Overview

URLwww.acielouvertstudios.com/
IP 217.160.0.20 (Germany)
ASN#8560 IONOS SE
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-11-30 13:32:06 UTC
StatusLoading report..
IDS alerts0
Blocklist alert22
urlquery alerts No alerts detected
Tags None

Domain Summary (16)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-11-30 04:06:04 UTC 34.117.237.239
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 52.88.25.203
www.google.no (1) 25607 2016-04-05 19:50:59 UTC 2022-11-30 05:08:52 UTC 142.250.74.67
www.google-analytics.com (4) 40 2012-10-03 01:04:21 UTC 2022-11-30 05:03:07 UTC 142.250.74.14
www.google.com (1) 7 2016-03-22 03:56:07 UTC 2022-11-30 04:48:28 UTC 216.58.211.4
r3.o.lencr.org (5) 344 No data No data 23.36.76.226
ocsp.digicert.com (2) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
www.acielouvertstudios.com (53) 0 2017-01-30 16:50:14 UTC 2022-11-30 11:54:42 UTC 217.160.0.20 Unknown ranking
ocsp.pki.goog (13) 175 2018-07-01 06:43:07 UTC 2020-05-02 20:58:16 UTC 142.250.74.131
www.googletagmanager.com (1) 75 2013-05-22 02:07:37 UTC 2022-11-30 04:53:34 UTC 142.250.74.72
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-11-30 04:06:17 UTC 34.102.187.140
fonts.googleapis.com (2) 8877 2013-06-10 20:14:26 UTC 2022-11-30 05:55:22 UTC 142.250.74.106
fonts.gstatic.com (4) 0 2014-09-09 00:40:21 UTC 2022-11-30 04:54:31 UTC 216.58.207.227 Domain (gstatic.com) ranked at: 540
img-getpocket.cdn.mozilla.net (7) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76
stats.g.doubleclick.net (2) 96 2013-06-10 20:21:11 UTC 2022-11-30 05:00:30 UTC 64.233.165.156

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-30 2 www.acielouvertstudios.com/ Phishing
2022-11-30 2 www.acielouvertstudios.com/wp-content/themes/innovation/custom/custom.css?v (...) Phishing
2022-11-30 2 www.acielouvertstudios.com/wp-content/themes/innovation/assets/external_scr (...) Phishing
2022-11-30 2 www.acielouvertstudios.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 Phishing
2022-11-30 2 www.acielouvertstudios.com/wp-includes/css/dist/block-library/style.min.css (...) Phishing
2022-11-30 2 www.acielouvertstudios.com/wp-content/plugins/google-analyticator/external- (...) Phishing
2022-11-30 2 www.acielouvertstudios.com/wp-content/plugins/wp-blog-and-widgets/assets/cs (...) Phishing
2022-11-30 2 www.acielouvertstudios.com/wp-content/themes/innovation/assets/css/ruby-sty (...) Phishing
2022-11-30 2 www.acielouvertstudios.com/wp-content/plugins/pricing-table-by-supsystic/mo (...) Phishing
2022-11-30 2 www.acielouvertstudios.com/wp-content/plugins/pricing-table-by-supsystic/cs (...) Phishing
2022-11-30 2 www.acielouvertstudios.com/wp-content/plugins/pricing-table-by-supsystic/mo (...) Phishing
2022-11-30 2 www.acielouvertstudios.com/wp-content/plugins/pricing-table-by-supsystic/mo (...) Phishing
2022-11-30 2 www.acielouvertstudios.com/wp-content/themes/innovation/custom/custom.js?ver=1.0 Phishing
2022-11-30 2 www.acielouvertstudios.com/wp-content/themes/innovation/assets/external_scr (...) Phishing
2022-11-30 2 www.acielouvertstudios.com/wp-content/plugins/pricing-table-by-supsystic/js (...) Phishing
2022-11-30 2 www.acielouvertstudios.com/wp-content/plugins/pricing-table-by-supsystic/mo (...) Phishing
2022-11-30 2 www.acielouvertstudios.com/wp-content/plugins/pricing-table-by-supsystic/js (...) Phishing
2022-11-30 2 www.acielouvertstudios.com/wp-content/plugins/pricing-table-by-supsystic/mo (...) Phishing
2022-11-30 2 www.acielouvertstudios.com/wp-content/plugins/pricing-table-by-supsystic/mo (...) Phishing
2022-11-30 2 www.acielouvertstudios.com/wp-content/plugins/pricing-table-by-supsystic/mo (...) Phishing
2022-11-30 2 www.acielouvertstudios.com/wp-content/plugins/pricing-table-by-supsystic/mo (...) Phishing
2022-11-30 2 www.acielouvertstudios.com/wp-content/themes/innovation/assets/images/ajax- (...) Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 217.160.0.20
Date UQ / IDS / BL URL IP
2023-01-07 14:45:25 +0000 0 - 0 - 9 www.adsinvestissements.com/ 217.160.0.20
2022-12-14 18:30:19 +0000 0 - 0 - 32 www.residenz-eifelgold.de/cms/website.php 217.160.0.20
2022-12-14 11:17:03 +0000 0 - 0 - 32 www.residenz-eifelgold.de/cms/website.php 217.160.0.20
2022-11-30 13:32:06 +0000 0 - 0 - 22 www.acielouvertstudios.com/ 217.160.0.20
2022-11-09 06:38:29 +0000 0 - 0 - 1 lachouettepicerie.com/wp-content/uploads/2022 (...) 217.160.0.20


Last 5 reports on ASN: IONOS SE
Date UQ / IDS / BL URL IP
2023-01-27 13:38:33 +0000 0 - 1 - 0 www.autoitscript.com/autoit3/pkgmgr/sqlite/SQ (...) 212.227.91.231
2023-01-27 13:38:23 +0000 0 - 1 - 0 www.autoitscript.com/autoit3/pkgmgr/sqlite/SQ (...) 212.227.91.231
2023-01-27 13:38:20 +0000 0 - 1 - 0 www.autoitscript.com/autoit3/pkgmgr/sqlite/SQ (...) 212.227.91.231
2023-01-27 13:38:07 +0000 0 - 2 - 0 www.autoitscript.com/autoit3/pkgmgr/sqlite/sq (...) 212.227.91.231
2023-01-27 13:15:15 +0000 0 - 1 - 0 edir.camersoftware.com/ 82.165.73.164


Last 1 reports on domain: acielouvertstudios.com
Date UQ / IDS / BL URL IP
2022-11-30 13:32:06 +0000 0 - 0 - 22 www.acielouvertstudios.com/ 217.160.0.20


No other reports with similar screenshot

JavaScript

Executed Scripts (29)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (100)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "94FB64C1C826ED7099283C0BEDB3CEA7AC7E1D9526794CB9FAD6E761F5989D32"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17897
Expires: Wed, 30 Nov 2022 18:30:11 GMT
Date: Wed, 30 Nov 2022 13:31:54 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16248
Expires: Wed, 30 Nov 2022 18:02:42 GMT
Date: Wed, 30 Nov 2022 13:31:54 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6594
Cache-Control: 'max-age=158059'
Date: Wed, 30 Nov 2022 13:31:54 GMT
Last-Modified: Wed, 30 Nov 2022 11:42:00 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: HSiL06uxjYKxUVq2F2azUB0vg6igRkg3mSOLEKHs2ZtNN2DcISusGU+IWKENGvujg2gOJzIVdac=
x-amz-request-id: Q47MMNNY82SS25HF
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 30 Nov 2022 12:45:14 GMT
age: 2800
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 30 Nov 2022 13:19:41 GMT
cache-control: public,max-age=3600
age: 733
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Wed, 30 Nov 2022 13:31:54 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 30 Nov 2022 13:11:14 GMT
cache-control: public,max-age=3600
age: 1241
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6593
Cache-Control: max-age=163489
Date: Wed, 30 Nov 2022 13:31:55 GMT
Etag: "63871d2b-1d7"
Expires: Fri, 02 Dec 2022 10:56:44 GMT
Last-Modified: Wed, 30 Nov 2022 09:06:51 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: qSbbsWUg4Y0Gxa0FwjVT9A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.88.25.203
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: kBPRnfPtxFY2TwmCGACau6Tl+ps=

                                        
                                            GET / HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:54 GMT
Server: Apache
Link: <https://www.acielouvertstudios.com/wp-json/>; rel="https://api.w.org/"
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Size:   25311
Md5:    bd6b433a135a1157de90ec36d5acef18
Sha1:   0ba6fff73f95f2548aa13e847740a8214f6f8467
Sha256: f97be3381929ba845a84f636b05658d4ab1e861fc21d5f86e6be39705a3d2919

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/innovation-ruby-shortcodes/ruby-shortcodes-style.css?ver=1.0 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 2312
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2016 15:42:20 GMT
ETag: "908-53c14fde1cf00"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   2312
Md5:    fe78665b3d8e5c5b047f265c160d1a5b
Sha1:   68ce38d560f4d451a0c7a2cdc012ce0fda33de5d
Sha256: e0d492ce5e053b8c8b5e901b2dc1810518e7f55f4527e6aec703575df348b6df
                                        
                                            GET /css?family=Open+Sans%3A300%2C400%2C600%2C700%2C800%2C300italic%2C400italic%2C600italic%2C700italic%2C800italic%7CPlayfair+Display%3A400%2C700%2C900%2C400italic%2C700italic%2C900italic&subset=latin&ver=1669486217 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         142.250.74.106
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Wed, 30 Nov 2022 13:31:56 GMT
Date: Wed, 30 Nov 2022 13:31:56 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  ASCII text
Size:   1310
Md5:    fc5ccfe8937a7c009875d56bef57362c
Sha1:   5a19d86e7b794f75833ce476eb6c62a29e085325
Sha256: 3442de548acb23b83f14b6bb9f4f719ff4dd0c92a28892e6a564274bc52d3117
                                        
                                            GET /wp-content/themes/innovation/custom/custom.css?ver=1.0 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 1087
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2016 15:46:23 GMT
ETag: "43f-53c150c5db1c0"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1087
Md5:    217a9b15e9858a3a610781e6de00033d
Sha1:   fdcea7941055aeeda507c59333493655658d61e2
Sha256: 0af7b737e242043af7faca2acf9594a53fc58fb9500ce84f19df348b5525b593

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/innovation-child/style.css?ver=2.1 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 570
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Tue, 30 Jun 2020 14:53:13 GMT
ETag: "23a-5a94e55afdc66"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   570
Md5:    f14be9ba4869bd79d7df9fcd7f566d94
Sha1:   ec452881d42e2869360e9c50f6ab6e4619d6d735
Sha256: a655adbfd2a1f7b7a28ffc7e0229f07da7bc5391e05f70452072819a79b79e38
                                        
                                            GET /wp-content/themes/innovation/assets/css/ruby-responsive.css?ver=2.1 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 22678
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2016 15:46:20 GMT
ETag: "5896-53c150c2feb00"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   22678
Md5:    a456d2278b8ae9abe4833ac6ee3170b5
Sha1:   da2f6784237a0c507552f2d14cc0e4e1ace00c34
Sha256: f45e89c3c4c3104e19dae52703947fe9c35d8471d394a39c2a986ecc49683450
                                        
                                            GET /wp-content/themes/innovation/assets/external_script/ruby-external-style.css?ver=2.1 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 74360
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2016 15:46:22 GMT
ETag: "12278-53c150c4e6f80"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines (540)
Size:   74360
Md5:    6f8b5a0ab42a68ec5eb8a0420e5999eb
Sha1:   b637dec9835f1f60328705131bc8fef6db037142
Sha256: 69e96473c348284497749e7c79cbd50639c23a336e9dab09e99eae9b43bb905d

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 11224
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Tue, 06 Sep 2022 12:42:23 GMT
ETag: "2bd8-5e8018729c6cc"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines (11126)
Size:   11224
Md5:    79b4956b7ec478ec10244b5e2d33ac7d
Sha1:   a46025b9d05e3df30d610a8aef14f392c7058dc9
Sha256: 029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 94889
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 23:45:53 GMT
ETag: "172a9-5ed8af4e24901"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines (47826)
Size:   94889
Md5:    71d925864153f0edf91037f3d31048e8
Sha1:   cc16a0524ac63b5ce29f703a66412224f0dd771a
Sha256: c324ef26b20264369e4568dc9ef1c5cb1f325f6bc4e8b7c01f7fe93fa353276a

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.5.4 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 1190
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Wed, 12 Dec 2018 12:59:33 GMT
ETag: "4a6-57cd2c4f63740"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines (1190), with no line terminators
Size:   1190
Md5:    b226dcbe052220a66ee816a359296928
Sha1:   20356ff29e36bc157b33441fba17d74f9c78901e
Sha256: 5a9dcb270ba38d94fd27a5ae4c6a6d10bb6a25fe0473df95fe4c405e82801289

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 217
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Wed, 02 Nov 2022 11:57:38 GMT
ETag: "d9-5ec7b8c0d5ccd"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   217
Md5:    95e891f28e44a9b314c09545d86be2b7
Sha1:   f9b13a8bd47273b086a0a07df15f314e0af0bc3e
Sha256: 5a5f39391fbf5b06db84b8f9716d53de575ee97a627d2c5f12f79a991a671eb5
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 30 Nov 2022 13:31:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 18617
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Tue, 06 Sep 2022 12:42:24 GMT
ETag: "48b9-5e801872dce21"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines (15660)
Size:   18617
Md5:    32beb68a374e3aeac00abdf9e12b84ea
Sha1:   b5d18aa625e8696dd9d07cd0869337717b211ae0
Sha256: 5aad5fbd4238981a9ff5e2772ff1353dfe1a801fb49542fe157418c1438f7782
                                        
                                            GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 89684
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Wed, 02 Nov 2022 11:57:39 GMT
ETag: "15e54-5ec7b8c1878cd"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines (65447)
Size:   89684
Md5:    17738318d61d394f1de8890d589afaec
Sha1:   f6d0c4dc1399cf02d53f5753ad46573a8bbc2ac3
Sha256: cc7403bab52ed166e24ea9324241045af370be482f5b594468f4a6ac6e7e7981
                                        
                                            GET /wp-content/plugins/wp-blog-and-widgets/assets/css/wpbaw-public.css?ver=2.2.6 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 5549
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Tue, 06 Sep 2022 14:20:34 GMT
ETag: "15ad-5e802e6408c7a"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   5549
Md5:    e0689573134ffbae1174cebdce1b7167
Sha1:   115c8c44283da6272d1974f0dac3f0d3e5bb7acd
Sha256: 4dcb50d60824f3b4f16c756662d4418fa77cfbf921f26a3785c302ec764b7a7f

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/innovation/assets/css/ruby-style.css?ver=2.1 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 131371
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2016 15:46:20 GMT
ETag: "2012b-53c150c2feb00"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   131371
Md5:    8673ddda8c9ce5b2ab05d5b8c71b580d
Sha1:   1f71291d5a618d975f792753cd97156313cb598f
Sha256: 6f210316057ac14efa7d21629c904547718fab6ec962b249826203007d5d8f07

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/pricing-table-by-supsystic/modules/tables/css/frontend.tables.css?ver=1.9.9 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 8289
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Thu, 10 Nov 2022 15:53:00 GMT
ETag: "2061-5ed1fc48d13bc"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   8289
Md5:    16276baa0a357f9de48d826a8fbcdd45
Sha1:   9c24776ecae774e7a933913759b50a9b42dd1374
Sha256: 15119dba65b9c8068a622db166b19f07621c870e1f67ed24c9ba58bbb07c1c8c

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/pricing-table-by-supsystic/css/jquery.icheck.css?ver=1.9.9 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 1525
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Thu, 10 Nov 2022 15:53:00 GMT
ETag: "5f5-5ed1fc48a25ab"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1525
Md5:    94b360373311fa7b1528bd0e21723fbf
Sha1:   d5d3b1127c80bbb51859ddbf3eead6573eb29b11
Sha256: 7205d0113f4cf626a005717565d67b42f3876ae0a585214e05fadc1c348b8bd0

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /gtag/js?id=UA-156274071-1 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.72
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 30 Nov 2022 13:31:56 GMT
expires: Wed, 30 Nov 2022 13:31:56 GMT
cache-control: private, max-age=900
last-modified: Wed, 30 Nov 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43518
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1921)
Size:   43518
Md5:    1c3b5708695ffae57c78c8d6a8d5f8af
Sha1:   cac9db31f390678c48dd6114e6c7784fe479d172
Sha256: 9e6ef2d9f8e8db4487361f9a68faf503b4550425de214fa4b63c23ae30401e30
                                        
                                            GET /wp-content/plugins/pricing-table-by-supsystic/modules/templates/lib/tooltipster/tooltipster.css?ver=1.9.9 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 9478
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Thu, 10 Nov 2022 15:53:01 GMT
ETag: "2506-5ed1fc4909e10"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   9478
Md5:    a175936dcef26d17e25e81f6ecfcb3a3
Sha1:   1dc0872279eb9dcea9590fe5256c6974988976dd
Sha256: ed70a77df471fa5c197e0537051ce322339e0febd64f8213c2f6c6217aee0f5d
                                        
                                            GET /wp-content/plugins/pricing-table-by-supsystic/modules/templates/css/font-awesome.min.css?ver=1.9.9 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 31004
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Thu, 10 Nov 2022 15:53:00 GMT
ETag: "791c-5ed1fc48e2d02"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines (30837), with CRLF line terminators
Size:   31004
Md5:    a0e784c4ca94c271b0338dfb02055be6
Sha1:   88af80502c44cd52ca81ffe7dc7276b7eccb06cf
Sha256: 820e169ce24824066d9973fd4b6561aae9dcd6dbef6435da905d5a1d6482997c

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/innovation-ruby-shortcodes/ruby-shortcodes-script.js?ver=1.0 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 280
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2016 15:42:20 GMT
ETag: "118-53c14fde1cf00"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   280
Md5:    51ce42dda0ae80784016508144f93dd2
Sha1:   c024a71a1ca6de87ed231fc73d13203cf7246377
Sha256: 79b6b9b452b057703ecae50769469ff4f4ef2be9674258e6df7bebbf024d25d7
                                        
                                            GET /wp-content/uploads/2021/01/4X2A5505-840x500.jpg HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         217.160.0.20
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 46256
date: Wed, 30 Nov 2022 13:31:56 GMT
server: Apache
last-modified: Mon, 25 Jan 2021 09:09:48 GMT
etag: "b4b0-5b9b5e656520e"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 840x500, components 3\012- data
Size:   46256
Md5:    9b757fb58065531a8fb6316acc148766
Sha1:   5fe8f1a295dfe140040bc5916350440e5a80763b
Sha256: 09ef9422e125d811105d1d10c3f59486b7fc8461b9f266702f15832ed1594e36
                                        
                                            GET /wp-content/plugins/pricing-table-by-supsystic/modules/tables/css/animate.css?ver=1.9.9 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 54763
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Thu, 10 Nov 2022 15:53:00 GMT
ETag: "d5eb-5ed1fc48d13bc"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines (54597), with CRLF line terminators
Size:   54763
Md5:    40b5d1fb24edd004fe4639c360681d41
Sha1:   e8153748154929c123247d16cb4e677ede52620c
Sha256: c979334ea899400eb9ea581a6f9f5ef92c8d1032f7f7d82456e1d27bd25353ec

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/innovation/custom/custom.js?ver=1.0 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 335
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2016 15:46:23 GMT
ETag: "14f-53c150c5db1c0"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   335
Md5:    5d0c04965b0e784df93cbe9dd5f3ccf2
Sha1:   bb193111528be646d022661c849eb15ef13c7f22
Sha256: 2301ad74bb03979a44d3f3df169a765ff66a095bdc6678d87d98906372b6bfe4

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/innovation/assets/external_script/retina.min.js?ver=1.3.0 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 2575
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2016 15:46:22 GMT
ETag: "a0f-53c150c4e6f80"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines (2352)
Size:   2575
Md5:    d6d3252daec57ca544ccd11bdbff701f
Sha1:   4534879a052d14dcbab3347220fc707fd9406503
Sha256: 772aed2cf700b617330eaacbdbd55ae8e1ef89a8747d2880f095c65d843ee02e
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 30 Nov 2022 13:31:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/themes/innovation/assets/external_script/ruby-external-script.js?ver=2.1 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 135785
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2016 15:46:22 GMT
ETag: "21269-53c150c4e6f80"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (16928), with CRLF line terminators
Size:   135785
Md5:    54720703a5856804c931cec66a13b1f2
Sha1:   30d214c51408442abf9b2c9084a9333b656cd975
Sha256: 45a7d2196d8888aeaf22aa024f038ab33db66fb3d4263e63b541fcacb97a0713

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/pricing-table-by-supsystic/js/common.js?ver=1.9.9 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 46094
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Thu, 10 Nov 2022 15:53:00 GMT
ETag: "b40e-5ed1fc48b8d13"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Algol 68 source text\012- Pascal source, ASCII text, with very long lines (3365), with CRLF line terminators
Size:   46094
Md5:    49ce0e9d313835bcbf0fab74d558641d
Sha1:   8b6cc039d5117ad1405136b50cca025ef302cf43
Sha256: 8307753c7fdc4d84ae133d1e7fb1ff823659d4690a3f1d20ac338fea6d9facae

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/innovation/assets/js/ruby-script.js?ver=2.1 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 52092
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2016 15:46:23 GMT
ETag: "cb7c-53c150c5db1c0"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   52092
Md5:    35e47513ed0b636a88ec6432a1e06f37
Sha1:   4deb17a498f2034476e3b6b7953bf2b683aa4b65
Sha256: 916c2d7996b3aceb4f7da14bddbcd3f2c0fca7fc4a912a78abe0c8b3d06cd24d
                                        
                                            GET /wp-content/plugins/pricing-table-by-supsystic/js/core.js?ver=1.9.9 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 13305
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Thu, 10 Nov 2022 15:53:00 GMT
ETag: "33f9-5ed1fc48b8d13"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   13305
Md5:    41a72cac51cd180e723aa38a39d72ed8
Sha1:   03aeecad1ac0b81403fc253a5657046ab89494e5
Sha256: a3efef16697cf9a15186227a62157f34ad77e7c3961cad2f9cba12ec69a5fcda
                                        
                                            GET /wp-content/plugins/pricing-table-by-supsystic/js/icheck.min.js?ver=1.9.9 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 5238
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Thu, 10 Nov 2022 15:53:00 GMT
ETag: "1476-5ed1fc48b8d13"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines (524), with CRLF line terminators
Size:   5238
Md5:    b72aef102409c82fcf55985e49ee650e
Sha1:   c91fd5faacef77f43eddc90ddb643566f8b1b7a0
Sha256: b2a77953cfd6ed69acf607644455d2bc8ce2ff33b8e9e48c6f70b6bb7fd2ea85
                                        
                                            GET /wp-content/plugins/pricing-table-by-supsystic/modules/templates/lib/tooltipster/jquery.tooltipster.min.js?ver=1.9.9 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 17503
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Thu, 10 Nov 2022 15:53:01 GMT
ETag: "445f-5ed1fc4909e10"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines (17503), with no line terminators
Size:   17503
Md5:    2419bd795cb5d4935d4e8d2842d9e1c2
Sha1:   82178beeb27090c3c632d3ba62c75bdb07df05b2
Sha256: 7a81e2063bbe78b961d31a4f1a04e4942de5e8c79eee6749541d0ef6c3de4f4d

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/pricing-table-by-supsystic/js/responsiveText.js?ver=1.9.9 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 1529
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Thu, 10 Nov 2022 15:53:00 GMT
ETag: "5f9-5ed1fc48b8d13"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1529
Md5:    af9256fb9e00f4b1ee5efa7238fddc51
Sha1:   c622831c741ebf01ce24033a27c3aa467d39ef69
Sha256: a9fbf31bfa22142e2cd49479e9f52a50f25834c124b0b9f826bce4395178111a

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/pricing-table-by-supsystic/modules/tables/js/frontend.tables.editor.blocks_fabric.base.js?ver=1.9.9 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 1131
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Thu, 10 Nov 2022 15:53:00 GMT
ETag: "46b-5ed1fc48dcf40"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1131
Md5:    f0369b0e717a6f75cebe5a2c14d47ba3
Sha1:   6f016a96db62c4095946559abbb479f4f7b4ffb7
Sha256: c8c8baa8dec6ba55f581e9052d4c6955251c3131e37fca7f1e078d4cc06ea66e

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/uploads/2016/01/Pouf-840x500.png HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         217.160.0.20
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 503456
date: Wed, 30 Nov 2022 13:31:56 GMT
server: Apache
last-modified: Sun, 11 Sep 2016 08:36:37 GMT
etag: "7aea0-53c3747154f40"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 840 x 500, 8-bit/color RGBA, non-interlaced\012- data
Size:   503456
Md5:    c2a7e1c670a4562362fde7d063e70e64
Sha1:   469a335c4d2e20fb28a30b0996eb524027a44ab3
Sha256: 6ea2bd473e41c24115bc281f2b2488263b8b6e41d78835445666d734376ef847
                                        
                                            GET /wp-content/themes/innovation/style.css HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/wp-content/themes/innovation-child/style.css?ver=2.1

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 487
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2016 15:46:47 GMT
ETag: "1e7-53c150dcbe7c0"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   487
Md5:    b063d808a1844e82ee7fd98bb4fd3ce6
Sha1:   9496301eb80c29ebc53e69f9f9acb2125a51607e
Sha256: cbf9686940588a990c09c9293e305cf7ca2123eeeb2b4e18a8424759a288474a
                                        
                                            GET /wp-content/plugins/pricing-table-by-supsystic/modules/tables/js/frontend.tables.editor.blocks.base.js?ver=1.9.9 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 25530
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Thu, 10 Nov 2022 15:53:00 GMT
ETag: "63ba-5ed1fc48dcf40"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   25530
Md5:    3119d603693dbc1b17fe059959464bf1
Sha1:   8dcfd17e78f43c16d5dc6cb91cb7bc47d7c4b4ab
Sha256: aaa5f2a144f92a64fa27b77df24f2df554d934ae35582ff13321a5cee3dd4c06
                                        
                                            GET /wp-content/plugins/pricing-table-by-supsystic/modules/tables/js/modal.js?ver=1.9.9 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 4182
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Thu, 10 Nov 2022 15:53:00 GMT
ETag: "1056-5ed1fc48dcf40"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   4182
Md5:    f40eac725cecfc1f5c70bb47a4a26f1b
Sha1:   ab954136101304fb5178ff97c2fdc88058791023
Sha256: 04f55b958a2ad60902a65acab93cbcb10b2bc9a547b2b8d912277878750cf316

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/pricing-table-by-supsystic/modules/tables/js/frontend.tables.editor.elements.base.js?ver=1.9.9 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 7745
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Thu, 10 Nov 2022 15:53:00 GMT
ETag: "1e41-5ed1fc48dcf40"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   7745
Md5:    8beac0ee13468d529e686f0d3a9c0fa7
Sha1:   9104aeb3967f86c28c27608c527ffd90a1e0f9f3
Sha256: fc2ae203b89dbf33cc840238aefb335ab1136adc6e23549cd005139cc26ff251

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/pricing-table-by-supsystic/modules/tables/js/frontend.tables.js?ver=1.9.9 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 2392
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:56 GMT
Server: Apache
Last-Modified: Thu, 10 Nov 2022 15:53:00 GMT
ETag: "958-5ed1fc48dcf40"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   2392
Md5:    259ee5aba5874cd67c3e8aaf55acd5da
Sha1:   0dd95a1c24ff133b8b37ffb83a36ec72cb55b29d
Sha256: b5a56f8c483e10b4be6068029a4ea9dc1aa242572f61b6e07f1aaa735db60c6b

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/uploads/2018/04/WEB_Photos-studio-1-840x500.jpg HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         217.160.0.20
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 58953
date: Wed, 30 Nov 2022 13:31:56 GMT
server: Apache
last-modified: Sun, 05 Jan 2020 10:24:51 GMT
etag: "e649-59b61f4040ac9"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 840x500, components 3\012- data
Size:   58953
Md5:    ae4d4b2abc046ba7315545447f7644b1
Sha1:   d243e747bb583afca075a5f36b3f8ae2116d5d5a
Sha256: d7f8179fafc4e331b61a7207eb07614bfd4b15219ca0af1506e1082c5734ae5b
                                        
                                            GET /wp-content/uploads/2016/08/PLATEAU-1-H-sans-prises-840x500.jpg HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         217.160.0.20
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 61925
date: Wed, 30 Nov 2022 13:31:56 GMT
server: Apache
last-modified: Fri, 09 Sep 2016 15:51:50 GMT
etag: "f1e5-53c151fdb5180"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 840x500, components 3\012- data
Size:   61925
Md5:    fd3e573259b498cd05dd7e49c2d900ef
Sha1:   9588b46b16b58f2209b3a34ca732ba819dd01080
Sha256: 728904d36ca72fecaf9e37c89b5cc60e0316c96547ae5769bc88ef72af28ff9d
                                        
                                            GET /wp-content/uploads/2021/01/4X2A5510-840x500.jpg HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         217.160.0.20
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 53906
date: Wed, 30 Nov 2022 13:31:56 GMT
server: Apache
last-modified: Mon, 25 Jan 2021 09:10:43 GMT
etag: "d292-5b9b5e9a0dc17"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 840x500, components 3\012- data
Size:   53906
Md5:    3751f21278a80fa9e988386bd0fb2d00
Sha1:   c537a9de806c81c60aa7eb8041a6bc5ea6089d63
Sha256: 8de52a035a98c22ea82b61f1edec43a52af5297926c4bfb6be1e4277dc418f33
                                        
                                            GET /wp-content/uploads/2016/09/LOGO_small.png HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         217.160.0.20
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 5679
date: Wed, 30 Nov 2022 13:31:56 GMT
server: Apache
last-modified: Fri, 16 Sep 2016 09:08:50 GMT
etag: "162f-53c9c4f816c80"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 150 x 116, 8-bit/color RGBA, non-interlaced\012- data
Size:   5679
Md5:    14d9fe7865049090a632d43051b4cf4b
Sha1:   fc8289f08b381488d2e275e73d0a98ad562e914d
Sha256: 67729ff2dfed54c45a2facf91622e46197e3fdde3aec14839d90d8f786d90a26
                                        
                                            GET /wp-content/uploads/2018/04/IMG_4907-840x500.jpg HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         217.160.0.20
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 61070
date: Wed, 30 Nov 2022 13:31:56 GMT
server: Apache
last-modified: Wed, 11 Dec 2019 09:53:23 GMT
etag: "ee8e-5996a996e4aa5"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 840x500, components 3\012- data
Size:   61070
Md5:    ebc75c9b6822d73d34b8ea25656aaaec
Sha1:   e5a1214b201320960b53547131a9934b56ba0efc
Sha256: 2ca52d37469b07038cf24caa15856db463ed896ea162a8c241e20ce7c0f59aa6
                                        
                                            GET /wp-content/uploads/2021/01/4X2A5523-840x500.jpg HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         217.160.0.20
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 104559
date: Wed, 30 Nov 2022 13:31:56 GMT
server: Apache
last-modified: Mon, 25 Jan 2021 09:11:43 GMT
etag: "1986f-5b9b5ed3745a2"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 840x500, components 3\012- data
Size:   104559
Md5:    eb8ad5e1fd6a644117a5976be4730d8d
Sha1:   e0f1c3956687a4f6ef302f5a01418036975b929e
Sha256: faa1514ebee7062535d116f31fae72978ffc921698f677a8472815d99200a992
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5164
Expires: Wed, 30 Nov 2022 14:58:01 GMT
Date: Wed, 30 Nov 2022 13:31:57 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5164
Expires: Wed, 30 Nov 2022 14:58:01 GMT
Date: Wed, 30 Nov 2022 13:31:57 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5164
Expires: Wed, 30 Nov 2022 14:58:01 GMT
Date: Wed, 30 Nov 2022 13:31:57 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bb1888-5971-4b4a-923b-dc9d4050182b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7298
x-amzn-requestid: 381e55bb-876b-46ad-84b6-1ddf9f876f56
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgDcE3poAMFaAA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a15-7c12394600900afc7281e858;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 8heT2eN5oLbO14R9qLq78Vma_TkteufTyKM5i3K2XoJYXfWNwLMEwQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:56:25 GMT
age: 56132
etag: "e4ddf955e8ac1986045ed55880c43c69e588a021"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7298
Md5:    e00769bd1391b8f4f5b8ab128a825355
Sha1:   e4ddf955e8ac1986045ed55880c43c69e588a021
Sha256: 81ca4d20c28fed8fd3135515daadc1fdbfb4198535d7c46021b418b8b98e59a5
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd170538c-f8cf-4acb-ba33-2ead00b9db73.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10958
x-amzn-requestid: abfea5b0-58f5-49e1-b78e-7cf456d03cb3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgFHF9oIAMF5lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a20-5ab719292d440d083b07a478;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: gCt9oHpZ68tLCYHIYpI1XLtADkScxwf12kDFnU0o5WoQIVSzWlqozw==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 22:16:52 GMT
etag: "57e1d34f146d5ccd9943aa97bcc3158f7103bb07"
age: 54905
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10958
Md5:    777ce44582c70bf01a31da4cab366f36
Sha1:   57e1d34f146d5ccd9943aa97bcc3158f7103bb07
Sha256: fbdc8f65ae74dc13b7aafec464f08fdc9902af519946200ec52432ac3ca55982
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9674
x-amzn-requestid: 7e7d0183-9667-462a-8d44-d125998c1ae3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgEoHVAoAMFvAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a1d-280ba97e3fe1bf7244cbde35;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ym_L3s5E6MLy6BxqNkVxok6L6hA4c-ilSsEqt42j2IbiXYPb4c6-VQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:52:51 GMT
age: 56346
etag: "53650399f9a986ba54addd668b4557109d12003b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9674
Md5:    5508d05a290b663fd89ead9b58f2efd8
Sha1:   53650399f9a986ba54addd668b4557109d12003b
Sha256: 65704a961410fdd318c491fedf002c8e9b184cd34b76fe1b67026d42ce21be3f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F250668cd-c9db-4014-b576-3aaad4eb9150.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5785
x-amzn-requestid: ee77265b-8e90-4035-8ef1-92a2d26aaefa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgDaHdWoAMFqmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a15-0d10d74030e7aee74804b654;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:01 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QhUrNKIJUxXTYFTgfCwizAd9L4PdLMVLbqv1sHmmnrWya0xz1MTSiw==
via: 1.1 38eecd3ca21bf068d69a2f9cfe668d14.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 22:08:46 GMT
etag: "f7cf3a0f89751a02fbcf8d21f505f24a74e8b30b"
age: 55391
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5785
Md5:    59baec8db5ced0210ab766ea5636a5fd
Sha1:   f7cf3a0f89751a02fbcf8d21f505f24a74e8b30b
Sha256: 33ff55891f18c22970804f1b8b2ba6821ddfd7426b01486410bd43f2b4295a8d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10176
x-amzn-requestid: 768fc69c-e91b-4dd9-8add-63634762b2d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMpbgEFOIAMF71A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bc49-21756db31c4714af0553f21b;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:12:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jS-AS3x8V3XacXRNkU63UJjBxA6unvBer5WcxUYseR5p4eZPK64o2g==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 04:55:46 GMT
age: 30971
etag: "772d86ad983042a728ee3490630a9cf1134ad0dd"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10176
Md5:    03014221d7f49b50ffc2d1b0a0e75457
Sha1:   772d86ad983042a728ee3490630a9cf1134ad0dd
Sha256: 81fb954fa569955907952987e9d8efd1dac80e0e4a682826abf3c5d90eb31771
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e1db4e-7108-464a-85b6-24ac0c4609f9.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9330
x-amzn-requestid: 3fad352d-7664-43e0-9395-e840f671ca61
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgFQFIdoAMFSmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a21-5e9847852f8435231d401fe6;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mCEtSOenWKxay4vNy5mN9cexxXKXKt7TMuLaLw-M86tLKwQ2MwuxPg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 22:00:54 GMT
age: 55863
etag: "2f3a39a528d3b759060203931de33c12303592e1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9330
Md5:    bbe350ea797a0fec5a19a450fc5de4b4
Sha1:   2f3a39a528d3b759060203931de33c12303592e1
Sha256: 4d661dac2e19e07ae15d0f8cf00bd268c6c2defb2f5e4de38fcb6e7031dfd605
                                        
                                            GET /s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.acielouvertstudios.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/

search
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 35764
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 29 Nov 2022 15:00:13 GMT
Expires: Wed, 29 Nov 2023 15:00:13 GMT
Cache-Control: public, max-age=31536000
Age: 81104
Last-Modified: Mon, 18 Jul 2022 19:06:36 GMT


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 35764, version 1.0\012- data
Size:   35764
Md5:    60f23230f1a8d5c3b7d25b73f5b5ce23
Sha1:   ed08ada85d017893b9bcb8224e99154c6708f5d2
Sha256: 22b6cdc450204c1cb32b31e679d812fea1c17ac506a7b78daeb12bd0ab25fde8
                                        
                                            GET /wp-content/themes/innovation/assets/images/ajax-loader.svg HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/wp-content/themes/innovation/assets/css/ruby-style.css?ver=2.1

search
                                         217.160.0.20
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Content-Length: 1787
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:57 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2016 15:46:22 GMT
ETag: "6fb-53c150c4e6f80"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  exported SGML document, ASCII text
Size:   1787
Md5:    924878f6f8f464c72f50e276fcb3e5f0
Sha1:   c9fc35c7f7e6c3303e45892cf32af5e016cce3dc
Sha256: 5243c8c0ebd69a6721cf64179fdb97cfc4e8e99646e2602f97c5cda061cfcd2d

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.acielouvertstudios.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/

search
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 44856
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 28 Nov 2022 19:26:02 GMT
Expires: Tue, 28 Nov 2023 19:26:02 GMT
Cache-Control: public, max-age=31536000
Age: 151555
Last-Modified: Mon, 15 Aug 2022 18:20:18 GMT


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Size:   44856
Md5:    565ce506190ad3af920b40baf1794cec
Sha1:   ad3cba5d06100e09449a864d3b5e58403b478b3d
Sha256: 8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
                                        
                                            GET /wp-content/uploads/2021/01/4X2A5505-1400x840.jpg HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         217.160.0.20
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 98878
date: Wed, 30 Nov 2022 13:31:57 GMT
server: Apache
last-modified: Mon, 25 Jan 2021 09:09:47 GMT
etag: "1823e-5b9b5e64fca0a"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1400x840, components 3\012- data
Size:   98878
Md5:    a63466d346abef32cae9e3666b04440d
Sha1:   ec40268000f5368f0de181fb9abfc8e8637effbd
Sha256: 547989c25011c57ce32fc6353ceee936517ccb81bbd1f0588a24e0a9b9f8134a
                                        
                                            GET /wp-content/uploads/2018/04/WEB_Photos-studio-1-1400x840.jpg HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         217.160.0.20
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 134026
date: Wed, 30 Nov 2022 13:31:57 GMT
server: Apache
last-modified: Sun, 05 Jan 2020 10:24:50 GMT
etag: "20b8a-59b61f3fad338"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1400x840, components 3\012- data
Size:   134026
Md5:    189dafb7a6679b4e87a1912ce2b0c6ea
Sha1:   12dab9c75df571292d5cfb6a44c5fbe771500bea
Sha256: 45cee2fb0cc409eaf386671c1b856dbf77c8eb9d44bfd60c89154525e756c19e
                                        
                                            GET /wp-content/plugins/pricing-table-by-supsystic/modules/templates/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/wp-content/plugins/pricing-table-by-supsystic/modules/templates/css/font-awesome.min.css?ver=1.9.9

search
                                         217.160.0.20
HTTP/1.1 200 OK
                                        
Content-Length: 77160
Connection: keep-alive
Keep-Alive: timeout=15
Date: Wed, 30 Nov 2022 13:31:57 GMT
Server: Apache
Last-Modified: Thu, 10 Nov 2022 15:53:00 GMT
ETag: "12d68-5ed1fc48e5be3"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Size:   77160
Md5:    af7ae505a9eed503f8b8e6982036873e
Sha1:   d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
Sha256: 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
                                        
                                            GET /wp-content/uploads/2021/01/4X2A5523-1400x840.jpg HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         217.160.0.20
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 269556
date: Wed, 30 Nov 2022 13:31:57 GMT
server: Apache
last-modified: Mon, 25 Jan 2021 09:11:43 GMT
etag: "41cf4-5b9b5ed2f94b7"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1400x840, components 3\012- data
Size:   269556
Md5:    8f86616d988cd4ae79ff4bf16e3bf207
Sha1:   30286213a9ff68084e619ae50c6d99f77cfa2d9b
Sha256: 75e7288ff55c88a1515f6c807885795a7eb756d10913506e9fa54dd1ce2fc673
                                        
                                            GET /wp-content/uploads/2016/01/Pouf.png HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         217.160.0.20
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 771115
date: Wed, 30 Nov 2022 13:31:57 GMT
server: Apache
last-modified: Sun, 11 Sep 2016 08:36:33 GMT
etag: "bc42b-53c3746d84640"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1000 x 667, 8-bit/color RGB, non-interlaced\012- data
Size:   771115
Md5:    dc9cd4296dcf317c545b87e78be8bcba
Sha1:   ad30f55a3540a307cf790f8c804eb717ff9f2c3e
Sha256: 955f9b72506525f9297300a2259101b2545a03586a65acaf5ab286a02df33853
                                        
                                            GET /wp-content/uploads/2018/04/IMG_4907-1400x840.jpg HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         217.160.0.20
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 136699
date: Wed, 30 Nov 2022 13:31:57 GMT
server: Apache
last-modified: Wed, 11 Dec 2019 09:53:23 GMT
etag: "215fb-5996a996b7bd6"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1400x840, components 3\012- data
Size:   136699
Md5:    1a700ecde0a0a4846b296ff059ad8322
Sha1:   9b9e32ffd139710e5f0196b04f400a31bac38977
Sha256: 3463ff03069fab75480436cd27d47c6f38f900d1163566adfcbe6fdb34e4dc8a
                                        
                                            GET /wp-content/uploads/2021/01/4X2A5510-1400x840.jpg HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         217.160.0.20
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 114051
date: Wed, 30 Nov 2022 13:31:57 GMT
server: Apache
last-modified: Mon, 25 Jan 2021 09:10:42 GMT
etag: "1bd83-5b9b5e9963d1c"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1400x840, components 3\012- data
Size:   114051
Md5:    26bbc90e2b2a761ee03e6f271e4a38c7
Sha1:   346c68b81ba3255e30fdabf52721dec378aad88e
Sha256: e05faf04ecfdc9c4f054edddbd956b6fe496d69fa2cb5359957b3770e41fdfc0
                                        
                                            GET /wp-content/uploads/2016/08/PLATEAU-1-H-sans-prises.jpg HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         217.160.0.20
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 594440
date: Wed, 30 Nov 2022 13:31:57 GMT
server: Apache
last-modified: Fri, 09 Sep 2016 15:51:50 GMT
etag: "91208-53c151fdb5180"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=16, height=3744, bps=206, compression=LZW, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS 5D Mark II, orientation=upper-left, width=5616], baseline, precision 8, 1200x800, components 3\012- data
Size:   594440
Md5:    bf70c9468872d7b0f395f3c7ae595186
Sha1:   5972c7969953bfec57f65928578fed476aaca6e4
Sha256: 48460dfd6b23ce746c2325a122f62f8940c5f75d97cdd6626c51c37c9619e7bb
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/

search
                                         142.250.74.14
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 20039
Date: Wed, 30 Nov 2022 12:13:22 GMT
Expires: Wed, 30 Nov 2022 14:13:22 GMT
Cache-Control: public, max-age=7200
Age: 4715
Last-Modified: Tue, 27 Sep 2022 22:01:05 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20039
Md5:    47e6f374ca946fddd5b59871b325736c
Sha1:   baa9282efc8785e84d247c3bff518eaa45f101c4
Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
                                        
                                            GET /wp-content/uploads/2016/09/FAVICON_ACielOuvertStudios_A_Logo_FondNoir.jpg HTTP/1.1 
Host: www.acielouvertstudios.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         217.160.0.20
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 711
date: Wed, 30 Nov 2022 13:31:57 GMT
server: Apache
last-modified: Sat, 10 Sep 2016 08:48:30 GMT
etag: "2c7-53c2353bd7380"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x56, components 3\012- data
Size:   711
Md5:    a46db26cdd947fb0cc504ea808a791a5
Sha1:   03bffbef9cbeb6c09142cf33ace7cf62398194bf
Sha256: 1cab0637ada9a39df9642181b0e240348b1af7bcd5ab990a2a7ec0d44f307312
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.14
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Wed, 30 Nov 2022 12:46:55 GMT
expires: Wed, 30 Nov 2022 14:46:55 GMT
cache-control: public, max-age=7200
age: 2702
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20039
Md5:    47e6f374ca946fddd5b59871b325736c
Sha1:   baa9282efc8785e84d247c3bff518eaa45f101c4
Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
                                        
                                            POST /j/collect?v=1&_v=j98&a=1398405613&t=pageview&_s=1&dl=http%3A%2F%2Fwww.acielouvertstudios.com%2F&ul=en-us&de=UTF-8&dt=Location%20studio%20photo%20Paris%20-%20A%20Ciel%20Ouvert%20Studios&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEDAAUABAAAAACAAI~&jid=82903490&gjid=809155037&cid=1799252140.1669815116&tid=UA-156274071-1&_gid=1724455757.1669815116&_r=1&gtm=2oubs0&z=1503052183 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.acielouvertstudios.com
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.14
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: http://www.acielouvertstudios.com
date: Wed, 30 Nov 2022 13:31:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    cc7a1e792bca8ccb1946b7a07f6dbc03
Sha1:   11a2757082428311f587b7664fa9840376137f80
Sha256: de3246094525b21a870fc7d2a67490d0132535c6fa5993755c549f1a9d1bd8af
                                        
                                            POST /j/collect?v=1&_v=j98&a=1398405613&t=pageview&_s=1&dl=http%3A%2F%2Fwww.acielouvertstudios.com%2F&ul=en-us&de=UTF-8&dt=Location%20studio%20photo%20Paris%20-%20A%20Ciel%20Ouvert%20Studios&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=1052167548&gjid=49314892&cid=1799252140.1669815116&tid=UA-63413314-1&_gid=1724455757.1669815116&_r=1&_slc=1&z=352632346 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.acielouvertstudios.com
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.14
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: http://www.acielouvertstudios.com
date: Wed, 30 Nov 2022 13:31:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    9e92e190700c1af4539b40c2171320a9
Sha1:   209bcdb79e6067b51091ce8586d4b977f25b67d8
Sha256: aec60bc104db041b1512185839f18f52986df7e569e5445f740dd60f763fbca8
                                        
                                            GET /s/playfairdisplay/v30/nuFkD-vYSZviVYUb_rj3ij__anPXDTnogkk7.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.acielouvertstudios.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/

search
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 36104
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 26 Nov 2022 06:32:49 GMT
Expires: Sun, 26 Nov 2023 06:32:49 GMT
Cache-Control: public, max-age=31536000
Age: 370748
Last-Modified: Mon, 18 Jul 2022 19:13:00 GMT


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 36104, version 1.0\012- data
Size:   36104
Md5:    32938cccb9665d3b8afe8689b88a9ea3
Sha1:   5834c8e5bf4a8daf23f518a5ccb2e8b8391f6190
Sha256: b574669ac419e9857b34bd603555cc632152f8122f6b154d049e13cc0a167b35
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 30 Nov 2022 13:31:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 30 Nov 2022 13:31:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 30 Nov 2022 13:31:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 30 Nov 2022 13:31:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-63413314-1&cid=1799252140.1669815116&jid=1052167548&gjid=49314892&_gid=1724455757.1669815116&_u=IEBAAEAAAAAAACAAI~&z=167970387 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.acielouvertstudios.com
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         64.233.165.156
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: http://www.acielouvertstudios.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 30 Nov 2022 13:31:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  very short file (no magic)
Size:   1
Md5:    c4ca4238a0b923820dcc509a6f75849b
Sha1:   356a192b7913b04c54574d18c28d46e6395428ab
Sha256: 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-156274071-1&cid=1799252140.1669815116&jid=82903490&gjid=809155037&_gid=1724455757.1669815116&_u=YEDAAUABAAAAACAAI~&z=166587008 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.acielouvertstudios.com
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         64.233.165.156
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: http://www.acielouvertstudios.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 30 Nov 2022 13:31:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    48c0473b7821185d937e685216e2168b
Sha1:   3743e47f8a429a5e87b86cb582d78940733d9d2e
Sha256: 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 30 Nov 2022 13:31:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.acielouvertstudios.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 18:52:55 GMT
expires: Tue, 28 Nov 2023 18:52:55 GMT
cache-control: public, max-age=31536000
age: 153542
last-modified: Mon, 15 Aug 2022 18:14:44 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 16740, version 1.0\012- data
Size:   16740
Md5:    e43b535855a4ae53bd5b07a6eeb3bf67
Sha1:   6507312d9491156036316484bf8dc41e8b52ddd9
Sha256: b34551ae25916c460423b82beb8e0675b27f76a9a2908f18286260fbd6de6681
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 30 Nov 2022 13:31:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 30 Nov 2022 13:31:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 30 Nov 2022 13:31:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 30 Nov 2022 13:31:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-156274071-1&cid=1799252140.1669815116&jid=82903490&_u=YEDAAUABAAAAACAAI~&z=160530644 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         216.58.211.4
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 30 Nov 2022 13:31:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-156274071-1&cid=1799252140.1669815116&jid=82903490&_u=YEDAAUABAAAAACAAI~&z=160530644 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.67
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 30 Nov 2022 13:31:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 30 Nov 2022 13:31:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 30 Nov 2022 13:31:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2730750-552d-4852-8ce1-503874565f75.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9051
x-amzn-requestid: 1032dd9c-a15e-4e8a-9c81-07419e8caf67
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhGvEMNIAMFaKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867bc4-1005c20a33320dbf6567ca31;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:38:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: IMaVlQblNnh9mFKwb2LG7hw7h_f1_nVYqO4aEUqY01a2HofnnQqcFQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:49:31 GMT
age: 56552
etag: "6170d6776615503e3e29f86783febc3e3e78ca66"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9051
Md5:    05196ec43964cf559caa0c0279148d62
Sha1:   6170d6776615503e3e29f86783febc3e3e78ca66
Sha256: 47f3a5cde661987e3496ce110a0170b10087dd9ba8d4fd691c4830587ba3fa3f
                                        
                                            GET /css?family=Open%20Sans HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.acielouvertstudios.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 30 Nov 2022 13:31:57 GMT
date: Wed, 30 Nov 2022 13:31:57 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---