foldingillusions.com/
200 OK 23 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (17025)
Hash e286016bd5246f17d475a5384dcee249
4e75527871ef3f7a7f7e121b38b0c4d95af18945
a5cdc97049df1386056a04ea19e8bf9dc0720bdf736b1a5bcc6f9ebeabe7324b
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 26 Oct 2022 02:00:30 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache
Content-Encoding: gzip
WPO-Cache-Status: cached
Last-Modified: Tue, 25 Oct 2022 22:12:12 GMT
X-Powered-By: PHP/7.3.33, PleskLin
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e36c852b5e145f2f09fe73111fb162e1
e439c6a462f86a3003d6464a8b9999b1c4d1e210
52a721168d0c41cb0854ff8c730fce3b79db2e804b383238e95ff1401922bd74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "52A721168D0C41CB0854FF8C730FCE3B79DB2E804B383238E95FF1401922BD74"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3618
Expires: Wed, 26 Oct 2022 03:00:48 GMT
Date: Wed, 26 Oct 2022 02:00:30 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash c2bba4cad162918b17858b60e909e4d9
d9a1d4f7fb7635ab233ebbf776e6de1a2857032b
3a1d27ec3d034d6326b32f6054b6be46079a86a33e75d5a2a3796a0c4c5eadab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3020
Cache-Control: max-age=116461
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 02:00:30 GMT
Etag: "6357acdf-1d7"
Expires: Thu, 27 Oct 2022 10:21:31 GMT
Last-Modified: Tue, 25 Oct 2022 09:31:11 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash c2bba4cad162918b17858b60e909e4d9
d9a1d4f7fb7635ab233ebbf776e6de1a2857032b
3a1d27ec3d034d6326b32f6054b6be46079a86a33e75d5a2a3796a0c4c5eadab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3020
Cache-Control: max-age=116461
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 02:00:30 GMT
Etag: "6357acdf-1d7"
Expires: Thu, 27 Oct 2022 10:21:31 GMT
Last-Modified: Tue, 25 Oct 2022 09:31:11 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a39eea1096852891690eaee02a64383e
c273000f799fc3676e8e3ef3617611a31252cffc
d9d95319013d64bc2ef6d9870f4adba902ee970b6f9e96279c9ed86f556e0001
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D9D95319013D64BC2EF6D9870F4ADBA902EE970B6F9E96279C9ED86F556E0001"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16988
Expires: Wed, 26 Oct 2022 06:43:38 GMT
Date: Wed, 26 Oct 2022 02:00:30 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: vpLm5OV4bEU3Vdxt/xnnK6K5lh52V7dc7tyK7FXmyiVW/0Ddzl3mxqOYlp90evwHnT4yYpFjG1Ks0wcwLP9Adw==
x-amz-request-id: PAYM4GH7PDR2QPPT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 26 Oct 2022 01:09:10 GMT
age: 3080
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:30 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f1ae675435a8f16bc0b04ec012c41979
182f87a81464c80b0b25fb524c59592cd40b0ef4
9191ced121d8740b4ed3af75db3033e72c0c44c0b45004abd714583deaa749a4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 02:00:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e7f1de4025eee44eed5a0ada1e998d6c
fd8bfad40b964ffd3534ac3aff68aaf31d38ba37
fba4107e5627b68a00dc9c31a657be714c85dc7c648b8e8e1c7373cc305f8228
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 02:00:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-184503207-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-184503207-1
IP
File type ASCII text, with very long lines (1588)
Hash 28bed9410b1ebcea16541b81f1f84411
3a67410c4b1cb454d26d091f2070331211b59da2
2d36fd75d24772e567654a1a40a7276a9f8e4ad10b120e22474279d2158bfb11
GET /gtag/js?id=UA-184503207-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 26 Oct 2022 02:00:30 GMT
expires: Wed, 26 Oct 2022 02:00:30 GMT
cache-control: private, max-age=900
last-modified: Wed, 26 Oct 2022 00:11:56 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43673
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-MP69GDNWHF
200 OK 76 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-MP69GDNWHF
IP
File type ASCII text, with very long lines (18991)
Hash 508fe22d7cbe583ad91c07402f7495a7
78fe5d4b82e682cfc31e70e1b5d4fbf84c9ed7d4
a300c680ec03aea104768e3f69f4ecc770a6a14847bb49ff81a4ffe2e648a5b5
GET /gtag/js?id=G-MP69GDNWHF HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 26 Oct 2022 02:00:30 GMT
expires: Wed, 26 Oct 2022 02:00:30 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76166
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6dd4ccddf91642d447753866fe8b803a
b8c78866ecc8f924885520c7f10da92c501ff5b6
c38e09dbdfaee51b31b3c0c058f1251df81352337db5038c993884cff75a553b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C38E09DBDFAEE51B31B3C0C058F1251DF81352337DB5038C993884CFF75A553B"
Last-Modified: Sun, 23 Oct 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 26 Oct 2022 08:00:30 GMT
Date: Wed, 26 Oct 2022 02:00:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d409b38cdec689dd107efad0857da737
55359a3140e3fb45c47b27d3994bf2cbf4732074
c99bc3ba419ace7f78d7b46793245aec9c8354549b30cb24c2ff44f51eb94e5d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C99BC3BA419ACE7F78D7B46793245AEC9C8354549B30CB24C2FF44F51EB94E5D"
Last-Modified: Wed, 26 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 26 Oct 2022 08:00:30 GMT
Date: Wed, 26 Oct 2022 02:00:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d409b38cdec689dd107efad0857da737
55359a3140e3fb45c47b27d3994bf2cbf4732074
c99bc3ba419ace7f78d7b46793245aec9c8354549b30cb24c2ff44f51eb94e5d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C99BC3BA419ACE7F78D7B46793245AEC9C8354549B30CB24C2FF44F51EB94E5D"
Last-Modified: Wed, 26 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 26 Oct 2022 08:00:30 GMT
Date: Wed, 26 Oct 2022 02:00:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6dd4ccddf91642d447753866fe8b803a
b8c78866ecc8f924885520c7f10da92c501ff5b6
c38e09dbdfaee51b31b3c0c058f1251df81352337db5038c993884cff75a553b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C38E09DBDFAEE51B31B3C0C058F1251DF81352337DB5038C993884CFF75A553B"
Last-Modified: Sun, 23 Oct 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21546
Expires: Wed, 26 Oct 2022 07:59:36 GMT
Date: Wed, 26 Oct 2022 02:00:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d409b38cdec689dd107efad0857da737
55359a3140e3fb45c47b27d3994bf2cbf4732074
c99bc3ba419ace7f78d7b46793245aec9c8354549b30cb24c2ff44f51eb94e5d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C99BC3BA419ACE7F78D7B46793245AEC9C8354549B30CB24C2FF44F51EB94E5D"
Last-Modified: Wed, 26 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21551
Expires: Wed, 26 Oct 2022 07:59:41 GMT
Date: Wed, 26 Oct 2022 02:00:30 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f1ae675435a8f16bc0b04ec012c41979
182f87a81464c80b0b25fb524c59592cd40b0ef4
9191ced121d8740b4ed3af75db3033e72c0c44c0b45004abd714583deaa749a4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 02:00:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
foldingillusions.com/wp-content/uploads/2021/01/logox1-1.png
200 OK 16 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/01/logox1-1.png
IP
File type PNG image data, 150 x 162, 8-bit/color RGBA, non-interlaced\012- data
Hash 3b9698964078bbc1012eb587c0d48583
79b7c92e5527627e823131d632b4c1d6a4512ce2
8dd0c0ef3fb286d10a403bf31d552a9b1c01c3a65178b5e57ec547d477e7e9ec
GET /wp-content/uploads/2021/01/logox1-1.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:30 GMT
content-type: image/png
content-length: 16490
last-modified: Thu, 25 Feb 2021 06:51:07 GMT
etag: "603748db-406a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 518ff04fd536958e285cf07aaf4a2786
fa5dad2391c2a9957340bd629f0462db4f412a5c
608c78964412d5dc7025e9cbfaef345d448a29eae0f11257c49a41f274917b9a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6543
Cache-Control: max-age=114920
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 02:00:31 GMT
Etag: "63579918-1d7"
Expires: Thu, 27 Oct 2022 09:55:51 GMT
Last-Modified: Tue, 25 Oct 2022 08:06:48 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
foldingillusions.com/wp-content/uploads/2021/05/Fotofolio_peto-1.jpg
200 OK 174 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/05/Fotofolio_peto-1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=18, height=3024, bps=0, PhotometricIntepretation=RGB, manufacturer=Apple, model=iPhone 8 Plus, orientation=upper-left, width=3553], baseline, precision 8, 823x751, components 3\012- data
Size 174 kB (174477 bytes)
Hash 855d29ef241a0c92eb963f695f33dfcd
e16a8ee02e179953533cd30558167151b1b656a9
326ece4ffb597da49922d3093ca68eaf5e1b59ae30892501a7ad2aa72fb08afa
GET /wp-content/uploads/2021/05/Fotofolio_peto-1.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:31 GMT
content-type: image/jpeg
content-length: 174477
last-modified: Sun, 02 May 2021 15:05:44 GMT
etag: "608ebfc8-2a98d"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/05/Fotofolio_oriental_portada-2-1.jpg
200 OK 206 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/05/Fotofolio_oriental_portada-2-1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=15, height=3024, bps=0, PhotometricIntepretation=RGB, manufacturer=Apple, model=iPhone 8 Plus, orientation=upper-left, width=4032], baseline, precision 8, 823x751, components 3\012- data
Size 206 kB (205897 bytes)
Hash c1e1ad92e89a6586c8a9403a01ccde39
942f859de60580ab73911771baf55787cfccacd8
ad5fd4531b10a6da8233705bcc96329e490978728a198c51121df3f77862f573
GET /wp-content/uploads/2021/05/Fotofolio_oriental_portada-2-1.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:31 GMT
content-type: image/jpeg
content-length: 205897
last-modified: Sun, 02 May 2021 15:05:00 GMT
etag: "608ebf9c-32449"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/05/Libro_de_firmas_vestido_portada-1.jpg
200 OK 214 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/05/Libro_de_firmas_vestido_portada-1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=18, height=3024, bps=0, PhotometricIntepretation=RGB, manufacturer=Apple, model=iPhone 8 Plus, orientation=upper-left, width=4032], baseline, precision 8, 823x751, components 3\012- data
Size 214 kB (214083 bytes)
Hash 7c935aa7b23d8ee9ae5033eda4cd31f2
148bf7c36154a1e4355f7c8365b8347ec003250a
ae1a779aa2bec65c7d33585e3026739f2aa13cb82415618e6d1c61b13d28a232
GET /wp-content/uploads/2021/05/Libro_de_firmas_vestido_portada-1.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:31 GMT
content-type: image/jpeg
content-length: 214083
last-modified: Sun, 02 May 2021 15:05:22 GMT
etag: "608ebfb2-34443"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/05/Album_mar_portada-1.jpg
200 OK 211 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/05/Album_mar_portada-1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=18, height=3024, bps=0, PhotometricIntepretation=RGB, manufacturer=Apple, model=iPhone 8 Plus, orientation=upper-left, width=4032], baseline, precision 8, 823x751, components 3\012- data
Size 211 kB (210594 bytes)
Hash 0e3e68aa6645540cdd71d42295c54d81
2942181644dc2f78f8b619fd4f71cddfca9c473c
505af017da1fbea687979018f41cc35f4fd531561436b7decf3c1d12afd21e08
GET /wp-content/uploads/2021/05/Album_mar_portada-1.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:31 GMT
content-type: image/jpeg
content-length: 210594
last-modified: Sun, 02 May 2021 15:19:51 GMT
etag: "608ec317-336a2"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/12/ALBUM-OFERTA-1-1536x1152.png
200 OK 2.4 MB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/ALBUM-OFERTA-1-1536x1152.png
IP
File type PNG image data, 1536 x 1152, 8-bit/color RGB, non-interlaced\012- data
Size 2.4 MB (2388731 bytes)
Hash 9b9ec7168693965fb0ce01063bc8e6dc
d7b75128bd937bff5fb933ab5a2caaf94bdd94f8
ed55e6153eb7b0d30fdf15a55c1af91013e7203ea6dc29415e0a90f357786dbe
GET /wp-content/uploads/2021/12/ALBUM-OFERTA-1-1536x1152.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:30 GMT
content-type: image/png
content-length: 2388731
last-modified: Wed, 08 Dec 2021 11:01:16 GMT
etag: "61b0907c-2472fb"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: S/3FR/bkZl9uTu/86wg65Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: hkEA9YFQyiyFbxr4D9c2OgpoqaQ=
foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-3-1536x1152.png
200 OK 2.4 MB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-3-1536x1152.png
IP
File type PNG image data, 1536 x 1152, 8-bit/color RGB, non-interlaced\012- data
Size 2.4 MB (2366980 bytes)
Hash 82314374fd33635cc69d31bb1322a6da
bd7ebe95552fa433dd7fd2953c91fe2b4a117eca
e02fd65faee6e5872789dabd4669a309d430bf79662ea4489be75168c968e8a6
GET /wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-3-1536x1152.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:30 GMT
content-type: image/png
content-length: 2366980
last-modified: Wed, 08 Dec 2021 11:00:28 GMT
etag: "61b0904c-241e04"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-1536x1152.png
200 OK 2.3 MB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-1536x1152.png
IP
File type PNG image data, 1536 x 1152, 8-bit/color RGB, non-interlaced\012- data
Size 2.3 MB (2336875 bytes)
Hash be21752a28f8072770deee3b6e59c3e7
bad177169b0b1202a56f9730fa45d7a46a0d91af
0745896bc307e1f527a6f0d683113286979ae4a02cd347853d911d36bf5ce5b6
GET /wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-1536x1152.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:30 GMT
content-type: image/png
content-length: 2336875
last-modified: Wed, 08 Dec 2021 10:59:34 GMT
etag: "61b09016-23a86b"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-1-1536x1152.png
200 OK 2.9 MB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-1-1536x1152.png
IP
File type PNG image data, 1536 x 1152, 8-bit/color RGB, non-interlaced\012- data
Size 2.9 MB (2939045 bytes)
Hash 60f102bd7499a98d5fe54367bef9ca6c
56c3eda1573f135fe485d6e1b82061b89481007d
055c1799d889311d9e9eef0c6ea7509fe79b8f6d0484193c1e344297709159cd
GET /wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-1-1536x1152.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:30 GMT
content-type: image/png
content-length: 2939045
last-modified: Wed, 08 Dec 2021 10:59:54 GMT
etag: "61b0902a-2cd8a5"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/icomoon.woff
200 OK 21 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/icomoon.woff
IP
File type Web Open Font Format, TrueType, length 20908, version 1.0\012- data
Hash 00491de6282bc94e9cc6a2ccbb4b3ae6
a3f9f4a0e469c3557e64029415698942903f10a4
22c851d5f36813ff8cbb4ab0d16273aa1eb536f84f2c56b53df8d2c7a54479a4
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/icomoon.woff HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:31 GMT
content-type: application/font-woff
content-length: 20908
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-51ac"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e4f7139b125683bac76c2b5638a1a643
2f84ea7104d659754e5962f88f504a7189f6f914
c9c550489201a92e8bbe162bca49d4aa6b21fa22b254a6a29502186423b3b579
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 02:00:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-2-1536x1152.png
200 OK 2.4 MB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-2-1536x1152.png
IP
File type PNG image data, 1536 x 1152, 8-bit/color RGB, non-interlaced\012- data
Size 2.4 MB (2449140 bytes)
Hash a98d3e64476fffb4ca562a6bcdc47b20
9ce4b9e57bac080b906b4501c1dd90bcfe15bcfa
e86a90f78954de8492c7053a76e3629a9880a3079d9e92c84aa7df54eca4e0a7
GET /wp-content/uploads/2021/12/FOTOFOLIO-OFERTA-2-1536x1152.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:30 GMT
content-type: image/png
content-length: 2449140
last-modified: Wed, 08 Dec 2021 11:00:11 GMT
etag: "61b0903b-255ef4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-8de213aa.min.css
200 OK 352 kB URL HTTP/2 foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-8de213aa.min.css
IP
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Size 352 kB (351656 bytes)
Hash 097497e33ee65cf20b245443f6dfe4f6
4e4039237a1adfe40f418e623437e7f3f38564b9
14804c74f68a28739bc8a7a4482335b10789c742cf7e89669ef9e9d3b892a1d0
GET /wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-8de213aa.min.css HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:31 GMT
content-type: text/css
last-modified: Wed, 08 Dec 2021 11:32:50 GMT
etag: W/"61b097e2-182ae"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e4f7139b125683bac76c2b5638a1a643
2f84ea7104d659754e5962f88f504a7189f6f914
c9c550489201a92e8bbe162bca49d4aa6b21fa22b254a6a29502186423b3b579
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 02:00:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
foldingillusions.com/wp-content/uploads/2021/12/ALBUM-OFERTA-1536x1152.png
200 OK 2.2 MB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/12/ALBUM-OFERTA-1536x1152.png
IP
File type PNG image data, 1536 x 1152, 8-bit/color RGB, non-interlaced\012- data
Size 2.2 MB (2158224 bytes)
Hash efc89b46fdd6bd3124de46860aa2ffed
4b8142f8ac3a1a768fa38f1ba281d748aa7c342d
ba9f21afaedf1bf31c9a8964ae7740597d7d8a08a4e1d1b8d4225bdbecb7fd28
GET /wp-content/uploads/2021/12/ALBUM-OFERTA-1536x1152.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:30 GMT
content-type: image/png
content-length: 2158224
last-modified: Wed, 08 Dec 2021 11:00:47 GMT
etag: "61b0905f-20ee90"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2
200 OK 77 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 76764, version 331.-31261\012- data
Hash f7307680c7fe85959f3ecf122493ea7d
fce0da592a3e536d6d5df5b50cb513398d8c5161
43c072c16c9ee6d67acdfa6c6d6685ff1e74eb4237b7cc3c1348ab1c108b26af
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:32 GMT
content-type: font/woff2
content-length: 76764
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-12bdc"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-26c75ab0.min.css
200 OK 189 kB URL HTTP/2 foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-26c75ab0.min.css
IP
File type ASCII text, with very long lines (35574)
Size 189 kB (188606 bytes)
Hash e1d78735d13fe4e5f35428545c46af7d
c58f7c5e015e6139b9df36c991f7978cd0931a58
400bbbd01b3df393174aaaacfd81848523646f21c4e68fb7774560af30a604a9
GET /wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-26c75ab0.min.css HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:30 GMT
content-type: text/css
last-modified: Wed, 08 Dec 2021 11:32:49 GMT
etag: W/"61b097e1-182a97"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e4f7139b125683bac76c2b5638a1a643
2f84ea7104d659754e5962f88f504a7189f6f914
c9c550489201a92e8bbe162bca49d4aa6b21fa22b254a6a29502186423b3b579
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 02:00:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e4f7139b125683bac76c2b5638a1a643
2f84ea7104d659754e5962f88f504a7189f6f914
c9c550489201a92e8bbe162bca49d4aa6b21fa22b254a6a29502186423b3b579
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 02:00:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K0nXBi8JoI3ZKyHqQg.woff
200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K0nXBi8JoI3ZKyHqQg.woff
IP
File type Web Open Font Format, TrueType, length 22980, version 1.1\012- data
Hash f2a7709803facad3132b46b739548369
7ae29ea1cc9e76acc69877d118fa5d4d61465b59
ca71ae7855c81379852da88328a11f97646e1aa1d38683c633c1d9dd28468355
GET /s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K0nXBi8JoI3ZKyHqQg.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22980
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 24 Oct 2022 08:23:07 GMT
expires: Tue, 24 Oct 2023 08:23:07 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 10 Nov 2021 18:06:11 GMT
content-type: font/woff
age: 149845
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e4f7139b125683bac76c2b5638a1a643
2f84ea7104d659754e5962f88f504a7189f6f914
c9c550489201a92e8bbe162bca49d4aa6b21fa22b254a6a29502186423b3b579
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 02:00:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/montserrat/v18/JTUSjIg1_i6t8kCHKm45xW0.woff
200 OK 68 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v18/JTUSjIg1_i6t8kCHKm45xW0.woff
IP
File type Web Open Font Format, TrueType, length 68308, version 1.1\012- data
Hash f559455a2bb877b795730a2d1167f125
8792d78996b824aa89be7592babd6117a7cee3cc
977cced473e900f9f44d78171db812fc563ded25b7afc2b6e040b267eab566ca
GET /s/montserrat/v18/JTUSjIg1_i6t8kCHKm45xW0.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 68308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 21 Oct 2022 08:47:31 GMT
expires: Sat, 21 Oct 2023 08:47:31 GMT
cache-control: public, max-age=31536000
age: 407581
last-modified: Tue, 10 Aug 2021 00:19:54 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v29/KFOlCnqEu92Fr1MmEU9vAA.woff
200 OK 66 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v29/KFOlCnqEu92Fr1MmEU9vAA.woff
IP
File type Web Open Font Format, TrueType, length 65492, version 1.1\012- data
Hash 08926d7a008503f9c640b1772c225476
6a57df5217d336599bdec757772025beb40c4536
c93f4332daa92f95a2c2446599d6cf9e87b00b20d60db827af63b0e4a3feb22b
GET /s/roboto/v29/KFOlCnqEu92Fr1MmEU9vAA.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 65492
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 22 Oct 2022 06:18:48 GMT
expires: Sun, 22 Oct 2023 06:18:48 GMT
cache-control: public, max-age=31536000
age: 330104
last-modified: Wed, 22 Sep 2021 16:13:30 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-56432496.min.js
200 OK 188 kB URL HTTP/2 foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-56432496.min.js
IP
File type ASCII text, with very long lines (65447)
Size 188 kB (187961 bytes)
Hash 36c6af2b2c715c2074db1e86bcdbe5ac
db8a97aff4fe20865b81f7099c1bf9771a50b59d
5bfd6ee4cfceaff16628d27ffe69abfdfbd50cf5e6e53720b9f7ea2bff0fcfff
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-56432496.min.js HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:30 GMT
content-type: application/javascript
last-modified: Wed, 08 Dec 2021 11:29:14 GMT
etag: W/"61b0970a-5b529"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K3vXBi8JoI3ZKyHqQg.woff
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K3vXBi8JoI3ZKyHqQg.woff
IP
File type Web Open Font Format, TrueType, length 23976, version 1.1\012- data
Hash 24fb4331b0e2ba0c12dabc947b1290df
faa2409a20a93a92fbaec6c70ad9680cd6c0d793
f533ccd7a731a34ea932467f4d7b1a42966981db0ada056392626037a4f03738
GET /s/worksans/v13/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K3vXBi8JoI3ZKyHqQg.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 24 Oct 2022 08:23:07 GMT
expires: Tue, 24 Oct 2023 08:23:07 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 10 Nov 2021 18:06:03 GMT
content-type: font/woff
age: 149845
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v29/KFOmCnqEu92Fr1Me5g.woff
200 OK 65 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v29/KFOmCnqEu92Fr1Me5g.woff
IP
File type Web Open Font Format, TrueType, length 65244, version 1.1\012- data
Hash 73f26bf98a715ecab4d2287ff3a02ad0
c6c8a2b7e67c182d77916cd2118b1b0d8a6ca549
55110586d3719c3e8bdaa21f06e4cc1c0a7451abbae662344cbd4411536b585f
GET /s/roboto/v29/KFOmCnqEu92Fr1Me5g.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 65244
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 19 Oct 2022 22:06:06 GMT
expires: Thu, 19 Oct 2023 22:06:06 GMT
cache-control: public, max-age=31536000
age: 532466
last-modified: Wed, 22 Sep 2021 16:13:22 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/icomoon.ttf
200 OK 21 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/icomoon.ttf
IP
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon \012- data
Hash b628f37cfeac97148aafb864ca676f6a
71ae0dfae50d4087daa4755a396b914a62213bae
e70b68f603538e3d4d8eb4af3dc2ff84b99af56fb0af22fd5b94167639f30473
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/icomoon.ttf HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:32 GMT
content-type: application/font-sfnt
content-length: 20832
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-5160"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v29/KFOlCnqEu92Fr1MmWUlvAA.woff
200 OK 65 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v29/KFOlCnqEu92Fr1MmWUlvAA.woff
IP
File type Web Open Font Format, TrueType, length 65292, version 1.1\012- data
Hash 8b2b2aae46819bb8c37c438760dbb4f6
3594876105e2630504fa1fa00de36e774d238528
61e16263ed1227e721bffd26891b13a4d07c5140249fa78f297b51845ee169db
GET /s/roboto/v29/KFOlCnqEu92Fr1MmWUlvAA.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 65292
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 23 Oct 2022 19:10:35 GMT
expires: Mon, 23 Oct 2023 19:10:35 GMT
cache-control: public, max-age=31536000
age: 197397
last-modified: Wed, 22 Sep 2021 16:13:30 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v18/JTURjIg1_i6t8kCHKm45_bZF7g0.woff
200 OK 68 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v18/JTURjIg1_i6t8kCHKm45_bZF7g0.woff
IP
File type Web Open Font Format, TrueType, length 67920, version 1.1\012- data
Hash f5b5ac943a80d7e7aff13b8a651c15df
a9eabaf668d043bdd45c7b01119eff648b46e480
268377e98dea0d350cd21714107d0e0473baade9163f94322e2f97088682af5e
GET /s/montserrat/v18/JTURjIg1_i6t8kCHKm45_bZF7g0.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 67920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 19 Oct 2022 19:02:09 GMT
expires: Thu, 19 Oct 2023 19:02:09 GMT
cache-control: public, max-age=31536000
age: 543503
last-modified: Tue, 10 Aug 2021 00:20:42 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-00440e2f.min.js
200 OK 86 kB URL HTTP/2 foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-00440e2f.min.js
IP
File type ASCII text, with very long lines (36518)
Hash 16bad14991c695b3f23a1dc9a6978b21
3529e888c72b02fd53607d0da21dc84e024346a1
539cbf4c2eecf607aa2ce7c3b9dbe475e1cc74f92db48d1400eb1a44b87d04ce
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-00440e2f.min.js HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:30 GMT
content-type: application/javascript
last-modified: Wed, 08 Dec 2021 11:32:50 GMT
etag: W/"61b097e2-11403"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff
200 OK 102 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff
IP
File type Web Open Font Format, TrueType, length 101652, version 331.-31261\012- data
Size 102 kB (101652 bytes)
Hash 9fe5a17c8ab036d20e6c5ba3fd2ac511
52751432ded489dfdf27fb1cf64c570c4c27a1d7
74edc18b67c487e32f181719fdb347e2e77020744651f446e9acd7bd6821e2e7
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:32 GMT
content-type: application/font-woff
content-length: 101652
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-18d14"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff
200 OK 90 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff
IP
File type Web Open Font Format, TrueType, length 90060, version 331.-31261\012- data
Hash 099a9556e1a63ece24f8a99859c94c7d
5f8cab91347c553c1eb87f9b527f6bee8a28e40d
aff76e5c986f295d4bc6f8142a78e2a31888b101c2d025db89f79c75f64fd90b
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:32 GMT
content-type: application/font-woff
content-length: 90060
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-15fcc"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/worksans/v13/QGY9z_wNahGAdqQ43Rh_ebrnlwyYfEPxPoGU3ms5pIfeCSXCQOBc.woff
200 OK 22 kB URL HTTP/2 fonts.gstatic.com/s/worksans/v13/QGY9z_wNahGAdqQ43Rh_ebrnlwyYfEPxPoGU3ms5pIfeCSXCQOBc.woff
IP
File type Web Open Font Format, TrueType, length 22308, version 1.1\012- data
Hash 5af9b5690ffb4be30a0c50a8fa2224e9
867410f8b98d0c381d1ca65f50bf36193c911e59
e78898bac6527c2e318556f5cdcec7816785e389fe892bcf29dbf8d051771fee
GET /s/worksans/v13/QGY9z_wNahGAdqQ43Rh_ebrnlwyYfEPxPoGU3ms5pIfeCSXCQOBc.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: font/woff
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22308
date: Wed, 26 Oct 2022 02:00:32 GMT
expires: Thu, 26 Oct 2023 02:00:32 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 10 Nov 2021 18:06:30 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e4f7139b125683bac76c2b5638a1a643
2f84ea7104d659754e5962f88f504a7189f6f914
c9c550489201a92e8bbe162bca49d4aa6b21fa22b254a6a29502186423b3b579
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 02:00:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff
200 OK 16 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff
IP
File type Web Open Font Format, TrueType, length 16276, version 331.-31261\012- data
Hash 7124eb50fc8227c78269f2d995637ff5
d33d8b5b15b7bba2cc17190dc685fe0a76d2989e
14c9db4ff87fde08f67b0a69dd594bab6d87174812a0dbd34c59833bfed8cc0e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:32 GMT
content-type: application/font-woff
content-length: 16276
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-3f94"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-3c5a4414.min.css
200 OK 84 kB URL HTTP/2 foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-3c5a4414.min.css
IP
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Hash 74f7f566f66ad9babdd98c7b1ac4a5b3
f402dfa2c4b04cbe0cf6614beb5c9469078487b3
751de49f52d9e85b4f17cce179161dcfaa517e978bf995af67efa69bec59230b
GET /wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-header-3c5a4414.min.css HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:30 GMT
content-type: text/css
last-modified: Wed, 08 Dec 2021 11:29:10 GMT
etag: W/"61b09706-457ba"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/310716669_1417476378744672_1662942649040884365_n.webpfull.jpg
200 OK 54 kB URL HTTP/1.1 foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/310716669_1417476378744672_1662942649040884365_n.webpfull.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x640, components 3\012- data
Hash 700120d22ab9811ef8b1346427e3a852
85e2292abca704851352518cfc85a3134060755c
e7eb757cc1904f49647ca313686ab7d60e24681b6f4e8e160cdce44a4a7f9b56
GET /wp-content/uploads/sb-instagram-feed-images/310716669_1417476378744672_1662942649040884365_n.webpfull.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foldingillusions.com/
Cookie: _ga_MP69GDNWHF=GS1.1.1666749629.1.0.1666749629.0.0.0; _ga=GA1.1.239708818.1666749629
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 26 Oct 2022 02:00:32 GMT
Content-Type: image/jpeg
Content-Length: 53694
Last-Modified: Mon, 10 Oct 2022 09:39:24 GMT
Connection: keep-alive
ETag: "6343e84c-d1be"
X-Powered-By: PleskLin
Accept-Ranges: bytes
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.ttf
200 OK 203 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.ttf
IP
File type TrueType Font data, 13 tables, 1st "FFTM", 28 names, Macintosh\012- data
Size 203 kB (202744 bytes)
Hash 605ed7926cf39a2ad5ec2d1f9d391d3d
c1b9fae262f42868c075ac865a8ab34920e20a2c
3d06af1f31cd83ace7a265a014b8fb5dee15770ecac8f7a55555190e627e03c2
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.ttf HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:32 GMT
content-type: application/font-sfnt
content-length: 202744
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-317f8"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/312458143_113565421412018_4255961083894671924_n.webpfull.jpg
200 OK 61 kB URL HTTP/1.1 foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/312458143_113565421412018_4255961083894671924_n.webpfull.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x800, components 3\012- data
Hash 2bc4f6e2e18de9d6818e48308f015796
bae16f4a438307f1a0aab4aab006be47853595e9
2b77c759b3ea2f000ddf13e0da256963092bc7dc632fde066830c840b3d59702
GET /wp-content/uploads/sb-instagram-feed-images/312458143_113565421412018_4255961083894671924_n.webpfull.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foldingillusions.com/
Cookie: _ga_MP69GDNWHF=GS1.1.1666749629.1.0.1666749629.0.0.0; _ga=GA1.1.239708818.1666749629
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 26 Oct 2022 02:00:32 GMT
Content-Type: image/jpeg
Content-Length: 61134
Last-Modified: Tue, 25 Oct 2022 05:13:52 GMT
Connection: keep-alive
ETag: "63577090-eece"
X-Powered-By: PleskLin
Accept-Ranges: bytes
foldingillusions.com/wp-content/uploads/2021/10/pexels-cottonbro-6074059-min-scaled.jpg
200 OK 669 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/10/pexels-cottonbro-6074059-min-scaled.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2560x1706, components 3\012- data
Size 669 kB (669045 bytes)
Hash fab1e80275a740da6448d418fdae8cab
ac2d99fb819c76dd102b8d4c8e0b7ecef0d21541
81ae6c7f2b780383177691f80bc5b7bc6837846034085e96e28f269201f7e307
GET /wp-content/uploads/2021/10/pexels-cottonbro-6074059-min-scaled.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:32 GMT
content-type: image/jpeg
content-length: 669045
last-modified: Wed, 06 Oct 2021 11:06:33 GMT
etag: "615d8339-a3575"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/10/pexels-tatiana-3312232-min-scaled.jpg
200 OK 556 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/10/pexels-tatiana-3312232-min-scaled.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2560x1707, components 3\012- data
Size 556 kB (556351 bytes)
Hash 96d97000b6c7d66989ec1fcb3a114eee
d6b32f46aa15a720b10e2c32e37d455caa256e0c
fb1b392a80603d6be6a498277dc2710ef46eb9c23eafa5c525773746f5b863c1
GET /wp-content/uploads/2021/10/pexels-tatiana-3312232-min-scaled.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:32 GMT
content-type: image/jpeg
content-length: 556351
last-modified: Wed, 06 Oct 2021 11:02:12 GMT
etag: "615d8234-87d3f"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/312281625_197288596071883_7585801601973264222_n.webpfull.jpg
200 OK 37 kB URL HTTP/1.1 foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/312281625_197288596071883_7585801601973264222_n.webpfull.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x640, components 3\012- data
Hash 26ed984eac6612b989dbad9b997e9685
5fcced7ca795e330bb5d8eeff5ca7ec0ddec7400
5fad2bed569130428e44d03dae73058af1b9b3275ffbc4f15c3a43db40b402f3
GET /wp-content/uploads/sb-instagram-feed-images/312281625_197288596071883_7585801601973264222_n.webpfull.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foldingillusions.com/
Cookie: _ga_MP69GDNWHF=GS1.1.1666749629.1.0.1666749629.0.0.0; _ga=GA1.1.239708818.1666749629
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 26 Oct 2022 02:00:32 GMT
Content-Type: image/jpeg
Content-Length: 37413
Last-Modified: Thu, 20 Oct 2022 01:16:48 GMT
Connection: keep-alive
ETag: "6350a180-9225"
X-Powered-By: PleskLin
Accept-Ranges: bytes
foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/311155244_5407526199296570_5578862215930529425_n.webpfull.jpg
200 OK 27 kB URL HTTP/1.1 foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/311155244_5407526199296570_5578862215930529425_n.webpfull.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x640, components 3\012- data
Hash 2086324fae489626520d9ca1f10e325c
677ab55364d4d1ea6cf50b813a9d36011d56beca
918c3ca6f40dd24b82706bda473b9006d516e25c91593aeedc4d6e9d8bc01294
GET /wp-content/uploads/sb-instagram-feed-images/311155244_5407526199296570_5578862215930529425_n.webpfull.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foldingillusions.com/
Cookie: _ga_MP69GDNWHF=GS1.1.1666749629.1.0.1666749629.0.0.0; _ga=GA1.1.239708818.1666749629
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 26 Oct 2022 02:00:32 GMT
Content-Type: image/jpeg
Content-Length: 26825
Last-Modified: Fri, 07 Oct 2022 05:32:46 GMT
Connection: keep-alive
ETag: "633fb9fe-68c9"
X-Powered-By: PleskLin
Accept-Ranges: bytes
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.ttf
200 OK 134 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.ttf
IP
File type TrueType Font data, 13 tables, 1st "FFTM", 28 names, Macintosh\012- data
Size 134 kB (134040 bytes)
Hash 3b89dd103490708d19a95adcae52210e
3fa2d67cef22da5c3f3eb5730c6afbd6fecf0372
06f4d00923ea24697df5df0b92984175991d8bd25776a02d531bb401e393ec42
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.ttf HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:32 GMT
content-type: application/font-sfnt
content-length: 134040
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-20b98"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.ttf
200 OK 34 kB URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.ttf
IP
File type TrueType Font data, 13 tables, 1st "FFTM", 28 names, Macintosh\012- data
Hash 1f77739ca9ff2188b539c36f30ffa2be
7d849a3981a716e2ba4a84634bc57d0b8054a6a3
c651b8a67d3193206f622c3c3b0fbca4a2f2727108c4212b52c1e2a2e84c9b31
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.ttf HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:32 GMT
content-type: application/font-sfnt
content-length: 33736
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-83c8"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/312278217_1982820355262629_8878967483155670484_n.webpfull.jpg
200 OK 47 kB URL HTTP/1.1 foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/312278217_1982820355262629_8878967483155670484_n.webpfull.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x640, components 3\012- data
Hash 11d901893ee9668e3a59a5648a5aaa6e
05d4206a5c5a7584bba2c062b38cb38b4b6aca32
50621f870771d3e36f9e4b0c9e5bccec3e8783ec929074618f2a3c2f7021fa51
GET /wp-content/uploads/sb-instagram-feed-images/312278217_1982820355262629_8878967483155670484_n.webpfull.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foldingillusions.com/
Cookie: _ga_MP69GDNWHF=GS1.1.1666749629.1.0.1666749629.0.0.0; _ga=GA1.1.239708818.1666749629
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 26 Oct 2022 02:00:32 GMT
Content-Type: image/jpeg
Content-Length: 47064
Last-Modified: Sat, 22 Oct 2022 07:23:05 GMT
Connection: keep-alive
ETag: "63539a59-b7d8"
X-Powered-By: PleskLin
Accept-Ranges: bytes
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2
200 OK 80 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 80272, version 331.-31458\012- data
Hash 3bb4d4ff63186a8caf433d3d3a022d49
023d6411b150baea1ec6784dcb2888577d95f13e
75f5349190725c85b426fdb66c683beb21b7804792d0770a9e84b28e7ace5d28
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:32 GMT
content-type: font/woff2
content-length: 80272
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-13990"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/296085853_116647370991868_2543514110945362193_nfull.jpg
200 OK 73 kB URL HTTP/1.1 foldingillusions.com/wp-content/uploads/sb-instagram-feed-images/296085853_116647370991868_2543514110945362193_nfull.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x640, components 3\012- data
Hash 64a4a2f8b2ec1d4eae6abf3cf11f5400
f029bdbfbd1a08d0209acb0e20b2ce0a50eb1ce9
34ce1407f743ca3d0f8e03199df9d1cee4aef99f6afc474f50f83144320f0e25
GET /wp-content/uploads/sb-instagram-feed-images/296085853_116647370991868_2543514110945362193_nfull.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foldingillusions.com/
Cookie: _ga_MP69GDNWHF=GS1.1.1666749629.1.0.1666749629.0.0.0; _ga=GA1.1.239708818.1666749629
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 26 Oct 2022 02:00:32 GMT
Content-Type: image/jpeg
Content-Length: 72751
Last-Modified: Thu, 28 Jul 2022 06:28:36 GMT
Connection: keep-alive
ETag: "62e22c94-11c2f"
X-Powered-By: PleskLin
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 358ecd0ec047d700042e2a62f9847199
7bf4c552f47536fe451dc6ccfb0930c592084ef9
e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10970
Expires: Wed, 26 Oct 2022 05:03:22 GMT
Date: Wed, 26 Oct 2022 02:00:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 358ecd0ec047d700042e2a62f9847199
7bf4c552f47536fe451dc6ccfb0930c592084ef9
e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10970
Expires: Wed, 26 Oct 2022 05:03:22 GMT
Date: Wed, 26 Oct 2022 02:00:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 358ecd0ec047d700042e2a62f9847199
7bf4c552f47536fe451dc6ccfb0930c592084ef9
e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10970
Expires: Wed, 26 Oct 2022 05:03:22 GMT
Date: Wed, 26 Oct 2022 02:00:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 358ecd0ec047d700042e2a62f9847199
7bf4c552f47536fe451dc6ccfb0930c592084ef9
e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10970
Expires: Wed, 26 Oct 2022 05:03:22 GMT
Date: Wed, 26 Oct 2022 02:00:32 GMT
Connection: keep-alive
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff
200 OK 104 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff
IP
File type Web Open Font Format, TrueType, length 104284, version 331.-31458\012- data
Size 104 kB (104284 bytes)
Hash c48d0f239282bb3a0856a4817fa2a5c2
bd4c2e3e55397c69b35b9f1947aa72beedd45651
26701523bfc95c31e4c3a5dbd73943ca1dd4c99a1f2dbc5b48a589943d1afb99
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:32 GMT
content-type: application/font-woff
content-length: 104284
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-1975c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc635673e-499c-4d9c-8bc5-a713fb19e221.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc635673e-499c-4d9c-8bc5-a713fb19e221.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b946c4f2f177828cf7b76c5764e97157
c3856686b98e1883133aa1824c496d34512769a0
be818a015fc9c745ea561a0b9c2aca6ba25ade24acd696fa651163d47b195371
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc635673e-499c-4d9c-8bc5-a713fb19e221.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13796
x-amzn-requestid: 90b1e032-78c6-499d-b564-f25c15e20304
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alJ2OG0SoAMFx-w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6358568e-599d0f526fc6a01f77b67dcf;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:35:10 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: qxBQMJAnYNJVLBf5LSOTC7v3hPl9sh-G-OIqrK7d5KpdVITaQCcGMA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 21:47:18 GMT
age: 15194
etag: "c3856686b98e1883133aa1824c496d34512769a0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5da11cdb-c8be-46f4-95b0-792c49d930a7.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5da11cdb-c8be-46f4-95b0-792c49d930a7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5987bcd44ab0db5313aa4f409a8a212f
691a36cde98a9fe1660745dd811e0be2ae67036c
e47ce3587c647b52669f675dc7e84e21555f82138091fb04febc951b4c06ba30
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5da11cdb-c8be-46f4-95b0-792c49d930a7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8553
x-amzn-requestid: 69931a9c-027e-428e-a88d-61c5fac64daa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alJ2iEnzoAMFZAA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63585690-12c78c5157fb3fa41a13548c;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:35:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: E4t7XezEVl1x_4sbidtDPjCuZoCh7N01y7ZeYZWlAL1w8ut4Qx95TA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 21:46:50 GMT
age: 15222
etag: "691a36cde98a9fe1660745dd811e0be2ae67036c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F057530b7-f6b8-4f9b-b6fc-8fdc4a101f36.webp
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F057530b7-f6b8-4f9b-b6fc-8fdc4a101f36.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1cc61ad4b1d66ab4bce27288ee690e12
324e13ad5c99f628d713e55a2994ad4042ece70e
62cd88bc19bc1f0be2a37c3e990897158acd3d55aa3ddd299144d4f9596ba34e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F057530b7-f6b8-4f9b-b6fc-8fdc4a101f36.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6831
x-amzn-requestid: cc6f38ff-ab33-4b18-8cae-aa6bc061962f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alKjPH7ToAMFSiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635857ae-3db2790d0e6c5fab6c4bc81f;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:39:58 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: tiWbOUwlRzaT2EnCWIgoFaT_ho55s3tgRxalb7yBbI21Pv0BhfLJOg==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 21:52:53 GMT
age: 14859
etag: "324e13ad5c99f628d713e55a2994ad4042ece70e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa07cdd29-ee8b-472d-b3da-06fd7cf4b919.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa07cdd29-ee8b-472d-b3da-06fd7cf4b919.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ede92f4ba3d143b6ffbc90a77541894c
ccca9cdf92ffc3fb01b9b383c1b08c62e4af8f10
3615e4cec3c5e87e7922726c1e224ae48856f07fdda0550846dbc896a802660b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa07cdd29-ee8b-472d-b3da-06fd7cf4b919.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11715
x-amzn-requestid: 2dedd2f7-6368-44ca-866b-6da5fff10435
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alJ2hF1noAMFmsw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6358568f-288edd872d82b906349d8b1b;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:35:11 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 7uRvF5xOMPkEvCPYxlXHO6LUH2Ty4aRZuoNWTzSjF7TroqESZoog8g==
via: 1.1 34c44cb7892e57a3b6c51812bcf68ee4.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 21:53:05 GMT
age: 14847
etag: "ccca9cdf92ffc3fb01b9b383c1b08c62e4af8f10"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc5382d-fbb1-4d8e-8ee0-d7dcda16508e.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc5382d-fbb1-4d8e-8ee0-d7dcda16508e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 91ee720c15dc69de45080d0c951353af
5292b31a99d90bcb7071f327b93d52034bdf9dcb
7fbe9f0f6db08fd539f2e8d4ac22e3b4d5ca14f7cde69f8424cce8b361d026e6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc5382d-fbb1-4d8e-8ee0-d7dcda16508e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4524
x-amzn-requestid: a493efe7-11c7-4032-b36b-7f838f8180bc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aljicH_6IAMFqpQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63587fa9-0f15eae7680ea7b15e5e47ec;Sampled=0
x-amzn-remapped-date: Wed, 26 Oct 2022 00:30:33 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OV7g4Y4fcQGijljebzHQtnpKdcPKw6LTxqORxxBJL2lFPYQLLoyNuQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 26 Oct 2022 00:34:40 GMT
age: 5152
etag: "5292b31a99d90bcb7071f327b93d52034bdf9dcb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feac38eda-2bed-4703-8560-7d07ad90dabc.webp
200 OK 3.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feac38eda-2bed-4703-8560-7d07ad90dabc.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 494a826ce7609ee5cc8157ea5de5f4f7
3d28f2daeef33f37c91bd26cb527793288635103
09f702f40e29e6b0c27abc5c7bb4605e504453b543c92805ba4045bd3d65c4d0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feac38eda-2bed-4703-8560-7d07ad90dabc.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3337
x-amzn-requestid: 5a06b710-2b88-435e-8863-3e0e58742e6d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alJ21FjooAMFp8Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63585691-2adc1ac2375e087b20ad0e32;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:35:13 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: iVIdtyyk_ph8AiTsWdQgDfWFHVIMh2pw4yrkufwogd3rsZFXwslwkg==
via: 1.1 a8e5d5aeee6eacca5c379e5059b1f68c.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 21:46:52 GMT
age: 15220
etag: "3d28f2daeef33f37c91bd26cb527793288635103"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff2
200 OK 78 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 78532, version 331.-31458\012- data
Hash 79dced08c62eddd969d92c9f58987a33
262c9c0e4848466e73ad4757ddaab6e168eaef81
0a80acfa0f85d8ea233785ca14b0dd030dbe7ed229b00bc754b55dae39c7a106
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:32 GMT
content-type: font/woff2
content-length: 78532
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-132c4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff2
200 OK 14 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13584, version 331.-31458\012- data
Hash c940f62026ba5a202238ec177cce01a5
62edc86975d56aa66873803baf0582c2ab36cef5
41dc4f99f4101a4ae7956b5c23c2d40e04ffb928c7ebd989658d950b4e2f7c5d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:32 GMT
content-type: font/woff2
content-length: 13584
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-3510"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-MP69GDNWHF>m=2oeao0&_p=495588079&gdid=dZTNiMT&cid=239708818.1666749629&ul=en-us&sr=1280x1024&_s=1&sid=1666749629&sct=1&seg=0&dl=http%3A%2F%2Ffoldingillusions.com%2F&dt=Folding%20Illusions%20I%20%C3%81lbumes%20de%20fotos%20hechos%20a%20mano&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-MP69GDNWHF>m=2oeao0&_p=495588079&gdid=dZTNiMT&cid=239708818.1666749629&ul=en-us&sr=1280x1024&_s=1&sid=1666749629&sct=1&seg=0&dl=http%3A%2F%2Ffoldingillusions.com%2F&dt=Folding%20Illusions%20I%20%C3%81lbumes%20de%20fotos%20hechos%20a%20mano&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-MP69GDNWHF>m=2oeao0&_p=495588079&gdid=dZTNiMT&cid=239708818.1666749629&ul=en-us&sr=1280x1024&_s=1&sid=1666749629&sct=1&seg=0&dl=http%3A%2F%2Ffoldingillusions.com%2F&dt=Folding%20Illusions%20I%20%C3%81lbumes%20de%20fotos%20hechos%20a%20mano&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: http://foldingillusions.com
date: Wed, 26 Oct 2022 02:00:32 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.ttf
200 OK 204 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.ttf
IP
File type TrueType Font data, 13 tables, 1st "FFTM", 28 names, Macintosh\012- data
Size 204 kB (204528 bytes)
Hash f49b824a2e4784d078b768506e7bf8e7
c93491c279667947a89dc2ec2be5e785d76051dc
107b29791cfd2c528158ff645116823a660290e2b56cf0429a0761bd1d43f9b1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.ttf HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:32 GMT
content-type: application/font-sfnt
content-length: 204528
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-31ef0"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff
200 OK 92 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff
IP
File type Web Open Font Format, TrueType, length 92216, version 331.-31458\012- data
Hash a6d5b6e21f0c0ce5d05dd9d2aa644c9f
a2e0949835d3ae7f3c990f8eb6a8f3629a1ddacc
64351d3323461bde0c1eb9b70137cd643892fb72aea6cc5ecd4d4f102eb5f79d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:32 GMT
content-type: application/font-woff
content-length: 92216
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-16838"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff
200 OK 17 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff
IP
File type Web Open Font Format, TrueType, length 16776, version 331.-31458\012- data
Hash b7995ffca32ee27012b039e79a9dad06
0a5d9e8e13305c8d75b81ab5c3438d9a7e9a6279
8b01a186e17207b605f5f037815f82b62a37fcb4804b2d46eae10e316b78a9c5
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:32 GMT
content-type: application/font-woff
content-length: 16776
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-4188"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.ttf
200 OK 34 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.ttf
IP
File type TrueType Font data, 13 tables, 1st "FFTM", 28 names, Macintosh\012- data
Hash 547429d0f054fe33407e57011ca9ab26
8dcc0c72c424c439b0393ca60bcf08d25db9ae99
e54356ac02b129240597fdbb5452a9bed10b923f2f658cd2f44c4e56270cdb05
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.ttf HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:33 GMT
content-type: application/font-sfnt
content-length: 34052
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-8504"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.ttf
200 OK 137 kB URL HTTP/2 foldingillusions.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.ttf
IP
File type TrueType Font data, 13 tables, 1st "FFTM", 28 names, Macintosh\012- data
Size 137 kB (136576 bytes)
Hash dbec1b4af0117cdc7c7a76090903fe77
95567ff8d60e2dffe34d11179086353416441235
3cd97d0d065ef9165afb2966faa989cb143cc14397ea07db7ccbdffe461377f9
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.ttf HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:33 GMT
content-type: application/font-sfnt
content-length: 136576
last-modified: Thu, 25 Feb 2021 06:51:06 GMT
etag: "603748da-21580"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Wed, 26 Oct 2022 00:41:09 GMT
expires: Wed, 26 Oct 2022 02:41:09 GMT
cache-control: public, max-age=7200
age: 4764
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/11/cropped-Logo_Folding_Illusions-32x32.png
200 OK 1.2 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/11/cropped-Logo_Folding_Illusions-32x32.png
IP
File type PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced\012- data
Hash d8f72e1d65df907322448fb4e6fdf530
a618d7d998fef24802759ba07ae988956bc3c6b9
d27a3b1c908861c13b7d14808f98017e7faec16cd4a487d6d65875cf7fb2b024
GET /wp-content/uploads/2021/11/cropped-Logo_Folding_Illusions-32x32.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:33 GMT
content-type: image/png
content-length: 1178
last-modified: Tue, 23 Nov 2021 12:53:12 GMT
etag: "619ce438-49a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/uploads/2021/11/cropped-Logo_Folding_Illusions-192x192.png
200 OK 8.2 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/11/cropped-Logo_Folding_Illusions-192x192.png
IP
File type PNG image data, 192 x 192, 8-bit colormap, non-interlaced\012- data
Hash 40df24a24d61b60d31cb777c1b63af2e
9afbe17d8b41f6f141a194a4466e4d1a7a270ee9
02d5e0ed2f4a1c1dcc24bee7d424531261d5529b6135904f10e3d5b8a2c04e55
GET /wp-content/uploads/2021/11/cropped-Logo_Folding_Illusions-192x192.png HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:33 GMT
content-type: image/png
content-length: 8164
last-modified: Tue, 23 Nov 2021 12:53:12 GMT
etag: "619ce438-1fe4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
foldingillusions.com/?wc-ajax=get_refreshed_fragments
301 Moved Permanently 0 B URL HTTP/1.1 foldingillusions.com/?wc-ajax=get_refreshed_fragments
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
POST /?wc-ajax=get_refreshed_fragments HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 18
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: http://foldingillusions.com/
Cookie: _ga_MP69GDNWHF=GS1.1.1666749629.1.0.1666749629.0.0.0; _ga=GA1.1.239708818.1666749629
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 26 Oct 2022 02:00:33 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
WPO-Cache-Status: not cached
WPO-Cache-Message: The request method was not GET (POST), In the settings, caching is disabled for matches for one of the current request's GET parameters
X-Redirect-By: WordPress
Location: https://foldingillusions.com/?wc-ajax=get_refreshed_fragments
X-Powered-By: PHP/7.3.33, PleskLin
foldingillusions.com/wp-content/uploads/2021/10/pexels-cottonbro-6667305-scaled.jpg
301 Moved Permanently 34 kB URL HTTP/2 foldingillusions.com/wp-content/uploads/2021/10/pexels-cottonbro-6667305-scaled.jpg
IP
File type PNG image data, 300 x 323, 8-bit/color RGBA, non-interlaced\012- data
Hash 7e0500f407eec1099385570e0da721bb
7643b29df83055477145d20b5b21e6ef0d1551f1
0afb569855fbd0d87f890112ec4031808f3bca0f6b79dcde200fffe46ce6553f
GET /wp-content/uploads/2021/10/pexels-cottonbro-6667305-scaled.jpg HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Wed, 26 Oct 2022 02:00:33 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-redirect-by: Rank Math SEO
location: https://foldingillusions.com
x-powered-by: PHP/7.3.33, PleskLin
X-Firefox-Spdy: h2
foldingillusions.com/
200 OK 0 B IP
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://foldingillusions.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:34 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache
content-encoding: gzip
wpo-cache-status: cached
last-modified: Tue, 25 Oct 2022 22:12:12 GMT
x-powered-by: PHP/7.3.33, PleskLin
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-5f3dc96a.min.js
200 OK 0 B URL HTTP/2 foldingillusions.com/wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-5f3dc96a.min.js
IP
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/cache/wpo-minify/1638962926/assets/wpo-minify-footer-5f3dc96a.min.js HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://foldingillusions.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:30 GMT
content-type: application/javascript
last-modified: Tue, 25 Jan 2022 23:22:07 GMT
etag: W/"61f0861f-af323"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
foldingillusions.com/?wc-ajax=get_refreshed_fragments
200 OK 0 B URL HTTP/2 foldingillusions.com/?wc-ajax=get_refreshed_fragments
IP
Analyzer Verdict Alert fortinet Phishing
OPTIONS /?wc-ajax=get_refreshed_fragments HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-requested-with
Referer: http://foldingillusions.com/
Origin: http://foldingillusions.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:34 GMT
content-type: text/html; charset=UTF-8
wpo-cache-status: not cached
wpo-cache-message: The request method was not GET (OPTIONS), In the settings, caching is disabled for matches for one of the current request's GET parameters
access-control-allow-origin: http://foldingillusions.com
access-control-allow-credentials: true
x-powered-by: PHP/7.3.33, PleskLin
content-encoding: br
X-Firefox-Spdy: h2
foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
200 OK 0 B URL HTTP/2 foldingillusions.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
IP
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: foldingillusions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foldingillusions.com
Connection: keep-alive
Referer: https://foldingillusions.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 02:00:31 GMT
content-type: font/woff2
content-length: 78196
last-modified: Tue, 05 Oct 2021 17:32:29 GMT
etag: "615c8c2d-13174"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
82.223.33.49
93.184.220.29
142.250.74.168
23.36.77.32