r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d27590a1d3cbe1e9632b8ae92aaae3f4
202b34e8a0c3b88c8826fd56c6227b34f2cd6f46
6bcfa518476658128c1fb4ea2435c4e58531454cf97138dce7ece9def589aead
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6BCFA518476658128C1FB4EA2435C4E58531454CF97138DCE7ECE9DEF589AEAD"
Last-Modified: Wed, 16 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11582
Expires: Fri, 18 Nov 2022 03:54:44 GMT
Date: Fri, 18 Nov 2022 00:41:42 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 4e84f361a3c81abc5d665a5f441452a8
7aa4b9cb0a7ba1daa514dbb48fe8e74fdf09b60d
04d64920cc8e6b096841938b0c1140889f5d7a04eabd440934a31f1c7ab90352
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "04D64920CC8E6B096841938B0C1140889F5D7A04EABD440934A31F1C7AB90352"
Last-Modified: Wed, 16 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17861
Expires: Fri, 18 Nov 2022 05:39:23 GMT
Date: Fri, 18 Nov 2022 00:41:42 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash be1be806b5dca7facbb45a6c3db44652
7ae9380a2f3eca959fe6ff6b3832a17cffd12cf4
1f3338058f8e9cae5c9fdd733c74564312726b01c6efdcd628d851d0c99876b0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6167
Cache-Control: max-age=127948
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 00:41:42 GMT
Etag: "63760d7b-1d7"
Expires: Sat, 19 Nov 2022 12:14:10 GMT
Last-Modified: Thu, 17 Nov 2022 10:31:23 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: XUW2uAKy/W+ZYK/5govxcs41Txy/8DfxyzjVBAbv8OydvXuz9GjOXFfND1E62GxpKa9Fz6wWYdI=
x-amz-request-id: VE254R0GW7RF988J
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 17 Nov 2022 23:52:40 GMT
age: 2942
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 17 Nov 2022 23:44:57 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3405
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 00:41:42 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 18 Nov 2022 00:25:01 GMT
cache-control: public,max-age=3600
age: 1001
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
polmon.com/
162.241.85.121200 OK 48 kB IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (9381)
Hash e4dfa5fc32fca843aa77753d245e5190
335206235d4cd6e0ebc2f1fae8e98543da922381
fc36fd4ceb6b52ce9ffd6fc5be64821aab1a09bd39140b6c30c79ab2a455e119
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET / HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:42 GMT
Server: Apache
Link: <http://polmon.com/wp-json/>; rel="https://api.w.org/", <http://polmon.com/wp-json/wp/v2/pages/998>; rel="alternate"; type="application/json", <http://polmon.com/>; rel=shortlink
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
polmon.com/wp-content/plugins/elementor-sm-widgets/assets/fonts/icons.css?ver=1.0
162.241.85.121200 OK 8.4 kB URL HTTP/1.1 polmon.com/wp-content/plugins/elementor-sm-widgets/assets/fonts/icons.css?ver=1.0
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash a2610639874b1fdc00c874f2dfcbf1ee
f70f51d72998e88b1207e3c0b40c93a4e7d27eac
52acd0d656c516c899ba805a5e5b755d9ab13ddd411270af732926322955d8e4
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor-sm-widgets/assets/fonts/icons.css?ver=1.0 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:42 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 21 Sep 2022 05:20:22 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8380
Keep-Alive: timeout=5, max=75
Content-Type: text/css
polmon.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.8.1
162.241.85.121200 OK 3.0 kB URL HTTP/1.1 polmon.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.8.1
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (10019)
Hash c2b5af6052f630a96e450e5e2a3cea52
00ca76a8828a1bbec1534eb10786804fd36492f2
58f6cc2d4fa3e528622102975fb62949dc0170bd47b588a67318d18552a57d59
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.8.1 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:43 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 11:21:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2997
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
polmon.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.7.5
162.241.85.121200 OK 3.0 kB URL HTTP/1.1 polmon.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.7.5
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (10435), with no line terminators
Hash a6099ee677b6d930b6b878cf0cb08422
a2eb69454196d4250d624d25aaec587e97686642
755acd6dc98e63baff6d8b105b1bcaf63b79f935381fb3f32a79dace7faae0ac
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.7.5 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:43 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 15 Nov 2022 05:37:49 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2985
Keep-Alive: timeout=5, max=75
Content-Type: text/css
polmon.com/wp-includes/css/classic-themes.min.css?ver=1
162.241.85.121200 OK 189 B URL HTTP/1.1 polmon.com/wp-includes/css/classic-themes.min.css?ver=1
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash 5a18e16eb01cbaa862eb32e6b77bedb2
3abf9b913cc9f558f02cba7c9b822f8d1812cb96
d2b5af913332941d5ae7786d1fa70e0d009315c4ede6ad5b80d0f663bb54521f
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:43 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 15 Nov 2022 05:34:50 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 189
Keep-Alive: timeout=5, max=75
Content-Type: text/css
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 9e20a99f56d244cd43bd10781eb8e1d8
000f6ecfc6a9412d2e062028ee553801f573fd92
17cae43cd454fc69beff944925994d2810f859261cd40bfa58d573163a40b23c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 00:41:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash c10055ce87434f700ff8b20e3be1f919
477b3c9f1da0c464282bb54572737e76b6e346da
4d78eb296876122e5ff40fcd7667adf1bf8a4b1ee4c8203c88a63ce8d7910a57
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2268
Cache-Control: max-age=118980
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 00:41:43 GMT
Etag: "6375f9af-1d7"
Expires: Sat, 19 Nov 2022 09:44:43 GMT
Last-Modified: Thu, 17 Nov 2022 09:06:55 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 9e20a99f56d244cd43bd10781eb8e1d8
000f6ecfc6a9412d2e062028ee553801f573fd92
17cae43cd454fc69beff944925994d2810f859261cd40bfa58d573163a40b23c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 00:41:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
polmon.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=7.1.0
162.241.85.121200 OK 3.1 kB URL HTTP/1.1 polmon.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=7.1.0
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (17809), with no line terminators
Hash 97f3e7860b3e0d99f3c0327b0045363a
885af5049143e765b7fd0f3a0a860613b05d12d1
ff05d291dd422f8bee80e816eb1480c67fb3e0d6071bebd8f04c86de87a70080
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=7.1.0 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:43 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 05:37:49 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3086
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/css
polmon.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
162.241.85.121200 OK 18 kB URL HTTP/1.1 polmon.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (47826)
Hash 9415c9562591af7a582c29139621505f
0b12eecf36a48b871a3198550f4f65bb4a6d9b1b
06c70d3232c2ae3ed2aa259eb7a1beb329b654926813935fffa8902cd5ebaa4a
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:43 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 15 Nov 2022 20:44:14 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked
Content-Type: text/css
polmon.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=7.1.0
162.241.85.121200 OK 13 kB URL HTTP/1.1 polmon.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=7.1.0
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (62781), with no line terminators
Hash 506114e76608d2cb13e2ae2bcf067c7e
7ea05a51a05343a1b32e7c886add36971a788133
0b16be7c9d35f598d1cb5b6c9a42088aac3245180430e6583984f03b1ff16bd6
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=7.1.0 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:43 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 05:37:49 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 13258
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
polmon.com/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.13
162.241.85.121200 OK 323 B URL HTTP/1.1 polmon.com/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.13
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash b24c24b7da3ffeed6ae8ade102a4d317
c4445b3977ce704b927508108e100213eea67a3c
5421ad49b70f379553eaceec744d753e74d4b065966c08aa7c7dd949553ca9a8
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.13 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:43 GMT
Server: Apache
Last-Modified: Fri, 07 Oct 2022 07:55:23 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 323
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
polmon.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4
162.241.85.121409 Conflict 83 B URL HTTP/1.1 polmon.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 409 Conflict
Date: Fri, 18 Nov 2022 00:41:43 GMT
Server: Apache
Content-Length: 83
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
push.services.mozilla.com/
52.43.253.52101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.43.253.52:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: b0DLEAY4vGUJiLIKDmTymQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: y3FRDr0JZUl83d5hTfHagBasnaY=
polmon.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.7.5
162.241.85.121200 OK 50 kB URL HTTP/1.1 polmon.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.7.5
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (65527), with no line terminators
Hash 5804b0e0c7c88d6c00e4fd0cb5d7cd05
81a6abb3403b3852796051bf82f1cbc6411d45cb
e79c03ed91601cbe74b8fe9442ce25ec0348c03bfee0f0fe5612f164ce164bc1
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.7.5 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:43 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 15 Nov 2022 05:37:49 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked
Content-Type: text/css
polmon.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0
162.241.85.121200 OK 4.0 kB URL HTTP/1.1 polmon.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (19233)
Hash 2701214b028ad24fa347df8335b36d12
156bc8a7ad2657f00881890637f07c6052636499
9a6e62615ceeec7a9763e4f9614e4715d04fd87873b23db2b3ead06c996cad27
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:43 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 11:21:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4008
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: text/css
polmon.com/wp-content/uploads/elementor/css/post-3352.css?ver=1668511318
162.241.85.121200 OK 359 B URL HTTP/1.1 polmon.com/wp-content/uploads/elementor/css/post-3352.css?ver=1668511318
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1102), with no line terminators
Hash 1f3b2db80b4cf1e1635b9623c5919f78
64e3442a60bb3916a4678a6379686a5df882bfc9
0a48f19aeb807df096a4d52377925e8db8e5f0aa9f09182bf86c6f3ad807ba48
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/uploads/elementor/css/post-3352.css?ver=1668511318 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:43 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 11:21:58 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 359
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/css
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 9e20a99f56d244cd43bd10781eb8e1d8
000f6ecfc6a9412d2e062028ee553801f573fd92
17cae43cd454fc69beff944925994d2810f859261cd40bfa58d573163a40b23c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 00:41:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
polmon.com/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.8.1
162.241.85.121200 OK 21 kB URL HTTP/1.1 polmon.com/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.8.1
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65497)
Hash 620fc540133dd212d293bb63ea095fe7
a53886c8b70c694c68ac12f31ea3a901ae3ebbce
7807c21f8c6cfe2a058600533ddd52e24739dc92bb34d0d5f7d085bce4b06f1e
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.8.1 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:43 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 11:21:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css
polmon.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.8.1
162.241.85.121200 OK 13 kB URL HTTP/1.1 polmon.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.8.1
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (59158)
Hash e6b67e11736ae36a062b381717f2ea9f
a663a79bc8d42aa58bfea1351cc27e0d0b09c9b2
a07a94d36246d0b3e5b9b18e274e31995d0e23cda955babf5e350e91a879523d
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.8.1 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:43 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 11:21:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 12862
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/css
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 7d1cd7761a89aa94d9e7088e1986e041
d5676857f05bc0e87fdc0dad142ae25c69847133
5fef3d5055ef983e90144a6c00d49a724c4508f00a917f521c50ecc84b0ae962
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5FEF3D5055EF983E90144A6C00D49A724C4508F00A917F521C50ECC84B0AE962"
Last-Modified: Wed, 16 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 18 Nov 2022 06:41:43 GMT
Date: Fri, 18 Nov 2022 00:41:43 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9a4129f3a9bd90a5745e8662dd870847
accf926ad9bf77350a52dfa7124319dd4f9825fb
2edf1beb018df8ffd40d086c3e7ae5613628bdc9107ee7384488ad25d147db5d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2EDF1BEB018DF8FFD40D086C3E7AE5613628BDC9107EE7384488AD25D147DB5D"
Last-Modified: Thu, 17 Nov 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 18 Nov 2022 06:41:43 GMT
Date: Fri, 18 Nov 2022 00:41:43 GMT
Connection: keep-alive
polmon.com/wp-content/uploads/elementor/css/post-998.css?ver=1668514443
162.241.85.121200 OK 3.8 kB URL HTTP/1.1 polmon.com/wp-content/uploads/elementor/css/post-998.css?ver=1668514443
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (22786), with no line terminators
Hash 7095adf34c6c41a9fdff5c9057c2ad27
c476ba02e04996aaba3ed97edd19e8e6775ac966
f266cdeb2f3367e4fb34c3cfb79cfa3434312e405834b3620b03527124305383
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/elementor/css/post-998.css?ver=1668514443 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:43 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 12:14:03 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3763
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
polmon.com/wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.6.13
162.241.85.121200 OK 12 kB URL HTTP/1.1 polmon.com/wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.6.13
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (1646)
Hash e56098a703c5beb99abc9c3a870be594
76e54634e0628ab91310c760d619360151e26be1
0eb4438e57550f2c2a321d45a5cb1c92fb22d58f6dbcc9c189fc3bd1e4f78b8f
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.6.13 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:43 GMT
Server: Apache
Last-Modified: Fri, 07 Oct 2022 07:55:23 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11654
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: text/css
polmon.com/wp-content/uploads/elementor/css/post-78.css?ver=1668514373
162.241.85.121200 OK 2.4 kB URL HTTP/1.1 polmon.com/wp-content/uploads/elementor/css/post-78.css?ver=1668514373
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (7211)
Hash b9e6dc9f9173c261f40add1ce863fe64
d08043a4c19828004a63eea5515c71b4a1285020
b85b4280ae82d281bd8d801e0700021e0b168ce3909bac5b2de3060ab3e4e5bb
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/uploads/elementor/css/post-78.css?ver=1668514373 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:43 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 12:12:53 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2428
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: text/css
polmon.com/wp-content/uploads/elementor/css/post-103.css?ver=1668516042
162.241.85.121200 OK 815 B URL HTTP/1.1 polmon.com/wp-content/uploads/elementor/css/post-103.css?ver=1668516042
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (4275), with no line terminators
Hash 6d937e34c8f7f19fab9ee6c0108391d4
be4603323f982791834106199e41bb1c4f704441
3e18dbbba517354ca13bf16094761129d663364df66982662e806b01dc5df197
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/elementor/css/post-103.css?ver=1668516042 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:43 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 12:40:42 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 815
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/css
polmon.com/wp-content/plugins/stm-gdpr-compliance/assets/css/styles.css?ver=6.1.1
162.241.85.121200 OK 519 B URL HTTP/1.1 polmon.com/wp-content/plugins/stm-gdpr-compliance/assets/css/styles.css?ver=6.1.1
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1249), with no line terminators
Hash 6adbc353f27dddf86cc97d4fd9c14d1f
a6f3131c67c00659a15e004366dee263cceb50b9
edc30edec7dc46c013efe6bb33c53df8372242ad2501fa2d1b5c39a5dcb19775
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/stm-gdpr-compliance/assets/css/styles.css?ver=6.1.1 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:43 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 05:20:23 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 519
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: text/css
polmon.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.8.1
162.241.85.121200 OK 4.4 kB URL HTTP/1.1 polmon.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.8.1
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (26516)
Hash fdd462f58aee3f9349eabdefb5ca0b57
bb6e017d5537630516ccb98952593690a8c69864
ca51806fcedbe90dd613c4c28673af8693381806a5cb3b43dce2ea4f43e8b314
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.8.1 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:43 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 15 Nov 2022 11:21:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4436
Keep-Alive: timeout=5, max=75
Content-Type: text/css
polmon.com/wp-content/plugins/elementor/assets/css/widget-icon-box.min.css
162.241.85.121200 OK 2.1 kB URL HTTP/2 polmon.com/wp-content/plugins/elementor/assets/css/widget-icon-box.min.css
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (12953)
Hash afd49e58c4f5d23d485f4c2a1e04f0d5
efe7075fa2d15af2f946dfc3710ac7aa3bdb8ea8
ea8792f072ff6047a9dd5e2af53e20d09abbf9f3d0c72189eab726d80d595197
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/css/widget-icon-box.min.css HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://polmon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 15 Nov 2022 11:21:45 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2093
content-type: text/css
date: Fri, 18 Nov 2022 00:41:43 GMT
server: Apache
X-Firefox-Spdy: h2
polmon.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css
162.241.85.121200 OK 1.7 kB URL HTTP/2 polmon.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (11736)
Hash 0c23e3daeced16658c7a35cf02adbdbb
49cb5407d71e1951893556e7db9cb1dcbc0ca50c
ef2f88a60b4e387b7c977bd1f61a6efda4376539b2eb786537115ec462e8761c
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/css/widget-icon-list.min.css HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://polmon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 15 Nov 2022 11:21:45 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1652
content-type: text/css
date: Fri, 18 Nov 2022 00:41:43 GMT
server: Apache
X-Firefox-Spdy: h2
polmon.com/wp-content/themes/manufacturer/fonts/themify-icons.css?ver=6.1.1
162.241.85.121200 OK 3.6 kB URL HTTP/1.1 polmon.com/wp-content/themes/manufacturer/fonts/themify-icons.css?ver=6.1.1
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash ced58631906fd6308e9399d6ee1d065b
b78879dd331b340444e8ed274257fda9611c967f
5bbd0432237016a6e82e672794dd787892e57cb96452b3f2e25afd0550f4b2ee
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/themes/manufacturer/fonts/themify-icons.css?ver=6.1.1 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:43 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 05:20:08 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3594
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: text/css
polmon.com/wp-content/themes/manufacturer/css/manufacturer_style.css?ver=1668732102
162.241.85.121200 OK 35 kB URL HTTP/1.1 polmon.com/wp-content/themes/manufacturer/css/manufacturer_style.css?ver=1668732102
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type assembler source, ASCII text, with very long lines (936)
Hash 55174a4eb25b19ff2f834e894c74b37f
6af5609947b51b283717e26db15ac3ab50c9db1e
33bba0f869e2f15f0f78a70e77eee66a932f0b92ab0d63a089e142dafe9cd9bf
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/themes/manufacturer/css/manufacturer_style.css?ver=1668732102 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:43 GMT
Server: Apache
Last-Modified: Fri, 28 Oct 2022 07:14:08 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css
polmon.com/wp-content/themes/manufacturer/css/responsive.css?ver=1668732102
162.241.85.121200 OK 3.9 kB URL HTTP/1.1 polmon.com/wp-content/themes/manufacturer/css/responsive.css?ver=1668732102
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash 3262ddf6cf57b278feb692f0e422d3f4
e03cfc087cccfff33798e701637647102d36be1d
6d31a2ad559800741c6663d9e425143e80b1924189a2d89bdd85b426b4301737
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/themes/manufacturer/css/responsive.css?ver=1668732102 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:43 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 12:36:55 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3872
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: text/css
polmon.com/wp-content/themes/manufacturer/style.css?ver=6.1.1
162.241.85.121200 OK 5.3 kB URL HTTP/1.1 polmon.com/wp-content/themes/manufacturer/style.css?ver=6.1.1
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash bcf018ecb978557e98b914ed1dc64797
58269915edcf7c5ea4b553ac1d57e75da06a92f3
ac0516eabe60f910790d449e1d35c0e15f6289bfa05b762cace96b7bc014aa6e
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/themes/manufacturer/style.css?ver=6.1.1 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:43 GMT
Server: Apache
Last-Modified: Fri, 28 Oct 2022 07:04:05 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5288
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: text/css
polmon.com/wp-includes/css/dashicons.min.css?ver=6.1.1
162.241.85.121200 OK 36 kB URL HTTP/1.1 polmon.com/wp-includes/css/dashicons.min.css?ver=6.1.1
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (58981)
Hash ff6c9e677e54008818f72708ab0f9382
32746d4ae1f8fbeccb280d16fee8fc192f403aeb
88d3e64209eb0f3fb5098328ddfcb0da5bd11711f144d811536674b2ed36b1f3
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-includes/css/dashicons.min.css?ver=6.1.1 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:43 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 05:20:06 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css
polmon.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.4.2
162.241.85.121200 OK 900 B URL HTTP/1.1 polmon.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.4.2
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (3432)
Hash 1e0ef5b4ebd931aecd01564980628978
e618b92e03a6c4bd4abffed22abb1e835c05a601
1deef467f6db854d82e8c6288086664c7cf60a41b18bb7216d63bb83061ba878
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.4.2 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:43 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 05:37:30 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 900
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/css
polmon.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3
162.241.85.121200 OK 13 kB URL HTTP/1.1 polmon.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (57726)
Hash dc63c0a8e2d5857cc7a00a4b5456dabb
ee29df5eb2a4bf3eb805b160551c1afd84b42599
035ef40b1dd3df1eefb2dd3c8c2096425727fb939b06f3aa0bc6ef91dafd5441
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:43 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 11:21:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 12577
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: text/css
polmon.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
162.241.85.121200 OK 308 B URL HTTP/1.1 polmon.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (489)
Hash 0a08469d24387f830bbaaa00b3c228ae
01f5dfeb8f93a32c9a8f66fe5940758109771fcd
3c7c29e5fc1193ff7ce24f72f77b2dc129e1a9434a97ef7b625f6f715531803c
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:43 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 11:21:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 308
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: text/css
polmon.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
162.241.85.121200 OK 309 B URL HTTP/1.1 polmon.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (483)
Hash 0ea43e394ddaae5fdb710dbbc8869e58
3b0c93adc80720236096201db5cc2751e703996d
85225fffa21a94bfd954393d7471069ab227b98fd8b51cb5ab4af5488168a34e
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:43 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 11:21:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 309
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: text/css
polmon.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3
162.241.85.121200 OK 308 B URL HTTP/1.1 polmon.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (491)
Hash 851fd514d412b7e854365f20a4227c8a
08bf47072f70af1816450cc85a5efb3b8f9114d2
a9449e3cc7c003e5ed6b93bae7b0bba3e4f1713c52214f41d3591692a759b9d7
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:43 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 11:21:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 308
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: text/css
polmon.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
162.241.85.121200 OK 39 kB URL HTTP/1.1 polmon.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65447)
Hash 32f58a61f7c5a7e10f8b2dcf8e9a8e34
865c25589283ab1debd45bdfa6c4d8c6ecf15ad3
481cb2216fbdb0797af8c61b69c0bda2c10d025f7b11f2cdfac382d35dc45d63
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:43 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 05:34:50 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
polmon.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
162.241.85.121200 OK 4.6 kB URL HTTP/1.1 polmon.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (11126)
Hash acdb97105af28a7066790c6748ae2e1e
65794d2c5a9d04f747faf370bc8bacd330e69e5a
dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:44 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 05:20:08 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4618
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: application/javascript
polmon.com/wp-content/plugins/elementor-sm-widgets/assets/js/skroll-r.js?ver=0.6.30
162.241.85.121200 OK 10 kB URL HTTP/1.1 polmon.com/wp-content/plugins/elementor-sm-widgets/assets/js/skroll-r.js?ver=0.6.30
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (12478)
Hash 18475d3b4278ae377d215c2820ac4d84
fa4623c3902a894b3e1f567a6b0e2464c330aa36
8acbd83ceec47a148729f609d9c96fda374eeed34b6cc77345afa57e6c68f168
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor-sm-widgets/assets/js/skroll-r.js?ver=0.6.30 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:44 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 05:20:22 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 10300
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: application/javascript
polmon.com/wp-content/plugins/elementor-sm-widgets/assets/js/scripts.js?ver=1668732102
162.241.85.121200 OK 3.2 kB URL HTTP/1.1 polmon.com/wp-content/plugins/elementor-sm-widgets/assets/js/scripts.js?ver=1668732102
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash a7067cc07b0c65cc4625731338339f0f
d63f0eb2641f061ec5787990fbd9dbe9303a8e06
1caaaccc6b5e7605704d51c297d29b38d7d21f967858bdb0b26a7199fea4e5b9
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor-sm-widgets/assets/js/scripts.js?ver=1668732102 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:44 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 05:20:22 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3170
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: application/javascript
polmon.com/wp-content/plugins/elementor-sm-widgets/assets/js/owl.carousel.min.js?ver=2.3.4
162.241.85.121200 OK 16 kB URL HTTP/1.1 polmon.com/wp-content/plugins/elementor-sm-widgets/assets/js/owl.carousel.min.js?ver=2.3.4
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (32001)
Hash 85872b90014a039010ccdb1011129398
6c4028943a6a4411dcf46f412e62d6cea71f447f
b98e58cb33f582dd81b69f0d54d207b66005471136bf59dd4a722aa09688052f
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor-sm-widgets/assets/js/owl.carousel.min.js?ver=2.3.4 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:44 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 05:20:22 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 15887
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: application/javascript
polmon.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.8.1
162.241.85.121200 OK 4.4 kB URL HTTP/1.1 polmon.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.8.1
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (14869)
Hash 7bab7ad64ffbd7846dd6819250b93e2e
c924918d540389aff62220088b6761f38a5da272
045250efe67364c953a91f6a60cf407ebb5cfdb2da04e84c3d98e5bab5eca9ba
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.8.1 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:44 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 11:21:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4359
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: application/javascript
polmon.com/wp-content/plugins/elementor-sm-widgets/assets/widgets_style.css?ver=1.0.7
162.241.85.121200 OK 14 kB URL HTTP/1.1 polmon.com/wp-content/plugins/elementor-sm-widgets/assets/widgets_style.css?ver=1.0.7
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash 45a274426c3cf2019ec9e0b53c0e29bf
f1530b82220571184b23b5eae12b5bc585a8a076
7901a2859873a9b0c9a3bbdb02c3659ea07cd9a91c22350011d959b9fa77f8f7
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor-sm-widgets/assets/widgets_style.css?ver=1.0.7 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:44 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 05:20:22 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 13495
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: text/css
polmon.com/wp-content/plugins/elementor-sm-widgets/assets/css/owl.carousel.min.css?ver=2.3.4
162.241.85.121200 OK 1.1 kB URL HTTP/1.1 polmon.com/wp-content/plugins/elementor-sm-widgets/assets/css/owl.carousel.min.css?ver=2.3.4
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (3184)
Hash 8110dac83703c6f3bdab05005b338dae
2d7fa29ab9e77366216866a3c399cff917625015
8b88b876325a3b5deaea39fc31f97d9ea452bf5f5a27a4eb0d0cdc5be386fb92
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor-sm-widgets/assets/css/owl.carousel.min.css?ver=2.3.4 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:44 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 05:20:22 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1142
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: text/css
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9426341bb128c1b6ba16e64df78152b4
08859a30ed6dee233cde4d77f2a04f058991502b
209a0520d5fb1eeb6dfa7d2f4c334a7109cc885cf4be8605bfe5a8f52232306d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "209A0520D5FB1EEB6DFA7D2F4C334A7109CC885CF4BE8605BFE5A8F52232306D"
Last-Modified: Tue, 15 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10878
Expires: Fri, 18 Nov 2022 03:43:02 GMT
Date: Fri, 18 Nov 2022 00:41:44 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9426341bb128c1b6ba16e64df78152b4
08859a30ed6dee233cde4d77f2a04f058991502b
209a0520d5fb1eeb6dfa7d2f4c334a7109cc885cf4be8605bfe5a8f52232306d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "209A0520D5FB1EEB6DFA7D2F4C334A7109CC885CF4BE8605BFE5A8F52232306D"
Last-Modified: Tue, 15 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10878
Expires: Fri, 18 Nov 2022 03:43:02 GMT
Date: Fri, 18 Nov 2022 00:41:44 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9426341bb128c1b6ba16e64df78152b4
08859a30ed6dee233cde4d77f2a04f058991502b
209a0520d5fb1eeb6dfa7d2f4c334a7109cc885cf4be8605bfe5a8f52232306d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "209A0520D5FB1EEB6DFA7D2F4C334A7109CC885CF4BE8605BFE5A8F52232306D"
Last-Modified: Tue, 15 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10878
Expires: Fri, 18 Nov 2022 03:43:02 GMT
Date: Fri, 18 Nov 2022 00:41:44 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9426341bb128c1b6ba16e64df78152b4
08859a30ed6dee233cde4d77f2a04f058991502b
209a0520d5fb1eeb6dfa7d2f4c334a7109cc885cf4be8605bfe5a8f52232306d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "209A0520D5FB1EEB6DFA7D2F4C334A7109CC885CF4BE8605BFE5A8F52232306D"
Last-Modified: Tue, 15 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10878
Expires: Fri, 18 Nov 2022 03:43:02 GMT
Date: Fri, 18 Nov 2022 00:41:44 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9426341bb128c1b6ba16e64df78152b4
08859a30ed6dee233cde4d77f2a04f058991502b
209a0520d5fb1eeb6dfa7d2f4c334a7109cc885cf4be8605bfe5a8f52232306d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "209A0520D5FB1EEB6DFA7D2F4C334A7109CC885CF4BE8605BFE5A8F52232306D"
Last-Modified: Tue, 15 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10878
Expires: Fri, 18 Nov 2022 03:43:02 GMT
Date: Fri, 18 Nov 2022 00:41:44 GMT
Connection: keep-alive
polmon.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4
162.241.85.121409 Conflict 83 B URL HTTP/1.1 polmon.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 409 Conflict
Date: Fri, 18 Nov 2022 00:41:44 GMT
Server: Apache
Content-Length: 83
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
polmon.com/wp-content/plugins/click-to-chat-for-whatsapp/new/inc/assets/js/app.js?ver=3.15
162.241.85.121200 OK 2.5 kB URL HTTP/1.1 polmon.com/wp-content/plugins/click-to-chat-for-whatsapp/new/inc/assets/js/app.js?ver=3.15
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (6296), with no line terminators
Hash fec6ba784bbcac73f93e36fcfb78f1bc
5f1590cec792cb71e167a856017bc0847d316536
c55e71d262c67347c4ff3e7cb9dd53da79f4527ba2597304950d7dd01d404ff0
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/click-to-chat-for-whatsapp/new/inc/assets/js/app.js?ver=3.15 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:44 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 05:37:16 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2497
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: application/javascript
polmon.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4
162.241.85.121409 Conflict 83 B URL HTTP/1.1 polmon.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 409 Conflict
Date: Fri, 18 Nov 2022 00:41:44 GMT
Server: Apache
Content-Length: 83
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffad6fa40-abda-4ea3-b899-aef6906a01e1.jpeg
34.120.237.76200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffad6fa40-abda-4ea3-b899-aef6906a01e1.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 93b326374b3808d0af42e295643cdc14
dd691328acf190c745465208f18a41a75878df18
224ac3995e2e78ee5fcc6c5c3d5fb1f4b0ceca1c42b7a1a493c756aa199bf75f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffad6fa40-abda-4ea3-b899-aef6906a01e1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5198
x-amzn-requestid: ba4e00c8-a996-41f3-b15a-1e304907ca2a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw9UpH1ioAMF6ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376a8ea-2f9f794c4de03f8b212e072f;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:34:34 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: LPflGHjoeNg1X5EszKAaziaZsKFf5hT6LeNPpZQriZ5H1z7Zhh86Ow==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:55:57 GMT
age: 9947
etag: "dd691328acf190c745465208f18a41a75878df18"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Poppins:700%7CHind:400&display=swap&ver=1668493891
142.250.74.10200 OK 12 kB URL HTTP/2 fonts.googleapis.com/css?family=Poppins:700%7CHind:400&display=swap&ver=1668493891
IP 142.250.74.10:0
Hash 74c41a49fa4f9978cbe74ff050bce7f2
280e995f16fa9e48910e33538a6c74fcce553917
a02486b27fa0e8837d13132185507f9e36fa8d2f0f8d566d6728dc9f6db3a18f
GET /css?family=Poppins:700%7CHind:400&display=swap&ver=1668493891 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://polmon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 18 Nov 2022 00:41:43 GMT
date: Fri, 18 Nov 2022 00:41:43 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e567bc1-d4b1-4dd2-b17e-3595ad1753e5.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e567bc1-d4b1-4dd2-b17e-3595ad1753e5.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 35da1192dcadc6e329a9e60c16904301
90a146aef85765630a5e09e46a0a8682e204bec1
816d1387a3a91a82f0bdaa2b703b45aa30be206d30d4dd1e8ac5deca13de57ad
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e567bc1-d4b1-4dd2-b17e-3595ad1753e5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10281
x-amzn-requestid: 11dffc4e-71d7-4195-8890-62c8a2092728
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-77EWaIAMF3WA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376ab7f-3c0dc7e43023af827ac26958;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:45:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 48wUhxwMgsEj2J01EWOTCfWLNZPwFrjjXd6V_uSp8yae4YtGTTVlxA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 22:14:12 GMT
age: 8852
etag: "90a146aef85765630a5e09e46a0a8682e204bec1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
polmon.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.1.0
162.241.85.121200 OK 1.2 kB URL HTTP/1.1 polmon.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.1.0
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with very long lines (3029), with no line terminators
Hash 1d43db37790e13f685a3c696579e3b2c
ecd7d8bcf06c069e2f296726649b6959608abfbe
4207a6e0849fcaec34e8b6de5931cf3158aca1121c232039654b4144aea9552e
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.1.0 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:44 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 05:37:49 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1203
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: application/javascript
polmon.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.1.0
162.241.85.121200 OK 3.9 kB URL HTTP/1.1 polmon.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.1.0
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (9111)
Hash a9d79ad492f5d209828cf75ff095edb0
b969ee59c642ce462a2cea6b487f2b1d57a8a18a
c362ad1758080d8a6214b29639dd88f082394a603d4afa9f12d8a037f55f94e5
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.1.0 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:44 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 05:37:49 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3949
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: application/javascript
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38915691-004a-4ae6-a5c6-fd071040ffba.jpeg
34.120.237.76200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38915691-004a-4ae6-a5c6-fd071040ffba.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4998f097d23ee5f19cae27d5b938e5fc
4369c8ebe61b9944e639bb2731feb51c5a758fe7
5691c66766c9578e9c4aa71240608653821162c668abc63ee40e553ede2450e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38915691-004a-4ae6-a5c6-fd071040ffba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6339
x-amzn-requestid: 0be5dee5-272d-4577-ba55-5cdb7935ea60
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-MCExBoAMFz6Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376aa4c-15fd613336aa6fcb165d0b26;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:40:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: NYs-Nf0PzWqhXP5nkvanTjhJ6vfwRIU--YD06RFIGPEuwDCu6fvEPg==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:52:40 GMT
age: 10144
etag: "4369c8ebe61b9944e639bb2731feb51c5a758fe7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3007b4f3-f5db-4eb7-b71a-f9f854ae287e.jpeg
34.120.237.76200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3007b4f3-f5db-4eb7-b71a-f9f854ae287e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b2b393e36ee2c9649d90db136aa49542
e88c5832ff0c49bab181d948c3a510d88343bb6f
8b524701df43bff56ac52a021ff0fbd964e06f00e84b4861aa557ec6ae6b4ffd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3007b4f3-f5db-4eb7-b71a-f9f854ae287e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7631
x-amzn-requestid: b47e545d-1fb6-4a62-ab45-28cdb9d3f0b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-vQE0XoAMFS3w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376ab2e-56365eed3d4c082c53b172b3;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:44:14 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: qpoQa1Lhe-h27dGooXDCtujesSTg7Tb0Ov-PNLnUP0288ZofwHxkhQ==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:52:40 GMT
age: 10144
etag: "e88c5832ff0c49bab181d948c3a510d88343bb6f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20ddb38f-d459-45e6-9351-068a5306b3a1.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20ddb38f-d459-45e6-9351-068a5306b3a1.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7d16e5ff718353c095d266b080fe547f
fa7c5c9a1d16355859196271f3d13f3850931888
9a94d8eb20cc56d0898b1e2b80c0006ebbef75c15ad94e907050c5be4e19a960
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20ddb38f-d459-45e6-9351-068a5306b3a1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10349
x-amzn-requestid: fc85e078-a81a-4fed-899e-15249961f59c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-7tHGLIAMF00Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376ab7d-4224d193517794684fcdc0ad;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:45:34 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UK-XD_8EcfPwfLb-QVwfLr8aG-sqVBoUJcbPb5hKAlQS68eOxdgM5g==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 22:03:27 GMT
age: 9497
etag: "fa7c5c9a1d16355859196271f3d13f3850931888"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
polmon.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.1.0
162.241.85.121200 OK 1.0 kB URL HTTP/1.1 polmon.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.1.0
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1668)
Hash 0bebfb5722cbc8ac04e62aa40698be49
3bc5e4f29cb19a2d80d46dee242dabf7e42c0fd3
70d02eabbadbe176455a2bb53d8d567feca69847c067a5274987a8bdc65e3c05
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.1.0 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:44 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 05:37:49 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1000
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 759d55a9f00851e8653847413a8a3db5
2424e3d7aae0972c57bee3a60a50b3b8a82bba23
5d07bc72f8be0bc42f91b8cb202f4cdc83fb4e5f5f360998066dad08a7fef6ab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 00:41:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
216.58.207.195200 OK 7.8 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 7816, version 1.0\012- data
Hash 25b0e113ca7cce3770d542736db26368
cb726212d5d525021752a1d8470a0fb593e0c49e
9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://polmon.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 19:30:59 GMT
expires: Thu, 16 Nov 2023 19:30:59 GMT
cache-control: public, max-age=31536000
age: 105045
last-modified: Wed, 27 Apr 2022 16:11:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/hind/v16/5aU19_a8oxmIfLZcERySjQ.woff2
216.58.207.195200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/hind/v16/5aU19_a8oxmIfLZcERySjQ.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 16612, version 1.0\012- data
Hash e9224cf8a465a5349decdad3fd1412eb
53503e38c6c13a2d0cb2189ec56527b5340e3673
078751117ee4d17e09b4d4ac5d9f7358bc4487cb94561df738c6ee000eeffb4d
GET /s/hind/v16/5aU19_a8oxmIfLZcERySjQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://polmon.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16612
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 15 Nov 2022 19:47:56 GMT
expires: Wed, 15 Nov 2023 19:47:56 GMT
cache-control: public, max-age=31536000
age: 190428
last-modified: Tue, 26 Apr 2022 15:46:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 759d55a9f00851e8653847413a8a3db5
2424e3d7aae0972c57bee3a60a50b3b8a82bba23
5d07bc72f8be0bc42f91b8cb202f4cdc83fb4e5f5f360998066dad08a7fef6ab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 00:41:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 71821131fa0825a241bb6f95ad63a26a
4c676dbf861c2fca225bd1b9620237246ddfc724
f2dbe2a5c73657c35a660931a44cda1c1641c5b277ceea3d8fd7b4bfcacaf5ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 00:41:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 759d55a9f00851e8653847413a8a3db5
2424e3d7aae0972c57bee3a60a50b3b8a82bba23
5d07bc72f8be0bc42f91b8cb202f4cdc83fb4e5f5f360998066dad08a7fef6ab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 00:41:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2
216.58.207.195200 OK 7.8 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 7840, version 1.0\012- data
Hash 8d91ec1ca2d8b56640a47117e313a3e9
a9e9bafe64666f4595051a0e895b47a5fa39e67e
78bc3aa78faec288bbb3bf26c9a0fa4eb67b1e69da94a17233c5cab60525efdb
GET /s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://polmon.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7840
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 19:31:06 GMT
expires: Thu, 16 Nov 2023 19:31:06 GMT
cache-control: public, max-age=31536000
age: 105038
last-modified: Wed, 27 Apr 2022 16:51:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
polmon.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.1.0
162.241.85.121200 OK 1.1 kB URL HTTP/1.1 polmon.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.1.0
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2938), with no line terminators
Hash 769e9d3f7fc383ec1a02024e39730474
4f5a5edf28ed19b48c5e40747ec6896f0df8f09e
4636689d57889e984a7a1a1c6e2516b7a2d951407ca826aaf505c50002e2b486
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.1.0 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:44 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 05:37:49 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1093
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Content-Type: application/javascript
fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
216.58.207.195200 OK 7.9 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://polmon.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 21:48:50 GMT
expires: Thu, 16 Nov 2023 21:48:50 GMT
cache-control: public, max-age=31536000
age: 96774
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/hind/v16/5aU69_a8oxmIdGl4BA.woff2
216.58.207.195200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/hind/v16/5aU69_a8oxmIdGl4BA.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 16216, version 1.0\012- data
Hash 4c5bc71b3cf6f2584725c0bb3e25d391
f051f482061dc48d09c328c45459dd04db5b5547
aca5dec430a7470ff1d8a16f9e7bb3ca30f2ff58f3bd60432cf1dddfa30c9d71
GET /s/hind/v16/5aU69_a8oxmIdGl4BA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://polmon.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16216
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Nov 2022 21:11:25 GMT
expires: Fri, 17 Nov 2023 21:11:25 GMT
cache-control: public, max-age=31536000
age: 12619
last-modified: Tue, 26 Apr 2022 15:45:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
216.58.207.195200 OK 8.0 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 8000, version 1.0\012- data
Hash 72993dddf88a63e8f226656f7de88e57
179f97ec0275f09603a8db94d4380eb584d81cd5
f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://polmon.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 15 Nov 2022 14:43:52 GMT
expires: Wed, 15 Nov 2023 14:43:52 GMT
cache-control: public, max-age=31536000
age: 208672
last-modified: Wed, 27 Apr 2022 16:59:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
polmon.com/wp-content/themes/manufacturer/js/navigation.js?ver=20151215
162.241.85.121200 OK 1.2 kB URL HTTP/1.1 polmon.com/wp-content/themes/manufacturer/js/navigation.js?ver=20151215
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash 2280927b1d39dc8db4efa202e3045110
edd663c53d3e5bc8f993003e943cee480b9e3e84
eb0ea2dcf945ea4089a4e6325acac9474ff73a6c0df9d4d3af7e76101b724167
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/themes/manufacturer/js/navigation.js?ver=20151215 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:44 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 05:20:08 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1190
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: application/javascript
polmon.com/wp-content/themes/manufacturer/js/manufacturer_script.js?ver=1668732102
162.241.85.121200 OK 1.7 kB URL HTTP/1.1 polmon.com/wp-content/themes/manufacturer/js/manufacturer_script.js?ver=1668732102
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 9e7b3a5fd22c80878e34da139e0f741c
d3cf9e74d6bfa0729780a8a16d68b00dbc6350fc
54ecffaae03e049c0332932561f8d63173cdb5e2e68e84db87155f2baf06e0ca
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/themes/manufacturer/js/manufacturer_script.js?ver=1668732102 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:44 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 05:20:08 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1695
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 759d55a9f00851e8653847413a8a3db5
2424e3d7aae0972c57bee3a60a50b3b8a82bba23
5d07bc72f8be0bc42f91b8cb202f4cdc83fb4e5f5f360998066dad08a7fef6ab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 00:41:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash c15be7bf1c6987951ddd348d6f6b4db1
9faac1fb81abc8fce6d4ae81777c76b8bc11e9b0
7f1d01e3fc0b69e331fd30326ea8fd9b1e3e06a0a93ae4768e7addd03a121025
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 00:41:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
polmon.com/wp-content/themes/manufacturer/js/skip-link-focus-fix.js?ver=20151215
162.241.85.121200 OK 440 B URL HTTP/1.1 polmon.com/wp-content/themes/manufacturer/js/skip-link-focus-fix.js?ver=20151215
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash 2a49c8d020c1a3e6031dce56d0ef3bf7
15178180470f6c1983f58837201f738b6ad14283
41c0ada4767ce5129e15c260784947a484948a404ef0d3d7fe4faa4a0ea9fd7f
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/themes/manufacturer/js/skip-link-focus-fix.js?ver=20151215 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:44 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 05:20:08 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 440
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: application/javascript
maps.google.com/maps?q=Polmon%20Instruments%20Private%20Limited&t=m&z=13&output=embed&iwloc=near
142.250.74.14301 Moved Permanently 303 B URL HTTP/2 maps.google.com/maps?q=Polmon%20Instruments%20Private%20Limited&t=m&z=13&output=embed&iwloc=near
IP 142.250.74.14:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 99b31389b2607063a75583af8b6897ab
e979c34eb78387cb03daffe9200a28240fbefda6
8b98f22963ddfdaef7d03555ba8e2fc4759f2e4231c7b6a63ff30ced8a55943b
GET /maps?q=Polmon%20Instruments%20Private%20Limited&t=m&z=13&output=embed&iwloc=near HTTP/1.1
Host: maps.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://polmon.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Fri, 18 Nov 2022 00:41:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://www.google.com/maps/embed?origin=mfe&pb=!1m4!2m1!1sPolmon+Instruments+Private+Limited!5e0!6i13
content-type: text/html; charset=UTF-8
server: mafe
content-length: 303
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 4867bbb88730b6b7c4ce63d01131b13d
13205cb9c213ebb2915cedc56c64c65dccd3b8c4
f6df6058ca9dd6ce5e9034a5996d6e22ddbc9e5be85a245c55efb2bfbccbf99a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 00:41:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 05bf67082a248863ee104c4f16e7ae7a
51bc71674f0e51788118bd4826dec7896d6bd03e
3664a7f4bc06fcb7bab2f6b270e74570536d947f8d3fa2fe586dd0de713844e8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 00:41:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
polmon.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.1.0
162.241.85.121200 OK 792 B URL HTTP/1.1 polmon.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.1.0
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2139), with no line terminators
Hash 1ca3f41c13e0027acc45f0601f8b640f
cced34af0c6a59e9cee4229faa66ab39c7031506
d3bc5eaf4c6be9473dbba690825cce9a1a6f4accb6721dae7875efef54942f41
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.1.0 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:44 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 15 Nov 2022 05:37:49 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 792
Keep-Alive: timeout=5, max=75
Content-Type: application/javascript
polmon.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.4.2
162.241.85.121200 OK 2.9 kB URL HTTP/1.1 polmon.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.4.2
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (8014), with no line terminators
Hash 1c44ef5e10d4a8e0d89d78ad512e2cbc
6b5a049fefb1c791a9f84e9a97c9256ad0fae8ac
7f3df0933239d81fd6c58b50ea4b943db51c48aecd636b249514937c91c03d62
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.4.2 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:44 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 05:37:30 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2937
Keep-Alive: timeout=5, max=66
Connection: Keep-Alive
Content-Type: application/javascript
polmon.com/wp-content/plugins/stm-gdpr-compliance/assets/js/scripts.js?ver=6.1.1
162.241.85.121200 OK 546 B URL HTTP/1.1 polmon.com/wp-content/plugins/stm-gdpr-compliance/assets/js/scripts.js?ver=6.1.1
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash 1f5c2a582033e404641053d91946303c
bab55d6b906ed787a98b0133535e6d0b925e0940
624eed7fe5267c7fef24dfe38ab5763fcf295477ba6cb5bf5e00c1bfb4fdfbf1
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/stm-gdpr-compliance/assets/js/scripts.js?ver=6.1.1 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:44 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 21 Sep 2022 05:20:23 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 546
Keep-Alive: timeout=5, max=75
Content-Type: application/javascript
polmon.com/wp-content/plugins/header-footer-elementor/inc/js/frontend.js?ver=1.6.13
162.241.85.121200 OK 6.4 kB URL HTTP/1.1 polmon.com/wp-content/plugins/header-footer-elementor/inc/js/frontend.js?ver=1.6.13
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash 1a7cae61a8acbbcbd0eee38e317f0252
9234b65965a461535a05fc527c9ab420d13e5da0
54e1cad5404f393f2edf04a7c90a79acdec2eeaae6d7cf167701f952dc8d7e9b
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/header-footer-elementor/inc/js/frontend.js?ver=1.6.13 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:44 GMT
Server: Apache
Last-Modified: Fri, 07 Oct 2022 07:55:23 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6389
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Content-Type: application/javascript
polmon.com/wp-content/plugins/elementor/assets/lib/jquery-numerator/jquery-numerator.min.js?ver=0.2.1
162.241.85.121200 OK 736 B URL HTTP/1.1 polmon.com/wp-content/plugins/elementor/assets/lib/jquery-numerator/jquery-numerator.min.js?ver=0.2.1
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1801), with no line terminators
Hash ae098a17e8889ff188a7a1ca4545c729
250400844f4e830503e2e9b8642fb00bc337eb62
0f5aecfe5c23d3149b592488ac69726074ee450de920b0e7ecf3071c1acd0771
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/jquery-numerator/jquery-numerator.min.js?ver=0.2.1 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:44 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 11:21:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 736
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: application/javascript
polmon.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.8.1
162.241.85.121200 OK 2.3 kB URL HTTP/1.1 polmon.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.8.1
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (4918)
Hash afe0ea20b00c3b25a89a6b2d6a98c6ac
53c0425fb9abdc217a90ec20509996cd2a5f9e1d
f70c2aa0ee7d185b9ded30b1f2037e4fbd828583d61f68eab99fd2f37b36b2a3
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.8.1 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:44 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 11:21:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2312
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: application/javascript
polmon.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
162.241.85.121200 OK 3.7 kB URL HTTP/1.1 polmon.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (12198), with no line terminators
Hash e2a8decccf4d0a6b925af707a36077a9
26a0febc9c3d91e75410f74b9ec62099ba1cbe90
09e0e638a6f53c0fdcfeeb8ae91f3a404bef47b471324e335e29be14a2aa87f7
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:44 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 11:21:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3747
Keep-Alive: timeout=5, max=65
Connection: Keep-Alive
Content-Type: application/javascript
polmon.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.8.1
162.241.85.121200 OK 13 kB URL HTTP/1.1 polmon.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.8.1
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (32907)
Hash ec532bc72e833d74239248a507033f2d
e682bb6b3a3d8dce061c9974064efa177b286cbc
5225c44ca2b4081202505c1b0a9c16446eda2d51038ac8ed1a5eea1630b0541b
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.8.1 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:44 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 11:21:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 13291
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: application/javascript
polmon.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
162.241.85.121200 OK 8.3 kB URL HTTP/1.1 polmon.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (8189)
Hash 838560e989767f2ef5951b9eeee20352
6bf8419cb4d68d9beced9e4b79b22b347ae16a46
72e6d275c5229613a59aef94523fc6a96330553976aee003d8544d5806fa0c3d
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:44 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 05:34:50 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8344
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: application/javascript
polmon.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4
162.241.85.121409 Conflict 83 B URL HTTP/1.1 polmon.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 409 Conflict
Date: Fri, 18 Nov 2022 00:41:44 GMT
Server: Apache
Content-Length: 83
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
polmon.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.8.1
162.241.85.121200 OK 16 kB URL HTTP/1.1 polmon.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.8.1
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (40474)
Hash 6aeb2153cae643eef82bc2bfd981284f
72ded3873d2eca2490b951a270c2ad90d2be820f
e1f85226ca5e06d9aa02a495ab567529e78f5aeae6924566e58e18debe6f38bb
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.8.1 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:44 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 11:21:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 16151
Keep-Alive: timeout=5, max=66
Connection: Keep-Alive
Content-Type: application/javascript
polmon.com/wp-content/plugins/elementor-sm-widgets/assets/fonts/startups/Flaticon.woff
162.241.85.121200 OK 20 kB URL HTTP/1.1 polmon.com/wp-content/plugins/elementor-sm-widgets/assets/fonts/startups/Flaticon.woff
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format, TrueType, length 20336, version 0.0\012- data
Hash 7e6c93b0ebaf3b4712aab3e56e2ecaff
1137b6a83d3c8e81e69e1a12466102c004448d8c
9c8a58005e651bc3cbcafb87ea6fab24a7f0767009249e06ccc3aeef88cb8296
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor-sm-widgets/assets/fonts/startups/Flaticon.woff HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://polmon.com/wp-content/plugins/elementor-sm-widgets/assets/fonts/icons.css?ver=1.0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:45 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 05:20:22 GMT
Accept-Ranges: bytes
Content-Length: 20336
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: font/woff
polmon.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2
162.241.85.121200 OK 13 kB URL HTTP/1.1 polmon.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 13276, version 331.-31261\012- data
Hash f0f8230116992e521526097a28f54066
0447c6b10bbf73f97b23dcfd6e6a48510822cb6e
8afc6e5e842baab16010c2ce6fcf48ec4ded8e1579a37c1f1bc027e120d04951
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://polmon.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:44 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 11:21:45 GMT
Accept-Ranges: bytes
Content-Length: 13276
Keep-Alive: timeout=5, max=64
Connection: Keep-Alive
Content-Type: font/woff2
polmon.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
162.241.85.121200 OK 78 kB URL HTTP/1.1 polmon.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261\012- data
Hash e8a427e15cc502bef99cfd722b37ea98
a9922842a120a7f1eaced667480c5e185a106d69
d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://polmon.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:45 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 11:21:45 GMT
Accept-Ranges: bytes
Content-Length: 78196
Keep-Alive: timeout=5, max=65
Connection: Keep-Alive
Content-Type: font/woff2
polmon.com/wp-content/plugins/elementor-sm-widgets/assets/fonts/industrial/Flaticon.woff
162.241.85.121200 OK 17 kB URL HTTP/1.1 polmon.com/wp-content/plugins/elementor-sm-widgets/assets/fonts/industrial/Flaticon.woff
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format, TrueType, length 16892, version 0.0\012- data
Hash c4e7bb74390f3cde5980a96f2dccb268
61856c6b2783f978df2523aa1cd1b7ea1de4f102
8b576ffe89f43bb78938889c14e47552af0ea27c1a9ccb31d3ea1ba7214b3b77
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor-sm-widgets/assets/fonts/industrial/Flaticon.woff HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://polmon.com/wp-content/plugins/elementor-sm-widgets/assets/fonts/icons.css?ver=1.0
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:45 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 05:20:22 GMT
Accept-Ranges: bytes
Content-Length: 16892
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: font/woff
www.google.com/maps/embed?origin=mfe&pb=!1m4!2m1!1sPolmon+Instruments+Private+Limited!5e0!6i13
142.250.74.164200 OK 1.8 kB URL HTTP/2 www.google.com/maps/embed?origin=mfe&pb=!1m4!2m1!1sPolmon+Instruments+Private+Limited!5e0!6i13
IP 142.250.74.164:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3589)
Hash e10c65f783607e29bafca95036db3066
960a2a0377e3f5e076619abcc68e960e3920bf35
809ad5059c5c8416b68fd5c15847fc7c99f5a2479b1ecdbfa4565d2be5470324
GET /maps/embed?origin=mfe&pb=!1m4!2m1!1sPolmon+Instruments+Private+Limited!5e0!6i13 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://polmon.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Fri, 18 Nov 2022 00:41:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
vary: Accept-Language
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-88-jV1fPjbaPd53vmFPr4A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/geo-maps-api/1
content-encoding: gzip
server: mafe
content-length: 1808
x-xss-protection: 0
server-timing: gfet4t7; dur=391
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
polmon.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4
162.241.85.121409 Conflict 83 B URL HTTP/1.1 polmon.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 409 Conflict
Date: Fri, 18 Nov 2022 00:41:45 GMT
Server: Apache
Content-Length: 83
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
polmon.com/wp-content/uploads/2018/07/logo.png
162.241.85.121200 OK 29 kB URL HTTP/1.1 polmon.com/wp-content/uploads/2018/07/logo.png
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 768 x 174, 8-bit/color RGBA, non-interlaced\012- data
Hash 7e1974029bd6a9694822494a3044d098
d99d81908592134ac5edb84bd7e87ad1addb18f2
b704c27a1c06b2ca8566fef09b584214b857391103c305e088c102da612d9c6a
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2018/07/logo.png HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:45 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 06:37:16 GMT
Accept-Ranges: bytes
Content-Length: 28665
Keep-Alive: timeout=5, max=64
Connection: Keep-Alive
Content-Type: image/png
polmon.com/wp-content/uploads/2022/09/eh.jpg
162.241.85.121200 OK 30 kB URL HTTP/1.1 polmon.com/wp-content/uploads/2022/09/eh.jpg
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows), datetime=2022:09:21 14:47:07], baseline, precision 8, 374x150, components 3\012- data
Hash 0412a2bc40ed8fea773d0c48540ef479
70b82508757b98cafa15db3cc87fc19a2ce38462
d57f667cb66ae904879f2f451d6e7f5da8e99a5e84cae592fb1505535144d186
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/09/eh.jpg HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:45 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 09:17:53 GMT
Accept-Ranges: bytes
Content-Length: 30098
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: image/jpeg
polmon.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=7.1.0
162.241.85.121200 OK 1.3 kB URL HTTP/1.1 polmon.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=7.1.0
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (7043), with no line terminators
Hash 23030da399d26bb36e2effda3c58d488
2480e4b14c65a29b6013515cea8a55a6646aa85a
026d41f0bbec9c4116e05c06d43d3bbae4e9ec0975f84140565760431eaa88d7
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=7.1.0 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:45 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 15 Nov 2022 05:37:49 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1294
Keep-Alive: timeout=5, max=75
Content-Type: text/css
polmon.com/wp-content/themes/manufacturer/fonts/fonts/themify.woff
162.241.85.121200 OK 56 kB URL HTTP/1.1 polmon.com/wp-content/themes/manufacturer/fonts/fonts/themify.woff
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format, CFF, length 56108, version 1.0\012- data
Hash a1ecc3b826d01251edddf29c3e4e1e97
9394f35bd2addd24666b79bfc36d4f9d247cb01d
0db5c5a1475eb7a3e5028983ea1e642d1b2c00faff6a250a37502b0f3832a4a7
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/themes/manufacturer/fonts/fonts/themify.woff HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://polmon.com/wp-content/themes/manufacturer/fonts/themify-icons.css?ver=6.1.1
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:44 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 05:20:08 GMT
Accept-Ranges: bytes
Content-Length: 56108
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: font/woff
maps.gstatic.com/maps-api-v3/embed/js/51/1/init_embed.js
142.250.74.163200 OK 69 kB URL HTTP/2 maps.gstatic.com/maps-api-v3/embed/js/51/1/init_embed.js
IP 142.250.74.163:0
File type ASCII text, with very long lines (2669)
Hash c088038bb01fdc7f15f21e2216b6b8b4
fa724c5616022f6825ac476354c492b0bf544d21
b0ecfa74efada796d206177e1bc78c7ac75250608051c6576335c6231fc2de78
GET /maps-api-v3/embed/js/51/1/init_embed.js HTTP/1.1
Host: maps.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 68704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 18:43:02 GMT
expires: Thu, 16 Nov 2023 18:43:02 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 21:36:22 GMT
content-type: text/javascript
age: 107923
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
polmon.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2
162.241.85.121200 OK 77 kB URL HTTP/1.1 polmon.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 76764, version 331.-31261\012- data
Hash f7307680c7fe85959f3ecf122493ea7d
fce0da592a3e536d6d5df5b50cb513398d8c5161
43c072c16c9ee6d67acdfa6c6d6685ff1e74eb4237b7cc3c1348ab1c108b26af
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://polmon.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:45 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 11:21:45 GMT
Accept-Ranges: bytes
Content-Length: 76764
Keep-Alive: timeout=5, max=63
Connection: Keep-Alive
Content-Type: font/woff2
polmon.com/wp-content/uploads/2022/09/honeywell.jpg
162.241.85.121200 OK 33 kB URL HTTP/1.1 polmon.com/wp-content/uploads/2022/09/honeywell.jpg
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows), datetime=2022:09:21 14:46:44], baseline, precision 8, 374x150, components 3\012- data
Hash cb2a24abb151ac9ee3cc7e9b755cb9b9
33ba5a4122d1cb6eefab52c6d0394bf1dfcceff7
889e734e3e66eb205511ca6440a6be155fe8bb2c17c74873017a031eaaec99a7
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/09/honeywell.jpg HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:45 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 09:18:00 GMT
Accept-Ranges: bytes
Content-Length: 33326
Keep-Alive: timeout=5, max=63
Connection: Keep-Alive
Content-Type: image/jpeg
polmon.com/wp-content/uploads/2022/09/rotex.jpg
162.241.85.121200 OK 43 kB URL HTTP/1.1 polmon.com/wp-content/uploads/2022/09/rotex.jpg
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows), datetime=2022:09:21 14:46:30], baseline, precision 8, 374x150, components 3\012- data
Hash 8e6778c2849c8746e19ff43180d82530
27f01b2566149743e9602024e26558b6b86ad40a
afcf1f104571e236bb07ad9a79b9ec683e6de7f6023e7002e753c2fe54c4fb17
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/09/rotex.jpg HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:45 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 09:18:09 GMT
Accept-Ranges: bytes
Content-Length: 42583
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: image/jpeg
polmon.com/wp-content/uploads/2022/09/Stahi.jpg
162.241.85.121200 OK 32 kB URL HTTP/1.1 polmon.com/wp-content/uploads/2022/09/Stahi.jpg
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows), datetime=2022:09:21 14:46:04], baseline, precision 8, 374x150, components 3\012- data
Hash d1802c6e0b6262977cca9b06bca449db
fe9c8eec2821e8b35da7cd149016bf789d93a8d9
ba8999e720cd9990eb532186272fa76255dc84a6291e8514969de1a2a58fe7c0
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/09/Stahi.jpg HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:45 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 09:18:16 GMT
Accept-Ranges: bytes
Content-Length: 32396
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Content-Type: image/jpeg
polmon.com/wp-content/uploads/2022/09/Yokogawa.jpg
162.241.85.121200 OK 26 kB URL HTTP/1.1 polmon.com/wp-content/uploads/2022/09/Yokogawa.jpg
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows), datetime=2022:09:21 14:45:46], baseline, precision 8, 374x150, components 3\012- data
Hash 872fbcbdb80b698240a876fd4da70871
2e4d0670e69759dbb50c3e92304d201af8513743
5aebb96365403950037b5b9e0f89336178f75d0a244d5ba04ea90b5248c0d217
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/09/Yokogawa.jpg HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:45 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 09:18:20 GMT
Accept-Ranges: bytes
Content-Length: 26329
Keep-Alive: timeout=5, max=62
Connection: Keep-Alive
Content-Type: image/jpeg
polmon.com/wp-content/uploads/2022/09/snidher.jpg
162.241.85.121200 OK 41 kB URL HTTP/1.1 polmon.com/wp-content/uploads/2022/09/snidher.jpg
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows), datetime=2022:09:21 14:46:17], baseline, precision 8, 374x150, components 3\012- data
Hash a4ae4e28dd3498fb18ef58ae14e1342b
a95cdc06d9d5dccc790eb798ccf02dd34c70dcb4
4826e28876aa6229486c36e3f1ade47fcaa8fe6184126f1eb9fe3203f86e7ed8
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/09/snidher.jpg HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:45 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 09:18:13 GMT
Accept-Ranges: bytes
Content-Length: 41058
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: image/jpeg
polmon.com/wp-content/uploads/2022/09/emerson.jpg
162.241.85.121200 OK 29 kB URL HTTP/1.1 polmon.com/wp-content/uploads/2022/09/emerson.jpg
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows), datetime=2022:09:21 14:46:57], baseline, precision 8, 374x150, components 3\012- data
Hash 73b5f822be7638c88e31eee9bf69805f
dd5dd0247af963a227394441bdb25331ae5e465d
005532ebddbb73fa9c5d2320e90004e0db57f730a4cf9fec8c4b551dd58f0845
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/09/emerson.jpg HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:45 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 21 Sep 2022 09:17:57 GMT
Accept-Ranges: bytes
Content-Length: 28948
Keep-Alive: timeout=5, max=75
Content-Type: image/jpeg
polmon.com/wp-content/uploads/2022/09/instruments.jpg
162.241.85.121200 OK 210 kB URL HTTP/1.1 polmon.com/wp-content/uploads/2022/09/instruments.jpg
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows), datetime=2022:09:21 13:09:02], baseline, precision 8, 500x500, components 3\012- data
Size 210 kB (210367 bytes)
Hash 7e3657cdaa9b66865a74ae07eb938e1b
a40f04b984cdeb86e56b7acb237a212740f77797
82c6893fce9f1a1e5f7272ca541eced6dabbcc8bfe06ed3550c23d26eb44ffec
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/09/instruments.jpg HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:45 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 07:41:05 GMT
Accept-Ranges: bytes
Content-Length: 210367
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Content-Type: image/jpeg
polmon.com/wp-content/uploads/2022/09/Heat-Transfer-Systems.jpg
162.241.85.121200 OK 233 kB URL HTTP/1.1 polmon.com/wp-content/uploads/2022/09/Heat-Transfer-Systems.jpg
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows), datetime=2022:09:21 13:09:39], baseline, precision 8, 500x500, components 3\012- data
Size 233 kB (232552 bytes)
Hash 34f78ad09d7e302fd2ec4ca75e8f6768
db504f2f897c68ac7d315c37edc8208302dc0037
52e6a60518f02b440d7bda39772566f7f11c38286d1df476a773bcc94afc6f80
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/09/Heat-Transfer-Systems.jpg HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:45 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 07:41:01 GMT
Accept-Ranges: bytes
Content-Length: 232552
Keep-Alive: timeout=5, max=61
Connection: Keep-Alive
Content-Type: image/jpeg
polmon.com/wp-content/uploads/2022/07/ILE4111-thumb-2.jpg
162.241.85.121200 OK 471 kB URL HTTP/1.1 polmon.com/wp-content/uploads/2022/07/ILE4111-thumb-2.jpg
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=15, height=3240, bps=194, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS 5D Mark III, orientation=upper-left, width=5760], baseline, precision 8, 850x478, components 3\012- data
Size 471 kB (471316 bytes)
Hash 4f7fd090992be8cc135d388c9031987b
48388583bbc1f6ad9a46976de8c3a1c7439d4d9d
574f0acf9e702a01e422c0fcc4cbda95c6f8156e63e9c7733a1ddd2c064e9968
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/07/ILE4111-thumb-2.jpg HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/wp-content/uploads/elementor/css/post-998.css?ver=1668514443
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:45 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 05:20:23 GMT
Accept-Ranges: bytes
Content-Length: 471316
Keep-Alive: timeout=5, max=62
Connection: Keep-Alive
Content-Type: image/jpeg
polmon.com/wp-content/uploads/2022/09/2.jpg
162.241.85.121200 OK 62 kB URL HTTP/1.1 polmon.com/wp-content/uploads/2022/09/2.jpg
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 391x512, components 3\012- data
Hash 2dfb6360bb2e53a092d4752a9271d50c
37af18d03423d4ce88cd5a63267be9fd8c39cd96
b304b6657ed2e5600050e9ffe67cd6c380c910204f4c9727f531e7ac792356c1
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/09/2.jpg HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/wp-content/uploads/elementor/css/post-998.css?ver=1668514443
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:45 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 08:03:01 GMT
Accept-Ranges: bytes
Content-Length: 62082
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: image/jpeg
polmon.com/wp-content/uploads/2022/07/ILE4411.jpg
162.241.85.121200 OK 113 kB URL HTTP/1.1 polmon.com/wp-content/uploads/2022/07/ILE4411.jpg
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Picasa], baseline, precision 8, 852x479, components 3\012- data
Size 113 kB (112851 bytes)
Hash 34c6a05db5d4f76e9e8512e00cd8e5fa
830062ccb9c4487079472f7f13cbd2b503771ea6
b78a9ba26970c813e01e15affed00341af3ef829871cb71f9a263a73a6d79ff8
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/07/ILE4411.jpg HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/wp-content/uploads/elementor/css/post-998.css?ver=1668514443
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:45 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 05:20:23 GMT
Accept-Ranges: bytes
Content-Length: 112851
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Content-Type: image/jpeg
polmon.com/wp-content/uploads/2022/09/Automation.jpg
162.241.85.121200 OK 254 kB URL HTTP/1.1 polmon.com/wp-content/uploads/2022/09/Automation.jpg
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows), datetime=2022:09:21 13:09:22], baseline, precision 8, 500x500, components 3\012- data
Size 254 kB (253590 bytes)
Hash 8c13e752d730d56139c35058cb226396
952d45d46533646702a5c703ab3a135cdd59dd01
b6875f5928b8a0a72e8575d46c267f9e6973b6c94b39d5643061b1e2f6e2f627
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/09/Automation.jpg HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:45 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 07:40:57 GMT
Accept-Ranges: bytes
Content-Length: 253590
Keep-Alive: timeout=5, max=66
Connection: Keep-Alive
Content-Type: image/jpeg
polmon.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js
162.241.85.121200 OK 671 B URL HTTP/1.1 polmon.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1320)
Hash 3b0adb15e8343e46117fae1a91c1519f
96c16d5554d161466f482aba020ec272b004c57c
3c227e3607c75db2282b30d2d12ad8a6d8b6e57bee331aa9c58a0f5dd9177955
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:46 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 11:21:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 671
Keep-Alive: timeout=5, max=61
Connection: Keep-Alive
Content-Type: application/javascript
khms1.googleapis.com/kh?v=934&hl=en-US&x=367&y=230&z=9
172.217.21.170200 OK 15 kB URL HTTP/2 khms1.googleapis.com/kh?v=934&hl=en-US&x=367&y=230&z=9
IP 172.217.21.170:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3\012- data
Hash 8cecbe22b585e617a2f0714d45dd645d
ae199796f934a9bb8e241471abd5ef79cd9ad1fc
9ade6f0e78fad97e3773566798cdb63c1101f6fd9134e1bbe89e1c677c506c34
GET /kh?v=934&hl=en-US&x=367&y=230&z=9 HTTP/1.1
Host: khms1.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Fri, 1 Jan 2010 01:00:00 GMT
date: Fri, 18 Nov 2022 00:41:46 GMT
expires: Sat, 18 Nov 2023 00:41:46 GMT
access-control-allow-origin: *
x-content-type-options: nosniff
access-control-allow-credentials: true
cache-control: public, max-age=31536000
content-type: image/jpeg
vary: Origin, X-Origin, Referer
server: scaffolding on HTTPServer2
content-length: 14897
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
polmon.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6
162.241.85.121200 OK 47 kB URL HTTP/1.1 polmon.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65280)
Hash 6d3f8ba511b26a2b5e2555673e996be4
d5a3c1ed68beeeafc4da01d71a6b7ce0f19f985e
955d1e858ec91ca4b3f5c845421692afc83dcbca3dd52577f746e18278f45315
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:46 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 11:21:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
polmon.com/wp-content/plugins/elementor/assets/js/image-carousel.e02695895b33b77d89de.bundle.min.js
162.241.85.121200 OK 1.3 kB URL HTTP/1.1 polmon.com/wp-content/plugins/elementor/assets/js/image-carousel.e02695895b33b77d89de.bundle.min.js
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2738)
Hash d6716501cdad9b197e4ac661908d3b1b
84ffe1af9dfa985aa882b70383d1a6aa13d1248a
c0c3b6be24ce79109a8c4e1b49fb617ebadb880681ba062c3a71b15ba4287036
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/js/image-carousel.e02695895b33b77d89de.bundle.min.js HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:46 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 11:21:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1272
Keep-Alive: timeout=5, max=68
Connection: Keep-Alive
Content-Type: application/javascript
polmon.com/wp-content/plugins/elementor/assets/js/counter.02cef29c589e742d4c8c.bundle.min.js
162.241.85.121200 OK 485 B URL HTTP/1.1 polmon.com/wp-content/plugins/elementor/assets/js/counter.02cef29c589e742d4c8c.bundle.min.js
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (872)
Hash 4d1cbaa47eafc86cea85d8bc5a5ffde9
8bf12004cb475e67334637c89e3111b9bc143cbd
2b34e7a64912a8d3ba42a9fd03b3fbad12adbddb2fc0582d6e1998df77818092
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/js/counter.02cef29c589e742d4c8c.bundle.min.js HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:46 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 11:21:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 485
Keep-Alive: timeout=5, max=65
Connection: Keep-Alive
Content-Type: application/javascript
polmon.com/wp-content/uploads/2022/07/ILE4065.jpg
162.241.85.121200 OK 199 kB URL HTTP/1.1 polmon.com/wp-content/uploads/2022/07/ILE4065.jpg
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Picasa], baseline, precision 8, 930x523, components 3\012- data
Size 199 kB (199343 bytes)
Hash 3aeea3ec7da3c297a410a523b8681ed1
c5078eaa6d2cd785f0e5fa1149b9876cc0c9173c
31758e21f0f31092ad48a9476424fd48a670ad3cdb86826cf5d8368bc8a0c608
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/07/ILE4065.jpg HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/wp-content/uploads/elementor/css/post-998.css?ver=1668514443
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:45 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 05:20:23 GMT
Accept-Ranges: bytes
Content-Length: 199343
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: image/jpeg
polmon.com/?wc-ajax=get_refreshed_fragments
162.241.85.121200 OK 367 B URL HTTP/1.1 polmon.com/?wc-ajax=get_refreshed_fragments
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JSON data\012- , ASCII text, with very long lines (993), with no line terminators
Hash b7b9451c9fb5110aa40460b02c4a5cae
64159ec6c819cf8624a673c547e00ea7965f15ee
c595ad8a40e7db28ceef709e7bb1bd0c6d01d57077873bc9ec5308755fb0b31f
Analyzer Verdict Alert quad9 Sinkholed
POST /?wc-ajax=get_refreshed_fragments HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 18
Origin: http://polmon.com
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:46 GMT
Server: Apache
Access-Control-Allow-Origin: http://polmon.com
Access-Control-Allow-Credentials: true
X-Content-Type-Options: nosniff
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Robots-Tag: noindex
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 367
Keep-Alive: timeout=5, max=60
Connection: Keep-Alive
Content-Type: application/json; charset=UTF-8
polmon.com/wp-content/uploads/2022/09/1.jpg
162.241.85.121200 OK 649 kB URL HTTP/1.1 polmon.com/wp-content/uploads/2022/09/1.jpg
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=18, height=4480, bps=0, PhotometricIntepretation=RGB, description=modern automated assembly line for cars. latest technological neutral technologies of production of cars at plant. Assembly sho, orientation=upper-left, width=6720], baseline, precision 8, 1400x933, components 3\012- data
Size 649 kB (649086 bytes)
Hash 530cc378deccdf311463c67569ac3536
26a32664da6c9e86a07b1fd43c2b32de45c7c2fe
5fb58739a0f59c9d62a8f040963f818b823366f7c91b578ce76753a35b07459b
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/09/1.jpg HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:46 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 07:06:16 GMT
Accept-Ranges: bytes
Content-Length: 649086
Keep-Alive: timeout=5, max=60
Connection: Keep-Alive
Content-Type: image/jpeg
polmon.com/wp-content/uploads/2022/09/infra1-2.jpg
162.241.85.121200 OK 496 kB URL HTTP/1.1 polmon.com/wp-content/uploads/2022/09/infra1-2.jpg
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=13, height=844, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1500], baseline, precision 8, 1500x844, components 3\012- data
Size 496 kB (496077 bytes)
Hash a469896f540183cae78be752a17961e8
5845816b81640ba34b2beb7ee23fe7d805b9c98e
8ec30a1da61de42a26f538a67bc8c917b4196f14e86ef83acd5b2ad4b052e28a
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/09/infra1-2.jpg HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:46 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 08:54:52 GMT
Accept-Ranges: bytes
Content-Length: 496077
Keep-Alive: timeout=5, max=67
Connection: Keep-Alive
Content-Type: image/jpeg
polmon.com/wp-content/uploads/2022/09/infra3-2.jpg
162.241.85.121200 OK 684 kB URL HTTP/1.1 polmon.com/wp-content/uploads/2022/09/infra3-2.jpg
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=18, height=1066, bps=0, PhotometricIntepretation=RGB, description=Rear view of boss standing at factory and listening plant worker. African American factory employee in blue uniform explaining , manufacturer=Canon, model=Canon EOS 6D, orientation=upper-left, width=1600], baseline, precision 8, 1600x1066, components 3\012- data
Size 684 kB (683567 bytes)
Hash 2ed92bc7683fca6cca770485fc5cf667
2fa0a52d7ae72c6778acde95fe078d70a16616f4
173c997a19468f8ef7e115481e9afe5033aaa68035fa10bc480afd721555d34d
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/09/infra3-2.jpg HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:46 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 08:54:58 GMT
Accept-Ranges: bytes
Content-Length: 683567
Keep-Alive: timeout=5, max=64
Connection: Keep-Alive
Content-Type: image/jpeg
polmon.com/wp-content/uploads/2022/09/3.jpg
162.241.85.121200 OK 217 kB URL HTTP/1.1 polmon.com/wp-content/uploads/2022/09/3.jpg
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=11, description=Nobody in scientific laboratory with research instruments for healthcare treatment innovation. Empty room of biochemistry labwa, orientation=upper-left, xresolution=334, yresolution=342, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 10.3 (Windows), datetime=2021:07:19 12:57:50], baseline, precision 8, 1536x864, components 3\012- data
Size 217 kB (216847 bytes)
Hash 849b9429148fe030b41ca5bbac24be9f
77edd85cd0cbe5de7f43fadf97c12c69a9e7ec96
7a1d1b4a1c1569223d1ce0acf4e4e5d0d6268aa422fff5bcc268accdde4accf4
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/09/3.jpg HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:46 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 07:06:22 GMT
Accept-Ranges: bytes
Content-Length: 216847
Keep-Alive: timeout=5, max=59
Connection: Keep-Alive
Content-Type: image/jpeg
polmon.com/wp-content/uploads/2022/09/4.jpg
162.241.85.121200 OK 721 kB URL HTTP/1.1 polmon.com/wp-content/uploads/2022/09/4.jpg
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=11, description=Data center with server racks in a corridor room. 3D render of digital data and cloud technology, orientation=upper-left, xresolution=244, yresolution=252, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 9.2.1 (Windows), datetime=2020:04:19 15:06:39], baseline, precision 8, 1800x1200, components 3\012- data
Size 721 kB (721327 bytes)
Hash c5ec7b7b06368020355ee4aab036e0c9
ee053c97fa381c88d5bb0fb8cea8b5b7fcf4045b
2e6fe236d8826c59e19ce5b7619958af22d83d221f66b7ee015e9061ff5d26dc
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/09/4.jpg HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:46 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 07:06:30 GMT
Accept-Ranges: bytes
Content-Length: 721327
Keep-Alive: timeout=5, max=59
Connection: Keep-Alive
Content-Type: image/jpeg
polmon.com/wp-content/uploads/2022/09/CRM.jpg
162.241.85.121200 OK 38 kB URL HTTP/1.1 polmon.com/wp-content/uploads/2022/09/CRM.jpg
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 511x344, components 3\012- data
Hash 8451cd00ec406d4f37fc19abbdd4942a
98ac2bd43f70e90117a8c51c4b7ce6aa0f33b582
ed402a864f38fce0b19bbed21aa1efbc12e0509cfe3b2c643321d22d8893ca7c
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/09/CRM.jpg HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:46 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 07:49:12 GMT
Accept-Ranges: bytes
Content-Length: 37501
Keep-Alive: timeout=5, max=66
Connection: Keep-Alive
Content-Type: image/jpeg
polmon.com/wp-content/uploads/2022/09/6.jpg
162.241.85.121200 OK 468 kB URL HTTP/1.1 polmon.com/wp-content/uploads/2022/09/6.jpg
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=14, description=plant picture, clean room equipment and stainless steel machines, manufacturer=Canon, model=Canon EOS 5D Mark III, orientation=upper-left, xresolution=276, yresolution=284, resolutionunit=2, software=Adobe Photoshop Lightroom 6.9 (Windows), datetime=2017:04:25 12:08:27], baseline, precision 8, 1285x857, components 3\012- data
Size 468 kB (468271 bytes)
Hash 3c6cda9db5d4a9dd5d7afb03349a767d
7db7a1e270d931b297706954bb6d7f49794b6b55
e814b9ba22788d135a154fec834b34ec9146dcfeb1b8a0d8f2993c433d1f46c7
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/09/6.jpg HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:46 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 07:06:38 GMT
Accept-Ranges: bytes
Content-Length: 468271
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: image/jpeg
polmon.com/wp-content/uploads/2022/11/home-polstat-1000.jpg
162.241.85.121200 OK 79 kB URL HTTP/1.1 polmon.com/wp-content/uploads/2022/11/home-polstat-1000.jpg
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows), datetime=2022:11:02 10:47:50], progressive, precision 8, 511x344, components 3\012- data
Hash 123c1bd10933a483b337a558f3ca8834
09cde11600b89c4e2e4d57af2f31895288f522fa
87e6037e90a0baada5a8bcd88804818265d8fd59428bcf48a8995619f467869d
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/11/home-polstat-1000.jpg HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:46 GMT
Server: Apache
Last-Modified: Wed, 02 Nov 2022 05:18:09 GMT
Accept-Ranges: bytes
Content-Length: 78726
Keep-Alive: timeout=5, max=63
Connection: Keep-Alive
Content-Type: image/jpeg
polmon.com/wp-content/uploads/2022/09/infra2-1.jpg
162.241.85.121200 OK 626 kB URL HTTP/1.1 polmon.com/wp-content/uploads/2022/09/infra2-1.jpg
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=18, height=1066, bps=0, PhotometricIntepretation=RGB, description=Rear view of boss standing at factory and listening plant worker. African American factory employee in blue uniform explaining , manufacturer=Canon, model=Canon EOS 6D, orientation=upper-left, width=1600], baseline, precision 8, 1600x1066, components 3\012- data
Size 626 kB (625472 bytes)
Hash 95f47250501b50ee27f8014ccb9da13d
cce72d8c0523fc699bd91c94d16be4d887a4065d
f7bd30fc8003508379a14cebda929fca94d28bd6287de971824624fc66330af0
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/09/infra2-1.jpg HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:46 GMT
Server: Apache
Last-Modified: Wed, 21 Sep 2022 08:48:52 GMT
Accept-Ranges: bytes
Content-Length: 625472
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
Content-Type: image/jpeg
polmon.com/wp-content/uploads/2022/11/icon-1.png
162.241.85.121200 OK 4.1 kB URL HTTP/1.1 polmon.com/wp-content/uploads/2022/11/icon-1.png
IP 162.241.85.121:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 99 x 102, 8-bit/color RGBA, non-interlaced\012- data
Hash 6b58264860a1d0abfdf2da8efa53e7dc
e2c02acf9b2b22306b257bac52cb1523ae423271
0eeaba6cd0ffa25459df74212b6866e6d9f8d9ebddd411118a383f73b31434f3
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/11/icon-1.png HTTP/1.1
Host: polmon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://polmon.com/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 00:41:46 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 06:31:23 GMT
Accept-Ranges: bytes
Content-Length: 4131
Keep-Alive: timeout=5, max=58
Connection: Keep-Alive
Content-Type: image/png
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.195200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 19:34:08 GMT
expires: Thu, 16 Nov 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 104859
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
216.58.207.195200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 14:07:32 GMT
expires: Thu, 16 Nov 2023 14:07:32 GMT
cache-control: public, max-age=31536000
age: 124455
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9672fb80-baaa-4ab8-b080-dc8c1ce94400.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9672fb80-baaa-4ab8-b080-dc8c1ce94400.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 05289172c1455c4134e496c6f4606efd
ce1bb33256b0754f9acc01e7e9f3e5dc85f89244
a8b4411a0310cc376efe2aec7c0830b8d3b63b8827631b0ff43ec092f1f80f82
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9672fb80-baaa-4ab8-b080-dc8c1ce94400.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 12065
x-amzn-requestid: 45c97153-71c7-4985-a1ad-fc21a509d153
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-K5FyVIAMFtDg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376aa45-0f9d22dd544a4580570f3089;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: dxT2WJB7m5tUhgBn2PwTIN4Zskzm3X7CW-29hl1nCyNPbKt5j6q5iA==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:55:27 GMT
age: 9984
etag: "ce1bb33256b0754f9acc01e7e9f3e5dc85f89244"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CPoppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CHind%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1.1
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CPoppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CHind%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1.1
IP 142.250.74.10:0
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CPoppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CHind%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://polmon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 18 Nov 2022 00:41:43 GMT
date: Fri, 18 Nov 2022 00:41:43 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2