r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 7fb7c70f7f4e2cee27eb0e7d875931f7
98fca3817a551b1daecebae103a48e718b8b5a53
2a40f957a6b1734aa3f87cff51b673f0536732db15b09033dd604879692df349
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A40F957A6B1734AA3F87CFF51B673F0536732DB15B09033DD604879692DF349"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8528
Expires: Wed, 28 Sep 2022 09:28:15 GMT
Date: Wed, 28 Sep 2022 07:06:07 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
143.204.55.27200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 28 Sep 2022 06:15:39 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 9TwiH_jL3e7hXWNttqfe8O2W5DTY1uQ4PqRJA_C5gDyUOX4my7gkiQ==
Age: 3028
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
143.204.55.35200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP 143.204.55.35:0
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 27 Sep 2022 09:24:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: W7UnBP2KahZqi8nNTos2ea3u32QZcQ7eKmgGRPvGmkEGuR3M7rMZkw==
age: 78114
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 28 Sep 2022 07:06:07 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
67.225.143.167301 Moved Permanently 0 B URL HTTP/1.1 hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
IP 67.225.143.167:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 28 Sep 2022 07:06:07 GMT
Server: Apache
X-Redirect-By: WordPress
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: https://hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
Vary: User-Agent
Content-Length: 0
Keep-Alive: timeout=2, max=500
Content-Type: text/html; charset=UTF-8
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.27200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Wed, 28 Sep 2022 06:29:33 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Wed, 28 Sep 2022 07:18:37 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Svw1ZSim4uHVjmQZ06RHJFdt2S6r3W3UTZx0-vmLQv5g3Tk9ihmZ7g==
Age: 2194
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash c18823050f86339eaa73ddb1bf80d64c
ac4ee81f59f706cee8a74458d498bbc20d8d351a
9a505647517bd02d8ff994fd4ad98dc2f4b519916145b0c327691420c1084c46
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1663
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 07:06:07 GMT
Last-Modified: Wed, 28 Sep 2022 06:38:24 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
34.213.92.18101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.213.92.18:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: IDfNv57SYJijYyXYDvjGew==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: safV+5vevkepD5/8/WrTAgLQ39s=
hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
67.225.143.167403 Forbidden 17 kB URL HTTP/2 hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
IP 67.225.143.167:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (58374)
Hash 6804dfb9c73a1c977d8c1540f6561cdf
611175a7957204d35504d9dbd23732c512a31d14
ac4e4d68d44f7a986d72d7d0fef99188e03e7d6f336fbeb1e45693a3925c2bb6
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 403 Forbidden
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 16864
content-type: text/html; charset=UTF-8
date: Wed, 28 Sep 2022 07:06:08 GMT
server: Apache
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.css
151.101.85.229200 OK 569 B URL HTTP/2 cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.css
IP 151.101.85.229:0
Hash 8089b828484e2269d5dcb1089c4004ba
9b61a0f5bf48ef08890dbae954ee9b5a90015d2c
35c1c8741af6e18aa88caca3d060e26808e1103a29b3ee0415ae3e3b648bcd09
GET /npm/slick-carousel@1.8.1/slick/slick.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 1.8.1
x-jsd-version-type: version
etag: W/"6f0-qUoFmzF4tK3sCeMoGs4oGaMAlaQ"
content-encoding: gzip
accept-ranges: bytes
date: Wed, 28 Sep 2022 07:06:08 GMT
age: 16782501
x-served-by: cache-fra19155-FRA, cache-bma1656-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 569
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.min.js
151.101.85.229200 OK 10 kB URL HTTP/2 cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.min.js
IP 151.101.85.229:0
File type ASCII text, with very long lines (42862)
Hash 9813220cc7ce308c3b615177a704bf73
7ac45f0924a3723bb86b31191dd5181cdf6182e5
e899ddae1fc463f8f57aa9b3eb970526133124c47f27ace1255d261fab56f4cb
GET /npm/slick-carousel@1.8.1/slick/slick.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.8.1
x-jsd-version-type: version
etag: W/"a76f-O0GzvJVmhQFaNHoiOOcdsp36Dbs"
content-encoding: gzip
accept-ranges: bytes
date: Wed, 28 Sep 2022 07:06:08 GMT
age: 2387914
x-served-by: cache-fra19145-FRA, cache-bma1656-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 10429
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
104.18.21.226200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP 104.18.21.226:0
Hash 70331756dce138c63e65fec0ed25f546
d1accfa07079b7e052399f8266874d50cf649910
2d0838798dfc8269de4c3aa4ee1bc0802b8cef76a3ee67e23d3f2850867ad27f
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 07:06:08 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "574F9EB87434EE6EF78E154E67699538ECB1ACDE"
Expires: Wed, 28 Sep 2022 18:00:00 GMT
Last-Modified: Wed, 28 Sep 2022 06:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1333
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 751aa27c5f64b51b-OSL
hincllc.com/wp-content/plugins/email-subscribers/lite/public/css/email-subscribers-public.css?ver=4.4.9
67.225.143.167200 OK 671 B URL HTTP/2 hincllc.com/wp-content/plugins/email-subscribers/lite/public/css/email-subscribers-public.css?ver=4.4.9
IP 67.225.143.167:0
Hash 6b44f99f11d3b5e8a12ca55e4553ed84
a76c05da58213bc090b1a3b539a48fbefb87ac24
bd898a77b9237974f68c625d56cb5760433be45dad29176062802eaabe5b0091
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/email-subscribers/lite/public/css/email-subscribers-public.css?ver=4.4.9 HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 Jun 2020 19:41:47 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 28 Oct 2022 07:06:08 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 671
content-type: text/css
date: Wed, 28 Sep 2022 07:06:08 GMT
server: Apache
X-Firefox-Spdy: h2
hincllc.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.1.9
67.225.143.167200 OK 677 B URL HTTP/2 hincllc.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.1.9
IP 67.225.143.167:0
Hash c1f1a2aca368f9723097af32fd3154bb
15ef2cab00f14ea55fc42dd3856cdb00d12c0ed9
16bfe915f55f4ca3e8fa2427bda53179f77e44b7ed3640c6ce34ad970d25a6e9
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.1.9 HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 Jun 2020 19:41:46 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 28 Oct 2022 07:06:08 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 677
content-type: text/css
date: Wed, 28 Sep 2022 07:06:08 GMT
server: Apache
X-Firefox-Spdy: h2
hincllc.com/wp-content/themes/salient/css/rgs.css?ver=8.0
67.225.143.167200 OK 1.2 kB URL HTTP/2 hincllc.com/wp-content/themes/salient/css/rgs.css?ver=8.0
IP 67.225.143.167:0
File type ASCII text, with CRLF line terminators
Hash a331d9ab2cc0ce11a5bec8e095db327f
48a2f4e8695df9f1b4610bf09ad89e4d3f355ee7
485d2ca61db612f32b8fa01a31869e18e64efa355ac56eaa2761e870c22070a6
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/salient/css/rgs.css?ver=8.0 HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 25 Nov 2019 21:28:51 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 28 Oct 2022 07:06:08 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1177
content-type: text/css
date: Wed, 28 Sep 2022 07:06:08 GMT
server: Apache
X-Firefox-Spdy: h2
hincllc.com/wp-content/themes/salient-child/style.css?ver=8.0
67.225.143.167200 OK 5.6 kB URL HTTP/2 hincllc.com/wp-content/themes/salient-child/style.css?ver=8.0
IP 67.225.143.167:0
Hash 6fdec49f35d3ef9ef778d52e66b80a2a
ca372ab8b232904871d84e649086f41d768f7b61
9445951dcf1a4b32fc505e8958d185cd48c772fddca611a6d607fb4dc27aa305
GET /wp-content/themes/salient-child/style.css?ver=8.0 HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 19 Dec 2019 21:51:26 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 28 Oct 2022 07:06:08 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 5633
content-type: text/css
date: Wed, 28 Sep 2022 07:06:08 GMT
server: Apache
X-Firefox-Spdy: h2
hincllc.com/wp-content/themes/salient/css/magnific.css?ver=6.2
67.225.143.167200 OK 2.4 kB URL HTTP/2 hincllc.com/wp-content/themes/salient/css/magnific.css?ver=6.2
IP 67.225.143.167:0
File type ASCII text, with CRLF line terminators
Hash ed8368d804d02d0dc7c33037ff2ab076
887a1a027bde5343072e8af3e674beab6b8710ea
ec688740e1b0ec887747403f74043d2fa7d85fa26237265914c0422f86d21088
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/salient/css/magnific.css?ver=6.2 HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 25 Nov 2019 21:28:51 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 28 Oct 2022 07:06:08 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2393
content-type: text/css
date: Wed, 28 Sep 2022 07:06:08 GMT
server: Apache
X-Firefox-Spdy: h2
hincllc.com/wp-content/themes/salient/css/font-awesome.min.css?ver=4.6.3
67.225.143.167200 OK 10 kB URL HTTP/2 hincllc.com/wp-content/themes/salient/css/font-awesome.min.css?ver=4.6.3
IP 67.225.143.167:0
File type ASCII text, with very long lines (30343)
Hash 61ede6510f4feafeae8bba30fbaf6f08
03a108b9ceaedf38090b6e287cc2663834cd020d
a48b2c422af0e6a56226d60b06af169860ad3f1ca09102afe4091ce817048b27
GET /wp-content/themes/salient/css/font-awesome.min.css?ver=4.6.3 HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 25 Nov 2019 21:28:51 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 28 Oct 2022 07:06:08 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 10260
content-type: text/css
date: Wed, 28 Sep 2022 07:06:08 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 11b1f146fa6fa4a88b1efc65b548fb73
f3f12e14f8f66a2e7c43015c394af199e4a94e06
74441efb7e39672af50ce0b6190b20d20bc3ae744b415a17f8b96a0f89aa0491
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 07:06:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 11b1f146fa6fa4a88b1efc65b548fb73
f3f12e14f8f66a2e7c43015c394af199e4a94e06
74441efb7e39672af50ce0b6190b20d20bc3ae744b415a17f8b96a0f89aa0491
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 07:06:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 11b1f146fa6fa4a88b1efc65b548fb73
f3f12e14f8f66a2e7c43015c394af199e4a94e06
74441efb7e39672af50ce0b6190b20d20bc3ae744b415a17f8b96a0f89aa0491
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 07:06:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 11b1f146fa6fa4a88b1efc65b548fb73
f3f12e14f8f66a2e7c43015c394af199e4a94e06
74441efb7e39672af50ce0b6190b20d20bc3ae744b415a17f8b96a0f89aa0491
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 07:06:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hincllc.com/wp-includes/css/dist/block-library/style.min.css?ver=5.4.11
67.225.143.167200 OK 7.6 kB URL HTTP/2 hincllc.com/wp-includes/css/dist/block-library/style.min.css?ver=5.4.11
IP 67.225.143.167:0
File type ASCII text, with very long lines (28088)
Hash c6ff3e54eda2b13061445deccc15190d
86501cd4f7ca6363326b4941856fec73fc625b83
4e4d6d9a73d0e58cda6d288c4b01ea3ba68c3cb25d65eff50f256d533406e417
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.4.11 HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 Jun 2020 20:27:00 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 28 Oct 2022 07:06:08 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 7642
content-type: text/css
date: Wed, 28 Sep 2022 07:06:08 GMT
server: Apache
X-Firefox-Spdy: h2
hincllc.com/wp-content/themes/salient/css/ascend.css?ver=8.0
67.225.143.167200 OK 4.7 kB URL HTTP/2 hincllc.com/wp-content/themes/salient/css/ascend.css?ver=8.0
IP 67.225.143.167:0
File type ASCII text, with very long lines (583), with CRLF line terminators
Hash 66203ec6169ff7e6bae67874a851fe91
fa57b4e2d17852df44fa45cdea38be05681040c6
ecf749d9bc7c2910e6a03c7f66548e202dd26c6ca71aa01b0559063ff2b3e004
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/salient/css/ascend.css?ver=8.0 HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 25 Nov 2019 21:28:51 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 28 Oct 2022 07:06:08 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4688
content-type: text/css
date: Wed, 28 Sep 2022 07:06:08 GMT
server: Apache
X-Firefox-Spdy: h2
hincllc.com/wp-content/themes/salient/css/responsive.css?ver=8.0
67.225.143.167200 OK 22 kB URL HTTP/2 hincllc.com/wp-content/themes/salient/css/responsive.css?ver=8.0
IP 67.225.143.167:0
File type ASCII text, with very long lines (445), with CRLF line terminators
Hash b20673e51d7e6ece081771ededccc73c
7c659aec64ef079442285fcc62d5907aee400ace
2373fc13bec1dc2756f18bcd448a41e51933689d3542783aed89c432c331960a
GET /wp-content/themes/salient/css/responsive.css?ver=8.0 HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 25 Nov 2019 21:28:51 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 28 Oct 2022 07:06:08 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 22245
content-type: text/css
date: Wed, 28 Sep 2022 07:06:08 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 11b1f146fa6fa4a88b1efc65b548fb73
f3f12e14f8f66a2e7c43015c394af199e4a94e06
74441efb7e39672af50ce0b6190b20d20bc3ae744b415a17f8b96a0f89aa0491
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 07:06:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash fc82211401f793132f7d43c2fd253af5
605d8371709b5d2a41967fd390c34fa649f89ea3
b23fd36ec037710672ac1aa6fea284e3869c4bae7941d9b53c771cff8743478e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 07:06:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
142.250.74.163200 OK 7.8 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 7816, version 1.0\012- data
Hash 25b0e113ca7cce3770d542736db26368
cb726212d5d525021752a1d8470a0fb593e0c49e
9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://hincllc.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 19:30:59 GMT
expires: Thu, 21 Sep 2023 19:30:59 GMT
cache-control: public, max-age=31536000
age: 560109
last-modified: Wed, 27 Apr 2022 16:11:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
hincllc.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.9
67.225.143.167200 OK 4.0 kB URL HTTP/2 hincllc.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.9
IP 67.225.143.167:0
Hash 561d6d92f608ab9ae8e9d8adad9e599a
e0055fa0349f01bf19af9668659c767f403e2105
d976e6feea5f4e9795281131179d938082ccc182331670b3eb5a3078adec6339
GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.9 HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 Jun 2020 19:41:46 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 28 Oct 2022 07:06:08 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4039
content-type: application/javascript
date: Wed, 28 Sep 2022 07:06:08 GMT
server: Apache
X-Firefox-Spdy: h2
hincllc.com/wp-content/themes/salient/js/superfish.js?ver=1.4.8
67.225.143.167200 OK 2.9 kB URL HTTP/2 hincllc.com/wp-content/themes/salient/js/superfish.js?ver=1.4.8
IP 67.225.143.167:0
Hash 582684e674e0bdd7abb8a580691eab4c
9484f919ea115285fbfe805feb2752ebc9be12ee
0a1a736b96e25b6796371c6e1d2afe0977e9f09d94acfff43253b85247040351
GET /wp-content/themes/salient/js/superfish.js?ver=1.4.8 HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 25 Nov 2019 21:28:51 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 28 Oct 2022 07:06:08 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2878
content-type: application/javascript
date: Wed, 28 Sep 2022 07:06:08 GMT
server: Apache
X-Firefox-Spdy: h2
hincllc.com/wp-content/plugins/email-subscribers/lite/public/js/email-subscribers-public.js?ver=4.4.9
67.225.143.167200 OK 1.5 kB URL HTTP/2 hincllc.com/wp-content/plugins/email-subscribers/lite/public/js/email-subscribers-public.js?ver=4.4.9
IP 67.225.143.167:0
Hash 69005916bc73c0aba3f2a5d408a27b3e
b81ec0ae4791f021871cf97030aaa1d8e761f422
c0687de3db2ea404e97a5fc8949ddb5845d7df03f041e55a656dbd5497ef84e2
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/email-subscribers/lite/public/js/email-subscribers-public.js?ver=4.4.9 HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 Jun 2020 19:41:47 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 28 Oct 2022 07:06:08 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1458
content-type: application/javascript
date: Wed, 28 Sep 2022 07:06:08 GMT
server: Apache
X-Firefox-Spdy: h2
hincllc.com/wp-content/uploads/2019/11/logo.png
67.225.143.167200 OK 4.7 kB URL HTTP/2 hincllc.com/wp-content/uploads/2019/11/logo.png
IP 67.225.143.167:0
File type PNG image data, 180 x 53, 8-bit/color RGBA, non-interlaced\012- data
Hash 9885c951ab33fda8b5b420b582035933
89b6c4faf692ae63c304efb3c44e4ee152aa1f1c
bada361e2083c06adc9f156c1b3ae164248377781911d9280f120013a02ecb5f
GET /wp-content/uploads/2019/11/logo.png HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 25 Nov 2019 22:01:30 GMT
accept-ranges: bytes
content-length: 4690
cache-control: max-age=2592000
expires: Fri, 28 Oct 2022 07:06:08 GMT
content-type: image/png
date: Wed, 28 Sep 2022 07:06:08 GMT
server: Apache
X-Firefox-Spdy: h2
hincllc.com/wp-content/plugins/email-subscribers/lite/public/images/spinner.gif
67.225.143.167200 OK 3.2 kB URL HTTP/2 hincllc.com/wp-content/plugins/email-subscribers/lite/public/images/spinner.gif
IP 67.225.143.167:0
File type GIF image data, version 89a, 32 x 32\012- data
Hash 80cd1b1264ba5e75e17297cfae6dedb6
a8b2cba86918ac7aae92e04746d7dbc349554cb2
7837e876f1eef549b3250b78380ec2df00ad6da4da6c27667424b1636854df3c
GET /wp-content/plugins/email-subscribers/lite/public/images/spinner.gif HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 Jun 2020 19:41:47 GMT
accept-ranges: bytes
content-length: 3208
cache-control: max-age=2592000
expires: Fri, 28 Oct 2022 07:06:08 GMT
content-type: image/gif
date: Wed, 28 Sep 2022 07:06:08 GMT
server: Apache
X-Firefox-Spdy: h2
hincllc.com/wp-includes/js/wp-embed.min.js?ver=5.4.11
67.225.143.167200 OK 765 B URL HTTP/2 hincllc.com/wp-includes/js/wp-embed.min.js?ver=5.4.11
IP 67.225.143.167:0
File type ASCII text, with very long lines (1391)
Hash fe875afb236ee8f0d50040fe58d848d4
e6b1b67093b429c95d5b9db07a7eba39e02cf0e5
328a6a072b91134f2802ae25e070f38ff156ceee2c6ec6a6253ae4b27af73b49
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-embed.min.js?ver=5.4.11 HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Apr 2021 06:34:05 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 28 Oct 2022 07:06:08 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 765
content-type: application/javascript
date: Wed, 28 Sep 2022 07:06:08 GMT
server: Apache
X-Firefox-Spdy: h2
hincllc.com/wp-content/themes/salient/js/touchswipe.min.js?ver=1.0
67.225.143.167200 OK 3.3 kB URL HTTP/2 hincllc.com/wp-content/themes/salient/js/touchswipe.min.js?ver=1.0
IP 67.225.143.167:0
File type ASCII text, with very long lines (9357), with CRLF line terminators
Hash d5fc822bd5bee1d6461b23d1d4ab831c
aa8b40e61c2a4875503d346346808238907b9668
780c8b9cfbc9ee58c32f657ab214f7f7e86957e177297e219bb1b63e2bd013ec
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/salient/js/touchswipe.min.js?ver=1.0 HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 25 Nov 2019 21:28:51 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 28 Oct 2022 07:06:08 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3293
content-type: application/javascript
date: Wed, 28 Sep 2022 07:06:08 GMT
server: Apache
X-Firefox-Spdy: h2
hincllc.com/wp-content/themes/salient/js/magnific.js?ver=7.0.1
67.225.143.167200 OK 14 kB URL HTTP/2 hincllc.com/wp-content/themes/salient/js/magnific.js?ver=7.0.1
IP 67.225.143.167:0
File type ASCII text, with CRLF line terminators
Hash 57dbd20cb5b1540eeeecd40ec3015b63
368d364a805bdcae582cb991549b24b13865438a
2fd81fbb4c7305dd485b550f3316d9e56a40206a1f7ac73ec46a303cb8030258
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/salient/js/magnific.js?ver=7.0.1 HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 25 Nov 2019 21:28:51 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 28 Oct 2022 07:06:08 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 14141
content-type: application/javascript
date: Wed, 28 Sep 2022 07:06:08 GMT
server: Apache
X-Firefox-Spdy: h2
hincllc.com/wp-content/uploads/2019/11/footer-logo.png
67.225.143.167200 OK 3.8 kB URL HTTP/2 hincllc.com/wp-content/uploads/2019/11/footer-logo.png
IP 67.225.143.167:0
File type PNG image data, 148 x 44, 8-bit/color RGBA, non-interlaced\012- data
Hash f437dea1cf1154865854d9bcfc16f12d
e31d40e90dcfd9b86ce0a3d0e8fcedb6b7ee17a4
80eecf9e80317b417da6bf324c2dae9511274f3babbef7112d7a2c0b04765330
GET /wp-content/uploads/2019/11/footer-logo.png HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 27 Nov 2019 00:56:17 GMT
accept-ranges: bytes
content-length: 3784
cache-control: max-age=2592000
expires: Fri, 28 Oct 2022 07:06:08 GMT
content-type: image/png
date: Wed, 28 Sep 2022 07:06:08 GMT
server: Apache
X-Firefox-Spdy: h2
hincllc.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
67.225.143.167200 OK 4.0 kB URL HTTP/2 hincllc.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
IP 67.225.143.167:0
File type ASCII text, with very long lines (9959)
Hash a6c81e2f02bd04160d2de88c4e8f3559
e3f3c91427d785820ca97dabe738f01faf041f36
b734d83af5da0eb627e04d3e62ce652b9eb7de19667a1b91da6b93f0ea5d7ffe
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 20 May 2016 03:11:28 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 28 Oct 2022 07:06:08 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4014
content-type: application/javascript
date: Wed, 28 Sep 2022 07:06:08 GMT
server: Apache
X-Firefox-Spdy: h2
hincllc.com/wp-content/uploads/2019/11/phone.png
67.225.143.167200 OK 1.2 kB URL HTTP/2 hincllc.com/wp-content/uploads/2019/11/phone.png
IP 67.225.143.167:0
File type PNG image data, 16 x 17, 8-bit/color RGBA, non-interlaced\012- data
Hash 5f0b063b384fc10457c7ec3230a81a5e
71566d732772aaf044708884b655cc998f8297b1
4fac1def2adbc93bca605e562e78e3540fd1a1f76624cab0af480d95b321ed65
GET /wp-content/uploads/2019/11/phone.png HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 25 Nov 2019 21:41:59 GMT
accept-ranges: bytes
content-length: 1216
cache-control: max-age=2592000
expires: Fri, 28 Oct 2022 07:06:08 GMT
content-type: image/png
date: Wed, 28 Sep 2022 07:06:08 GMT
server: Apache
X-Firefox-Spdy: h2
hincllc.com/wp-content/uploads/2019/11/env-1.png
67.225.143.167200 OK 1.2 kB URL HTTP/2 hincllc.com/wp-content/uploads/2019/11/env-1.png
IP 67.225.143.167:0
File type PNG image data, 17 x 14, 8-bit/color RGBA, non-interlaced\012- data
Hash 6caad03f0917f9a6ffd82da0e21e7e5a
32eee26dda1c71cf2a595c9ad4582e3136d1ed4a
3852ee48bafecbdb2df63d9ad7b21ced192362b1752aba2c6657e53a0f9b1993
GET /wp-content/uploads/2019/11/env-1.png HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 25 Nov 2019 21:41:58 GMT
accept-ranges: bytes
content-length: 1157
cache-control: max-age=2592000
expires: Fri, 28 Oct 2022 07:06:08 GMT
content-type: image/png
date: Wed, 28 Sep 2022 07:06:08 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash fc82211401f793132f7d43c2fd253af5
605d8371709b5d2a41967fd390c34fa649f89ea3
b23fd36ec037710672ac1aa6fea284e3869c4bae7941d9b53c771cff8743478e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 07:06:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hincllc.com/wp-includes/js/wp-emoji-release.min.js?ver=5.4.11
67.225.143.167200 OK 4.6 kB URL HTTP/2 hincllc.com/wp-includes/js/wp-emoji-release.min.js?ver=5.4.11
IP 67.225.143.167:0
File type ASCII text, with very long lines (10927)
Hash e6022e7bf2772180c8dc14fd4c7c93c9
faadecbfd55439d1d9b9a74ec9e3d6117fbd77e2
13149c23cd5fb87d9a216cb2a93714f401730958fef162a7c9f8d25d03173850
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.4.11 HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Apr 2021 06:34:05 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 28 Oct 2022 07:06:08 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4646
content-type: application/javascript
date: Wed, 28 Sep 2022 07:06:08 GMT
server: Apache
X-Firefox-Spdy: h2
hincllc.com/wp-content/themes/salient/js/modernizr.js?ver=2.6.2
67.225.143.167200 OK 6.2 kB URL HTTP/2 hincllc.com/wp-content/themes/salient/js/modernizr.js?ver=2.6.2
IP 67.225.143.167:0
File type ASCII text, with very long lines (15482), with CRLF line terminators
Hash 0fcf97f9ea75dde3d18f9aae6f14cae5
a8c93972102c0a175195fbb14bd775fa9efefa53
70241ae96cfe0784a044b7989dd0839a3888a1d329dc8d96ae1e4f81ec389b3a
GET /wp-content/themes/salient/js/modernizr.js?ver=2.6.2 HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 25 Nov 2019 21:28:51 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 28 Oct 2022 07:06:08 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 6206
content-type: application/javascript
date: Wed, 28 Sep 2022 07:06:08 GMT
server: Apache
X-Firefox-Spdy: h2
hincllc.com/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp
67.225.143.167200 OK 34 kB URL HTTP/2 hincllc.com/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp
IP 67.225.143.167:0
File type ASCII text, with very long lines (31997)
Hash acf54950dfb2d6981e941d733b377591
340de686aecd9e6246a32c71e7de63ed69229ceb
d97f66caea5260bc71609f0da43ac0d937ecc09253910e5dda4c9fe4dbde20fc
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery.js?ver=1.12.4-wp HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 17 May 2019 01:25:54 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 28 Oct 2022 07:06:08 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 33776
content-type: application/javascript
date: Wed, 28 Sep 2022 07:06:08 GMT
server: Apache
X-Firefox-Spdy: h2
hincllc.com/wp-content/themes/salient/css/fonts/OpenSans-Regular-webfont.woff
67.225.143.167200 OK 14 kB URL HTTP/2 hincllc.com/wp-content/themes/salient/css/fonts/OpenSans-Regular-webfont.woff
IP 67.225.143.167:0
File type Web Open Font Format, TrueType, length 13988, version 1.0\012- data
Hash 5a232d0daaf2562bf4910c1f699eeaab
a07f3daa46691580836acb6ca6b38fcc89602856
3b4ae61d6e9fb6fa5d10b2390885f2e68f4443285d5b2e17c782393c6acf793f
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/salient/css/fonts/OpenSans-Regular-webfont.woff HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/style.css?ver=5.4.11
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 25 Nov 2019 21:28:51 GMT
accept-ranges: bytes
content-length: 13988
cache-control: max-age=172800
expires: Fri, 30 Sep 2022 07:06:09 GMT
vary: Accept-Encoding,User-Agent
content-type: font/woff
date: Wed, 28 Sep 2022 07:06:09 GMT
server: Apache
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
142.250.74.163200 OK 7.9 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://hincllc.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 19:32:09 GMT
expires: Thu, 21 Sep 2023 19:32:09 GMT
cache-control: public, max-age=31536000
age: 560040
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/exo2/v20/7cHmv4okm5zmbtYoK-4.woff2
142.250.74.163200 OK 40 kB URL HTTP/2 fonts.gstatic.com/s/exo2/v20/7cHmv4okm5zmbtYoK-4.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 39772, version 1.0\012- data
Hash 82f7e35c99fed67bd51e1cfb7c73c3d7
7f40240f48e5783e59483cf9a8b4dd720115fab7
d2f675f4572825d07c6bd49d03a2e7db7b58165f8175c0e162a1a1221dede462
GET /s/exo2/v20/7cHmv4okm5zmbtYoK-4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://hincllc.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 39772
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Sep 2022 06:36:35 GMT
expires: Fri, 22 Sep 2023 06:36:35 GMT
cache-control: public, max-age=31536000
age: 520174
last-modified: Mon, 11 Jul 2022 19:19:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
hincllc.com/wp-content/themes/salient/js/init.js?ver=8.0
67.225.143.167200 OK 125 kB URL HTTP/2 hincllc.com/wp-content/themes/salient/js/init.js?ver=8.0
IP 67.225.143.167:0
Size 125 kB (125367 bytes)
Hash 18b4afeb2368bbe54fc13ccd8ef11e6b
0cd8e99a854a142bae6fb110bf64ca1b4d6da8ba
a076a6125742635b3c5a5405dc7426a5a9847e0b3b9e19a86c7e5355ce3e896d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/salient/js/init.js?ver=8.0 HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 25 Nov 2019 21:28:51 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 28 Oct 2022 07:06:08 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-type: application/javascript
date: Wed, 28 Sep 2022 07:06:08 GMT
server: Apache
X-Firefox-Spdy: h2
hincllc.com/wp-content/themes/salient/css/fonts/OpenSansBold-webfont.woff
67.225.143.167200 OK 64 kB URL HTTP/2 hincllc.com/wp-content/themes/salient/css/fonts/OpenSansBold-webfont.woff
IP 67.225.143.167:0
File type Web Open Font Format, TrueType, length 63564, version 1.0\012- data
Hash 892667349c5cff6fcf7e40439596b97c
7956fd048338c3c6253aa58f65442441866d4b4e
7d7a1a8ec55f31a6674fd2e2c41bcc6421a9aeb5cf161c6e93363f31347160f9
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/salient/css/fonts/OpenSansBold-webfont.woff HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/style.css?ver=5.4.11
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 25 Nov 2019 21:28:51 GMT
accept-ranges: bytes
content-length: 63564
cache-control: max-age=172800
expires: Fri, 30 Sep 2022 07:06:09 GMT
vary: Accept-Encoding,User-Agent
content-type: font/woff
date: Wed, 28 Sep 2022 07:06:09 GMT
server: Apache
X-Firefox-Spdy: h2
hincllc.com/wp-content/themes/salient/css/fonts/fontawesome-webfont.woff?v=4.2
67.225.143.167200 OK 98 kB URL HTTP/2 hincllc.com/wp-content/themes/salient/css/fonts/fontawesome-webfont.woff?v=4.2
IP 67.225.143.167:0
File type Web Open Font Format, TrueType, length 98024, version 4.7\012- data
Hash fee66e712a8a08eef5805a46892932ad
28b782240b3e76db824e12c02754a9731a167527
ba0c59deb5450f5cb41b3f93609ee2d0d995415877ddfa223e8a8a7533474f07
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/salient/css/fonts/fontawesome-webfont.woff?v=4.2 HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/css/font-awesome.min.css?ver=4.6.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 25 Nov 2019 21:28:51 GMT
accept-ranges: bytes
content-length: 98024
cache-control: max-age=172800
expires: Fri, 30 Sep 2022 07:06:09 GMT
vary: Accept-Encoding,User-Agent
content-type: font/woff
date: Wed, 28 Sep 2022 07:06:09 GMT
server: Apache
X-Firefox-Spdy: h2
hincllc.com/wp-content/themes/salient/css/fonts/icomoon.woff
67.225.143.167200 OK 12 kB URL HTTP/2 hincllc.com/wp-content/themes/salient/css/fonts/icomoon.woff
IP 67.225.143.167:0
File type Web Open Font Format, TrueType, length 12164, version 0.0\012- data
Hash 1daa342343d9ce8acdf78031f0481a94
536a5e27417d2cf6e6d3411017691d0091d7619d
57c7ee88bd2ec3a475636e8a6d39a629bf1469677ca8914c6a73f18bb6bd8a81
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/salient/css/fonts/icomoon.woff HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/style.css?ver=5.4.11
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 25 Nov 2019 21:28:51 GMT
accept-ranges: bytes
content-length: 12164
cache-control: max-age=172800
expires: Fri, 30 Sep 2022 07:06:09 GMT
vary: Accept-Encoding,User-Agent
content-type: font/woff
date: Wed, 28 Sep 2022 07:06:09 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6831
Expires: Wed, 28 Sep 2022 09:00:00 GMT
Date: Wed, 28 Sep 2022 07:06:09 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6831
Expires: Wed, 28 Sep 2022 09:00:00 GMT
Date: Wed, 28 Sep 2022 07:06:09 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6831
Expires: Wed, 28 Sep 2022 09:00:00 GMT
Date: Wed, 28 Sep 2022 07:06:09 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6831
Expires: Wed, 28 Sep 2022 09:00:00 GMT
Date: Wed, 28 Sep 2022 07:06:09 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6831
Expires: Wed, 28 Sep 2022 09:00:00 GMT
Date: Wed, 28 Sep 2022 07:06:09 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae0951d3-44e9-49d3-9232-f4151ef59735.jpeg
34.120.237.76200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae0951d3-44e9-49d3-9232-f4151ef59735.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b255b252ceed088d6f505e7e9acfcb55
a6b1c3e0d506ac1c66405e061e9910fafb176a7d
b796a98834c7ecf220d13bfba61e81a9b90d472d2aa725ff66888cbddad731e7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae0951d3-44e9-49d3-9232-f4151ef59735.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6157
x-amzn-requestid: a51846e4-4e25-455f-885b-acf2567f2e1c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZDlObH7XIAMFw6A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63314f28-4e6a68a74edb1ad850e17dac;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 07:05:12 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 2g98EnyiFhkZTsqis2_ASfjM-YTJmcUJ-Mwcl1dWlruzrWDuojPA0w==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 07:29:45 GMT
age: 84984
etag: "a6b1c3e0d506ac1c66405e061e9910fafb176a7d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa8480871-279b-49d0-8a83-97fd2e1ef4f1.jpeg
34.120.237.76200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa8480871-279b-49d0-8a83-97fd2e1ef4f1.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b97879edd864c4f251a6668c8201095f
28938e97773ac1a51a529e85284d228239641f01
143cd15afadce309b970b525818be68c23fcb2322a66ac915d1dc7418968b6c5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa8480871-279b-49d0-8a83-97fd2e1ef4f1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9304
x-amzn-requestid: d0045fdc-1e02-4039-9e0e-d3b8b255f205
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1-koF_eoAMFyHA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632bde1d-1cb029d169ec2b1651b2ac78;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 04:01:33 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: tmb8MRUcU1isHAQcMljVY7nPOgYuSLF6lpNXIkLkFWts3jnH7f7NaQ==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 06:44:50 GMT
age: 1279
etag: "28938e97773ac1a51a529e85284d228239641f01"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ffa6dde-b51e-43f8-bfcb-3f442d674928.jpeg
34.120.237.76200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ffa6dde-b51e-43f8-bfcb-3f442d674928.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6139c878a7d2bd32c61fc8287996eb5b
9c4692ea64832895fbd107d91f879728b6a440c7
3839df92f0a10c1433d5b576df50c9f7953912ae4f425012262f08ee8a59ce2e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ffa6dde-b51e-43f8-bfcb-3f442d674928.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8500
x-amzn-requestid: af82c8d6-950c-4933-87e3-7bbb15cb1ac8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e3HOaoAMFoPQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5e-77e0ecc522de575e40f429b3;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: rD5LsVDLQkaomG1nCGZGihbdlWKMCjUYNC2kRyAjJesJEOEBSj8Q3A==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:47:03 GMT
age: 33546
etag: "9c4692ea64832895fbd107d91f879728b6a440c7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa8d9d6-9650-4c92-a2db-529657be591b.png
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa8d9d6-9650-4c92-a2db-529657be591b.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 07f06c54e3b1431203308e4134e7efcb
e26e7e4f7c67d680f0c2d0fa84dcb77ffbef6a49
2814f21c6a21623c189163672867272eb24f754d3d22a8285349e5dd9f6b49f7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa8d9d6-9650-4c92-a2db-529657be591b.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10031
x-amzn-requestid: 0ac9a228-b6ce-4695-b269-f6a5ba959576
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e4HTsoAMF8dQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5f-1d1cacef2608d5820b2bc1b1;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: HKSCXbOStqMfD92WWwpkNF1l9euR9RkHTo2boSKqhPAunGl2u_YGlg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:46:48 GMT
age: 33561
etag: "e26e7e4f7c67d680f0c2d0fa84dcb77ffbef6a49"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F838bed0c-c665-42d6-8c20-1decd709953c.jpeg
34.120.237.76200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F838bed0c-c665-42d6-8c20-1decd709953c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3c58fdf09a7d552be0c8666522a29de7
60c873f097c85376797fed366804119f7e9c445e
24569f084d3fd428526503bde8b3da64152911934cd5e0e9140c06d954e4bcd9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F838bed0c-c665-42d6-8c20-1decd709953c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9314
x-amzn-requestid: 0639452b-7f17-4513-aeb1-20b465ed3e93
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e3HzCIAMF-vQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5e-52afa1da17c4557c5e8c3564;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 4mjt2-5F0Chu1G7jShI6rXfTuBMd6JOYxFMtla-EgL7i82SThJnp5w==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:38:41 GMT
age: 34048
etag: "60c873f097c85376797fed366804119f7e9c445e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0369629e-f44d-439f-a279-b5ae6ecc0cf1.png
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0369629e-f44d-439f-a279-b5ae6ecc0cf1.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash aa5cad224dbddd71881bd07255beb4da
bc214d60be395d4cf753216ff8f9691c33d25e75
82935e52aa59929a448d17a5a2d58fda86bb5c25bf6628a05bd904f82517dada
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0369629e-f44d-439f-a279-b5ae6ecc0cf1.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14464
x-amzn-requestid: 6627e07e-034b-432e-ab9e-afe035fa0b9a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e9HgIoAMFxUA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5f-7f34c3f6454379724a7ac413;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: J27vcANRhkMUuGwTZjXkO0EF0-UjN-MODVQRKgsc7hJI2S-UPF8Ctw==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:40:53 GMT
age: 33916
etag: "bc214d60be395d4cf753216ff8f9691c33d25e75"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
hincllc.com/wp-content/uploads/2019/10/logo.png
67.225.143.167200 OK 1.8 kB URL HTTP/2 hincllc.com/wp-content/uploads/2019/10/logo.png
IP 67.225.143.167:0
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash fe476774f2694fb96dce6ae82b76271f
99c6037403ed9d912b62eb3393d137262d72d27d
32c5e9bfb817df1e3d0326c4d1fe9166992230ea31e0fdb0758086556dfc894a
GET /wp-content/uploads/2019/10/logo.png HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 25 Nov 2019 21:28:50 GMT
accept-ranges: bytes
content-length: 1846
cache-control: max-age=2592000
expires: Fri, 28 Oct 2022 07:06:09 GMT
content-type: image/png
date: Wed, 28 Sep 2022 07:06:09 GMT
server: Apache
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Exo+2:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i|Exo:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i|Playfair+Display:400,400i,700,700i,900,900i&display=swap
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Exo+2:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i|Exo:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i|Playfair+Display:400,400i,700,700i,900,900i&display=swap
IP 142.250.74.10:0
GET /css?family=Exo+2:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i|Exo:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i|Playfair+Display:400,400i,700,700i,900,900i&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 28 Sep 2022 07:06:08 GMT
date: Wed, 28 Sep 2022 07:06:08 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Source+Sans+Pro:200,200i,300,300i,400,400i,600,600i,700,700i,900,900i&display=swap
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Source+Sans+Pro:200,200i,300,300i,400,400i,600,600i,700,700i,900,900i&display=swap
IP 142.250.74.10:0
GET /css?family=Source+Sans+Pro:200,200i,300,300i,400,400i,600,600i,700,700i,900,900i&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 28 Sep 2022 07:06:08 GMT
date: Wed, 28 Sep 2022 07:06:08 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Montserrat:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i|Poppins:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i&subset=cyrillic,cyrillic-ext,latin-ext,vietnamese
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Montserrat:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i|Poppins:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i&subset=cyrillic,cyrillic-ext,latin-ext,vietnamese
IP 142.250.74.10:0
GET /css?family=Montserrat:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i|Poppins:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i&subset=cyrillic,cyrillic-ext,latin-ext,vietnamese HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 28 Sep 2022 07:06:08 GMT
date: Wed, 28 Sep 2022 07:06:08 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i&display=swap
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i&display=swap
IP 142.250.74.10:0
GET /css?family=Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 28 Sep 2022 07:06:08 GMT
date: Wed, 28 Sep 2022 07:06:08 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
hincllc.com/wp-content/themes/salient/style.css?ver=5.4.11
67.225.143.167200 OK 0 B URL HTTP/2 hincllc.com/wp-content/themes/salient/style.css?ver=5.4.11
IP 67.225.143.167:0
GET /wp-content/themes/salient/style.css?ver=5.4.11 HTTP/1.1
Host: hincllc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hincllc.com/wp-content/themes/salient/includes/custom-widgets/scnet/no/068afb96c98eba2/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 25 Nov 2019 21:28:51 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 28 Oct 2022 07:06:08 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-type: text/css
date: Wed, 28 Sep 2022 07:06:08 GMT
server: Apache
X-Firefox-Spdy: h2