r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8b4f1afb0e830b797238d34ab9254aa
e011acef3d05c959a65205d53b651ecd18a889fe
f7ceff5b4fda083c7449b7298c232224cf48a632dcb87233b646790de207d49c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F7CEFF5B4FDA083C7449B7298C232224CF48A632DCB87233B646790DE207D49C"
Last-Modified: Thu, 12 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4760
Expires: Fri, 13 Jan 2023 20:43:06 GMT
Date: Fri, 13 Jan 2023 19:23:46 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cab5b63e128895128726181aff42e42e
d39c36237554fcd41addec0664d7fe7f7d157c06
18e82a5b82eb8f2d8b49df824c336015f19367c5a05467ad139a56db59f88852
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "18E82A5B82EB8F2D8B49DF824C336015F19367C5A05467AD139A56DB59F88852"
Last-Modified: Wed, 11 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5087
Expires: Fri, 13 Jan 2023 20:48:33 GMT
Date: Fri, 13 Jan 2023 19:23:46 GMT
Connection: keep-alive
nevadamsmith.com/wp-content/plugins/jetpack/1
301 Moved Permanently 0 B URL HTTP/1.1 nevadamsmith.com/wp-content/plugins/jetpack/1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/jetpack/1 HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Fri, 13 Jan 2023 19:23:42 GMT
Server: nginx/1.21.6
Content-Type: text/html; charset=UTF-8
Content-Length: 0
X-Redirect-By: WordPress
Location: http://nevadamsmith.com/wp-content/plugins/jetpack/1/
X-Server-Cache: true
X-Proxy-Cache: HIT
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 13 Jan 2023 18:41:56 GMT
content-type: application/json
age: 2510
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 64765d3d978fd74d7bc47d55d4f097cf
92eb3f0d55ba99be28105c0b28ef7dd456817f1f
761aab02513e7a0ec55ea59109e88b39cbd4e17df0cd2035aa37a4693f22d1f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "761AAB02513E7A0EC55EA59109E88B39CBD4E17DF0CD2035AA37A4693F22D1F3"
Last-Modified: Thu, 12 Jan 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2749
Expires: Fri, 13 Jan 2023 20:09:35 GMT
Date: Fri, 13 Jan 2023 19:23:46 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: QRykFlHLwbDAAMbRnlPLWwAkQyCu9CXxGq8+CEmFO/V7zN0PQTssWEykWy0E4Zy0uEmRBL7E+lQ=
x-amz-request-id: 4M7FPMTQ5QRMVDS2
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 13 Jan 2023 19:03:03 GMT
age: 1243
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 19:23:46 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Montserrat%3A400%2C%2C500&display=fallback&ver=2.6.1
200 OK 538 B URL HTTP/1.1 fonts.googleapis.com/css?family=Montserrat%3A400%2C%2C500&display=fallback&ver=2.6.1
IP
Hash e9d6fe4ffab041563629f4592f2318a0
ac2826d46a8a4a451e70cbbfd40d138d33e3423a
7b10161ff4c2baee6e05f5c838f6e58c7bb683c903f0fb3175185521b15526cb
GET /css?family=Montserrat%3A400%2C%2C500&display=fallback&ver=2.6.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nevadamsmith.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Fri, 13 Jan 2023 19:23:47 GMT
Date: Fri, 13 Jan 2023 19:23:47 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
nevadamsmith.com/wp-content/plugins/jetpack/1/
200 OK 18 kB URL HTTP/1.1 nevadamsmith.com/wp-content/plugins/jetpack/1/
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (22740), with CRLF, LF line terminators
Hash 6007f067a2b8969c527ca1c79d2de7c9
b6a971939d615623091b759fc02139bfe3b1a7be
8cb72517f51092149381ed68555c63320176f17fdb5e978b21c1cc1ba7ab76fb
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/jetpack/1/ HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 19:23:42 GMT
Server: nginx/1.21.6
Content-Type: text/html; charset=UTF-8
Link: <https://nevadamsmith.com/index.php?rest_route=/>; rel="https://api.w.org/", <https://nevadamsmith.com/index.php?rest_route=/wp/v2/pages/218>; rel="alternate"; type="application/json", <https://nevadamsmith.com/>; rel=shortlink
Vary: Accept-Encoding
Content-Encoding: gzip
X-Server-Cache: true
X-Proxy-Cache: HIT
Transfer-Encoding: chunked
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b5628887325331ad3d660f7208e1995c
9e4bf04468a7aed126488ccb5552a8e02610f6dd
5cd181d6728fc5f0f4d88407b97af61db39c5a38feebdeb2c21335cf4402fca4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 19:23:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
nevadamsmith.com/wp-content/themes/astra/assets/js/minified/style.min.js?ver=2.6.1
200 OK 3.6 kB URL HTTP/1.1 nevadamsmith.com/wp-content/themes/astra/assets/js/minified/style.min.js?ver=2.6.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (10594), with no line terminators
Hash 5c244ddd3d5b81f943cc06bb3d39eae0
937bc56733f05985e8b6bad6e6ccd11e106c59eb
7f4883c7ab2bb307c921ae27ce4821017e907b8361b421883f61495c40cf9965
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/astra/assets/js/minified/style.min.js?ver=2.6.1 HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nevadamsmith.com/wp-content/plugins/jetpack/1/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 19:23:47 GMT
Server: Apache
Last-Modified: Thu, 03 Dec 2020 12:08:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3642
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 709dbdc77e1779e7c77865fa27f2573a
8781ced82c5109fbe49e8897844c7c1b89f4c340
8b02e05fc2de10b7aa4115870138f3b4e2a1f79a844924d7c50072b002405dc1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 19:23:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
nevadamsmith.com/wp-content/themes/astra/assets/css/minified/style.min.css?ver=2.6.1
200 OK 21 kB URL HTTP/1.1 nevadamsmith.com/wp-content/themes/astra/assets/css/minified/style.min.css?ver=2.6.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (63137), with CRLF line terminators
Hash cbafdcd9970fc6fe8e853cbb11e73c89
cc10a12a2d8e0358a06e11cf79218bffcecaac1e
0cddc443c382030088aa70eb46b477e971a8f8e72153dde690572f2fda0fdd97
GET /wp-content/themes/astra/assets/css/minified/style.min.css?ver=2.6.1 HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nevadamsmith.com/wp-content/plugins/jetpack/1/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 19:23:47 GMT
Server: Apache
Last-Modified: Thu, 03 Dec 2020 12:08:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked
Content-Type: text/css
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Pragma, Content-Length, Alert, Expires, ETag, Last-Modified, Backoff, Content-Type, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 13 Jan 2023 19:17:25 GMT
age: 382
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
nevadamsmith.com/wp-content/uploads/elementor/css/post-226.css?ver=1616522927
200 OK 688 B URL HTTP/1.1 nevadamsmith.com/wp-content/uploads/elementor/css/post-226.css?ver=1616522927
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2455), with no line terminators
Hash 83c8d4255065d1673416d97318f831f0
94de6c30e27957048a6aa59875bd0742f21e7ea2
e02091bebe7ffe055a311f970b82badc9ce6c904114980000f6eec048bebda57
GET /wp-content/uploads/elementor/css/post-226.css?ver=1616522927 HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nevadamsmith.com/wp-content/plugins/jetpack/1/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 19:23:47 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade
Last-Modified: Tue, 23 Mar 2021 18:08:47 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 688
Content-Type: text/css
nevadamsmith.com/wp-content/uploads/elementor/css/post-218.css?ver=1616522928
200 OK 2.7 kB URL HTTP/1.1 nevadamsmith.com/wp-content/uploads/elementor/css/post-218.css?ver=1616522928
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (11631), with no line terminators
Hash 1d4519ee26a514a6cb877b7873892e1a
4ee5dca759fc6aee414f7756caacbda924c73efb
434221adb1af4f19b2698b52f7606fc9d7a2a77d5c720d0b0082334da80d42eb
GET /wp-content/uploads/elementor/css/post-218.css?ver=1616522928 HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nevadamsmith.com/wp-content/plugins/jetpack/1/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 19:23:47 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade
Last-Modified: Tue, 23 Mar 2021 18:08:48 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2659
Content-Type: text/css
nevadamsmith.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=2.9.2
200 OK 3.0 kB URL HTTP/1.1 nevadamsmith.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=2.9.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (10019)
Hash c2b5af6052f630a96e450e5e2a3cea52
00ca76a8828a1bbec1534eb10786804fd36492f2
58f6cc2d4fa3e528622102975fb62949dc0170bd47b588a67318d18552a57d59
GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=2.9.2 HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nevadamsmith.com/wp-content/plugins/jetpack/1/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 19:23:47 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade
Last-Modified: Thu, 25 Mar 2021 01:55:16 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2997
Content-Type: text/css
ocsp.digicert.com/
200 OK 471 B IP
Hash b1e3535cab3c1ac295b1412126a9325c
d1bdf1b8663817ae34b6182db29d6b20666779e7
90c4ecd4b0782647fd78110b5bacfb73d2b05aae4de789a90318574407dfb565
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1172
Cache-Control: max-age=136951
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 19:23:47 GMT
Etag: "63c11f26-1d7"
Expires: Sun, 15 Jan 2023 09:26:18 GMT
Last-Modified: Fri, 13 Jan 2023 09:06:46 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
nevadamsmith.com/wp-includes/js/wp-emoji-release.min.js?ver=5.7
200 OK 4.9 kB URL HTTP/1.1 nevadamsmith.com/wp-includes/js/wp-emoji-release.min.js?ver=5.7
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (11272)
Hash 365a77ff4ecd6f029c81de14e2522c73
2a817a1e1091bdf10e562b746e7e9619ed5ef5d5
a46d0e1f9b302519b11da0266586429a4d6eaf6fb2914c29f0e9208f7d2eb355
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.7 HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nevadamsmith.com/wp-content/plugins/jetpack/1/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 19:23:47 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 01:49:35 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4942
Content-Type: application/javascript
nevadamsmith.com/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9
200 OK 4.0 kB URL HTTP/1.1 nevadamsmith.com/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (16845), with no line terminators
Hash b1facf7464db3b4e9558a574fd8a213b
742fe12a3c93d72b2a9bf73e0dcf6cac8f0b2b2f
8b9c3275333110addf33eb00e3d801b51f32cb442cb0dfde68ebc578093bcf07
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9 HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nevadamsmith.com/wp-content/plugins/jetpack/1/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 19:23:47 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 01:45:11 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3978
Content-Type: text/css
nevadamsmith.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.6.2
200 OK 3.4 kB URL HTTP/1.1 nevadamsmith.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.6.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (15953)
Hash fc6fcc430de9ba6d347ae257e7144b8d
83515c1cc6f08fadc6c5d4ee010c307d063e2c39
d8ad77f330ff413d1ff039832cbcb11bf409b1a40be4523d5c9220ac35d5df3f
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.6.2 HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nevadamsmith.com/wp-content/plugins/jetpack/1/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 19:23:47 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 01:55:16 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3372
Content-Type: text/css
nevadamsmith.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=2.9.2
200 OK 23 kB URL HTTP/1.1 nevadamsmith.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=2.9.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65497)
Hash 7f30808ae25ee4f53308124c5e324945
d0b1462b9781de72bf9ddd38098da4ddfe82d3b0
5d8f3550ac0581e7d478976b9aba380ed6ecaa29c2857e5dfb5d8c16b687165c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=2.9.2 HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nevadamsmith.com/wp-content/plugins/jetpack/1/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 19:23:47 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade
Last-Modified: Thu, 25 Mar 2021 01:55:16 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked
Content-Type: text/css
nevadamsmith.com/wp-includes/css/dist/block-library/style.min.css?ver=5.7
200 OK 12 kB URL HTTP/1.1 nevadamsmith.com/wp-includes/css/dist/block-library/style.min.css?ver=5.7
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (29677)
Hash 1edbe0b4fcaaafa3cb2dedecc38f524b
fdc31fa5e2f43e84fbabbd1ef8d13388819b1a3f
7d7baf532816e1b55f1b56e7e032e58b053e834dfe46331db834ad40000716b3
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.7 HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nevadamsmith.com/wp-content/plugins/jetpack/1/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 19:23:47 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 01:49:35 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11788
Content-Type: text/css
nevadamsmith.com/wp-includes/js/wp-embed.min.js?ver=5.7
200 OK 777 B URL HTTP/1.1 nevadamsmith.com/wp-includes/js/wp-embed.min.js?ver=5.7
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1391)
Hash 06ece4d01ee88297957c9f4cdcaa4df5
2b3321654a8ead1e1493eac9b5f1fdfb65e2037f
0b17eb6ab02e69f50ac52ca157375bd69853ae4f4796eb48a35eb4a12fc7af8b
GET /wp-includes/js/wp-embed.min.js?ver=5.7 HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nevadamsmith.com/wp-content/plugins/jetpack/1/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 19:23:47 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 01:49:35 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 777
Content-Type: application/javascript
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: bw9CIL/eehrB979FeotF+A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: OhCJbRr6PMB61uaANnEspIrb9qE=
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
200 OK 31 kB URL HTTP/1.1 fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Hash ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://nevadamsmith.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 30928
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 13 Jan 2023 13:36:33 GMT
Expires: Sat, 13 Jan 2024 13:36:33 GMT
Cache-Control: public, max-age=31536000
Age: 20835
Last-Modified: Mon, 11 Jul 2022 18:57:39 GMT
Content-Type: font/woff2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bcda166666b85fee269f7730df586193
457edf4c21c0ae930d8810a679fd65f8918c3c94
aaf5548dadfd15830e48f5d696dde22b1984bc0f5a5e0e5591a9c007ded325df
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 19:23:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
nevadamsmith.com/wp-content/plugins/instagram-feed/js/sbi-scripts.min.js?ver=2.9
200 OK 9.3 kB URL HTTP/1.1 nevadamsmith.com/wp-content/plugins/instagram-feed/js/sbi-scripts.min.js?ver=2.9
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (25969), with no line terminators
Hash f98b7c06cf234d89f42c7741d2e2baac
637af7494fd78883ee4ad86cad459c2fbbad1885
0152ee370d3d1ed5ad2f1fa3c9e579b81bf8c065b0051fbdf8b9159c306feaf6
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/instagram-feed/js/sbi-scripts.min.js?ver=2.9 HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nevadamsmith.com/wp-content/plugins/jetpack/1/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 19:23:48 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 01:45:11 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 9333
Content-Type: application/javascript
nevadamsmith.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.6 kB URL HTTP/1.1 nevadamsmith.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (11126)
Hash acdb97105af28a7066790c6748ae2e1e
65794d2c5a9d04f747faf370bc8bacd330e69e5a
dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nevadamsmith.com/wp-content/plugins/jetpack/1/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 19:23:48 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 01:49:35 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4618
Content-Type: application/javascript
nevadamsmith.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=2.9.2
200 OK 24 kB URL HTTP/1.1 nevadamsmith.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=2.9.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (38519), with LF, NEL line terminators
Hash 9431f2a757291daa64ebbd2cb7f1177a
a88b66744959dc9b1a6fb54dd32a137983979df9
8cc0f458c6ae5f431275e83940bfa292f62e5fd76eaf9159f0f3f2d6d0b00b0d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=2.9.2 HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nevadamsmith.com/wp-content/plugins/jetpack/1/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 19:23:48 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 01:55:16 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked
Content-Type: application/javascript
nevadamsmith.com/wp-includes/js/jquery/ui/core.min.js?ver=1.12.1
200 OK 8.2 kB URL HTTP/1.1 nevadamsmith.com/wp-includes/js/jquery/ui/core.min.js?ver=1.12.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (7980)
Hash f0983cddaea19cb617530443b9e911e4
cd7e8304064074f6b21b23813b1fa85cfb00488e
d3d98dbdb912d4c346b5439e81aa5302bafbcf21489575c56a07c174421f47dc
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.12.1 HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nevadamsmith.com/wp-content/plugins/jetpack/1/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 19:23:48 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 01:49:35 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8229
Content-Type: application/javascript
nevadamsmith.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.7.6
200 OK 4.2 kB URL HTTP/1.1 nevadamsmith.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.7.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (10557)
Hash 489a8f7bfa4f54e4ce2954095b7725ef
d6cefb1adead8bf70e6402b9ff7c704644657e1b
215d0d3e53ea476cb95b692ba607eb11f41f1447d160bd922f175480ed96b785
GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.7.6 HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nevadamsmith.com/wp-content/plugins/jetpack/1/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 19:23:48 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 01:55:16 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4221
Content-Type: application/javascript
fonts.gstatic.com/s/cormorantupright/v18/VuJrdM3I2Y35poFONtLdafkUCHw1y1vShDU.woff2
200 OK 33 kB URL HTTP/2 fonts.gstatic.com/s/cormorantupright/v18/VuJrdM3I2Y35poFONtLdafkUCHw1y1vShDU.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 33284, version 1.0\012- data
Hash 8fd14d80fef562e53ba9cba26676a300
0ea27c0cf7abf01b8b445078bde8d3317fb1a08a
d3e6d87a3c23d6dd01e19d5cf4623dc6690f0eacb63211a89ca9e1f4e8460191
GET /s/cormorantupright/v18/VuJrdM3I2Y35poFONtLdafkUCHw1y1vShDU.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://nevadamsmith.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33284
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 09 Jan 2023 10:08:10 GMT
expires: Tue, 09 Jan 2024 10:08:10 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 21 Apr 2022 16:45:18 GMT
content-type: font/woff2
age: 378938
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
nevadamsmith.com/wp-includes/js/jquery/jquery.min.js?ver=3.5.1
200 OK 39 kB URL HTTP/1.1 nevadamsmith.com/wp-includes/js/jquery/jquery.min.js?ver=3.5.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65451)
Hash 42e9fa1757bc5326671ba7eae0acd9ed
67aef482c8b9b09528525d6388e4c3ef1fc711c7
09d42875fc76ec41061a4cae4e26c6e7e043bc7934ab7cf8184801d5c754ee38
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery.min.js?ver=3.5.1 HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nevadamsmith.com/wp-content/plugins/jetpack/1/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 19:23:47 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 01:49:35 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bcda166666b85fee269f7730df586193
457edf4c21c0ae930d8810a679fd65f8918c3c94
aaf5548dadfd15830e48f5d696dde22b1984bc0f5a5e0e5591a9c007ded325df
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 19:23:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
nevadamsmith.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
200 OK 3.7 kB URL HTTP/1.1 nevadamsmith.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (12198), with no line terminators
Hash e2a8decccf4d0a6b925af707a36077a9
26a0febc9c3d91e75410f74b9ec62099ba1cbe90
09e0e638a6f53c0fdcfeeb8ae91f3a404bef47b471324e335e29be14a2aa87f7
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nevadamsmith.com/wp-content/plugins/jetpack/1/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 19:23:48 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 01:55:16 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3747
Content-Type: application/javascript
nevadamsmith.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=2.9.2
200 OK 1.2 kB URL HTTP/1.1 nevadamsmith.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=2.9.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2634)
Hash 76fbdec17b1f927128dfccd7a376c3c2
e54780c88f4aa73d8b5fad9387327cc62c18085e
9e2b78522c05d40de77519454ae66a5ed16a3b6dd3b6c7a965ee8fcb4b1de0f0
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=2.9.2 HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nevadamsmith.com/wp-content/plugins/jetpack/1/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 19:23:48 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 01:55:16 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1167
Content-Type: application/javascript
nevadamsmith.com/wp-content/plugins/instagram-feed/img/placeholder.png
200 OK 176 B URL HTTP/1.1 nevadamsmith.com/wp-content/plugins/instagram-feed/img/placeholder.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 1000 x 560, 1-bit colormap, non-interlaced\012- data
Hash a5443c5bb9bd40f1b1e6652eedce9925
aefb6c761d953a69c8b7ee7d98cad00545d74364
f623564c53c2e08780c064012cfbdbde0a80ee56816f4d5d3d52c46ed285cb95
GET /wp-content/plugins/instagram-feed/img/placeholder.png HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nevadamsmith.com/wp-content/plugins/jetpack/1/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 19:23:48 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 01:45:11 GMT
Accept-Ranges: bytes
Content-Length: 176
Content-Type: image/png
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d0aeaccbed4ae6add72b44c31a106e63
b79d94381eb8c9a5904ac119a69c4ab0cdd6ccb2
2a8cab66bc6427f23204aa791b569e85eb45fe78454092f3768bddadc7d487eb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A8CAB66BC6427F23204AA791B569E85EB45FE78454092F3768BDDADC7D487EB"
Last-Modified: Fri, 13 Jan 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sat, 14 Jan 2023 01:23:48 GMT
Date: Fri, 13 Jan 2023 19:23:48 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d0aeaccbed4ae6add72b44c31a106e63
b79d94381eb8c9a5904ac119a69c4ab0cdd6ccb2
2a8cab66bc6427f23204aa791b569e85eb45fe78454092f3768bddadc7d487eb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A8CAB66BC6427F23204AA791B569E85EB45FE78454092F3768BDDADC7D487EB"
Last-Modified: Fri, 13 Jan 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21549
Expires: Sat, 14 Jan 2023 01:22:57 GMT
Date: Fri, 13 Jan 2023 19:23:48 GMT
Connection: keep-alive
nevadamsmith.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.0
200 OK 47 kB URL HTTP/1.1 nevadamsmith.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65281)
Hash 941f7ebf787242fcf5bffcfcf7286a75
163588f00419ef6ecf2facff3dbf87e46daaa20f
ce26b56be97928ab34e202bb5f9c06b52642ae96876304c16a54848479c7e23d
GET /wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.0 HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nevadamsmith.com/wp-content/plugins/jetpack/1/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 19:23:48 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 01:55:16 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked
Content-Type: application/javascript
nevadamsmith.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=2.9.2
200 OK 44 kB URL HTTP/1.1 nevadamsmith.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=2.9.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (37807), with LF, NEL line terminators
Hash 5eab7f96f9a29bba573049a0257958ae
3fa7bc101ddf4747e66338fb01f8383101816dcc
ecb64b257128f50e010bd0b560243f3b27e2e02b304462a1b6afd3ca088113af
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=2.9.2 HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nevadamsmith.com/wp-content/plugins/jetpack/1/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 19:23:48 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 01:55:16 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked
Content-Type: application/javascript
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c6369671820bf489e380ea7521799dc4
70482ad5b06c79336df49c5b5d463558fd144d94
d0250a4455bb6971688bd84f61bf40d3ef777a1635429beb31ac36145b353d52
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D0250A4455BB6971688BD84F61BF40D3EF777A1635429BEB31AC36145B353D52"
Last-Modified: Thu, 12 Jan 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21571
Expires: Sat, 14 Jan 2023 01:23:19 GMT
Date: Fri, 13 Jan 2023 19:23:48 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c6369671820bf489e380ea7521799dc4
70482ad5b06c79336df49c5b5d463558fd144d94
d0250a4455bb6971688bd84f61bf40d3ef777a1635429beb31ac36145b353d52
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D0250A4455BB6971688BD84F61BF40D3EF777A1635429BEB31AC36145B353D52"
Last-Modified: Thu, 12 Jan 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21536
Expires: Sat, 14 Jan 2023 01:22:44 GMT
Date: Fri, 13 Jan 2023 19:23:48 GMT
Connection: keep-alive
nevadamsmith.com/wp-content/uploads/2020/12/logo1.png
200 OK 3.9 kB URL HTTP/2 nevadamsmith.com/wp-content/uploads/2020/12/logo1.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 180 x 46, 8-bit/color RGBA, non-interlaced\012- data
Hash 63395f4225d72271881e66643ec8b2cb
ebf10814fec52568a5ed16d5690f13faa5fc5e84
965f6f39f2d3c49a2aa1b6fde251280765dbdadf1ecd1279b45c2f9653f26e76
GET /wp-content/uploads/2020/12/logo1.png HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nevadamsmith.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 03 Dec 2020 12:09:26 GMT
accept-ranges: bytes
content-length: 3902
content-type: image/png
date: Fri, 13 Jan 2023 19:23:48 GMT
server: Apache
X-Firefox-Spdy: h2
nevadamsmith.com/wp-content/uploads/sb-instagram-feed-images/321614385_495224092595559_5243084252093622948_nlow.jpg
200 OK 36 kB URL HTTP/1.1 nevadamsmith.com/wp-content/uploads/sb-instagram-feed-images/321614385_495224092595559_5243084252093622948_nlow.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x569, components 3\012- data
Hash 7ffbe1871b42f16266ca89d32b209000
7004d14f6adec49aa70169a23ddec95b6d586e2c
771d89902d45ad3abacbb237ac4654c7b8fe912e1dd0fc1a43eccaf029e1fff3
GET /wp-content/uploads/sb-instagram-feed-images/321614385_495224092595559_5243084252093622948_nlow.jpg HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nevadamsmith.com/wp-content/plugins/jetpack/1/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 19:23:48 GMT
Server: Apache
Last-Modified: Mon, 26 Dec 2022 04:15:08 GMT
Accept-Ranges: bytes
Content-Length: 36022
Content-Type: image/jpeg
nevadamsmith.com/wp-content/uploads/sb-instagram-feed-images/318525646_941370663914910_7345427724226896279_nlow.jpg
200 OK 22 kB URL HTTP/1.1 nevadamsmith.com/wp-content/uploads/sb-instagram-feed-images/318525646_941370663914910_7345427724226896279_nlow.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x569, components 3\012- data
Hash c8525ec01ab9268e91f929f7e96cbc06
c63da7353bcee1575200f660abbf70c658d7849c
c86d2225cd396cbf9d7a14f1f86be75fddd9c6409280b252d8be541aa5cb59fb
GET /wp-content/uploads/sb-instagram-feed-images/318525646_941370663914910_7345427724226896279_nlow.jpg HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nevadamsmith.com/wp-content/plugins/jetpack/1/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 19:23:48 GMT
Server: Apache
Last-Modified: Wed, 07 Dec 2022 20:14:48 GMT
Accept-Ranges: bytes
Content-Length: 22327
Content-Type: image/jpeg
nevadamsmith.com/wp-content/uploads/sb-instagram-feed-images/317844264_177080708254983_2178881623213964718_nlow.jpg
200 OK 25 kB URL HTTP/1.1 nevadamsmith.com/wp-content/uploads/sb-instagram-feed-images/317844264_177080708254983_2178881623213964718_nlow.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x400, components 3\012- data
Hash 8ca27b038be70bf190e81c49582af3a6
8322262bd3ee53f7316ad2b620f00ba605e6b55a
415daf394f69fd3893ea2153d2536094914d8e62de1917ff18e7205e68e05fb2
GET /wp-content/uploads/sb-instagram-feed-images/317844264_177080708254983_2178881623213964718_nlow.jpg HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nevadamsmith.com/wp-content/plugins/jetpack/1/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 19:23:48 GMT
Server: Apache
Last-Modified: Sun, 04 Dec 2022 19:38:56 GMT
Accept-Ranges: bytes
Content-Length: 24838
Content-Type: image/jpeg
nevadamsmith.com/wp-content/uploads/sb-instagram-feed-images/317924474_2353183834855518_5194509667817080109_nlow.jpg
200 OK 17 kB URL HTTP/1.1 nevadamsmith.com/wp-content/uploads/sb-instagram-feed-images/317924474_2353183834855518_5194509667817080109_nlow.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x400, components 3\012- data
Hash 20b1a120bfda29a78026bf32ef04c252
7455de894363ea6f5beefeaddd0459aafe1d6e6b
bcbc7ea508bff59ef27d7e0efd36c8675173913da21e2d347ed7b922fd606fce
GET /wp-content/uploads/sb-instagram-feed-images/317924474_2353183834855518_5194509667817080109_nlow.jpg HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nevadamsmith.com/wp-content/plugins/jetpack/1/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 19:23:48 GMT
Server: Apache
Last-Modified: Sat, 03 Dec 2022 07:24:02 GMT
Accept-Ranges: bytes
Content-Length: 17173
Content-Type: image/jpeg
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5338
Expires: Fri, 13 Jan 2023 20:52:47 GMT
Date: Fri, 13 Jan 2023 19:23:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5338
Expires: Fri, 13 Jan 2023 20:52:47 GMT
Date: Fri, 13 Jan 2023 19:23:49 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3e208c7-5fe2-4596-9fa0-fb608964c301.jpeg
200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3e208c7-5fe2-4596-9fa0-fb608964c301.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a1d7358529d4222d3bfcf48e5f77debd
8c9af0bb2a4a11e6e2c7b749d560d4ec50102a21
07df2ae85dfd4a633b18cdf8c82d29247fe451e8e6ba2d784d75770109c5448e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3e208c7-5fe2-4596-9fa0-fb608964c301.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6673
x-amzn-requestid: ed07bce8-c0a0-43f0-96b9-18db35b7b5f9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eWhZ7G3hoAMFVbQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b8e2a5-11afc3391dcc43051b5e2a5f;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 03:10:29 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vGWjXZyh7OkYgvpXVwUlhE0SmtJSij9qXK8VsXBVK-QNUNE0LhLfQg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 18:56:50 GMT
age: 1619
etag: "8c9af0bb2a4a11e6e2c7b749d560d4ec50102a21"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6934d824-7534-44bc-aa4b-a15b6eb4c9c8.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6934d824-7534-44bc-aa4b-a15b6eb4c9c8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bb3062f9905c7c6f159cd203f5fdfe64
bcf17c475a27fae03369d1677dc0bedf6793e6b2
33dc1a810207f498c28b764cc26afa00b16594629ae6777957ccffd8e2c51f8e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6934d824-7534-44bc-aa4b-a15b6eb4c9c8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9432
x-amzn-requestid: 2835c1c8-0a8e-4985-be89-d641d5425971
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eph50HONIAMF3vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c07d0b-53c6156514cdb1a463add03b;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 21:35:07 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: EOLxwKB_KBf_zkLlBLFn9nrDGM-FfONoTWUGR2093kLhka3wkb6yhg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 12 Jan 2023 22:02:02 GMT
age: 76907
etag: "bcf17c475a27fae03369d1677dc0bedf6793e6b2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa56e9680-25b8-493c-8831-f933aca26e52.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa56e9680-25b8-493c-8831-f933aca26e52.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e514f1b711f68a1699f9d0d269ca9a8a
71621fabcc4ae2a8c3180e22e63fac1217c4032f
cc10cadc4477cc6faa1973343b9019b1b4bc94e5ec9fab114a4b755f24872f35
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa56e9680-25b8-493c-8831-f933aca26e52.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9697
x-amzn-requestid: 6279e4e0-7268-422a-878c-3983bffa37d6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: edG9MHqjoAMF3dQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bb8521-59063fac03eb407d74cabd38;Sampled=0
x-amzn-remapped-date: Mon, 09 Jan 2023 03:08:17 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: LdM05QUvlJcxt8IaDM9Wr4_CM5-SrhsBRAkVcdkVxNiyrJveNFHK9g==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 05:12:42 GMT
age: 51067
etag: "71621fabcc4ae2a8c3180e22e63fac1217c4032f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a23d61d610c7b55d943fcb2636a01b65
82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065
28bf3039cc8c1213e64893c71bc150eda573223feb2cc15ad0814a44960d434a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9539
x-amzn-requestid: eb427fd6-c342-4a22-af45-ecc528cf4a8a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: epfDqEAZIAMFudQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c0787d-4f61ecd2422081224869da76;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 21:15:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RRMRT2BC5p1x0Vh20ut0Kjbz2mnaNToUIbzIg9oczduvzYCckvFORA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 06:50:08 GMT
age: 45221
etag: "82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7792e19-fdcf-4706-b221-7d3353e6b9ae.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7792e19-fdcf-4706-b221-7d3353e6b9ae.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ba61442e6ededd7b49f6244613df0e63
385f45b5920174ca20bcc2d9c02eedb4641f48a9
5e5cd1fd026dc72d0c3c5032fbae17f3383c64ee2714808c892c094353f31012
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7792e19-fdcf-4706-b221-7d3353e6b9ae.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5990
x-amzn-requestid: 54a83ca0-eb61-4212-8c98-e1e182b860ea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ejsZiEeBoAMF7kg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63be2770-3565b4d43d28ee3c0fd16ed0;Sampled=0
x-amzn-remapped-date: Wed, 11 Jan 2023 03:05:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: SUICoi37lPgXPQu4PTLCmc-6l2G9SHKz8f2qhZgHBMEbuuSi5zMiaQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 03:38:24 GMT
age: 56725
etag: "385f45b5920174ca20bcc2d9c02eedb4641f48a9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb840d484-56de-4f38-ad4b-0cb93e4b1274.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb840d484-56de-4f38-ad4b-0cb93e4b1274.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7c276d1876bfcc6ec4dfb94bcdd2f6c8
177a80d7d4d3fc273a712cada41abdd87b138a6c
abceeefeec2fc658e285a2898e38a36643501bfa1d66f33e216f100e456a8c06
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb840d484-56de-4f38-ad4b-0cb93e4b1274.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8785
x-amzn-requestid: 4844b27a-1080-4d95-9a35-c8ab7cdd9acb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eph7sEajoAMF_gg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c07d17-2520efc6579a4fbc25cdb515;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 21:35:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RKH9tjX9MxE-NWDVWa4KZqrXKnzx-2200m_vm18DyYeWII0U6NgsVA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Thu, 12 Jan 2023 22:00:02 GMT
etag: "177a80d7d4d3fc273a712cada41abdd87b138a6c"
content-type: image/jpeg
age: 77027
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
nevadamsmith.com/favicon.ico
301 Moved Permanently 0 B URL HTTP/1.1 nevadamsmith.com/favicon.ico
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nevadamsmith.com/wp-content/plugins/jetpack/1/
HTTP/1.1 301 Moved Permanently
Date: Fri, 13 Jan 2023 19:23:45 GMT
Server: nginx/1.21.6
Content-Type: text/html; charset=UTF-8
Content-Length: 0
X-Redirect-By: WordPress
Location: http://nevadamsmith.com/favicon.ico/
X-Server-Cache: true
X-Proxy-Cache: EXPIRED
nevadamsmith.com/favicon.ico/
200 OK 18 kB URL HTTP/1.1 nevadamsmith.com/favicon.ico/
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (22740), with CRLF, LF line terminators
Hash 6007f067a2b8969c527ca1c79d2de7c9
b6a971939d615623091b759fc02139bfe3b1a7be
8cb72517f51092149381ed68555c63320176f17fdb5e978b21c1cc1ba7ab76fb
Analyzer Verdict Alert fortinet Malware
GET /favicon.ico/ HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nevadamsmith.com/wp-content/plugins/jetpack/1/
Connection: keep-alive
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 19:23:45 GMT
Server: nginx/1.21.6
Content-Type: text/html; charset=UTF-8
Link: <https://nevadamsmith.com/index.php?rest_route=/>; rel="https://api.w.org/", <https://nevadamsmith.com/index.php?rest_route=/wp/v2/pages/218>; rel="alternate"; type="application/json", <https://nevadamsmith.com/>; rel=shortlink
Vary: Accept-Encoding
Content-Encoding: gzip
X-Server-Cache: true
X-Proxy-Cache: MISS
Transfer-Encoding: chunked
nevadamsmith.com/wp-content/uploads/2020/12/IMG_1316.jpg
200 OK 0 B URL HTTP/2 nevadamsmith.com/wp-content/uploads/2020/12/IMG_1316.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
GET /wp-content/uploads/2020/12/IMG_1316.jpg HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nevadamsmith.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 03 Dec 2020 22:34:33 GMT
accept-ranges: bytes
content-length: 2138734
content-type: image/jpeg
date: Fri, 13 Jan 2023 19:23:48 GMT
server: Apache
X-Firefox-Spdy: h2
nevadamsmith.com/wp-content/uploads/2020/12/background2.jpg
200 OK 0 B URL HTTP/2 nevadamsmith.com/wp-content/uploads/2020/12/background2.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
GET /wp-content/uploads/2020/12/background2.jpg HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nevadamsmith.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Fri, 04 Dec 2020 01:54:43 GMT
accept-ranges: bytes
content-length: 137107
content-type: image/jpeg
date: Fri, 13 Jan 2023 19:23:49 GMT
server: Apache
X-Firefox-Spdy: h2
nevadamsmith.com/wp-content/uploads/2020/12/background-black-coffee-compose-1262973-1210x423-1.jpg
200 OK 0 B URL HTTP/2 nevadamsmith.com/wp-content/uploads/2020/12/background-black-coffee-compose-1262973-1210x423-1.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
GET /wp-content/uploads/2020/12/background-black-coffee-compose-1262973-1210x423-1.jpg HTTP/1.1
Host: nevadamsmith.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nevadamsmith.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 03 Dec 2020 22:32:39 GMT
accept-ranges: bytes
content-length: 334309
content-type: image/jpeg
date: Fri, 13 Jan 2023 19:23:49 GMT
server: Apache
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CCormorant+Upright%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&ver=5.7
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CCormorant+Upright%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&ver=5.7
IP
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CCormorant+Upright%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&ver=5.7 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nevadamsmith.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 13 Jan 2023 19:23:47 GMT
date: Fri, 13 Jan 2023 19:23:47 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
50.87.151.162
93.184.220.29
23.36.76.226