r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a26d0784548ecab22f417f3d689daf23
8893b79366bbadeb5c8d587b8f023e310694df1c
35baaae7b3ce3110ebb2b075881cfab55ecf3eab57d834283fd18ac691b41fa2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35BAAAE7B3CE3110EBB2B075881CFAB55ECF3EAB57D834283FD18AC691B41FA2"
Last-Modified: Tue, 20 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3726
Expires: Thu, 22 Sep 2022 05:07:26 GMT
Date: Thu, 22 Sep 2022 04:05:20 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 22 Sep 2022 03:13:54 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: tgYrZmIIGv4JXe5SHtZBNJFwdM10lDcjnY7ezoJQf0Lnbu8czfW47w==
Age: 3086
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 21 Sep 2022 04:35:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: L_QgTi1I-jCawzrZipcHv87GYRC1G7QTNvaVEjLrFsJyN0UAKLN1EA==
age: 84607
X-Firefox-Spdy: h2
safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
200 OK 17 kB URL HTTP/1.1 safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6694), with CRLF, LF line terminators
Hash 9f9ff7c361cfde531e25d3625e46178b
f3349f7c6458dc3de3deeb2c32e32c13912169ed
bd7ae423928a164de5c85106bc4546c74a552f05573220ad42cbb3805781f373
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:20 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
Accept-Ranges: none
Content-Length: 16931
Keep-Alive: timeout=5, max=75
Content-Type: text/html; charset=UTF-8
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 04:05:20 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
safetymethod.net/wp-includes/css/dist/block-library/style.min.css?ver=5.8.5
200 OK 15 kB URL HTTP/1.1 safetymethod.net/wp-includes/css/dist/block-library/style.min.css?ver=5.8.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (33376)
Hash 6ebc7a4d773cb1f29a93f605933fba76
b113ca39afc5fd44cbc06dca58945bb5e9fb771e
7a12133f8cb48c1b5b4631ee9e9a0eebe36bbf2bbe1eb792b0f9fc630c18bd76
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.8.5 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:20 GMT
Server: Apache
Last-Modified: Wed, 08 Sep 2021 11:36:51 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 14560
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
safetymethod.net/wp-content/plugins/cleanco-plugin/assets/css/social-icons.css?ver=5.8.5
200 OK 662 B URL HTTP/1.1 safetymethod.net/wp-content/plugins/cleanco-plugin/assets/css/social-icons.css?ver=5.8.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 5bb58626bcb1a0d8227081fe1c118ae8
5c72217be5bbec05cd5b75bee9fadf1b1aa4c5e9
1a2fca3705697fd1f0a8259b70df6d3051cd23266d28f3486c174a1a6c943714
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/cleanco-plugin/assets/css/social-icons.css?ver=5.8.5 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:20 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Fri, 17 Apr 2020 10:02:27 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 662
Keep-Alive: timeout=5, max=75
Content-Type: text/css
safetymethod.net/wp-content/plugins/cleanco-plugin/assets/css/plugins.min.css?ver=5.8.5
200 OK 2.3 kB URL HTTP/1.1 safetymethod.net/wp-content/plugins/cleanco-plugin/assets/css/plugins.min.css?ver=5.8.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (9944)
Hash ecdd90326bf75e4535d9af3c834df4f0
dbe269406f783a9bc1b90d56c51de3288a514ecb
afb8d94dc68e1f4bb0f106dd9e52f04082ac769913081fdd1bcf2400d27bcced
GET /wp-content/plugins/cleanco-plugin/assets/css/plugins.min.css?ver=5.8.5 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:20 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Fri, 17 Apr 2020 10:02:27 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2253
Keep-Alive: timeout=5, max=75
Content-Type: text/css
safetymethod.net/wp-content/plugins/cleanco-plugin/assets/css/simple-line-icons.css?ver=5.8.5
200 OK 2.6 kB URL HTTP/1.1 safetymethod.net/wp-content/plugins/cleanco-plugin/assets/css/simple-line-icons.css?ver=5.8.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2276)
Hash bdae26cb133698e8ab54dcdc91583c3b
77155948a7a55690ad5cb868de21227d989e673f
0609b1b3eeb335cdcaac0b800b9967fd2442efcf20723af1fb3e2b997bb24623
GET /wp-content/plugins/cleanco-plugin/assets/css/simple-line-icons.css?ver=5.8.5 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:20 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Fri, 17 Apr 2020 10:02:27 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2593
Keep-Alive: timeout=5, max=75
Content-Type: text/css
safetymethod.net/wp-content/plugins/essential-grid/public/assets/font/fontello/css/fontello.css?ver=2.3.6
200 OK 2.4 kB URL HTTP/1.1 safetymethod.net/wp-content/plugins/essential-grid/public/assets/font/fontello/css/fontello.css?ver=2.3.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash c4793d4c5f37223118865b6a8b93d546
ac6045f732cd75b8218df26ee33bd099aa2fd3bb
c4d3046b4ee1e66a3363225cb0ffb5d7d4400c19f15d39d8b2f41c12555c5dc4
GET /wp-content/plugins/essential-grid/public/assets/font/fontello/css/fontello.css?ver=2.3.6 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:20 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 10:02:31 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2441
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/css
safetymethod.net/wp-content/plugins/essential-grid/public/assets/css/settings.css?ver=2.3.6
200 OK 8.4 kB URL HTTP/1.1 safetymethod.net/wp-content/plugins/essential-grid/public/assets/css/settings.css?ver=2.3.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (33230), with no line terminators
Hash 26448e34aeb9208575e55af095e5727f
e122c4fbaf66085275630341afa59e6b25e1afd9
d28eb9983475f0ff8e399dc861719842ec2fa5eb6f99af96daf5bcd5e55182ad
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/essential-grid/public/assets/css/settings.css?ver=2.3.6 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:20 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Fri, 17 Apr 2020 10:02:31 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8425
Keep-Alive: timeout=5, max=75
Content-Type: text/css
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c8ac2005f83e8a3a9da1a9837b6c2ff3
7c05f49683e49232c1e11b91253e684d2f96ab83
b0b42743b4c7e4b528fd78aadc5429ef34c2e127f3d5147330d428a47203dc0a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 04:05:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
safetymethod.net/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/css/ladda.min.css?ver=17.9
200 OK 1.6 kB URL HTTP/1.1 safetymethod.net/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/css/ladda.min.css?ver=17.9
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (9022)
Hash 7a8ffc891e391d2599e2295109c1eed7
f0e834eb0eb3b93ea22fbe1e29c2a2e9de25a767
79119d0987be4165e5d2fd5e82c2031717ef7480330684b2f08fab5f0c2d23a9
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/css/ladda.min.css?ver=17.9 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:20 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 10:02:24 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1587
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
safetymethod.net/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/css/intlTelInput.css?ver=17.9
200 OK 3.2 kB URL HTTP/1.1 safetymethod.net/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/css/intlTelInput.css?ver=17.9
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (20761), with no line terminators
Hash 695205ecb44a5906d054040d382055e2
e33ef605b5a11539eac3b101a64920c37bd86eb0
98864a8edd54e970784087c240e7921d4fb245621ba668671a08ff64f9ce3ea4
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/css/intlTelInput.css?ver=17.9 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:20 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 10:02:24 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3173
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
safetymethod.net/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/css/picker.classic.css?ver=17.9
200 OK 603 B URL HTTP/1.1 safetymethod.net/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/css/picker.classic.css?ver=17.9
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1208)
Hash 130de38568e19bc15656a949fd51b5dd
e521556481eb8d1a329b3f5edbd93cfcf850ab72
98e1d518a87ea5eed9aa0b35a764a8287b2a998aec10a7ffeff509870e9077d1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/css/picker.classic.css?ver=17.9 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:20 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 10:02:24 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 603
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: text/css
safetymethod.net/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/css/picker.classic.date.css?ver=17.9
200 OK 1.4 kB URL HTTP/1.1 safetymethod.net/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/css/picker.classic.date.css?ver=17.9
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (4370), with no line terminators
Hash ef3f6d40a7b2ee7df68e3770b2b7cddd
41f81370666ba6edac6fc5ec0c5a8d1c4f7ebb3a
bb3db802399d3ac722e92c50e03f6a738a188af6386dd1209c566750fe3c21a0
GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/css/picker.classic.date.css?ver=17.9 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:20 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 10:02:24 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1366
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
safetymethod.net/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.1.7
409 Conflict 83 B URL HTTP/1.1 safetymethod.net/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.1.7
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.1.7 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 409 Conflict
Date: Thu, 22 Sep 2022 04:05:20 GMT
Server: Apache
Content-Length: 83
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
safetymethod.net/wp-content/themes/cleanco/assets/vendors/selectize/css/selectize.css
200 OK 2.6 kB URL HTTP/1.1 safetymethod.net/wp-content/themes/cleanco/assets/vendors/selectize/css/selectize.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 4420193a7e9ec9e3bdcdfd503e3614cd
cc6aa013036ab120dbf67664877835de61b2f827
a3596e2d729f7ea00d14b8973375b52d06d57ea6a3a568c8c31b4b0f6a9f3b98
GET /wp-content/themes/cleanco/assets/vendors/selectize/css/selectize.css HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 10:02:00 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2634
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/css
safetymethod.net/wp-content/plugins/slider-revolution/public/assets/css/rs6.css?ver=6.2.2
200 OK 16 kB URL HTTP/1.1 safetymethod.net/wp-content/plugins/slider-revolution/public/assets/css/rs6.css?ver=6.2.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators
Hash 3980c3137a9d0133b1fd0a3dd8580387
a7d7990f45b3522f6409691ea8f27ca7f14109e2
423edfee2513e72270467d1497e83b8de6f18ea0ff65c7b246182a1fd6a18c40
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/slider-revolution/public/assets/css/rs6.css?ver=6.2.2 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:20 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 10:02:40 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 16208
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
safetymethod.net/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/css/bookly-main.css?ver=17.9
200 OK 8.6 kB URL HTTP/1.1 safetymethod.net/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/css/bookly-main.css?ver=17.9
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 01530cce72efb3ab6f8b18f3dba10121
8da54d9e9c38016f14c9c91288af217ca41cb41f
18e37fe32eb4a8e1d90869fece049db1fe1dfeb1a665f3976f105df42d454259
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/css/bookly-main.css?ver=17.9 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 10:02:24 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8588
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/css
safetymethod.net/wp-content/themes/cleanco/assets/css/bootstrap.min.css
200 OK 22 kB URL HTTP/1.1 safetymethod.net/wp-content/themes/cleanco/assets/css/bootstrap.min.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65536), with no line terminators
Hash 6c116ed6bc855709227f407e24bdcf89
0659edb23968b27365f33e6595e8bbaee9bdc8ab
a887701343e9f4f329ccca187b09349b4bff658728779a0b449665620fc93170
GET /wp-content/themes/cleanco/assets/css/bootstrap.min.css HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 10:02:00 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c8ac2005f83e8a3a9da1a9837b6c2ff3
7c05f49683e49232c1e11b91253e684d2f96ab83
b0b42743b4c7e4b528fd78aadc5429ef34c2e127f3d5147330d428a47203dc0a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 04:05:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Thu, 22 Sep 2022 04:03:23 GMT
Cache-Control: max-age=3600
Expires: Thu, 22 Sep 2022 04:54:52 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 2fkvHd_PzSgL12XNFMji8WESywaJS2sJV2xmFKaOLNRZGS67SQRpgA==
Age: 119
safetymethod.net/wp-content/themes/cleanco/assets/css/theme.min.css?ver=3.1.0
200 OK 39 kB URL HTTP/1.1 safetymethod.net/wp-content/themes/cleanco/assets/css/theme.min.css?ver=3.1.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65536), with no line terminators
Hash c4d30cfd8a63449dfe62020db32f3cd6
20759b94c2e893c0fe3a2e912e3f9aafecb2f173
f0ac8f44607f77bd3fe3e8e2d62dfb53f193c93ac987778a3915c494e30c16ca
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/cleanco/assets/css/theme.min.css?ver=3.1.0 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 10:02:00 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css
safetymethod.net/wp-content/plugins/kingcomposer/assets/css/animate.css?ver=2.9.5
200 OK 3.7 kB URL HTTP/1.1 safetymethod.net/wp-content/plugins/kingcomposer/assets/css/animate.css?ver=2.9.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (36512)
Hash e3f6e578fe7ca5362fccbfcce94ce996
b1deba8d80cae941d22051fda096e49d6274af3b
eb202c9ec2bc15da2ea3e218313eb25628179671965ed043c49fb711a63dfbfe
GET /wp-content/plugins/kingcomposer/assets/css/animate.css?ver=2.9.5 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Sat, 11 Jul 2020 14:06:28 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3656
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/css
safetymethod.net/wp-content/plugins/kingcomposer/assets/css/icons.css?ver=2.9.5
200 OK 11 kB URL HTTP/1.1 safetymethod.net/wp-content/plugins/kingcomposer/assets/css/icons.css?ver=2.9.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (35475)
Hash 0ee2565319bdc28b2f5edac9826f40ae
79c05f008f3ff3f96fd97b94a1ea13de34b72afa
11457f8c739cb2b78f0a6cfd63e263390b53d8a566489dc1cb15198c0d8299a0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/kingcomposer/assets/css/icons.css?ver=2.9.5 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Sat, 11 Jul 2020 14:06:28 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11214
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: text/css
safetymethod.net/wp-content/themes/cleanco/style.css
200 OK 462 B URL HTTP/1.1 safetymethod.net/wp-content/themes/cleanco/style.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 283c8d89df9bc5629e052968a1ced3da
3b5dba176245329a4ee531f7f39570b41c52a14f
db6c7bb4aa661de4d44bbda22d528b3a122106dcbc256478a4c60f66cde91873
GET /wp-content/themes/cleanco/style.css HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Fri, 17 Apr 2020 10:02:00 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 462
Keep-Alive: timeout=5, max=75
Content-Type: text/css
safetymethod.net/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 39 kB URL HTTP/1.1 safetymethod.net/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65447)
Hash feb933ceca72e1d76b471ed9db278b0d
6179e8f9c9876a6c4df5e3138e9f8ee2ac25bcd1
9a525fa92f98fd5ac754d60ea6f3676bcaa3870dd9bf057c8c668399922c9bd0
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Wed, 08 Sep 2021 11:36:51 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
safetymethod.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.6 kB URL HTTP/1.1 safetymethod.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (11126)
Hash acdb97105af28a7066790c6748ae2e1e
65794d2c5a9d04f747faf370bc8bacd330e69e5a
dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Wed, 08 Sep 2021 11:36:51 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4618
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: application/javascript
safetymethod.net/wp-content/plugins/kingcomposer/assets/frontend/css/kingcomposer.min.css?ver=2.9.5
200 OK 19 kB URL HTTP/1.1 safetymethod.net/wp-content/plugins/kingcomposer/assets/frontend/css/kingcomposer.min.css?ver=2.9.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65412)
Hash 81b309f337fb64d7ce75f243c7c231f9
689813bbc44d093f2e75fb0c09c8928420030e7c
bd00a6ae7e2a468b05d9be3b2349ebd048e0a342912ca1035d5747f344c723df
GET /wp-content/plugins/kingcomposer/assets/frontend/css/kingcomposer.min.css?ver=2.9.5 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Sat, 11 Jul 2020 14:06:28 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css
safetymethod.net/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/spin.min.js?ver=17.9
200 OK 2.2 kB URL HTTP/1.1 safetymethod.net/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/spin.min.js?ver=17.9
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (4247)
Hash 994a9291cbba8a125c2de344eccbff91
898c31406134a3a07c69dae29b44e358d827d857
510d6828d366a575692c2b6151fa5fc7c51a2c94073cebd2cf590347cae4d893
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/spin.min.js?ver=17.9 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 10:02:24 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2212
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: application/javascript
safetymethod.net/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/ladda.min.js?ver=17.9
200 OK 1.7 kB URL HTTP/1.1 safetymethod.net/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/ladda.min.js?ver=17.9
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (3607)
Hash 0670f85198107dd57129430f905e9775
53837f9c4f99ff06b6fe6056fbd51f15e86e9362
78ff9d2b555e76f5e28bb3f6953f5641d089c9c9d5d63b5364045e79811f7815
GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/ladda.min.js?ver=17.9 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 10:02:24 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1705
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.digicert.com/
200 OK 471 B IP
Hash ff6d50919e56aed75c47feb45ee2f2ec
98f558a4b2d4f3c271abc93d0b74ece4ad7a59ef
b1b6f0e78b5a1e2092cba6d71d0d5a918066c0486176cef0a19f51e2d5a9962e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5923
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 04:05:21 GMT
Last-Modified: Thu, 22 Sep 2022 02:26:38 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
safetymethod.net/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/hammer.min.js?ver=17.9
200 OK 7.9 kB URL HTTP/1.1 safetymethod.net/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/hammer.min.js?ver=17.9
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (19579)
Hash 92049a2b3c1b994cb7d3c001bedd7159
29678903f8762326c126bee9423f1aa7e4003b32
226c717b5d7e987ae2f5cabe35397fbd00eada1c8b12a3db527767857b982a93
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/hammer.min.js?ver=17.9 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 10:02:24 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7949
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: application/javascript
safetymethod.net/wp-content/plugins/slider-revolution/public/assets/js/rbtools.min.js?ver=6.0
200 OK 57 kB URL HTTP/1.1 safetymethod.net/wp-content/plugins/slider-revolution/public/assets/js/rbtools.min.js?ver=6.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (54175), with CRLF line terminators
Hash be6ee73c11c8ba997f3e209cb4c03014
422cf8ee9c978a0310c6430356199a4a37a76d29
c85d88d44911dd351df34c36f23d5196f1975a85921191b98d0b18eeb0cc4ec3
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/slider-revolution/public/assets/js/rbtools.min.js?ver=6.0 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 10:02:40 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
safetymethod.net/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/jquery.hammer.min.js?ver=17.9
200 OK 414 B URL HTTP/1.1 safetymethod.net/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/jquery.hammer.min.js?ver=17.9
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 5e969a4415897775483f015c0c15e0fc
3d51a7a1ff14eb2250d296424d5454391f8471cf
5ead375701abdfb5ddbf68acf5911474320cfe5cda2c30d5edd46d3658de1c24
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/jquery.hammer.min.js?ver=17.9 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 10:02:24 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 414
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: application/javascript
safetymethod.net/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/picker.date.js?ver=17.9
200 OK 5.0 kB URL HTTP/1.1 safetymethod.net/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/picker.date.js?ver=17.9
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (12692)
Hash cc88fe383d95877e74d5d1eed9833745
45f2742d4790a3590f8b326584b8b4f98a66fe1b
9eaf95d5a219bf3d40854dfd8403cd45eea9108dcac867e2a1033840784be7c6
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/picker.date.js?ver=17.9 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 10:02:24 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4972
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: application/javascript
safetymethod.net/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/intlTelInput.min.js?ver=17.9
200 OK 11 kB URL HTTP/1.1 safetymethod.net/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/intlTelInput.min.js?ver=17.9
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (22399)
Hash e6a20115dd84d8cfa912833ffa93d550
ee40e2ff9bf131a7594bbc1a04b2fe912a5ade33
6489bc93c2645294631b91e78632a87f4f078b1c9b6ae58960cf150219df54ea
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/intlTelInput.min.js?ver=17.9 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 10:02:24 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 10582
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: application/javascript
safetymethod.net/wp-content/plugins/slider-revolution/public/assets/js/rs6.min.js?ver=6.2.2
200 OK 98 kB URL HTTP/1.1 safetymethod.net/wp-content/plugins/slider-revolution/public/assets/js/rs6.min.js?ver=6.2.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (63491)
Hash f3de7f6a070ee163c3c05ca6960e31f3
20f25596dbe711c4c578b7fa23877441f3217dde
7e553e7c2b17e888e579993f2f126597bb32d241e96d62f35ea6cd35cdcfd999
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/slider-revolution/public/assets/js/rs6.min.js?ver=6.2.2 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 10:02:40 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
safetymethod.net/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/bookly.min.js?ver=17.9
200 OK 21 kB URL HTTP/1.1 safetymethod.net/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/bookly.min.js?ver=17.9
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (58408)
Hash 64df0576b36277b5942a913d8efce542
eb7af5ffd6609cd85b9b22bf460295484849047e
2f66b52b36793cc7adae1187e8144c64874b7012bbf46fa22cb8146c99bbad70
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/bookly.min.js?ver=17.9 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 10:02:24 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
safetymethod.net/wp-includes/js/wp-emoji-release.min.js?ver=5.8.5
200 OK 5.2 kB URL HTTP/1.1 safetymethod.net/wp-includes/js/wp-emoji-release.min.js?ver=5.8.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (15224)
Hash 00af0ddf324f69fcb25f0d2e5d08910a
df0379ab0e1b2902957c8aba77f89d88e1239b59
f0a06ed3b8d3917b358def04d87668001cd1c6da31a5cb4bb452313feb64a2a7
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.8.5 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Wed, 08 Sep 2021 11:36:50 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5243
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: application/javascript
safetymethod.net/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.7
409 Conflict 83 B URL HTTP/1.1 safetymethod.net/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.7
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.7 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 409 Conflict
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Content-Length: 83
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 1zjZ6tnpDj8TrtlxrzAjQA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: b8DvCwekujpoFF/FSMlxiIkAiS8=
safetymethod.net/wp-content/themes/cleanco/assets/vendors/selectize/js/selectize.min.js
200 OK 20 kB URL HTTP/1.1 safetymethod.net/wp-content/themes/cleanco/assets/vendors/selectize/js/selectize.min.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (32007)
Hash 686775259e6b3d641ead778b9f8ec267
12e0340f259d5b7e065c42878208dda119b25e9a
6c694d37b1cccb5d8b62ec82da386851bb6fa5811e267aa2e320a2cd56e984f0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/cleanco/assets/vendors/selectize/js/selectize.min.js HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 10:02:00 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
safetymethod.net/wp-content/themes/cleanco/assets/vendors/selectize/js/dropdown.js
200 OK 327 B URL HTTP/1.1 safetymethod.net/wp-content/themes/cleanco/assets/vendors/selectize/js/dropdown.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 5cd9ca84ba0ef089a3305d7327132f82
2fbd5f3422b0f0511346de0261d108c011365594
2c3ffb08de63fff6e496a92b5911a6b921329506e134ab0a6055af6be1578de5
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/cleanco/assets/vendors/selectize/js/dropdown.js HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 10:02:00 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 327
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: application/javascript
safetymethod.net/wp-content/themes/cleanco/assets/vendors/selectize/js/dropdownhover.js
200 OK 416 B URL HTTP/1.1 safetymethod.net/wp-content/themes/cleanco/assets/vendors/selectize/js/dropdownhover.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 05d34f354bc2693f25f7bc8f0eca6434
524e9ce2b13f7e5baffa9ef890810a48f995db5e
285bb0e43565bb41483510894c6d19c406f29930162b59e06505d69e6bca00dd
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/cleanco/assets/vendors/selectize/js/dropdownhover.js HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 10:02:00 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 416
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: application/javascript
safetymethod.net/wp-content/themes/cleanco/assets/vendors/headroom/headroom.min.js
200 OK 1.8 kB URL HTTP/1.1 safetymethod.net/wp-content/themes/cleanco/assets/vendors/headroom/headroom.min.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (5172)
Hash 63e475fe05bacc175406750785bbf869
c237649b4db2de92c8928ac37c2462be69787380
97676be4d21a49877789bdb70a22430a4384394b82a7255c6719c405c59d3e5d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/cleanco/assets/vendors/headroom/headroom.min.js HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 10:02:00 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1803
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: application/javascript
safetymethod.net/wp-content/themes/cleanco/assets/vendors/rellax/rellax.min.js
200 OK 1.4 kB URL HTTP/1.1 safetymethod.net/wp-content/themes/cleanco/assets/vendors/rellax/rellax.min.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (3241)
Hash 531f28a76708679957b0f24fb751606e
42ef20658168ee343d644a0a2a2ceea8770fe294
8416eefaa341114426fbcc980176eab3bebceed5c535c583f7f866b85559c903
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/cleanco/assets/vendors/rellax/rellax.min.js HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 10:02:00 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1403
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5149084af9bb01e5471e0be93a009ab0
1aaae44973461346130015cba0c36e9d1b5b77f2
db8a390c5bb50072d57429a45c470496139deb98e04b175f45600e5e4b2ac884
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 04:05:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5149084af9bb01e5471e0be93a009ab0
1aaae44973461346130015cba0c36e9d1b5b77f2
db8a390c5bb50072d57429a45c470496139deb98e04b175f45600e5e4b2ac884
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 04:05:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Hash de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://safetymethod.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 17:10:21 GMT
expires: Wed, 20 Sep 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 125700
last-modified: Tue, 26 Apr 2022 15:56:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Hash ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://safetymethod.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Sep 2022 16:40:18 GMT
expires: Fri, 15 Sep 2023 16:40:18 GMT
cache-control: public, max-age=31536000
age: 559503
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPGQ.woff2
200 OK 22 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPGQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22504, version 1.0\012- data
Hash 1c6c65523675abc6fcd78e804325bd77
898d9808304dc157f5dcb18ca169ec6e2b96b3d7
08664859baab5ed98f0bf818ed77e38464ff1826dc6406d5ecbd651409afbd92
GET /s/lato/v23/S6u9w4BMUTPHh50XSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://safetymethod.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22504
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 17:15:31 GMT
expires: Wed, 20 Sep 2023 17:15:31 GMT
cache-control: public, max-age=31536000
age: 125390
last-modified: Tue, 26 Apr 2022 16:04:16 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHjxsAXC-q.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHjxsAXC-q.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 24408, version 1.0\012- data
Hash efee2d080d7bebdd2e0aeb2e030813a0
f8d38f9f9584e48c2e469877ebd94232265585f1
bca1d88ada544d9c80872d4da27133fab6d347361fa26e932b47ec9559088fd0
GET /s/lato/v23/S6u8w4BMUTPHjxsAXC-q.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://safetymethod.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 24408
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Sep 2022 20:02:00 GMT
expires: Tue, 19 Sep 2023 20:02:00 GMT
cache-control: public, max-age=31536000
age: 201801
last-modified: Tue, 26 Apr 2022 15:50:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://safetymethod.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 17:10:21 GMT
expires: Wed, 20 Sep 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 125700
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5149084af9bb01e5471e0be93a009ab0
1aaae44973461346130015cba0c36e9d1b5b77f2
db8a390c5bb50072d57429a45c470496139deb98e04b175f45600e5e4b2ac884
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 04:05:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
safetymethod.net/wp-content/themes/cleanco/assets/js/bootstrap.min.js
200 OK 20 kB URL HTTP/1.1 safetymethod.net/wp-content/themes/cleanco/assets/js/bootstrap.min.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (48664)
Hash 41c54b1bd6691f6bb34afdc5e4272b52
b4333fd2b2c3ba7b2c38af182b3daf4231d69df8
43d6b75b97bf0636c69ea8c48e16dafefe3c602428b22fb4f11384eae7234b2d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/cleanco/assets/js/bootstrap.min.js HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 10:02:00 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
safetymethod.net/wp-content/themes/cleanco/assets/js/theme.min.js?ver=3.1.0
200 OK 913 B URL HTTP/1.1 safetymethod.net/wp-content/themes/cleanco/assets/js/theme.min.js?ver=3.1.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2291)
Hash c723cd4a28f6fedcfdde14724623487f
edf43c2422a4c81e504d1d7249e6f8977a885dde
75f402a608990c3171292727d81b83a00cc82cac0a297b04a8fb152609ebc518
GET /wp-content/themes/cleanco/assets/js/theme.min.js?ver=3.1.0 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 10:02:00 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 913
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: application/javascript
safetymethod.net/wp-content/plugins/kingcomposer/assets/frontend/js/kingcomposer.min.js?ver=2.9.5
200 OK 8.2 kB URL HTTP/1.1 safetymethod.net/wp-content/plugins/kingcomposer/assets/frontend/js/kingcomposer.min.js?ver=2.9.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (17655)
Hash 11d4c4aee8377d4057c00cc8097f0db5
2482d8f9b4ef0c9a9fd1f8cc657f80339447b49f
bfaeec0efe3b3b01f4a216159d6ce191c8068c628046fa89002be14087f04600
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/kingcomposer/assets/frontend/js/kingcomposer.min.js?ver=2.9.5 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Sat, 11 Jul 2020 14:06:28 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8231
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: application/javascript
safetymethod.net/wp-includes/js/wp-embed.min.js?ver=5.8.5
200 OK 777 B URL HTTP/1.1 safetymethod.net/wp-includes/js/wp-embed.min.js?ver=5.8.5
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1391)
Hash 06ece4d01ee88297957c9f4cdcaa4df5
2b3321654a8ead1e1493eac9b5f1fdfb65e2037f
0b17eb6ab02e69f50ac52ca157375bd69853ae4f4796eb48a35eb4a12fc7af8b
GET /wp-includes/js/wp-embed.min.js?ver=5.8.5 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Wed, 08 Sep 2021 11:36:50 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 777
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: application/javascript
safetymethod.net/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.7
409 Conflict 83 B URL HTTP/1.1 safetymethod.net/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.7
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.7 HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 409 Conflict
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Content-Length: 83
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
safetymethod.net/wp-content/themes/cleanco/assets/vendors/rellax/banner.js
200 OK 219 B URL HTTP/1.1 safetymethod.net/wp-content/themes/cleanco/assets/vendors/rellax/banner.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 15fa195b874601bd06a82be351155022
c4f16dcada1a2b03fb26fb7533e760225b14049a
21379abc0a5f13eadc244e0ae5fe57911e9abd50706e54dc10fc41c1976eda76
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/cleanco/assets/vendors/rellax/banner.js HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 10:02:00 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 219
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: application/javascript
safetymethod.net/wp-content/plugins/kingcomposer/assets/css/fonts/Simple-Line-Icons.ttf
200 OK 53 kB URL HTTP/1.1 safetymethod.net/wp-content/plugins/kingcomposer/assets/css/fonts/Simple-Line-Icons.ttf
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type TrueType Font data, 11 tables, 1st "OS/2", 18 names, Macintosh, type 1 string, simple-line-icons\012- data
Hash b2892aa62b0fb2c21c8d7700e2ef6e56
acb3e2b0f5ba11b8e4e43b7f73223ec048054861
937e59152189ecedb8688efcd8b927fc40d43b5c5225a05a25f4cf537ad8ca7c
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/kingcomposer/assets/css/fonts/Simple-Line-Icons.ttf HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-content/plugins/kingcomposer/assets/css/icons.css?ver=2.9.5
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Sat, 11 Jul 2020 14:06:28 GMT
Accept-Ranges: bytes
Content-Length: 53368
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Content-Type: font/ttf
safetymethod.net/wp-content/uploads/2020/05/usa.png
200 OK 1.5 kB URL HTTP/1.1 safetymethod.net/wp-content/uploads/2020/05/usa.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 57 x 32, 8-bit/color RGB, non-interlaced\012- data
Hash 4d8f6d04b4796ca93dae7d835597649e
0bf142e62de623f0b34d8ec37ef7f9545b0571c7
6733648e810028f57053d538652f9ef3c8bf701238476a9f1f4635e456cdae3a
GET /wp-content/uploads/2020/05/usa.png HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Thu, 14 May 2020 08:47:13 GMT
Accept-Ranges: bytes
Content-Length: 1535
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: image/png
safetymethod.net/wp-content/themes/cleanco/assets/fonts/uf-font-v102.ttf?zfb0uc
200 OK 20 kB URL HTTP/1.1 safetymethod.net/wp-content/themes/cleanco/assets/fonts/uf-font-v102.ttf?zfb0uc
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, uf-font-v102\012- data
Hash f6739488fd39c681522ee46c819229a6
4a2f4c808d24663d282032ebe44d7ecb335453d5
98848ac1f0635f2376a2d763b4695c7e4a22786d5b4a5524bff5888b2a4be4a0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/cleanco/assets/fonts/uf-font-v102.ttf?zfb0uc HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-content/themes/cleanco/assets/css/theme.min.css?ver=3.1.0
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 10:02:00 GMT
Accept-Ranges: bytes
Content-Length: 20152
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: font/ttf
safetymethod.net/wp-content/uploads/2020/05/oman.png
200 OK 363 B URL HTTP/1.1 safetymethod.net/wp-content/uploads/2020/05/oman.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 57 x 32, 8-bit colormap, non-interlaced\012- data
Hash e4c7a02f27d9cf80a60294d6af4b0221
d65e899b832ec5dd10374c338df1385c70d10500
e3a7eb0acccb97657d4f9b82e382c693b89db08fe1a9dcfcc78758aee19f282f
GET /wp-content/uploads/2020/05/oman.png HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Thu, 14 May 2020 08:47:11 GMT
Accept-Ranges: bytes
Content-Length: 363
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Content-Type: image/png
safetymethod.net/wp-content/uploads/2020/04/cropped-safetymethod-1-32x32.png
200 OK 1.9 kB URL HTTP/1.1 safetymethod.net/wp-content/uploads/2020/04/cropped-safetymethod-1-32x32.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 452e22f8e34e5365b892025bf48f693d
b8e8522d9c72a01510238d5dedcf5df769f0ce2b
60006ea8b2d5890aadc985ff0a783a37cf192466448ad0a338cc04cce4b027ee
GET /wp-content/uploads/2020/04/cropped-safetymethod-1-32x32.png HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:22 GMT
Server: Apache
Last-Modified: Fri, 24 Apr 2020 04:26:37 GMT
Accept-Ranges: bytes
Content-Length: 1935
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Content-Type: image/png
safetymethod.net/wp-content/uploads/2020/04/cropped-safetymethod-1-192x192.png
200 OK 29 kB URL HTTP/1.1 safetymethod.net/wp-content/uploads/2020/04/cropped-safetymethod-1-192x192.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 3b57267662942195569392a3d2f29d5a
45197856434360a633f8217ac93a35307fc3674c
22e3123abd8862b0f7bb1581afa43b44329f1b1c892358d414029d932738d494
GET /wp-content/uploads/2020/04/cropped-safetymethod-1-192x192.png HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:22 GMT
Server: Apache
Last-Modified: Fri, 24 Apr 2020 04:26:37 GMT
Accept-Ranges: bytes
Content-Length: 29028
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Content-Type: image/png
safetymethod.net/wp-content/uploads/2020/05/cropped-safety-logo.png
200 OK 74 kB URL HTTP/1.1 safetymethod.net/wp-content/uploads/2020/05/cropped-safety-logo.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 337 x 328, 8-bit/color RGBA, non-interlaced\012- data
Hash 6fba06c84419b2adc1452d52a48491e9
8ce17652c8aa4c07748be774f7d26ef13a7e6ee2
e358cedb0c2cf9659c2e77eab4c45a8e8b8093d1309d6be87b93ca309260095c
GET /wp-content/uploads/2020/05/cropped-safety-logo.png HTTP/1.1
Host: safetymethod.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://safetymethod.net/wp-includes/js/crop/bofa-18237847958745769865739/yahoologin/login.php
HTTP/1.1 200 OK
Date: Thu, 22 Sep 2022 04:05:21 GMT
Server: Apache
Last-Modified: Fri, 08 May 2020 09:59:00 GMT
Accept-Ranges: bytes
Content-Length: 74542
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: image/png
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6986
Expires: Thu, 22 Sep 2022 06:01:48 GMT
Date: Thu, 22 Sep 2022 04:05:22 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6986
Expires: Thu, 22 Sep 2022 06:01:48 GMT
Date: Thu, 22 Sep 2022 04:05:22 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6986
Expires: Thu, 22 Sep 2022 06:01:48 GMT
Date: Thu, 22 Sep 2022 04:05:22 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6986
Expires: Thu, 22 Sep 2022 06:01:48 GMT
Date: Thu, 22 Sep 2022 04:05:22 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6986
Expires: Thu, 22 Sep 2022 06:01:48 GMT
Date: Thu, 22 Sep 2022 04:05:22 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0f33332-2080-459e-ab54-a452b2278994.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0f33332-2080-459e-ab54-a452b2278994.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 888247c1153f8770b880395734749107
7c27c02029eb49e726a076679be2c793da696e45
515852e0d38cdaf86bce45fa5e0df453d08ca36cf6ecfa0c4b868c2143afe333
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0f33332-2080-459e-ab54-a452b2278994.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8748
x-amzn-requestid: 83c28267-4d10-476d-8b11-08b48b046985
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YzG6CGtroAMFyqA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632ab840-1167c5285b6837d311bfe2a9;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 07:07:44 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: xo0ilY8z0C3rDISFOM5EixEK7HAelSut4hgNNwGYAVQIfPP8C6pUCg==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 07:08:33 GMT
age: 75409
etag: "7c27c02029eb49e726a076679be2c793da696e45"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f739db-1c27-4929-8aff-997c0f66b2ed.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f739db-1c27-4929-8aff-997c0f66b2ed.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a5edcd9aee78a6cacc9241b47cbce598
f95b843029e84dbb188427a8c2ff8c9f32740465
6a56c3d0eb1d641e565d3d7d31b42be03bdad30beb20b994ffc9a6f2aaceee1e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f739db-1c27-4929-8aff-997c0f66b2ed.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5650
x-amzn-requestid: 6badb939-afe6-4432-a0ad-3a2b7f85a7e0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1G-rFbuIAMFTeA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b852a-3e9ac3331503b41d5e734a01;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:42:02 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: PeFdtN-ow0NE39XAV9pCHX9VSno5L9z56rg-T6Bd1fks7f1ESDDzWA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 21:48:27 GMT
etag: "f95b843029e84dbb188427a8c2ff8c9f32740465"
content-type: image/jpeg
age: 22615
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F25c92e76-c63f-4c49-a4f1-56d030e97e10.jpeg
200 OK 3.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F25c92e76-c63f-4c49-a4f1-56d030e97e10.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 37687ec8382ef481897d1e65bf14010a
6ce495268093b256875ec1c4d6a05fc1f3d25446
24cc6f8715bb5b0b8a27a3f40831f9fed6cc4c5a882622633e1865dca6e50531
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F25c92e76-c63f-4c49-a4f1-56d030e97e10.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3372
x-amzn-requestid: 10d24c22-0b3d-402b-9a10-6cbfc9a699a3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YzG5QHJRoAMFaPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632ab83b-37ba740c7eba56b30e2ea528;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 07:07:39 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: VM9vtBQFJEEX58Q_SYVC7L18jDp-kxDCIk1QMjyaaLc6DNUSJ9uivg==
via: 1.1 de8fc80b494d3d381f7e006918dcc588.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 07:08:36 GMT
age: 75406
etag: "6ce495268093b256875ec1c4d6a05fc1f3d25446"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dee9427-1c1b-4ddc-9f89-8c6e254bd0f1.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dee9427-1c1b-4ddc-9f89-8c6e254bd0f1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 62818de3c50f957b2e5680851a1768c9
80e48c9ae48c89598780736b089c98e22d58df9a
16f2c2d23e8641a3f297a175730343d11120a228c0fe846c0fdf1e39212c522c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dee9427-1c1b-4ddc-9f89-8c6e254bd0f1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8549
x-amzn-requestid: 6d44626b-16c6-4f19-ae52-d5350065b390
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1GwPHJJoAMFdfA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b84ce-46ebc35612eb7a4473b36189;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:40:30 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: UoQTXSP0LgR4LwELp2Avm27hUekfO9TU9yfvNbIlmUtB-FrU9MGRbg==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 21:48:19 GMT
age: 22623
etag: "80e48c9ae48c89598780736b089c98e22d58df9a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60ffb31d-d07d-4e81-9477-522f011ae13e.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60ffb31d-d07d-4e81-9477-522f011ae13e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a504981ee10d8341b64f19001464ae8a
56f228d7358ba9deef000f53214dc7c1dc358109
0ea3b6ed12f3adf9d56e7d9b61f284d28107d99f28ee4e66b4c078a9a1a0cbee
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60ffb31d-d07d-4e81-9477-522f011ae13e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8861
x-amzn-requestid: 873e88ab-7afc-4b14-b428-d90ec2079741
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YO2wuE0AoAMF7Gw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631c3804-0d25ab397a16c78907914e23;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 07:08:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: E3CxTY9UbUKfKS16_Os-lp6w8b_bIIbWqcIzaGOOc0iwrSOzj6NNqQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 03:25:37 GMT
age: 2385
etag: "56f228d7358ba9deef000f53214dc7c1dc358109"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36673ded-0a09-4aa6-b4c8-c3e3be3b0e4a.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36673ded-0a09-4aa6-b4c8-c3e3be3b0e4a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2b5c8545323317489392c1f56707078e
fcc0cdd72a5c97f13b0c59e5b39e06a6add18a9c
c79efda3b792026233b13c07a2c69e3dff0fdbccfb081c768ffc7e52aa744668
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36673ded-0a09-4aa6-b4c8-c3e3be3b0e4a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8058
x-amzn-requestid: 78d8a4f9-b85f-4055-a17e-90ccd231e462
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YshUOE7jIAMFm-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632815b4-7d0717045b5fd71d5a41ccdb;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 07:09:40 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Y-EsbrGZSY3WtqlLDDm4MLHjqeLlrzjqCRsSt7r_jSXr0LswkHP_yQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 13:08:32 GMT
age: 53810
etag: "fcc0cdd72a5c97f13b0c59e5b39e06a6add18a9c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Lato%3A100%2C100i%2C300%2C300i%2C400%2C400i%2C700%2C700i%2C900%2C900i%7CMontserrat%3A100%2C100i%2C200%2C200i%2C300%2C300i%2C400%2C400i%2C500%2C500i%2C600%2C600i%2C700%2C700i%2C800%2C800i%2C900%2C900i%7CMerriweather%3A300%2C300i%2C400%2C400i%2C700%2C700i%2C900%2C900i&ver=5.8.5
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Lato%3A100%2C100i%2C300%2C300i%2C400%2C400i%2C700%2C700i%2C900%2C900i%7CMontserrat%3A100%2C100i%2C200%2C200i%2C300%2C300i%2C400%2C400i%2C500%2C500i%2C600%2C600i%2C700%2C700i%2C800%2C800i%2C900%2C900i%7CMerriweather%3A300%2C300i%2C400%2C400i%2C700%2C700i%2C900%2C900i&ver=5.8.5
IP
GET /css?family=Lato%3A100%2C100i%2C300%2C300i%2C400%2C400i%2C700%2C700i%2C900%2C900i%7CMontserrat%3A100%2C100i%2C200%2C200i%2C300%2C300i%2C400%2C400i%2C500%2C500i%2C600%2C600i%2C700%2C700i%2C800%2C800i%2C900%2C900i%7CMerriweather%3A300%2C300i%2C400%2C400i%2C700%2C700i%2C900%2C900i&ver=5.8.5 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://safetymethod.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 22 Sep 2022 04:05:20 GMT
date: Thu, 22 Sep 2022 04:05:20 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
108.167.183.254
23.36.76.226
93.184.220.29
0.0.0.0