>e&255);return A},B).G=(window.performance||{}).now?function(){return this.Gk+window.performance.now()}:function(){return+new Date},void 0),V=P.constructor;(B.gh=function(){return Math.floor(this.G())},Y.prototype).T=function(U,v){return U={},er=function(){return v==U?97:61},v={},function(A,x,e,C,J,r,N,O,l,z,k,a,m,y,f){v=(C=v,U);try{if(f=A[0],f==c){a=A[1];try{for(r=atob((x=[],a)),l=O=0;O<r.length;O++)y=r.charCodeAt(O),255<y&&(x[l++]=y&255,y>>=8),x[l++]=y;X(495,(this.H=(this.V=x,this.V.length<<3),this),[0,0,0])}catch(u){d(17,this,u);return}xc(8001,this)}else if(f==p)A[1].push(E(220,this).length,E(51,this).length,E(4,this),E(491,this).length),X(368,this,A[2]),this.B[458]&&r0(8001,E(458,this),this);else{if(f==W){this.P=(m=H(2,(E(220,(O=A[2],this)).length|0)+2),J=this.P,this);try{N=E(52,this),0<N.length&&h(220,this,H(2,N.length).concat(N),10),h(220,this,H(1,this.W),109),h(220,this,H(1,this[W].length)),r=0,r-=(E(220,this).length|0)+5,r+=E(109,this)&2047,z=E(491,this),4<z.length&&(r-=(z.length|0)+3),0<r&&h(220,this,H(2,r).concat(R(r)),15),4<z.length&&h(220,this,H(2,z.length).concat(z),156)}finally{this.P=J}if(e=(l=R(2).concat(E(220,this)),l[1]=l[0]^6,l[3]=l[1]^m[0],l[4]=l[1]^m[1],this).iG(l))e="!"+e;else for(r=0,e="";r<l.length;r++)k=l[r][this.L](16),1==k.length&&(k="0"+k),e+=k;return E(491,(E((x=e,220),this).length=O.shift(),E(51,this).length=O.shift(),X(4,this,O.shift()),this)).length=O.shift(),x}if(f==fw)r0(A[2],A[1],this);else if(f==M)return r0(8001,A[1],this)}}finally{v=C}}}();var nw,OK=(Y.prototype.hl=(Y.prototype[XV]=[0,0,1,1,0,1,1],Y.prototype.iG=function(U,v,A,x){if(x=window.btoa){for(A=(v=0,"");v<U.length;v+=8192)A+=String.fromCharCode.apply(null,U.slice(v,v+8192));U=x(A).replace(/\\+/g,"-").replace(/\\//g,"_").replace(/=/g,"")}else U=void 0;return U},Y.prototype.Jl=0,0),/./),Kw=c.pop.bind(Y.prototype[p]),Mn=(nw=lX(Y.prototype.Z,{get:(OK[Y.prototype.L]=Kw,Kw)}),Y.prototype.Su=void 0,function(U,v){return(v=vF())&&1===U.eval(v.createScript("1"))?function(A){return v.createScript(A)}:function(A){return""+A}})(n);40<(g=n.botguard||(n.botguard={}),g.m)||(g.m=41,g.bg=bX,g.a=uX),g.qBf_=function(U,v,A){return A=new Y(U,v),[function(x){return cF(A,x)}]};}).call(this);'));
}).call(this);
                                    

#2 JavaScript::Eval (size: 16806, repeated: 1) - SHA256: bc823986a5e18fbb680322d25b4c962fe8835ee198005df271d0f57aededc05c

                                        (function() {
    var vF = function(U, v) {
            if (!(U = (v = null, n.trustedTypes), U) || !U.createPolicy) return v;
            try {
                v = U.createPolicy("bg", {
                    createHTML: UK,
                    createScript: UK,
                    createScriptURL: UK
                })
            } catch (A) {
                n.console && n.console.error(A.message)
            }
            return v
        },
        oh = function(U, v, A, x, e, C) {
            function J() {
                if (v.P == v) {
                    if (v.B) {
                        var r = [M, x, U, void 0, e, C, arguments];
                        if (2 == A) var N = I(false, false, (L(r, v), v));
                        else if (1 == A) {
                            var O = !v.u.length;
                            L(r, v), O && I(false, false, v)
                        } else N = Cw(v, r);
                        return N
                    }
                    e && C && e.removeEventListener(C, J, q)
                }
            }
            return J
        },
        A4 = function(U, v) {
            return U[v] << 24 | U[(v | 0) + 1] << 16 | U[(v | 0) + 2] << 8 | U[(v | 0) + 3]
        },
        r0 = function(U, v, A, x) {
            return (X(403, A, (xc((x = E(403, A), A.V && x < A.H ? (X(403, A, A.H), J4(v, A)) : X(403, A, v), U), A), x)), E)(368, A)
        },
        Nn = function(U, v, A, x, e, C, J, r) {
            return (v = [60, 32, -94, 21, 71, (J = U & (r = er, 7), 74), v, 90, 56, 20], C = V[A.Z](A.Px), C[A.Z] = function(N) {
                J += 6 + 7 * (e = N, U), J &= 7
            }, C).concat = function(N) {
                return (e = (N = (N = (N = x % 16 + 1, +v[J + 43 & 7] * x * N - 1184 * x * e + J + 37 * e * e + (r() | 0) * N) + 3 * x * x * N - 111 * x * x * e - N * e - 3589 * e, v[N]), void 0), v)[(J + 21 & 7) + (U & 2)] = N, v[J + (U & 2)] = 32, N
            }, C
        },
        kc = function(U, v, A, x, e) {
            for (e = (x = (U.Px = (U.lG = U[U.Mx = (U.pf = nw, OK), W], lX)(U.Z, {get: function() {
                        return this.concat()
                    }
                }), U.Hx = V[U.Z](U.Px, {
                    value: {
                        value: {}
                    }
                }), 0), []); 128 > x; x++) e[x] = String.fromCharCode(x);
            I(true, true, (L((L((F(260, function(C, J, r, N, O, l, z, k, a, m, y, f) {
                function u(D, b) {
                    for (; l < D;) r |= Q(C) << l, l += 8;
                    return b = r & (l -= D, (1 << D) - 1), r >>= D, b
                }
                for (k = ((l = (a = S(C), r = 0), u(3)) | 0) + 1, O = u(5), J = [], z = m = 0; z < O; z++) y = u(1), J.push(y), m += y ? 0 : 1;
                for (z = (m = ((m | 0) - 1).toString(2).length, N = [], 0); z < O; z++) J[z] || (N[z] = u(m));
                for (m = 0; m < O; m++) J[m] && (N[m] = S(C));
                for (f = []; k--;) f.push(E(S(C), C));
                F(a, function(D, b, w, T, t) {
                    for (w = (T = [], 0), b = []; w < O; w++) {
                        if (!J[t = N[w], w]) {
                            for (; t >= T.length;) T.push(S(D));
                            t = T[t]
                        }
                        b.push(t)
                    }
                    D.g = mv((D.i = mv(f.slice(), D), b), D)
                }, C)
            }, (U.zk = (X(39, (F(153, function(C, J) {
                J4((J = E(S(C), C), J), C.P)
            }, (F(76, ((X(23, U, ((F(257, (X(220, (F(203, function(C, J, r, N) {
                J = (r = S(C), N = S(C), S(C)), C.P == C && (J = E(J, C), N = E(N, C), E(r, C)[N] = J, 495 == r && (C.l = void 0, 2 == N && (C.v = Z(C, 32, false), C.l = void 0)))
            }, (F(77, function(C, J, r, N, O, l, z) {
                for (r = (O = (l = E((N = (z = qn((J = S(C), C)), ""), 48), C), l.length), 0); z--;) r = ((r | 0) + (qn(C) | 0)) % O, N += e[l[r]];
                X(J, C, N)
            }, (F(197, function(C, J) {
                (J = S(C), C = E(J, C.P), C[0]).removeEventListener(C[1], C[2], q)
            }, (F(145, function(C, J, r, N, O, l) {
                if (!G(C, true, J, true)) {
                    if ("object" == (r = (l = (r = S((O = S((J = (l = S(C), S(C)), C)), C)), J = E(J, C), E(l, C)), E(r, C)), C = E(O, C), zh(l))) {
                        for (N in O = [], l) O.push(N);
                        l = O
                    }
                    for (O = (N = 0, C = 0 < C ? C : 1, l).length; N < O; N += C) J(l.slice(N, (N | 0) + (C | 0)), r)
                }
            }, (F(204, (X(4, (F(146, (F(319, (F(247, function(C, J, r, N, O) {
                X((J = (O = E((N = E((N = (J = (O = S((r = S(C), C)), S(C)), S(C)), N), C), O), C), E)(J, C), r), C, oh(J, C, N, O))
            }, (X(109, U, ((X(368, U, (F(42, (X(217, (F(486, (F(55, (F(226, function(C, J, r, N) {
                !G(C, true, J, false) && (J = Ih(C), N = J.Bx, r = J.I, C.P == C || r == C.nf && N == C) && (X(J.Al, C, r.apply(N, J.S)), C.Y = C.G())
            }, (F(308, (F(436, (U.Y5 = (F(483, function(C, J, r, N) {
                if (J = C.a1.pop()) {
                    for (N = Q(C); 0 < N; N--) r = S(C), J[r] = C.B[r];
                    C.B = (J[4] = C.B[J[52] = C.B[52], 4], J)
                } else X(403, C, C.H)
            }, (F(405, function(C) {
                jr(4, C)
            }, (F(475, (X(52, (F(64, function(C, J, r) {
                (r = (r = (J = S(C), S)(C), E)(r, C), 0) != E(J, C) && X(403, C, r)
            }, (X(491, U, (F(460, (F(131, (X(51, U, (X(((X(403, (((U.H = 0, U.V8 = (U.o = [], U.B = [], U.g = (U.a1 = [], U.O = (U.D = 0, false), U.N = void 0, void 0), ((U.i = void 0, U).A = (x = window.performance || {}, void 0), U).U = (U.X = ((U.uG = (U.l = void 0, U.j = false, !(U.R = 0, 1)), U).h = (U.P = U, U.V = (U.J = (U.W = 1, null), []), U.F = [], 0), U.C = void 0, 8001), U.K = (U.v = void 0, 25), U.Y = 0, 0), 0), U).nf = function(C) {
                this.P = C
            }, U.u = [], U).Gk = x.timeOrigin || (x.timing || {}).navigationStart || 0, U), 0), X)(105, U, 0), 208), U, U), [])), function(C, J, r, N) {
                (r = E((N = (J = S((r = (N = S(C), S(C)), C)), E(N, C)), r), C), X)(J, C, N[r])
            }), U), function(C, J, r, N) {
                r = E((J = S((N = S(C), r = S(C), C)), r), C), N = E(N, C) == r, X(J, C, +N)
            }), U), R(4))), F(478, function(C, J, r, N) {
                X((r = E((J = E((r = S((J = S(C), C)), N = S(C), J), C), r), C), N), C, J in r | 0)
            }, U), U)), U), []), function(C) {
                Lw(C, 4)
            }), U), U)), U)), 0), function() {}), U), function(C, J, r, N, O, l) {
                G(C, true, J, false) || (l = Ih(C.P), N = l.Bx, O = l.I, J = l.Al, l = l.S, r = l.length, N = 0 == r ? new N[O] : 1 == r ? new N[O](l[0]) : 2 == r ? new N[O](l[0], l[1]) : 3 == r ? new N[O](l[0], l[1], l[2]) : 4 == r ? new N[O](l[0], l[1], l[2], l[3]) : 2(), X(J, C, N))
            }), U), U)), function(C, J, r, N) {
                X((r = S((N = (J = S(C), Q)(C), C)), r), C, E(J, C) >>> N)
            }), U), function(C) {
                jr(1, C)
            }), U), U), [0, 0, 0]), function(C, J, r, N, O) {
                0 !== (J = E((N = (r = E((O = (J = (r = (N = (O = S(C), S(C)), S(C)), S)(C), E(O, C.P)), r), C), E)(N, C), J), C), O) && (J = oh(J, C, 1, r, O, N), O.addEventListener(N, J, q), X(39, C, [O, N, J]))
            }), U), {})), X)(16, U, n), 0)), U)), function(C, J, r, N) {
                r = (J = S(C), N = S(C), S)(C), X(r, C, E(J, C) || E(N, C))
            }), U), function(C, J, r) {
                X((r = (J = (r = S(C), S(C)), r = E(r, C), zh)(r), J), C, r)
            }), U), U), 2048), function(C, J, r) {
                G(C, true, J, false) || (J = S(C), r = S(C), X(r, C, function(N) {
                    return eval(N)
                }(Mn(E(J, C.P)))))
            }), U), U)), U)), U)), U)), U), [160, 0, 0]), function(C) {
                ah(4, C)
            }), U), F)(366, function(C, J, r) {
                X((r = S(C), J = S(C), J), C, "" + E(r, C))
            }, U), 426)), F)(395, function(C, J, r, N, O) {
                for (r = (O = qn((J = S(C), C)), N = 0, []); N < O; N++) r.push(Q(C));
                X(J, C, r)
            }, U), F(341, function(C) {
                ah(3, C)
            }, U), U.dh = 0, function(C, J, r, N) {
                r = (J = E((N = (J = S(C), S(C)), J), C), E)(N, C), X(N, C, r + J)
            }), U), U)), U), 0), 0), U)), [EK]), U), L([c, v], U), [XV, A]), U), U))
        },
        Q = function(U) {
            return U.i ? Vg(U.g, U) : Z(U, 8, true)
        },
        lX = function(U, v) {
            return V[U](V.prototype, {
                call: v,
                floor: v,
                length: v,
                document: v,
                stack: v,
                replace: v,
                console: v,
                splice: v,
                prototype: v,
                pop: v,
                parent: v,
                propertyIsEnumerable: v
            })
        },
        R = function(U, v) {
            for (v = []; U--;) v.push(255 * Math.random() | 0);
            return v
        },
        Cw = function(U, v, A, x, e) {
            if (x = v[0], x == p) U.K = 25, U.T(v);
            else if (x == W) {
                A = v[1];
                try {
                    e = U.A || U.T(v)
                } catch (C) {
                    K(U, C), e = U.A
                }
                A(e)
            } else if (x == fw) U.T(v);
            else if (x == c) U.T(v);
            else if (x == XV) {
                try {
                    for (e = 0; e < U.o.length; e++) try {
                        A = U.o[e], A[0][A[1]](A[2])
                    } catch (C) {}
                } catch (C) {}(0, v[1])(function(C, J) {
                    U.s(C, true, J)
                }, (U.o = [], function(C) {
                    L([(C = !U.u.length, D_)], U), C && I(false, true, U)
                }))
            } else {
                if (x == M) return e = v[2], X(345, U, v[6]), X(368, U, e), U.T(v);
                x == D_ ? (U.F = [], U.B = null, U.V = []) : x == EK && "loading" === n.document.readyState && (U.J = function(C, J) {
                    function r() {
                        J || (J = true, C())
                    }(n.document.addEventListener("DOMContentLoaded", (J = false, r), q), n).addEventListener("load", r, q)
                })
            }
        },
        jr = function(U, v, A, x) {
            h((A = (x = S(v), S(v)), A), v, H(U, E(x, v)))
        },
        I = function(U, v, A, x, e, C) {
            if (A.u.length) {
                A.uG = (A.j = !(A.j && 0(), 0), v);
                try {
                    x = A.G(), A.Y = x, A.N = 0, A.U = x, C = yg(A, v), e = A.G() - A.U, A.R += e, e < (U ? 0 : 10) || 0 >= A.K-- || (e = Math.floor(e), A.F.push(254 >= e ? e : 254))
                } finally {
                    A.j = false
                }
                return C
            }
        },
        g, WF = function(U, v, A) {
            if (3 == U.length) {
                for (A = 0; 3 > A; A++) v[A] += U[A];
                for (A = (U = 0, [13, 8, 13, 12, 16, 5, 3, 10, 15]); 9 > U; U++) v[3](v, U % 3, A[U])
            }
        },
        zh = function(U, v, A) {
            if ("object" == (v = typeof U, v))
                if (U) {
                    if (U instanceof Array) return "array";
                    if (U instanceof Object) return v;
                    if ("[object Window]" == (A = Object.prototype.toString.call(U), A)) return "object";
                    if ("[object Array]" == A || "number" == typeof U.length && "undefined" != typeof U.splice && "undefined" != typeof U.propertyIsEnumerable && !U.propertyIsEnumerable("splice")) return "array";
                    if ("[object Function]" == A || "undefined" != typeof U.call && "undefined" != typeof U.propertyIsEnumerable && !U.propertyIsEnumerable("call")) return "function"
                } else return "null";
            else if ("function" == v && "undefined" == typeof U.call) return "object";
            return v
        },
        Vg = function(U, v) {
            return (U = U.create().shift(), v.i.create()).length || v.g.create().length || (v.g = void 0, v.i = void 0), U
        },
        Lw = function(U, v, A, x) {
            for (A = (x = S(U), 0); 0 < v; v--) A = A << 8 | Q(U);
            X(x, U, A)
        },
        Y = function(U, v, A) {
            A = this;
            try {
                kc(this, U, v)
            } catch (x) {
                K(this, x), v(function(e) {
                    e(A.A)
                })
            }
        },
        F = function(U, v, A) {
            v[X(U, A, v), EK] = 2796
        },
        J4 = function(U, v) {
            X(403, v, (v.a1.push(v.B.slice()), v.B[403] = void 0, U))
        },
        xc = function(U, v, A, x, e, C) {
            if (!v.A) {
                v.h++;
                try {
                    for (x = (e = 0, A = v.H, void 0); --U;) try {
                        if ((C = void 0, v).i) x = Vg(v.i, v);
                        else {
                            if (e = E(403, v), e >= A) break;
                            x = (C = (X(105, v, e), S(v)), E)(C, v)
                        }
                        G(v, (x && x[D_] & 2048 ? x(v, U) : d(0, v, [P, 21, C]), false), U, false)
                    } catch (J) {
                        E(23, v) ? d(22, v, J) : X(23, v, J)
                    }
                    if (!U) {
                        if (v.Zr) {
                            xc(335982656583, (v.h--, v));
                            return
                        }
                        d(0, v, [P, 33])
                    }
                } catch (J) {
                    try {
                        d(22, v, J)
                    } catch (r) {
                        K(v, r)
                    }
                }
                v.h--
            }
        },
        G = function(U, v, A, x, e, C, J, r, N) {
            if (U.W += (U.P = ((e = (r = (J = (C = (N = (v || U.N++, 0 < U.D && U.j && U.uG && 1 >= U.h && !U.i && !U.J && (!v || 1 < U.X - A) && 0 == document.hidden), 4 == U.N)) || N ? U.G() : U.Y, J) - U.Y, r >> 14), U).v && (U.v ^= e * (r << 2)), e) || U.P, e), C || N) U.Y = J, U.N = 0;
            if (!N || J - U.U < U.D - (x ? 255 : v ? 5 : 2)) return false;
            return !(((X(403, (x = E(v ? 105 : 403, (U.X = A, U)), U), U.H), U).u.push([fw, x, v ? A + 1 : A]), U).J = FV, 0)
        },
        Sr = function(U, v, A, x, e) {
            for (v = (e = v[3] | 0, v[2] | 0), x = 0; 14 > x; x++) U = U >>> 8 | U << 24, U += A | 0, U ^= v + 3462, A = A << 3 | A >>> 29, A ^= U, e = e >>> 8 | e << 24, e += v | 0, e ^= x + 3462, v = v << 3 | v >>> 29, v ^= e;
            return [A >>> 24 & 255, A >>> 16 & 255, A >>> 8 & 255, A >>> 0 & 255, U >>> 24 & 255, U >>> 16 & 255, U >>> 8 & 255, U >>> 0 & 255]
        },
        Rh = function(U, v, A, x) {
            try {
                x = U[((v | 0) + 2) % 3], U[v] = (U[v] | 0) - (U[((v | 0) + 1) % 3] | 0) - (x | 0) ^ (1 == v ? x << A : x >>> A)
            } catch (e) {
                throw e;
            }
        },
        Qg = function(U, v) {
            return U(function(A) {
                A(v)
            }), [function() {
                return v
            }]
        },
        K = function(U, v) {
            U.A = ((U.A ? U.A + "~" : "E:") + v.message + ":" + v.stack).slice(0, 2048)
        },
        bX = function(U, v, A, x) {
            function e() {}
            return x = uX(U, function(C) {
                e && (v && FV(v), A = C, e(), e = void 0)
            }, (A = void 0, !!v))[0], {
                invoke: function(C, J, r, N) {
                    function O() {
                        A(function(l) {
                            FV(function() {
                                C(l)
                            })
                        }, r)
                    }
                    if (!J) return J = x(r), C && C(J), J;
                    A ? O() : (N = e, e = function() {
                        (N(), FV)(O)
                    })
                }
            }
        },
        E = function(U, v) {
            if ((v = v.B[U], void 0) === v) throw [P, 30, U];
            if (v.value) return v.create();
            return v.create(3 * U * U + 32 * U + 97), v.prototype
        },
        UK = function(U) {
            return U
        },
        n = this || self,
        Ih = function(U, v, A, x, e, C) {
            for (x = (v = (((A = (C = U[Gh] || {}, S)(U), C).Al = S(U), C).S = [], U.P) == U ? (Q(U) | 0) - 1 : 1, S)(U), e = 0; e < v; e++) C.S.push(S(U));
            for (C.Bx = E(x, U); v--;) C.S[v] = E(C.S[v], U);
            return C.I = E(A, U), C
        },
        Z_ = function(U, v) {
            ((v.push(U[0] << 24 | U[1] << 16 | U[2] << 8 | U[3]), v).push(U[4] << 24 | U[5] << 16 | U[6] << 8 | U[7]), v).push(U[8] << 24 | U[9] << 16 | U[10] << 8 | U[11])
        },
        cF = function(U, v, A) {
            return U.s(function(x) {
                A = x
            }, false, v), A
        },
        h = function(U, v, A, x, e, C) {
            if (v.P == v)
                for (e = E(U, v), 491 == U ? (U = function(J, r, N, O) {
                        if (e.k5 != (r = (O = e.length, (O | 0) - 4 >> 3), r)) {
                            r = (r << (N = [0, 0, C[1], (e.k5 = r, C[2])], 3)) - 4;
                            try {
                                e.Q8 = Sr(A4(e, (r | 0) + 4), N, A4(e, r))
                            } catch (l) {
                                throw l;
                            }
                        }
                        e.push(e.Q8[O & 7] ^ J)
                    }, C = E(217, v)) : U = function(J) {
                        e.push(J)
                    }, x && U(x & 255), v = 0, x = A.length; v < x; v++) U(A[v])
        },
        X = function(U, v, A) {
            if (403 == U || 105 == U) v.B[U] ? v.B[U].concat(A) : v.B[U] = mv(A, v);
            else {
                if (v.O && 495 != U) return;
                220 == U || 491 == U || 51 == U || 52 == U || 217 == U ? v.B[U] || (v.B[U] = Nn(62, A, v, U)) : v.B[U] = Nn(97, A, v, U)
            }
            495 == U && (v.v = Z(v, 32, false), v.l = void 0)
        },
        L = function(U, v) {
            v.u.splice(0, 0, U)
        },
        qn = function(U, v) {
            return (v = Q(U), v) & 128 && (v = v & 127 | Q(U) << 7), v
        },
        FV = n.requestIdleCallback ? function(U) {
            requestIdleCallback(function() {
                U()
            }, {
                timeout: 4
            })
        } : n.setImmediate ? function(U) {
            setImmediate(U)
        } : function(U) {
            setTimeout(U, 0)
        },
        yg = function(U, v, A, x) {
            for (; U.u.length;) {
                U.J = null, x = U.u.pop();
                try {
                    A = Cw(U, x)
                } catch (e) {
                    K(U, e)
                }
                if (v && U.J) {
                    (v = U.J, v)(function() {
                        I(true, true, U)
                    });
                    break
                }
            }
            return A
        },
        B, ah = function(U, v, A, x, e) {
            h(((A = E((A = S((e = U & 4, U &= 3, v)), x = S(v), A), v), e && (A = pw("" + A)), U) && h(x, v, H(2, A.length)), x), v, A)
        },
        d = function(U, v, A, x, e, C) {
            if (!v.O) {
                if ((U = (0 == (x = E(52, ((C = void 0, A) && A[0] === P && (U = A[1], C = A[2], A = void 0), v)), x.length) && (e = E(105, v) >> 3, x.push(U, e >> 8 & 255, e & 255), void 0 != C && x.push(C & 255)), ""), A && (A.message && (U += A.message), A.stack && (U += ":" + A.stack)), A = E(4, v), 3) < A) {
                    v.P = (C = (U = (A -= ((U = U.slice(0, (A | 0) - 3), U).length | 0) + 3, pw)(U), v.P), v);
                    try {
                        h(491, v, H(2, U.length).concat(U), 9)
                    } finally {
                        v.P = C
                    }
                }
                X(4, v, A)
            }
        },
        H = function(U, v, A, x) {
            for (x = (U | 0) - (A = [], 1); 0 <= x; x--) A[(U | 0) - 1 - (x | 0)] = v >> 8 * x & 255;
            return A
        },
        S = function(U, v) {
            if (U.i) return Vg(U.g, U);
            return (v = Z(U, 8, true), v & 128) && (v ^= 128, U = Z(U, 2, true), v = (v << 2) + (U | 0)), v
        },
        q = {
            passive: true,
            capture: true
        },
        uX = function(U, v, A, x) {
            return (x = g[U.substring(0, 3) + "_"]) ? x(U.substring(3), v, A) : Qg(v, U)
        },
        pw = function(U, v, A, x, e) {
            for (e = (U = U.replace(/\r\n/g, "\n"), A = v = 0, []); A < U.length; A++) x = U.charCodeAt(A), 128 > x ? e[v++] = x : (2048 > x ? e[v++] = x >> 6 | 192 : (55296 == (x & 64512) && A + 1 < U.length && 56320 == (U.charCodeAt(A + 1) & 64512) ? (x = 65536 + ((x & 1023) << 10) + (U.charCodeAt(++A) & 1023), e[v++] = x >> 18 | 240, e[v++] = x >> 12 & 63 | 128) : e[v++] = x >> 12 | 224, e[v++] = x >> 6 & 63 | 128), e[v++] = x & 63 | 128);
            return e
        },
        mv = function(U, v, A) {
            return ((A = V[v.Z](v.Hx), A)[v.Z] = function() {
                return U
            }, A).concat = function(x) {
                U = x
            }, A
        },
        Z = function(U, v, A, x, e, C, J, r, N, O, l, z, k, a) {
            if (N = E(403, U), N >= U.H) throw [P, 31];
            for (l = (z = (r = v, x = U.lG.length, 0), N); 0 < r;) J = l % 8, a = 8 - (J | 0), O = l >> 3, a = a < r ? a : r, k = U.V[O], A && (e = U, e.l != l >> 6 && (e.l = l >> 6, C = E(495, e), e.C = Sr(e.l, [0, 0, C[1], C[2]], e.v)), k ^= U.C[O & x]), l += a, z |= (k >> 8 - (J | 0) - (a | 0) & (1 << a) - 1) << (r | 0) - (a | 0), r -= a;
            return X(403, (A = z, U), (N | 0) + (v | 0)), A
        },
        Gh = String.fromCharCode(105, 110, 116, 101, 103, 67, 104, 101, 99, 107, 66, 121, 112, 97, 115, 115),
        p = ((Y.prototype.mN = void 0, Y.prototype).U3 = void 0, Y.prototype.Zr = false, []),
        M = (Y.prototype.L = "toString", []),
        fw = [],
        P = {},
        XV = [],
        EK = [],
        c = [],
        D_ = [],
        W = [],
        er = ((((((((Z_, function() {})(R), Rh, function() {})(WF), B = Y.prototype, B.vx = function(U, v, A) {
            return U ^ ((v = (v ^= v << 13, v ^= v >> 17, (v ^ v << 5) & A)) || (v = 1), v)
        }, B).Tk = function(U, v, A, x, e) {
            for (e = x = 0; x < U.length; x++) e += U.charCodeAt(x), e += e << 10, e ^= e >> 6;
            return (U = (e += e << 3, e ^= e >> 11, e + (e << 15)) >>> 0, x = new Number(U & (1 << v) - 1), x)[0] = (U >>> v) % A, x
        }, Y.prototype).Z = "create", B.s = function(U, v, A, x, e) {
            if ((A = "array" === zh(A) ? A : [A], this).A) U(this.A);
            else try {
                x = [], e = !this.u.length, L([p, x, A], this), L([W, U, x], this), v && !e || I(true, v, this)
            } catch (C) {
                K(this, C), U(this.A)
            }
        }, B).y8 = function() {
            return Math.floor(this.R + (this.G() - this.U))
        }, B).ff = function(U, v, A, x, e, C) {
            for (A = (e = C = 0, []); C < U.length; C++)
                for (x = x << v | U[C], e += v; 7 < e;) e -= 8, A.push(x >> e & 255);
            return A
        }, B).G = (window.performance || {}).now ? function() {
            return this.Gk + window.performance.now()
        } : function() {
            return +new Date
        }, void 0),
        V = P.constructor;
    (B.gh = function() {
        return Math.floor(this.G())
    }, Y.prototype).T = function(U, v) {
        return U = {}, er = function() {
                return v == U ? 97 : 61
            }, v = {},
            function(A, x, e, C, J, r, N, O, l, z, k, a, m, y, f) {
                v = (C = v, U);
                try {
                    if (f = A[0], f == c) {
                        a = A[1];
                        try {
                            for (r = atob((x = [], a)), l = O = 0; O < r.length; O++) y = r.charCodeAt(O), 255 < y && (x[l++] = y & 255, y >>= 8), x[l++] = y;
                            X(495, (this.H = (this.V = x, this.V.length << 3), this), [0, 0, 0])
                        } catch (u) {
                            d(17, this, u);
                            return
                        }
                        xc(8001, this)
                    } else if (f == p) A[1].push(E(220, this).length, E(51, this).length, E(4, this), E(491, this).length), X(368, this, A[2]), this.B[458] && r0(8001, E(458, this), this);
                    else {
                        if (f == W) {
                            this.P = (m = H(2, (E(220, (O = A[2], this)).length | 0) + 2), J = this.P, this);
                            try {
                                N = E(52, this), 0 < N.length && h(220, this, H(2, N.length).concat(N), 10), h(220, this, H(1, this.W), 109), h(220, this, H(1, this[W].length)), r = 0, r -= (E(220, this).length | 0) + 5, r += E(109, this) & 2047, z = E(491, this), 4 < z.length && (r -= (z.length | 0) + 3), 0 < r && h(220, this, H(2, r).concat(R(r)), 15), 4 < z.length && h(220, this, H(2, z.length).concat(z), 156)
                            } finally {
                                this.P = J
                            }
                            if (e = (l = R(2).concat(E(220, this)), l[1] = l[0] ^ 6, l[3] = l[1] ^ m[0], l[4] = l[1] ^ m[1], this).iG(l)) e = "!" + e;
                            else
                                for (r = 0, e = ""; r < l.length; r++) k = l[r][this.L](16), 1 == k.length && (k = "0" + k), e += k;
                            return E(491, (E((x = e, 220), this).length = O.shift(), E(51, this).length = O.shift(), X(4, this, O.shift()), this)).length = O.shift(), x
                        }
                        if (f == fw) r0(A[2], A[1], this);
                        else if (f == M) return r0(8001, A[1], this)
                    }
                } finally {
                    v = C
                }
            }
    }();
    var nw, OK = (Y.prototype.hl = (Y.prototype[XV] = [0, 0, 1, 1, 0, 1, 1], Y.prototype.iG = function(U, v, A, x) {
            if (x = window.btoa) {
                for (A = (v = 0, ""); v < U.length; v += 8192) A += String.fromCharCode.apply(null, U.slice(v, v + 8192));
                U = x(A).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "")
            } else U = void 0;
            return U
        }, Y.prototype.Jl = 0, 0), /./),
        Kw = c.pop.bind(Y.prototype[p]),
        Mn = (nw = lX(Y.prototype.Z, {get: (OK[Y.prototype.L] = Kw, Kw)
        }), Y.prototype.Su = void 0, function(U, v) {
            return (v = vF()) && 1 === U.eval(v.createScript("1")) ? function(A) {
                return v.createScript(A)
            } : function(A) {
                return "" + A
            }
        })(n);
    40 < (g = n.botguard || (n.botguard = {}), g.m) || (g.m = 41, g.bg = bX, g.a = uX), g.qBf_ = function(U, v, A) {
        return A = new Y(U, v), [function(x) {
            return cF(A, x)
        }]
    };
}).call(this);
                                    

#3 JavaScript::Eval (size: 22, repeated: 1) - SHA256: eb3a140c9b84b3b5c69ed2966cf442240e63fc12aaf1e79d0c35aec5b237d9d7

                                        0,
function(C) {
    Lw(C, 1)
}
                                    

#4 JavaScript::Eval (size: 22, repeated: 1) - SHA256: ba41c5348d38a6ebd3399d0378ae76921f287d04f94ff5d93d6709e7f2a962b7

                                        0,
function(C) {
    Lw(C, 2)
}
                                    

#5 JavaScript::Eval (size: 24123, repeated: 1) - SHA256: 9427b28bccd70e88ae216329d97b400e65432ac4f65058d19e7f713c9a5007d8

                                        var kc_front = (function($) {
    jQuery.extend(jQuery.easing, {
        easeInOutQuart: function(x, t, b, c, d) {
            if ((t /= d / 2) < 1) return c / 2 * t * t * t * t + b;
            return -c / 2 * ((t -= 2) * t * t * t - 2) + b
        },
    });
    var v = $(window);
    var w = v.height();
    v.resize(function() {
        w = v.height();
        kc_front.row_action(true)
    });
    $.fn.kc_parallax = function() {
        var c = $(this),
            el_top;
        c.each(function() {
            el_top = c.offset().top
        });

        function update() {
            var b = v.scrollTop();
            c.each(function() {
                var a = $(this),
                    top = a.offset().top,
                    height = a.outerHeight(true);
                if (top + height < b || top > b + w || c.data('kc-parallax') !== true) return;
                c.css('backgroundPosition', "50% " + Math.round((el_top - b) * 0.4) + "px")
            })
        }
        v.on('scroll resize', update).trigger('update')
    };
    $.fn.viewportChecker = function(d) {
        var f = {
            classToAdd: 'visible',
            offset: 100,
            callbackFunction: function(a) {}
        };
        $.extend(f, d);
        var g = this,
            w = $(window).height();
        this.checkElements = function() {
            var c = ((navigator.userAgent.toLowerCase().indexOf('webkit') != -1) ? window : 'html'),
                viewportTop = $(c).scrollTop(),
                viewportBottom = (viewportTop + w);
            g.each(function() {
                var a = $(this);
                if (a.hasClass(f.classToAdd) && f.classToAdd != '') {
                    return
                }
                var b = Math.round(a.offset().top) + f.offset,
                    elemBottom = b + (a.height());
                if ((b < viewportBottom) && (elemBottom > viewportTop) && this.done != true) {
                    a.addClass(f.classToAdd);
                    f.callbackFunction(a)
                }
            })
        };
        $(window).scroll(this.checkElements);
        this.checkElements();
        $(window).resize(function(e) {
            w = e.currentTarget.innerHeight
        })
    };
    $(document).ready(function($) {
        kc_front.init($)
    });
    return {
        win_height: 0,
        win_width: 0,
        body: $('body'),
        init: function() {
            $('section[data-kc-parallax="true"]').each(function() {
                $(this).kc_parallax()
            });
            this.accordion();
            this.tabs();
            this.youtube_row_background.init();
            if (window.location.href.indexOf('#') > -1) {
                $('a[href="#' + window.location.href.split('#')[1] + '"]').trigger('click')
            }
            $('.kc_button').add('.kc_tooltip').kcTooltip();
            $('.kc-close-but').on('click', function() {
                $(this).parent().parent().hide('slow', function() {
                    $(this).remove()
                })
            });
            this.google_maps();
            this.blog.masonry();
            this.image_gallery.masonry();
            this.carousel_images();
            this.carousel_post();
            this.countdown_timer();
            this.piechar.init();
            this.progress_bar.run();
            this.ajax_action();
            this.pretty_photo();
            this.tooltips();
            this.image_fade();
            this.smooth_scroll();
            this.animate();
            this.row_action(true)
        },
        refresh: function(b) {
            setTimeout(function(a) {
                kc_front.piechar.update(a);
                kc_front.progress_bar.update(a);
                kc_front.image_gallery.masonry(a);
                if ($('.kc_video_play').length > 0) {
                    kc_video_play.refresh(a)
                }
            }, 100, b)
        },
        viewport: function(a) {
            var d = document;
            if (d.compatMode === 'BackCompat') {
                if (a == 'height') return d.body.clientHeight;
                else return d.body.clientWidth
            } else {
                if (a == 'height') return d.documentElement.clientHeight;
                else return d.documentElement.clientWidth
            }
        },
        row_action: function(c) {
            var d = document;
            [].forEach.call(d.querySelectorAll('section[data-kc-fullwidth]'), function(a) {
                var b = d.querySelectorAll('.kc_clfw')[0],
                    rect;
                if (typeof b === 'undefined') return;
                rect = b.getBoundingClientRect();
                a.style.left = (-rect.left) + 'px';
                if (a.getAttribute('data-kc-fullwidth') == 'row') {
                    a.style.paddingLeft = rect.left + 'px';
                    a.style.paddingRight = (kc_front.viewport('width') - rect.width - rect.left) + 'px';
                    a.style.width = rect.width + 'px'
                } else {
                    a.style.paddingLeft = '0px';
                    a.style.width = kc_front.viewport('width') + 'px'
                }
                if (a.nextElementSibling !== null && a.nextElementSibling.tagName == 'SCRIPT') {
                    if (a.nextElementSibling.innerHTML == 'kc_front.row_action(true);') {
                        a.parentNode.removeChild(a.nextElementSibling)
                    }
                }
            })
        },
        google_maps: function(b) {
            $('.kc_google_maps').each(function() {
                if ($(this).data('loaded') === true) return;
                else $(this).data({
                    'loaded': true
                });
                var a = $(this);
                if (a.data('wheel') == 'disable') {
                    a.click(function() {
                        a.find('iframe').css("pointer-events", "auto")
                    });
                    a.mouseleave(function() {
                        a.find('iframe').css("pointer-events", "none")
                    })
                }
                a.find('.close').on('click', function() {
                    a.find('.map_popup_contact_form').toggleClass("hidden");
                    a.find('.show_contact_form').fadeIn('slow')
                });
                a.find('.show_contact_form').on('click', function() {
                    a.find('.map_popup_contact_form').toggleClass("hidden");
                    a.find('.show_contact_form').fadeOut('slow')
                })
            })
        },
        accordion: function(d) {
            $('.kc_accordion_wrapper').each(function() {
                if ($(this).data('loaded') === true) return;
                else $(this).data({
                    'loaded': true
                });
                var c = $(this).data('tab-active') !== undefined ? ($(this).data('tab-active') - 1) : 0;
                if ($(this).data('closeall') == true) c = '100000';
                $(this).find('>div.kc_accordion_section>h3.kc_accordion_header>a, >div.kc_accordion_section>h3.kc_accordion_header>.ui-accordion-header-icon').off('click').on('click', function(e) {
                    var a = $(this).closest('.kc_accordion_wrapper'),
                        section = $(this).closest('.kc_accordion_section'),
                        allowopenall = (true === a.data('allowopenall')) ? true : false,
                        closeall = (true === a.data('closeall')) ? true : false,
                        changed = section.find('>h3.kc_accordion_header').hasClass('ui-state-active'),
                        clickitself = false;
                    if (allowopenall === false) {
                        if (!section.find('>h3.kc_accordion_header').hasClass('ui-state-active')) {
                            a.find('>.kc_accordion_section>.kc_accordion_content').slideUp();
                            a.find('>.kc_accordion_section>h3.kc_accordion_header').removeClass('ui-state-active');
                            a.find('>.kc_accordion_section.kc-section-active').removeClass('kc-section-active');
                            section.find('>.kc_accordion_content').stop().slideDown('normal', function() {
                                $(this).css({
                                    height: ''
                                })
                            });
                            section.find('>h3.kc_accordion_header').addClass('ui-state-active');
                            section.addClass('kc-section-active')
                        } else {
                            a.find('>.kc_accordion_section>.kc_accordion_content').slideUp();
                            a.find('>.kc_accordion_section>h3.kc_accordion_header').removeClass('ui-state-active');
                            a.find('>.kc_accordion_section>.kc-section-active').removeClass('kc-section-active');
                            section.removeClass('kc-section-active')
                        }
                    } else {
                        if (section.find('>h3.kc_accordion_header').hasClass('ui-state-active')) {
                            section.find('>.kc_accordion_content').stop().slideUp();
                            section.find('>h3.kc_accordion_header').removeClass('ui-state-active');
                            section.removeClass('kc-section-active')
                        } else {
                            section.find('>.kc_accordion_content').stop().slideDown('normal', function() {
                                $(this).css({
                                    height: ''
                                })
                            });
                            section.find('>h3.kc_accordion_header').addClass('ui-state-active');
                            section.addClass('kc-section-active')
                        }
                    }
                    if (changed != section.find('>h3.kc_accordion_header').hasClass('ui-state-active')) kc_front.refresh(section.find('>.kc_accordion_content'));
                    e.preventDefault();
                    var b = $(this).closest('.kc_accordion_section');
                    b = b.parent().find('>.kc_accordion_section').index(b.get(0));
                    $(this).closest('.kc_accordion_wrapper').data({
                        'tab-active': (b + 1)
                    })
                }).eq(c).trigger('click')
            })
        },
        tabs: function(d) {
            $('.kc_tabs > .kc_wrapper').each(function(b) {
                if ($(this).data('loaded') === true) return;
                else $(this).data({
                    'loaded': true
                });
                var c = $(this),
                    tab_group = c.parent('.kc_tabs.group'),
                    tab_event = ('yes' === tab_group.data('open-on-mouseover')) ? 'mouseover' : 'click',
                    effect_option = ('yes' === tab_group.data('effect-option')) ? true : false,
                    active_section = parseInt(tab_group.data('tab-active')) - 1;
                $(this).find('>.ui-tabs-nav>li').off('click').on('click', function(e) {
                    e.preventDefault()
                }).off(tab_event).on(tab_event, function(e) {
                    if ($(this).hasClass('ui-tabs-active')) {
                        e.preventDefault();
                        return
                    }
                    var a = $(this).closest('.kc_tabs_nav,.ui-tabs-nav').find('>li'),
                        b = a.index(this),
                        tab_list = $(this).closest('.kc_wrapper').find('>.kc_tab'),
                        new_panel = tab_list.eq(b);
                    a.removeClass('ui-tabs-active');
                    $(this).addClass('ui-tabs-active');
                    tab_list.removeClass('ui-tabs-body-active').removeClass('kc-section-active');
                    new_panel.addClass('ui-tabs-body-active').addClass('kc-section-active');
                    if (effect_option === true) new_panel.css({
                        'opacity': 0
                    }).animate({
                        opacity: 1
                    });
                    e.preventDefault();
                    $(this).closest('.kc_tabs').data({
                        'tab-active': (b + 1)
                    })
                }).eq(active_section).trigger(tab_event)
            });
            $('.kc_tabs.kc-tabs-slider').each(function() {
                if ($(this).data('loaded') === true) return;
                else $(this).data({
                    'loaded': true
                });
                $(this).find('.kc-tabs-slider-nav li').each(function(a) {
                    if ($(this).data('loaded') === true) return;
                    else $(this).data({
                        'loaded': true
                    });
                    $(this).on('click', a, function(e) {
                        $(this).parent().find('.kc-title-active').removeClass('kc-title-active');
                        $(this).addClass('kc-title-active');
                        console.log(e.data);
                        $(this).closest('.kc-tabs-slider').find('.owl-carousel').trigger('owl.goTo', e.data);
                        e.preventDefault();
                        $(this).closest('.kc_tabs').data({
                            'active': e.data
                        })
                    });
                    if (a === 0) $(this).addClass('kc-title-active')
                })
            });
            kc_front.owl_slider()
        },
        counterup: function() {
            $('.counterup').each(function(a) {
                if ($(this).data('loaded') === true) return;
                else $(this).data({
                    'loaded': true
                });
                $(this).counterUp({
                    delay: 100,
                    time: 2000
                })
            })
        },
        youtube_row_background: {
            init: function() {
                $('.kc_row, .kc_column').each(function() {
                    var a = $(this),
                        youtubeUrl, youtubeId;
                    if (a.data('kc-video-bg')) {
                        youtubeUrl = a.data('kc-video-bg');
                        youtubeId = kc_front.youtube_row_background.getID(youtubeUrl);
                        if (youtubeId) {
                            a.find('.kc_wrap-video-bg').remove();
                            kc_front.youtube_row_background.add(a, youtubeId)
                        }
                    } else {
                        a.find('.kc_wrap-video-bg').remove()
                    }
                })
            },
            getID: function(a) {
                if ('undefined' === typeof(a)) {
                    return false
                }
                var b = a.match(/(?:https?:\/{2})?(?:w{3}\.)?youtu(?:be)?\.(?:com|be)(?:\/watch\?v=|\/)([^\s&]+)/);
                if (null !== b) {
                    return b[1]
                }
                return false
            },
            add: function(c, d, f) {
                if (YT === undefined) return;
                if ('undefined' === typeof(YT.Player)) {
                    f = 'undefined' === typeof(f) ? 0 : f;
                    if (f > 100) {
                        console.warn('Too many attempts to load YouTube api');
                        return
                    }
                    setTimeout(function() {
                        kc_front.youtube_row_background.add(c, d, f++)
                    }, 100);
                    return
                }
                var g, $container = c.prepend('<div class="kc_wrap-video-bg"><div class="ifr_inner"></div></div>').find('.ifr_inner'),
                    options = c.data('kc-video-options'),
                    playerVars = {
                        playlist: d,
                        iv_load_policy: 3,
                        enablejsapi: 1,
                        disablekb: 1,
                        autoplay: 1,
                        controls: 0,
                        showinfo: 0,
                        rel: 0,
                        loop: 1
                    };
                options = options ? JSON.parse('{"' + options.replace(/&/g, '","').replace(/=/g, '":"') + '"}', function(a, b) {
                    return a === "" ? b : decodeURIComponent(b)
                }) : {};
                if (typeof options == 'object') playerVars = $.extend(playerVars, options);
                g = new YT.Player($container[0], {
                    width: '100%',
                    height: '100%',
                    videoId: d,
                    playerVars: playerVars,
                    events: {
                        onReady: function(e) {
                            if (c.data('kc-video-mute') == 'yes') e.target.mute().setLoop(true);
                            e.target.playVideo()
                        }
                    }
                });
                kc_front.youtube_row_background.resize(c);
                $(window).on('resize', function() {
                    kc_front.youtube_row_background.resize(c)
                })
            },
            resize: function(a) {
                var b = 1.77,
                    ifr_w, ifr_h, marginLeft, marginTop, inner_width = a.innerWidth(),
                    inner_height = a.innerHeight();
                if ((inner_width / inner_height) < b) {
                    ifr_w = inner_height * b;
                    ifr_h = inner_height
                } else {
                    ifr_w = inner_width;
                    ifr_h = inner_width * (1 / b)
                }
                marginLeft = -Math.round((ifr_w - inner_width) / 2) + 'px';
                marginTop = -Math.round((ifr_h - inner_height) / 2) + 'px';
                ifr_w += 'px';
                ifr_h += 'px';
                a.find('.kc_wrap-video-bg iframe').css({
                    maxWidth: '1000%',
                    marginLeft: marginLeft,
                    marginTop: marginTop,
                    width: ifr_w,
                    height: ifr_h
                })
            }
        },
        single_img: {
            refresh: function(a) {
                kc_front.pretty_photo()
            }
        },
        blog: {
            masonry: function() {
                $('.kc_blog_masonry').each(function() {
                    if ($(this).data('loaded') === true) return;
                    else $(this).data({
                        'loaded': true
                    });
                    var c = $(this),
                        imgs = c.find('img'),
                        total = imgs.length,
                        ready = 0;
                    if (total > 0) {
                        imgs.each(function(a) {
                            var b = new Image();
                            b.onload = function() {
                                ready++;
                                if (ready == total) {
                                    new Masonry(c.get(0), {
                                        itemSelector: '.post-grid',
                                        columnWidth: '.post-grid',
                                    })
                                }
                            };
                            b.src = $(this).attr('src')
                        })
                    } else {
                        new Masonry(c.get(0), {
                            itemSelector: '.post-grid',
                            columnWidth: '.post-grid',
                        })
                    }
                })
            },
        },
        image_gallery: {
            masonry: function() {
                $('.kc_image_gallery').each(function() {
                    if ($(this).data('loaded') === true) return;
                    else $(this).data({
                        'loaded': true
                    });
                    if (('yes' === $(this).data('image_masonry'))) {
                        var c = $(this).find('img'),
                            total = c.length,
                            ready = 0,
                            el = $(this);
                        $(this).data({
                            'total': total
                        });
                        c.each(function(a) {
                            var b = new Image();
                            b.onload = function() {
                                ready++;
                                if (ready == total) {
                                    new Masonry(el.get(0), {
                                        itemSelector: '.item-grid',
                                        columnWidth: '.item-grid',
                                    })
                                }
                            };
                            b.src = $(this).attr('src')
                        })
                    }
                });
                kc_front.pretty_photo()
            },
        },
        image_fade: function() {
            $('.image_fadein_slider .image_fadein').each(function() {
                if ($(this).data('loaded') !== true) $(this).data({
                    'loaded': true
                });
                else return;
                var a = $(this).data('delay') ? $(this).data('delay') : '3000';
                window.kc_front.image_fade_delay(a, $(this).find('img').first())
            })
        },
        image_fade_delay: function(a, b) {
            if (b === undefined) return;
            b.parent().find('.active').removeClass('active');
            b.addClass('active');
            if (b.next().length > 0) b = b.next();
            else b = b.parent().find('img').first();
            var c = setTimeout(window.kc_front.image_fade_delay, a, a, b)
        },
        carousel_images: function(u) {
            $('.kc-carousel-images').each(function(f) {
                if ($(this).data('loaded') === true) return;
                else $(this).data({
                    'loaded': true
                });
                var g = $(this).data('owl-i-options'),
                    _auto_play = ('yes' === g.autoplay) ? true : false,
                    _delay = (g.delay !== undefined) ? g.delay : 8,
                    _navigation = ('yes' === g.navigation) ? true : false,
                    _pagination = ('yes' === g.pagination) ? true : false,
                    _speed = g.speed,
                    _items = g.items,
                    _auto_height = ('yes' === g.autoheight) ? true : false,
                    _num_thumb = (g.num_thumb !== undefined) ? g.num_thumb : 5,
                    _show_thumb = ('yes' === g.showthumb) ? true : false,
                    _progress_bar = ('yes' === g.progressbar) ? true : false,
                    _singleItem = false,
                    _tablet = false,
                    _mobile = false;
                if (g.tablet > 0) {
                    _tablet = [999, g.tablet]
                }
                if (g.mobile > 0) {
                    _mobile = [479, g.mobile]
                }
                var h = function() {};
                var j = function() {};
                var k = function() {};
                if (true === _auto_height || true === _progress_bar || true === _show_thumb) _singleItem = true;
                if (_auto_play) _auto_play = parseInt(_delay) * 1000;
                if (true === _progress_bar) {
                    var l = _delay;
                    var m, $bar, $elem, isPause, tick, percentTime;
                    h = function(a) {
                        $elem = a;
                        n();
                        o()
                    };
                    var n = function() {
                        m = $("<div>", {
                            class: "progressBar"
                        });
                        $bar = $("<div>", {
                            class: "bar"
                        });
                        m.append($bar).prependTo($elem)
                    };
                    var o = function() {
                        percentTime = 0;
                        isPause = false;
                        tick = setInterval(p, 10)
                    };
                    var p = function() {
                        if (isPause === false) {
                            percentTime += 1 / l;
                            $bar.css({
                                width: percentTime + "%"
                            });
                            if (percentTime >= 100) {
                                $elem.trigger('owl.next')
                            }
                        }
                    };
                    k = function() {
                        isPause = true
                    };
                    j = function() {
                        clearTimeout(tick);
                        o()
                    }
                }
                if (true !== _show_thumb) {
                    $(this).owlCarousel({
                        autoPlay: _auto_play,
                        navigation: _navigation,
                        pagination: _pagination,
                        slideSpeed: _speed,
                        paginationSpeed: _speed,
                        singleItem: _singleItem,
                        autoHeight: _auto_height,
                        items: _items,
                        itemsDesktop: false,
                        itemsDesktopSmall: false,
                        itemsTablet: _tablet,
                        itemsTabletSmall: _tablet,
                        itemsMobile: _mobile,
                        afterInit: h,
                        afterMove: j,
                        startDragging: k
                    })
                } else {
                    var q = $(this);
                    var r = q.next('.kc-sync2');
                    var s = function(a) {
                        var b = this.currentItem;
                        $(r).find(".owl-item").removeClass("synced").eq(b).addClass("synced");
                        if ($(r).data("owlCarousel") !== undefined) {
                            t(b)
                        }
                    };
                    r.on("click", ".owl-item", function(e) {
                        e.preventDefault();
                        var a = $(this).data("owlItem");
                        q.trigger("owl.goTo", a)
                    });
                    var t = function(a) {
                        var b = r.data("owlCarousel").owl.visibleItems;
                        var c = a;
                        var d = false;
                        for (var i in b) {
                            if (c === b[i]) {
                                d = true
                            }
                        }
                        if (d === false) {
                            if (c > b[b.length - 1]) {
                                r.trigger("owl.goTo", c - b.length + 2)
                            } else {
                                if (c - 1 === -1) {
                                    c = 0
                                }
                                r.trigger("owl.goTo", c)
                            }
                        } else if (c === b[b.length - 1]) {
                            r.trigger("owl.goTo", b[1])
                        } else if (c === b[0]) {
                            r.trigger("owl.goTo", c - 1)
                        }
                    };
                    q.owlCarousel({
                        autoPlay: _auto_play,
                        singleItem: _singleItem,
                        slideSpeed: _speed,
                        paginationSpeed: _speed,
                        navigation: _navigation,
                        pagination: _pagination,
                        afterAction: s,
                        responsiveRefreshRate: 200,
                        autoHeight: _auto_height,
                        afterInit: h,
                        afterMove: j,
                        startDragging: k
                    });
                    r.owlCarousel({
                        items: _num_thumb,
                        itemsDesktop: [1199, 15],
                        itemsDesktopSmall: [979, 12],
                        itemsTablet: [768, 6],
                        itemsMobile: [479, 5],
                        pagination: _pagination,
                        responsiveRefreshRate: 100,
                        afterInit: function(a) {
                            a.find(".owl-item").eq(0).addClass("synced")
                        }
                    })
                }
            });
            kc_front.pretty_photo()
        },
        update_option: function(b) {
            $.post(top.kc_ajax_url, {
                'security': top.kc_ajax_nonce,
                'action': 'kc_update_option',
                'options': top.kc.tools.base64.encode(JSON.stringify(b))
            }, function(a) {})
        },
        carousel_post: function(a) {
            kc_front.owl_slider('.kc-owl-post-carousel')
        },
        tooltips: function() {
            $('.kc_tooltip').each(function() {
                if ($(this).data('kc-loaded') !== true) $(this).data({
                    'kc-loaded': true
                });
                else return;
                $(this).kcTooltip()
            })
        },
        countdown_timer: function() {
            $('.kc-countdown-timer').each(function(b) {
                var c = $(this).data('countdown');
                $(this).countdown(c.date, function(a) {
                    $(this).html(a.strftime(c.template))
                })
            })
        },
        piechar: {
            init: function() {
                $('.kc_piechart').each(function(b) {
                    $(this).viewportChecker({
                        callbackFunction: function(a) {
                            kc_front.piechar.load(a)
                        },
                        classToAdd: 'kc-pc-loaded'
                    })
                })
            },
            load: function(d) {
                if (d.parent('div').width() < 10) return 0;
                var e = d.data('size'),
                    _linecap = ('yes' === d.data('linecap')) ? 'round' : 'square',
                    _barColor = d.data('barcolor'),
                    _trackColor = d.data('trackcolor'),
                    _autowidth = d.data('autowidth'),
                    _linewidth = d.data('linewidth');
                if ('yes' === _autowidth) {
                    e = d.parent('div').width();
                    d.data('size', e)
                }
                var f = d.find('.percent').width() + d.find('.percent:after').width();
                var g = d.find('.percent').height();
                d.easyPieChart({
                    barColor: _barColor,
                    trackColor: _trackColor,
                    lineCap: _linecap,
                    easing: 'easeOutBounce',
                    onStep: function(a, b, c) {
                        $(this.el).find('.percent').text(Math.round(c));
                        $(this.el).find('.percent').show();
                        $(this.el).css({
                            'width': e,
                            'height': e
                        })
                    },
                    scaleLength: 0,
                    lineWidth: _linewidth,
                    size: e,
                })
            },
            update: function(a) {
                a.find('.kc_piechart').each(function() {
                    if ($(this).data('loaded') === true) return;
                    else $(this).data({
                        'loaded': true
                    });
                    kc_front.piechar.load($(this))
                })
            }
        },
        progress_bar: {
            run: function() {
                $('.kc_progress_bars').each(function() {
                    $(this).viewportChecker({
                        callbackFunction: function(a) {
                            kc_front.progress_bar.update(a)
                        },
                        classToAdd: 'kc-pb-loaded'
                    })
                })
            },
            update: function(c) {
                $('.kc-progress-bar .kc-ui-progress').each(function() {
                    if ($(this).data('loaded') === true) return;
                    else $(this).data({
                        'loaded': true
                    });
                    $(this).css({
                        width: '5%'
                    }).stop().animate({
                        width: this.getAttribute('data-value') + '%'
                    }, {
                        duration: parseInt(this.getAttribute('data-speed')),
                        easing: 'easeInOutQuart',
                        step: function(a, b) {
                            if (b.now / b.end > 0.3) this.getElementsByClassName('ui-label')[0].style.opacity = b.now / b.end
                        }
                    }).find('.ui-label').css({
                        opacity: 0
                    })
                })
            }
        },
        ajax_action: function() {
            $('.kc_facebook_recent_post').each(function() {
                if (this.getAttribute('data-cfg') === null || this.getAttribute('data-cfg') === undefined || this.getAttribute('data-cfg') === '') return;
                var b = $(this),
                    data_send = {
                        action: 'kc_facebook_recent_post',
                        cfg: $(this).data('cfg')
                    };
                this.removeAttribute('data-cfg');
                $.ajax({
                    url: kc_script_data.ajax_url,
                    method: 'POST',
                    dataType: 'json',
                    data: data_send,
                    success: function(a) {
                        b.find('ul').html(a.html).before(a.header_html)
                    }
                })
            });
            $('.kc_wrap_instagram').each(function(b) {
                if (this.getAttribute('data-cfg') === null || this.getAttribute('data-cfg') === undefined || this.getAttribute('data-cfg') === '') return;
                var c = $(this),
                    data_send = {
                        action: 'kc_instagrams_feed',
                        cfg: $(this).data('cfg')
                    };
                this.removeAttribute('data-cfg');
                $.ajax({
                    url: kc_script_data.ajax_url,
                    method: 'POST',
                    dataType: 'json',
                    data: data_send,
                    success: function(a) {
                        c.find('ul').html(a.html)
                    }
                })
            });
            $('.kc_twitter_feed').each(function(d) {
                if (this.getAttribute('data-cfg') === null || this.getAttribute('data-cfg') === undefined || this.getAttribute('data-cfg') === '') return;
                var e = $(this),
                    atts_data = {
                        action: 'kc_twitter_timeline',
                        cfg: $(this).data('cfg')
                    };
                this.removeAttribute('data-cfg');
                var f = $(this).data('owl_option');
                $.ajax({
                    url: kc_script_data.ajax_url,
                    method: 'POST',
                    dataType: 'json',
                    data: atts_data,
                    success: function(a) {
                        var b = e.data('display_style');
                        e.find('.result_twitter_feed').html(a.html);
                        e.find('.result_twitter_feed').before('<div class="button_follow_wrap">' + a.header_data + '</div>');
                        var c = ('yes' === f.show_navigation) ? true : false,
                            _pagination = ('yes' === f.show_pagination) ? true : false,
                            _autoHeight = ('yes' === f.auto_height) ? true : false;
                        if (2 === b) {
                            e.find('.kc-tweet-owl').owlCarousel({
                                navigation: c,
                                pagination: _pagination,
                                slideSpeed: 300,
                                paginationSpeed: 400,
                                singleItem: true,
                                items: 1,
                                autoHeight: _autoHeight
                            })
                        }
                    }
                })
            })
        },
        owl_slider: function() {
            if (typeof $().owlCarousel != 'function') return;
            $('[data-owl-options]').each(function(a) {
                var b = $(this).data('owl-options');
                if (typeof b !== 'object') return;
                if ($(this).data('loaded') === true) return;
                else $(this).data({
                    'loaded': true
                });
                $(this).attr({
                    'data-owl-options': null
                });
                var c = ('yes' === b.autoplay) ? true : false,
                    _navigation = ('yes' === b.navigation) ? true : false,
                    _pagination = ('yes' === b.pagination) ? true : false,
                    _speed = (b.speed !== undefined) ? b.speed : 450,
                    _items = (b.items !== undefined) ? b.items : 1,
                    _tablet = (b.tablet !== undefined) ? b.tablet : 1,
                    _mobile = (b.mobile !== undefined) ? b.mobile : 1,
                    _autoheight = ('yes' === b.autoheight) ? true : false,
                    _showthumb = ('yes' === b.showthumb) ? true : false,
                    _singleItem = false;
                if (_autoheight === true) {
                    _singleItem = true;
                    _items = 1
                }
                $(this).owlCarousel({
                    autoPlay: c,
                    navigation: _navigation,
                    pagination: _pagination,
                    showthumb: _showthumb,
                    slideSpeed: _speed,
                    paginationSpeed: _speed,
                    singleItem: _singleItem,
                    autoHeight: _autoheight,
                    items: _items,
                    itemsCustom: false,
                    itemsDesktop: [1199, _items],
                    itemsDesktopSmall: [980, _tablet],
                    itemsTablet: [640, _mobile],
                    itemsTabletSmall: false,
                    itemsMobile: [480, _mobile],
                })
            });
            kc_front.pretty_photo()
        },
        pretty_photo: function() {
            if (typeof($.prettyPhoto) == 'object') {
                $("a.kc-pretty-photo:not(.kc-pt-loaded)").addClass('kc-pt-loaded').off('click').prettyPhoto({
                    theme: 'dark_rounded',
                    allow_resize: true,
                    allow_expand: true,
                    opacity: 0.85,
                    animation_speed: 'fast',
                    deeplinking: false,
                    counter_separator_label: ' / ',
                    show_title: true,
                    autoplay: true,
                    horizontal_padding: 0,
                    overlay_gallery: false,
                    markup: '<div class="pp_pic_holder"> 		                <div class="pp_content_container"> 		                  <div class="pp_left"> 		                  <div class="pp_right"> 		                    <div class="pp_content"> 		                      <div class="pp_loaderIcon kc-spinner"></div> 		                      <div class="pp_fade"> 		                        <div class="pp_hoverContainer"> 		                          <a class="pp_next" href="#"><i class="sl-arrow-right"></i></a> 		                          <a class="pp_previous" href="#"><i class="sl-arrow-left"></i></a> 		                        </div> 		                        <div id="pp_full_res"></div> 		                        <div class="pp_details"> 		                         <div class="ppt">&nbsp;</div> 		                          <div class="pp_nav"> 		                            <p class="currentTextHolder">0 / 0</p> 		                          </div> 		                          <p class="pp_description"></p> 		                          <a class="pp_close" href="#"><i class="sl-close"></i></a> 		                        </div> 		                      </div> 		                    </div> 		                  </div> 		                  </div> 		                </div> 		              </div> 		              <div class="pp_overlay"></div>'
                })
            }
        },
        smooth_scroll: function() {
            $('a[href^="#"]').on('click', function(e) {
                if (location.pathname.replace(/^\//, '') == this.pathname.replace(/^\//, '') && location.hostname == this.hostname && this.hash.indexOf('#!') === 0) {
                    var a = $(this.hash.replace('!', ''));
                    if (a.length) {
                        $('html,body').stop().animate({
                            scrollTop: a.offset().top - 80
                        }, 500)
                    }
                }
            })
        },
        animate: function() {
            $('.kc-animated').each(function(f) {
                $(this).viewportChecker({
                    callbackFunction: function(c) {
                        var d = c.get(0).className,
                            delay = 0,
                            speed = '2s',
                            timeout = 0;
                        if (d.indexOf('kc-animate-delay-') > -1) {
                            delay = d.split('kc-animate-delay-')[1].split(' ')[0];
                            c.css({
                                'animation-delay': delay + 'ms'
                            });
                            c.removeClass('kc-animate-delay-' + delay);
                            timeout += parseInt(delay)
                        }
                        if (d.indexOf('kc-animate-speed-') > -1) {
                            speed = d.split('kc-animate-speed-')[1].split(' ')[0];
                            c.css({
                                'animation-duration': speed
                            });
                            c.removeClass('kc-animate-speed-' + speed)
                        }
                        if (d.indexOf('kc-animate-eff-') > -1) {
                            var e = d.split('kc-animate-eff-')[1].split(' ')[0];
                            timeout += parseFloat(speed) * 1000;
                            c.removeClass('kc-animated').addClass('animated ' + e);
                            setTimeout(function(a, b) {
                                a.removeClass('animated kc-animated kc-animate-eff-' + b + ' ' + b);
                                a.css({
                                    'animation-delay': '',
                                    'animation-duration': ''
                                })
                            }, timeout, c, e)
                        }
                    },
                    classToAdd: 'kc-pc-loaded'
                })
            })
        }
    }
}(jQuery));
(function($) {
    $.fn.kcTooltip = function() {
        return this.each(function() {
            var a = this.getBoundingClientRect();
            var b = $(this).data('tooltip'),
                span_w = $(this).find('span').outerWidth(),
                span_h = $(this).find('span').outerHeight(),
                this_w = $(this).outerWidth(),
                this_h = $(this).outerHeight();
            if (typeof(b) == 'undefined') {
                $(this).find('span').css('margin-left', -span_w / 2);
                $(this).hover().find('span').css('bottom', this_h + 10)
            } else {
                var c = $(this).data('position');
                var d = -10;
                if (typeof c == 'undefined') c = 'top';
                $(this).addClass(c);
                $(this).find('span').attr({
                    'style': ''
                });
                switch (c) {
                    case 'right':
                        {
                            var e;
                            e = this_h / 2 - span_h / 2;
                            $(this).find('span').css('left', this_w + 10);
                            $(this).find('span').css('bottom', e);
                            $(this).hover().find('span').css('left', this_w - d);
                            break
                        }
                    case 'bottom':
                        {
                            $(this).find('span').css('margin-left', -span_w / 2);
                            $(this).hover().find('span').css('bottom', -span_h + d);
                            break
                        }
                    case 'left':
                        {
                            var e, ext_left = 5;
                            e = this_h / 2 - span_h / 2;
                            $(this).find('span').css('left', -span_w - ext_left);
                            $(this).find('span').css('bottom', e);
                            break
                        }
                    default:
                        {
                            $(this).find('span').css('margin-left', -span_w / 2);
                            $(this).hover().find('span').css('bottom', this_h - d)
                        }
                }
            }
        })
    }
}(jQuery));
                                    

#6 JavaScript::Eval (size: 64, repeated: 1) - SHA256: 87c99b9a88a42ee46bbe6ce447b600a1653142b3ebb7b9ed96bc786f7a99d488

                                        0,
function(C, J, r) {
    X((J = (r = (J = S(C), S)(C), C.B[J]) && E(J, C), r), C, J)
}
                                    

Executed Writes (0)



HTTP Transactions (109)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 04 Oct 2022 17:35:23 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: aCoBD7GoO2s72wkeGOWaF9mXxRQuj9eVBVDp509UbWGgah8bpiskjw==
Age: 1044


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    2d12f67fe57a87e7366b662d153a5582
Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1
Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1F611155394FAC39439B8EC8217D8CD493D6B588D372D264E0D66C03129C50C6"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6276
Expires: Tue, 04 Oct 2022 19:37:24 GMT
Date: Tue, 04 Oct 2022 17:52:48 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 04 Oct 2022 05:28:28 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mm3FHwChW1A_t8Lpc9Rtf44HWaocRmr9TYZguW0atkum-irC5lZYmg==
age: 44661
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET /dora-bayer/williambrown-72.zip HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         50.87.146.64
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Tue, 04 Oct 2022 17:52:48 GMT
Server: Apache
Location: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Cache-Control: max-age=300
Expires: Tue, 04 Oct 2022 17:57:48 GMT
Content-Length: 269
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   269
Md5:    11fdab06b5beecc6b2c2e6b15ff7e7d9
Sha1:   67ea336b79d536374a5d88f2ab2d5299fffe2c81
Sha256: cd8577eccdbc216bd0acebf67f1c9b8054c28f994e0463f708c723eb68f2bab0

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 04 Oct 2022 17:52:48 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A7E00E82C61B3D1A6A63EB61CAC0FFD02486CCACFB807FA6F7D6147EA02BA992"
Last-Modified: Tue, 04 Oct 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13586
Expires: Tue, 04 Oct 2022 21:39:15 GMT
Date: Tue, 04 Oct 2022 17:52:49 GMT
Connection: keep-alive

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 04 Oct 2022 17:29:33 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Tue, 04 Oct 2022 18:21:41 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: P4hilM8KKQBOZhl4yemN7G5rZLxjO76Yw8RXfvUNfWvOI-oTKshTmg==
Age: 1396


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2614
Cache-Control: 'max-age=158059'
Date: Tue, 04 Oct 2022 17:52:49 GMT
Last-Modified: Tue, 04 Oct 2022 17:09:15 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Sz7KZZLw5ZAM96DrpgHIww==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         44.237.239.70
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: UKHMo15wuImXhYHsI5RpY/z85ao=

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 17:52:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 17:52:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtag/js?id=UA-167750773-1 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 04 Oct 2022 17:52:50 GMT
expires: Tue, 04 Oct 2022 17:52:50 GMT
cache-control: private, max-age=900
last-modified: Tue, 04 Oct 2022 17:19:55 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42365
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2039)
Size:   42365
Md5:    76554a67c0fbcff2dfa6b3580e4643b2
Sha1:   0557f5907f72844f902c54698d05bf3d035535a3
Sha256: ef4fe60a4e7212f3426472507493feac155531050cbf8a2f4705bcfb77d1ea27
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 17:52:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 17:52:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Wed, 08 Jan 2020 20:57:09 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1298
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4186), with no line terminators
Size:   1298
Md5:    91bab39b98d7e5c1632717b9ebe349e4
Sha1:   e639a447d06fc7827be5b5b35d603ff16b5f7bb1
Sha256: 47ff151faeb23a5654f6ec58b404e51193f6714849a69de241c2ee79662f74c6
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 17:52:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/plugins/woo-out-of-stock-products/inc/outofstock.css?ver=6.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Sun, 26 Apr 2020 16:07:55 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 421
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (364), with CRLF line terminators
Size:   421
Md5:    b85872ebc1a17128f0a513e85de4b504
Sha1:   a2ef838a52b0499604f4c423709971d2627dcf10
Sha256: 9c5984e4e0a9229145b396522ed540defef291c3da2056a808f35cd61b553f52
                                        
                                            GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 11 Feb 2021 15:57:54 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 3239
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11256), with no line terminators
Size:   3239
Md5:    1054d0d53548e8bae51665b11acc6413
Sha1:   2eea6a05fe18db61fff58c431d34a86b3e0b7ade
Sha256: cb8b0f0f3f871d9776da32ee6d9e1af9277a211be61e97a831c7f8c98fbebfae
                                        
                                            GET /s-202240.js HTTP/1.1 
Host: stats.wp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         192.0.76.3
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 04 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
etag: W/"6197c5cf-2494"
content-encoding: br
expires: Mon, 02 Oct 2023 15:43:35 GMT
cache-control: max-age=31536000
x-nc: HIT arn
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (9364), with no line terminators
Size:   4405
Md5:    fb746505f1063f74ea07a27bd95e6b76
Sha1:   9903180d18b9dca2335fe3c2c5eabbd261a18126
Sha256: 29e04c1227f19190a59beda529adc7dde7d36e5ddacf646de046c7a68c8ffb3a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 17:52:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17040
Expires: Tue, 04 Oct 2022 22:36:51 GMT
Date: Tue, 04 Oct 2022 17:52:51 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17040
Expires: Tue, 04 Oct 2022 22:36:51 GMT
Date: Tue, 04 Oct 2022 17:52:51 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17040
Expires: Tue, 04 Oct 2022 22:36:51 GMT
Date: Tue, 04 Oct 2022 17:52:51 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17040
Expires: Tue, 04 Oct 2022 22:36:51 GMT
Date: Tue, 04 Oct 2022 17:52:51 GMT
Connection: keep-alive

                                        
                                            GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 01 Aug 2022 13:52:07 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 16594
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (43771)
Size:   16594
Md5:    2a67a4888baa44de739f3fe56203ce07
Sha1:   da175eae57f26b655747d79f055477e3fee1abb9
Sha256: 3a4d7627476a0099ca4bcc101685f27de04cb49dd66ef842d72c6cda270599dd
                                        
                                            GET /wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.8 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 27 Jan 2020 02:10:22 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 11979
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (5178)
Size:   11979
Md5:    0934891eb8e76a58d115e0c41015b023
Sha1:   43afb84e3363148a8075e015c074f7317fc5a090
Sha256: 9c53e0485cf755c4236daabea4c457ae80056756a2e0f00970cf39bc449fcabe
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F545190f2-96f3-40f8-bd46-cebe7171aee7.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9917
x-amzn-requestid: 2dff93d9-795d-4885-9b82-610b0d235a82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpvTGEnIAMF1zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5661-117afa703663ada75627792c;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:38:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: DOS5kVEVqBrCVMKRw07fX-6HDgWVb9lJwkVM2pXs0PQHys6CBJUVfQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:44:20 GMT
age: 72511
etag: "22aab05208a01ae5def4d63dc145085630f57bcb"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9917
Md5:    d8c08f8066cc732de8befd6ccd629a95
Sha1:   22aab05208a01ae5def4d63dc145085630f57bcb
Sha256: f8a560a0563518d992d0bd2655d2b5c406435a18e874ca00b51374d2ff901770
                                        
                                            GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=5.5.1 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 10 Mar 2022 21:42:13 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1154
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3276), with no line terminators
Size:   1154
Md5:    4b54905974b8a358e51ac1d1807f55bd
Sha1:   2c785074589dda8fe89324c9dd16f8d5694dded0
Sha256: 2d1217b0eec970b6bb388260f840baf654e276b2340ce2f240684fc88582e974
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8641c47a-9aff-4f73-bb07-6770cbbcc8d6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5504
x-amzn-requestid: 37405eb0-5c75-46a9-84c0-e8ed726995d8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpHvHPvoAMF3mg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5564-77fd550b58af612525e74761;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:34:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: O1yNc4H21kixhUEE7099oNqs7a5ZnJBBjlZbsbmLvaXyzXzrK0dL3w==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:44:33 GMT
age: 72498
etag: "20ef861be49c652a938e0145e4ca3a60159367e2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5504
Md5:    6c6882c60d7ca6f918c77104e3ad1d52
Sha1:   20ef861be49c652a938e0145e4ca3a60159367e2
Sha256: 861f5870990fbd2939d151ae18384cf311e87067ca9a50818efe0c2d51b83088
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.6.1 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 409 Conflict
content-type: text/html; charset=iso-8859-1
                                        
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
content-length: 83
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   83
Md5:    26267cd8990f15d3bbea71684a6d5995
Sha1:   ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
Sha256: 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
                                        
                                            GET /wp-content/plugins/woo-out-of-stock-products/admin/inc/admin-outofstock.css?ver=6.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Sun, 26 Apr 2020 01:00:54 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 123
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   123
Md5:    8df5ad8a0ae40a17e71597baacf9b180
Sha1:   fa1d318397c905a1d36f88f7420425409be9a8ae
Sha256: b367e0e6756e828d0ef2cd4f77527e8d74784b7cfab12c502bbc132e95207526
                                        
                                            GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=5.6.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 10 Mar 2022 21:42:14 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 3138
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (17923), with no line terminators
Size:   3138
Md5:    cb050cf785dc6a3154760c12096a2f5c
Sha1:   797c9ea468aa1f60667926bd35bf6874a3e548ea
Sha256: 97ac5d6189e1cdb1d62b676c0769ec783131500f02155eba5b4eae109fe1fa0f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fec31ab6c-46f2-4d77-a807-9f14bb5073bc.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11955
x-amzn-requestid: ce6bbe93-95b0-4b6e-a8bc-012796485e67
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zcqb9FUtoAMF0WQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b577f-59dc0a18523f900a059aa5df;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:43:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 44jC1Ww19YUJjZHw9_3cSSR5Y7nw5df412G-RxWFTcbRz1XDKaT3zQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:44:35 GMT
age: 72496
etag: "e2ea2ef6805e391c497e62e101e76a0bdecfce64"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11955
Md5:    54b3ef7aa50273b78b59c24511b0c1f9
Sha1:   e2ea2ef6805e391c497e62e101e76a0bdecfce64
Sha256: 296e8954022d5160137b3e02ab5085a15cee7c23cd6d4ca61b36880706062457
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ae1e7d3-41cb-4400-8cae-870baa006b86.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7777
x-amzn-requestid: d035ce80-1700-4e69-8b75-e0bf47ca9ddf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZDCWCFw4oAMFVDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63311759-0412900d669b5381058ec9a2;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 03:07:05 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Qjg6qPJNIehAnTLi-hWNzXTtp0q6Jnw82sOKKZJvTznFmNihUcNgJw==
via: 1.1 73b60e9a9fd08eae9e034cedba707280.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 06:18:18 GMT
age: 41673
etag: "2973e908318c68489bba9b4242254769a4f3d1ba"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7777
Md5:    5a137925cb6116c46ce21c6e27933c44
Sha1:   2973e908318c68489bba9b4242254769a4f3d1ba
Sha256: 737bf9c3d2906a937ed0b082c8830982163be90acf8dd01dacc7ec80c5c8bcd1
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6bf68975-a099-4d4b-9abd-6e684653439d.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10878
x-amzn-requestid: a849d918-ec40-47d4-93cb-e938b010bd50
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpJKGAPIAMFSiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b556d-242a8d2208b6574c34063c1f;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:34:37 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 7ZaoEBhn_F_zDvoalcEpb4PtdGMuU9stAktSCviy5SsaaBaxYUJ6Fg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:44:20 GMT
age: 72511
etag: "d893d8035379e06e53e365b9f47f5da40bff932b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10878
Md5:    f62719b24a32198c6f462a0a0412ac98
Sha1:   d893d8035379e06e53e365b9f47f5da40bff932b
Sha256: ca863affca1559e92e415a4de2e78e4b4c1ec4cf8e8549693499c6f79bd27975
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a61745f-0c9b-404a-ba22-0a69cf2f0383.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4858
x-amzn-requestid: fb21c414-2994-444a-a838-e643fd05b171
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpvTEfPoAMFfeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5661-593dd8043b0490e7301cac0d;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:38:41 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: SGeDEPoXxsTV5UwkZnn3MJPbjhHhrKSsueHPxVapV_7Icl6daFk3oA==
via: 1.1 773ca14e6bd4bf9244988cb69fc9dca8.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:44:20 GMT
age: 72511
etag: "585e7146fd24cdc2496b05baafea04091dc541e2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4858
Md5:    6779181f9c06975f2a662da743893939
Sha1:   585e7146fd24cdc2496b05baafea04091dc541e2
Sha256: 8e9a9f92fd89b7cdce77884ccd76b83ab82d28f125ebfc1cb0d371d4046b7985
                                        
                                            GET /wp-content/themes/eveprest/css/prettyPhoto.css?ver=6.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 27 Jan 2020 02:00:53 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 4811
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   4811
Md5:    13dcaddec0c181498bd9f6feb5ee1693
Sha1:   40dd2ec323b38247f41502e8bd6d32180c7b73f4
Sha256: cfe47550f7fe5818fb09180a168217bb839197bb61dcb707709770210bfaead2
                                        
                                            GET /wp-content/plugins/eventON/assets/css/eventon_dynamic_styles.css?ver=6.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Sat, 07 Mar 2020 21:34:29 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 2265
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  assembler source, ASCII text, with very long lines (2921), with CRLF line terminators
Size:   2265
Md5:    c8a3608d28b620f2efd1f2c86691be80
Sha1:   236f0a935c975236962d62a5309eebcd44d4e0fc
Sha256: a992513e606d3e87bb52685eeb50ac7244620b54fdf46d600c0f088937bccd3d
                                        
                                            GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=5.6.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 10 Mar 2022 21:42:14 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 13274
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (62789), with no line terminators
Size:   13274
Md5:    82896daaf5244f88f56a2a05ad01f545
Sha1:   d29b7c23ec5d0c5996138a0191fa8e44ebe01e2d
Sha256: 5a9ff1f54c905da4d01e306753da7a9bd10c98e1e84b5bd89d112567dc687da3
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6.1 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 409 Conflict
content-type: text/html; charset=iso-8859-1
                                        
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
content-length: 83
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   83
Md5:    26267cd8990f15d3bbea71684a6d5995
Sha1:   ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
Sha256: 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
                                        
                                            GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.5.6.1 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 409 Conflict
content-type: text/html; charset=iso-8859-1
                                        
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
content-length: 83
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   83
Md5:    26267cd8990f15d3bbea71684a6d5995
Sha1:   ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
Sha256: 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
                                        
                                            GET /wp-content/themes/eveprest/js/jquery.prettyPhoto.js?ver=6.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:39:11 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 7455
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (21223)
Size:   7455
Md5:    943defc85539a3513d3a76442d5c3307
Sha1:   2633f53e5a6b04544a803961504327fe059f357a
Sha256: 31658dc37ad1feeeee8137866f0476b43894725ff63f62db3c2e0f6b9d4ee2b7
                                        
                                            GET /wp-content/plugins/eventON/assets/js/eventon_functions.js?ver=2.7 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:41:46 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1021
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1021
Md5:    f7fb8cc8255bd25334fa6d7bc157c280
Sha1:   a6f84408321f7560d0735a842f85eadd55431bb5
Sha256: 1c7446b1f3baaed496b6e798870eed738bb0d05a10938ba4668ee4b7c509ad45
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=5.6.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 10 Mar 2022 21:42:14 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 792
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2139), with no line terminators
Size:   792
Md5:    1ca3f41c13e0027acc45f0601f8b640f
Sha1:   cced34af0c6a59e9cee4229faa66ab39c7031506
Sha256: d3bc5eaf4c6be9473dbba690825cce9a1a6f4accb6721dae7875efef54942f41
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.5.6.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 10 Mar 2022 21:42:14 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1000
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1668)
Size:   1000
Md5:    0bebfb5722cbc8ac04e62aa40698be49
Sha1:   3bc5e4f29cb19a2d80d46dee242dabf7e42c0fd3
Sha256: 70d02eabbadbe176455a2bb53d8d567feca69847c067a5274987a8bdc65e3c05
                                        
                                            GET /wp-content/plugins/creame-whatsapp-me/public/css/joinchat-btn.min.css?ver=4.5.9 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 01 Aug 2022 13:46:01 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 2462
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6021), with no line terminators
Size:   2462
Md5:    5970e7598cf1a83c35e762ae20415920
Sha1:   8660ae5456c778a1603ae5a8e07f1497cff5c50c
Sha256: 4ab655357d11e783d63e4ce3d227e7d75bec807e67355a8eaf17954d151cdc5a
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=5.6.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 10 Mar 2022 21:42:14 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1093
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2938), with no line terminators
Size:   1093
Md5:    cd0d4a61ea66e2609f7fafca802e10c8
Sha1:   6c2f2a32371a7cb6c34cd0d7abd5ca653058b6e1
Sha256: 21a6739f80cd455c35620bf9869f312c4ff0b7e5d4b6d6cc8401bd5deba54c1a
                                        
                                            GET /wp-content/plugins/eventON/assets/js/jquery.mousewheel.min.js?ver=2.7 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:44:17 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 716
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1020)
Size:   716
Md5:    bb865c2c01892719bfdd390898e7634d
Sha1:   0d69bbe15aa80a0a949b95d730350625dfa6369a
Sha256: b0f210b68a0f064803906cab5dd9d1bdd65e03ffb309f603ca4afe6533819285
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=5.6.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 10 Mar 2022 21:42:14 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1200
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (3037), with no line terminators
Size:   1200
Md5:    57b5945094a547e06221f8f949e6d335
Sha1:   76fc7361f00684ea29ffbf4b7d46e5429b8c245a
Sha256: f9d0da987075df31cc4cf8aed46bc193467ce7165568d83c8016e6fe904e72c3
                                        
                                            GET /wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=8.7.0 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 01 Aug 2022 13:46:00 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 3861
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1577)
Size:   3861
Md5:    0de3f234bf5adf709c64d6a81701e107
Sha1:   ec76e30709d2ac94c86121529768c54b84943872
Sha256: c67075988b28f06061348cebb275f465c608e141f9a00b50c5e4824f57ed10f3
                                        
                                            GET /wp-content/plugins/kingcomposer/assets/css/animate.css?ver=2.9.6 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 14 Jan 2021 16:58:27 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 3656
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (36512)
Size:   3656
Md5:    e3f6e578fe7ca5362fccbfcce94ce996
Sha1:   b1deba8d80cae941d22051fda096e49d6274af3b
Sha256: eb202c9ec2bc15da2ea3e218313eb25628179671965ed043c49fb711a63dfbfe
                                        
                                            GET /wp-content/themes/eveprest/js/functions.js?ver=20150315 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:39:27 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 2179
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   2179
Md5:    3356a040b291b40357e00aafbd148802
Sha1:   7f276bf644063fb6f553da60fc0f4d8fa80e4b7a
Sha256: 7e4a44df807df6d125ae3cb8ed6fc56344a617acfe73068f7115d8341c49979a
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 25 Aug 2021 19:13:45 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 4618
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11126)
Size:   4618
Md5:    acdb97105af28a7066790c6748ae2e1e
Sha1:   65794d2c5a9d04f747faf370bc8bacd330e69e5a
Sha256: dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
                                        
                                            GET /dora-bayer/williambrown-72.zip HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         50.87.146.64
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                        
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://fundaciondarydarse.org/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 17:52:49 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Size:   23249
Md5:    df19271e0856f4b5accbe2fe90986d43
Sha1:   71ed7ad4da49fbc8de8175e01ab2db8857699fe6
Sha256: 174bfe37c0d41b2c8cc344a730e8ce3326071d7a21bcc358b8da16be0920387d

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/themes/eveprest/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 27 Jan 2020 02:00:52 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 7079
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (30629)
Size:   7079
Md5:    934b13b87386616f02d876ba5966833c
Sha1:   318fb4792f877fe9628e37db5fe27f23ab3d8395
Sha256: 53f4c4d51cd69a86d2f92175f97d9e373a644b81d066a1e4ea2e2896f16c775c
                                        
                                            GET /wp-content/plugins/wpopal-themer/assets/js/elevatezoom/elevatezoom-min.js?ver=6.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:46:10 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 7847
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (560)
Size:   7847
Md5:    684f525508c5891f2565719a8f15a9fe
Sha1:   67bb1d05a41a70ae23dd757642bcbe4c5a6fad89
Sha256: 214a8b1edf79077afccf8105c7f59342004018f2d5052fc0c8aa884c92f269b0
                                        
                                            GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 01 Aug 2022 13:52:08 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 2675
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6475), with no line terminators
Size:   2675
Md5:    45bd1d6f7fc3a4069fc6fd400b90c961
Sha1:   903c7e28c7141e9fc1bdb4dfc62d043a97a01e2d
Sha256: c638a0057b4be0a61cfb65b1860a855a327397e9871f5dde28fa2f138fb394dc
                                        
                                            GET /wp-content/plugins/creame-whatsapp-me/public/js/joinchat.min.js?ver=4.5.9 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 01 Aug 2022 13:46:01 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 3144
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7996), with no line terminators
Size:   3144
Md5:    d1c9564ba057c67abbf92063047fbd0b
Sha1:   62e211fdb6c7277c0cf8b4c24a96fc986d7f9db5
Sha256: 630854c465b2a91eafc869896e89749a20215a5b99a4cf0eb930ba5c6a7584bc
                                        
                                            GET /wp-content/plugins/eventON/assets/js/jquery.mobile.min.js?ver=2.7 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:40:38 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 4177
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (13639), with no line terminators
Size:   4177
Md5:    3384dd748de7a3411c5f335665f2c966
Sha1:   89ee515f5819573381ca9bd0dcfdb809b0d5245c
Sha256: 9b4a667c48034e48ed398eebf7d2f97948b205260d191c043568c3f284bf2571
                                        
                                            GET /wp-content/plugins/kingcomposer/assets/css/icons.css?ver=2.9.6 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 14 Jan 2021 16:58:27 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 11214
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (35475)
Size:   11214
Md5:    0ee2565319bdc28b2f5edac9826f40ae
Sha1:   79c05f008f3ff3f96fd97b94a1ea13de34b72afa
Sha256: 11457f8c739cb2b78f0a6cfd63e263390b53d8a566489dc1cb15198c0d8299a0
                                        
                                            GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 01 Aug 2022 13:52:08 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 5321
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (15660)
Size:   5321
Md5:    710f8b142ea44c0682dc2c30f318f065
Sha1:   49144e9b3a76d3d383b1d4359cf7a25e947f4233
Sha256: 708bb5819879a2a2c7670abc20a58cca68a415ffd621011cbc4c3c9d82dddc50
                                        
                                            GET /wp-content/themes/eveprest/js/bootstrap.min.js?ver=20130402 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:38:01 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 14302
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32034)
Size:   14302
Md5:    5f6b33d0c3c840a00bb9546255b950fe
Sha1:   8529abb9ada164bd0c06aac91f8772598cb06a83
Sha256: 77ef532197a471284339e911d1ec20c1da285e8e8dba10fec10c1dcde394fb08
                                        
                                            GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 01 Aug 2022 13:52:08 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 8254
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (19138), with no line terminators
Size:   8254
Md5:    e49f0561a452c9d04fb7d1510a23cc8c
Sha1:   9e8fc2e3129da4fe2790eee565a6478b864bea83
Sha256: ab4f9f418b022ab34d617ee2f95d70afff005ed4d4d92e313ce84a56b40bce75
                                        
                                            GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Mon, 01 Aug 2022 13:52:08 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 8169
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (8189)
Size:   8169
Md5:    a0a1c8194f131320e1798f90a7b1262a
Sha1:   3346d35be1f2e4886f19e7fcc0cc96ee4753d9ed
Sha256: 7f618ab13cec0933ec2c61fa2b580ad77ca41522028649677494219fa9ce56db
                                        
                                            GET /wp-content/plugins/eventON/assets/js/eventon_script.js?ver=2.7 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:44:37 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 14370
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   14370
Md5:    f3ab5f46e7ed4a053ef5ca51a0609bfc
Sha1:   79dfe6de7f243d3370ae7935df21656fcb1320a1
Sha256: d914405f59424ab7d09a98c98ec990f43550e2f5b583c14e77d1bfeeb367e875
                                        
                                            GET /wp-content/uploads/2020/02/cropped-logo-foot2.png HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Wed, 26 Feb 2020 02:58:44 GMT
accept-ranges: bytes
content-length: 9045
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 77 x 75, 8-bit/color RGBA, non-interlaced\012- data
Size:   9045
Md5:    4fc4cf77723f0c2b5f43c4e01ab7c99e
Sha1:   a74745a8947bd0314a7634d4f4b27a3e7474c757
Sha256: c98e05f77ce684f2693d0a0b2753a4e44d7fc092692b6e851e20c53d0eb6ebbd
                                        
                                            GET /wp-includes/js/jquery/suggest.min.js?ver=1.1-20110113 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 25 Aug 2021 19:13:45 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1431
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2992)
Size:   1431
Md5:    f75161fdcb9f74f47747e959c8cfc1b7
Sha1:   77a9216b944111011f19ead03d48e7ac2a4de109
Sha256: 94ca799a236dbda6c8198fa181b8bf85744f1b55a2ae14fcd1c480ec7f75c74e
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.5.6.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Thu, 10 Mar 2022 21:42:14 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 3952
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (9151)
Size:   3952
Md5:    338b374df64ac61f520f0dc2c42f84a4
Sha1:   7f5d52c9681f54bd3adbda325dffaac88b48839f
Sha256: c411e1e640b16842b6142a6e4db4b7172abedc8740b0944fc7c510c7f8f85609
                                        
                                            GET /wp-content/plugins/eventON/assets/fonts/font-awesome.css?ver=2.7 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Sat, 07 Mar 2020 21:08:12 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 7517
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  troff or preprocessor input, ASCII text, with very long lines (347)
Size:   7517
Md5:    92b827bf163a062725109c0508b0fabe
Sha1:   e611af31aa49b2d9ea5146486657126dd3ba3063
Sha256: 86415a98efa83492835dfd413224429951c0fe565f3940464232f352f9832253
                                        
                                            GET /wp-content/plugins/kingcomposer/assets/frontend/js/kingcomposer.min.js?ver=2.9.6 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:45:14 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 8232
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (17655)
Size:   8232
Md5:    bf1ff96c20bc4bdf23a2abdfb01f3dd1
Sha1:   017cc02e2bf733bde013999e09e3cbde44df1bd5
Sha256: 626aec5edc9fa0edf3ea391ef1b0eb41cfc09fd5970b488db2264f3018032149
                                        
                                            GET /wp-content/themes/eveprest/js/owl-carousel/owl.carousel.js?ver=20150315 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:43:53 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 11998
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   11998
Md5:    752d1936df616908639a921209323a83
Sha1:   119b009420eafb606f5e39544b154f7f2496b845
Sha256: 6e900a35e46ad4b2526372286c43389c764ff16f2fd9a8d7b2e10fa020eb90c3
                                        
                                            GET /wp-content/uploads/2020/02/payment.png HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Thu, 27 Feb 2020 01:48:39 GMT
accept-ranges: bytes
content-length: 3474
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 255 x 22, 8-bit colormap, non-interlaced\012- data
Size:   3474
Md5:    26ccffda5c7255dc62bfabac1ad0592a
Sha1:   d71af19b8500468b0e27f41f25b386fb4819b58b
Sha256: 68d6fd8051da72645f729d7f3389b60cc55121b4889dc82afc89d90e18ffc57f
                                        
                                            GET /wp-content/uploads/2020/02/logo-foot.png HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Sun, 09 Feb 2020 01:05:20 GMT
accept-ranges: bytes
content-length: 26120
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 150 x 135, 8-bit/color RGBA, non-interlaced\012- data
Size:   26120
Md5:    03ead5633efb2d5ca2ccf99a090c8d07
Sha1:   c7364df3435ce6e6dc508e6f908bdd4d87c02128
Sha256: 3eb0131743adf39a4c647d80b392a98024b9fc1ea701416112d59b04f3baa43b
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 17:52:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fundaciondarydarse.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Oct 2022 03:08:55 GMT
expires: Sun, 01 Oct 2023 03:08:55 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
age: 312238
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Size:   44856
Md5:    565ce506190ad3af920b40baf1794cec
Sha1:   ad3cba5d06100e09449a864d3b5e58403b478b3d
Sha256: 8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
                                        
                                            GET /wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=5.6.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 10 Mar 2022 21:42:14 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:53 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1294
date: Tue, 04 Oct 2022 17:52:53 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7043), with no line terminators
Size:   1294
Md5:    23030da399d26bb36e2effda3c58d488
Sha1:   2480e4b14c65a29b6013515cea8a55a6646aa85a
Sha256: 026d41f0bbec9c4116e05c06d43d3bbae4e9ec0975f84140565760431eaa88d7
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 17:52:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6.1 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 409 Conflict
content-type: text/html; charset=iso-8859-1
                                        
date: Tue, 04 Oct 2022 17:52:53 GMT
server: Apache
content-length: 83
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   83
Md5:    26267cd8990f15d3bbea71684a6d5995
Sha1:   ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
Sha256: 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
                                        
                                            GET /maps-api-v3/embed/js/50/7a/intl/es_419/init_embed.js HTTP/1.1 
Host: maps.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 69325
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Oct 2022 16:58:02 GMT
expires: Sun, 01 Oct 2023 16:58:02 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 27 Sep 2022 20:34:50 GMT
age: 262491
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2669)
Size:   69325
Md5:    f24d3836affa80a8d17e2720e15d9b13
Sha1:   cc91c7b820f873a197697421984637399ae484ee
Sha256: 3a21d4f024399c1648048acf80e720961ca5e2272051cee41b6fb444474f9dee
                                        
                                            GET /css?family=Oswald%3A400%2C300%7COpen+Sans%3A700%2C400%2C400i%7CRoboto%3A700%2C400&ver=6.0.2 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 04 Oct 2022 17:52:50 GMT
date: Tue, 04 Oct 2022 17:52:50 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1250
Md5:    b7fe3b6b7bc4d9929092e774741793ae
Sha1:   b6f36e83d58eff3ee65f01f943380b55c9b27a57
Sha256: 44503a36989e66ec2958a399141c600aabc64fa66d66c4a46429dcf83fbba669
                                        
                                            GET /wp-content/plugins/kingcomposer/assets/css/fonts/fa-solid-900.woff2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://fundaciondarydarse.org/wp-content/plugins/kingcomposer/assets/css/icons.css?ver=2.9.6
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: font/woff2
                                        
last-modified: Thu, 14 Jan 2021 16:58:27 GMT
accept-ranges: bytes
content-length: 44068
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:53 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 17:52:53 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 44068, version 1.0\012- data
Size:   44068
Md5:    84f351b3972185aed620f78489e48b2d
Sha1:   27c88aea3904d48cde4c8cd6fa85a414b547feea
Sha256: cb7aa6b06aa5a8eea3670662c4b0c37104041c14575fc170dc48677a0506a33a
                                        
                                            GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 28 Sep 2022 19:34:08 GMT
expires: Thu, 28 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 512326
last-modified: Wed, 11 May 2022 19:24:48 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Size:   15744
Md5:    15d9f621c3bd1599f0169dcf0bd5e63e
Sha1:   7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
Sha256: f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
                                        
                                            GET /wp-content/themes/eveprest/fonts/proximanovacondensed/ProximaNovaCondensedBold.woff HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://fundaciondarydarse.org/wp-content/themes/eveprest/css/style.css?ver=6.0.2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: font/woff
                                        
last-modified: Mon, 27 Jan 2020 02:01:16 GMT
accept-ranges: bytes
content-length: 57564
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:53 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 17:52:53 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, CFF, length 57564, version 0.0\012- data
Size:   57564
Md5:    6c58651f10f14cff8a059d1287747783
Sha1:   d460c88393d7722c72f6a62838b8347133398051
Sha256: 293ec76211b0bb1e242ef4b56abbd5b667418f9e3c98a891c95fa052bc03ceb1
                                        
                                            GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.5.6.1 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 409 Conflict
content-type: text/html; charset=iso-8859-1
                                        
date: Tue, 04 Oct 2022 17:52:53 GMT
server: Apache
content-length: 83
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   83
Md5:    26267cd8990f15d3bbea71684a6d5995
Sha1:   ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
Sha256: 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
                                        
                                            GET /wp-content/themes/eveprest/fonts/proximanovacondensed/ProximaNovaCondensedRegular.woff HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://fundaciondarydarse.org/wp-content/themes/eveprest/css/style.css?ver=6.0.2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: font/woff
                                        
last-modified: Mon, 27 Jan 2020 02:01:20 GMT
accept-ranges: bytes
content-length: 55804
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:53 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 17:52:53 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, CFF, length 55804, version 0.0\012- data
Size:   55804
Md5:    78091db94f3527ee01b6f46d4fff2b2c
Sha1:   a091cd76ed4b01cd9b6db59515cc06278c6d98d6
Sha256: ac6ddfe6981739ff58f783db6eb4a0bae2ff06f8f1b5dab856de25524a83c0ab
                                        
                                            GET /wp-content/themes/eveprest/fonts/proximanovacondensed/ProximaNovaCondensedLight.woff HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://fundaciondarydarse.org/wp-content/themes/eveprest/css/style.css?ver=6.0.2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: font/woff
                                        
last-modified: Mon, 27 Jan 2020 02:01:17 GMT
accept-ranges: bytes
content-length: 55436
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:53 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 17:52:53 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, CFF, length 55436, version 0.0\012- data
Size:   55436
Md5:    b9b6810f2616d36cec5afcf02eedd171
Sha1:   a0b07a15c7f528994a60d5db23e782a9a310f93c
Sha256: b46fdebcaaced5bf4e6bb91ff195e7611c595c4cb9d5fee4edea59e7b5c66909
                                        
                                            GET /wp-content/plugins/kingcomposer/assets/css/fonts/fa-brands-400.woff2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://fundaciondarydarse.org/wp-content/plugins/kingcomposer/assets/css/icons.css?ver=2.9.6
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: font/woff2
                                        
last-modified: Thu, 14 Jan 2021 16:58:27 GMT
accept-ranges: bytes
content-length: 55144
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:53 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 17:52:53 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 55144, version 1.0\012- data
Size:   55144
Md5:    2ac01f7650b5ab76bfebbc708928929e
Sha1:   8ca7aeb88ef1fefb582f941e9216029328e25f4c
Sha256: e8562087317b34c4b2ac60e28e272b7b33e37523aacd5f2adba7a4f108e415c6
                                        
                                            GET /g.gif?v=ext&j=1%3A11.1.2&blog=172023568&post=0&tz=-5&srv=fundaciondarydarse.org&host=fundaciondarydarse.org&ref=&fcp=4666&rand=0.30839213441352975 HTTP/1.1 
Host: pixel.wp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         192.0.76.3
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Tue, 04 Oct 2022 17:52:55 GMT
content-length: 50
cache-control: no-cache
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 6 x 5\012- data
Size:   50
Md5:    e4d673a55c5656f19ef81563fb10884c
Sha1:   1f2d8ed221d39329251ad3a6ff1edb20b7219443
Sha256: f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 04 Oct 2022 16:41:09 GMT
expires: Tue, 04 Oct 2022 18:41:09 GMT
cache-control: public, max-age=7200
age: 4306
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20039
Md5:    47e6f374ca946fddd5b59871b325736c
Sha1:   baa9282efc8785e84d247c3bff518eaa45f101c4
Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
                                        
                                            GET /recaptcha/releases/a9s0j4pCVT6gaTEkLiFbtZPH/recaptcha__en.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fundaciondarydarse.org
Connection: keep-alive
Referer: https://fundaciondarydarse.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 158844
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Oct 2022 01:05:31 GMT
expires: Sun, 01 Oct 2023 01:05:31 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 26 Sep 2022 04:02:34 GMT
age: 319644
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (711)
Size:   158844
Md5:    b4ed95d4318e3b78b936c9c0f1ffa96e
Sha1:   b53c9376b1459afb07fb4b5c2e8d8dad776d3a02
Sha256: 3c21880cb7be6bec40f9d40c23ad39c9758999cf950cec07b86c83b21fde175f
                                        
                                            GET /wp-content/uploads/2020/04/body-fundation.png HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/wp-content/themes/eveprest/css/style.css?ver=6.0.2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Fri, 17 Apr 2020 03:56:32 GMT
accept-ranges: bytes
content-length: 372950
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:53 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 17:52:53 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Size:   372950
Md5:    3b5cde15300676b7dc90047be72dc314
Sha1:   8ac399d53197a0d373fa7dc8df9dbdf6302487e4
Sha256: 4b059c8ebf76b5dd854bb067a9ec87e0599e50ee1b30205a59b52bbf1ae55223
                                        
                                            GET /wp-content/themes/eveprest/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://fundaciondarydarse.org/wp-content/themes/eveprest/css/font-awesome.min.css?ver=4.7.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: font/woff2
                                        
last-modified: Mon, 27 Jan 2020 02:01:12 GMT
accept-ranges: bytes
content-length: 77160
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:54 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 17:52:54 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Size:   77160
Md5:    af7ae505a9eed503f8b8e6982036873e
Sha1:   d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
Sha256: 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
                                        
                                            GET /wp-content/uploads/2020/02/favicon.ico HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Cookie: tk_or=%22%22; tk_r3d=%22%22; tk_lr=%22%22
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: image/x-icon
                                        
last-modified: Sun, 09 Feb 2020 03:17:22 GMT
accept-ranges: bytes
content-length: 1150
cache-control: max-age=31536000
expires: Wed, 04 Oct 2023 17:52:55 GMT
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 17:52:55 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size:   1150
Md5:    2de14e3e5b90dd75c1f25e178db7de10
Sha1:   a0fcffe4e795780b3dd2b5e443a4fb49406fdc05
Sha256: 3a1ed2228dee991066ded374a1c94d0667f41f8c23f7ba459a522bd5a4722b5e
                                        
                                            GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Oct 2022 12:31:58 GMT
expires: Sun, 01 Oct 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 278457
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Size:   15344
Md5:    5d4aeb4e5f5ef754e307d7ffaef688bd
Sha1:   06db651cdf354c64a7383ea9c77024ef4fb4cef8
Sha256: 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
                                        
                                            GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 30 Sep 2022 00:48:31 GMT
expires: Sat, 30 Sep 2023 00:48:31 GMT
cache-control: public, max-age=31536000
age: 407064
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Size:   15552
Md5:    285467176f7fe6bb6a9c6873b3dad2cc
Sha1:   ea04e4ff5142ddd69307c183def721a160e0a64e
Sha256: 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 17:52:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-167750773-1&cid=360880229.1664905975&jid=1153616821&gjid=1519049704&_gid=1983795199.1664905975&_u=aGBAAUIgAAAAACAAI~&z=1739649803 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://fundaciondarydarse.org
Connection: keep-alive
Referer: https://fundaciondarydarse.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         74.125.131.156
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: https://fundaciondarydarse.org
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 04 Oct 2022 17:52:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  very short file (no magic)
Size:   1
Md5:    c4ca4238a0b923820dcc509a6f75849b
Sha1:   356a192b7913b04c54574d18c28d46e6395428ab
Sha256: 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 17:52:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/plugins/kingcomposer/assets/frontend/css/kingcomposer.min.css?ver=2.9.6 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 14 Jan 2021 16:58:27 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/plugins/eventON/assets/js/handlebars.js?ver=2.7 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:41:52 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.8 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:45:35 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/plugins/jetpack/css/jetpack.css?ver=11.1.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Mon, 01 Aug 2022 13:54:10 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.8 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 16 Jul 2021 13:44:55 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /e-202240.js HTTP/1.1 
Host: stats.wp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         192.0.76.3
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 04 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
etag: W/"6197c5cf-3508"
content-encoding: br
expires: Mon, 25 Sep 2023 06:12:14 GMT
cache-control: max-age=31536000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Wed, 25 Aug 2021 19:13:45 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/themes/eveprest/css/woocommerce.css?ver=1.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Sun, 24 May 2020 18:18:41 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/plugins/eventON/assets/css/eventon_styles.css?ver=2.7 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Sat, 07 Mar 2020 21:08:08 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=5.5.1 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 10 Mar 2022 21:42:14 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/themes/eveprest/css/style.css?ver=6.0.2 HTTP/1.1 
Host: fundaciondarydarse.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fundaciondarydarse.org/dora-bayer/williambrown-72.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         50.87.146.64
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Sun, 26 Apr 2020 01:43:43 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Wed, 05 Oct 2022 17:52:50 GMT
vary: Accept-Encoding
content-encoding: gzip
x-endurance-cache-level: 2
x-nginx-cache: WordPress
date: Tue, 04 Oct 2022 17:52:50 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---