| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashd2e72d45afe3d391c204b5391599607c 149d68b9d00a720b6f380fa2324779dca9dbe26d f6f1c295c68dfebadacb1fc812b44e01c7ede0e203615ef3e2cced2ce2251e7e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F6F1C295C68DFEBADACB1FC812B44E01C7EDE0E203615EF3E2CCED2CE2251E7E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5831
Expires: Mon, 30 Jan 2023 20:18:11 GMT
Date: Mon, 30 Jan 2023 18:41:00 GMT
Connection: keep-alive
|
|
| www.themamaskitchen.com/ |  13.59.135.123 | 301 Moved Permanently | 162 B |
IP13.59.135.123:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET / HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 30 Jan 2023 18:41:00 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://www.themamaskitchen.com/
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy: frame-src 'self' https://*.doubleclick.net https://*.menusifudemos.com https://*.menusifu.com https://*.youtube.com https://*.google.com https://*.elegantthemes.com https://*.twitter.com https://*.yelp.com; connect-src 'self' https://*.googleapis.com https://*.google.com https://*.gstatic.com https://*.google-analytics.com https://yoast.com https://*.yoast.com; font-src 'self' data: https://*.gstatic.com https://*.menusifu.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google.com https://*.doubleclick.net https://*.googleadservices.com https://*.googletagmanager.com https://*.cloudflare.com https://*.googleapis.com https://*.youtube.com https://*.twitter.com https://*.menusifu.com https://*.jsdelivr.net https://*.google-analytics.com; style-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.menusifu.com; img-src 'self' data: https://*.google-analytics.com https://*.google.com https://*.googletagmanager.com https://*.gravatar.com https://*.gstatic.com https://*.googleapis.com https://*.menusifu.com https://*.youtube.com https://s.w.org; media-src 'self' https://*.menusifu.com https://*.youtube.com; frame-ancestors 'self' https://*.menusifudemos.com https://*.menusifu.com; worker-src 'self' blob:; default-src none
Referrer-Policy: strict-origin-when-cross-origin
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash3eb88dea4fe00db1182370e72683c3ab ca520abf1e91bfd2aef40c6a1270a911071e8922 d8083ee567c7b3023111dc30f32c94237df7db30d4d2daaea0a569e8a3069ad7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D8083EE567C7B3023111DC30F32C94237DF7DB30D4D2DAAEA0A569E8A3069AD7"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2682
Expires: Mon, 30 Jan 2023 19:25:42 GMT
Date: Mon, 30 Jan 2023 18:41:00 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash09ee4b0fe6cf4ca5ed31b24452338d00 7e62b6e20f0d4737f4a8d94f9818a0883027839e 56da08e18a408d7313de4e598984a251a0ecf85bbba98b421be9aebeb98835af
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "56DA08E18A408D7313DE4E598984A251A0ECF85BBBA98B421BE9AEBEB98835AF"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3389
Expires: Mon, 30 Jan 2023 19:37:29 GMT
Date: Mon, 30 Jan 2023 18:41:00 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ | 35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashbf0c602d32b3c14606f22a86183b5e3c 6eabd8d83475eba731968abe1a05a8bfd272f160 6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 30 Jan 2023 17:43:12 GMT
content-type: application/json
age: 3468
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash7b922915ebf1fa3639b333f994c74f24 144a3f80b98fd0652d4614f24cf6cbbee40f8938 adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: em1hcM99gPsbm+VZN5cOOfYbRhRyxfSgT2474ekcsec3YPp7zQRokyhZhwiyc5ABPxYT9h3iAM0=
x-amz-request-id: JHTCH22Y6S8D2D83
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 30 Jan 2023 18:21:54 GMT
age: 1146
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:00 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 30 Jan 2023 17:41:41 GMT
age: 3559
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash76e842a29086b60aede484507631acaa 9efc2b96289cc87976e59377e5d45316246f7a7e d9231c8085a444535dccf07bb46c42926d3f8fe7f8730ff0901355e93bd1ba90
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D9231C8085A444535DCCF07BB46C42926D3F8FE7F8730FF0901355E93BD1BA90"
Last-Modified: Mon, 30 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21573
Expires: Tue, 31 Jan 2023 00:40:33 GMT
Date: Mon, 30 Jan 2023 18:41:00 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash22b9916fc1fafc9bdc9bb37f9eac8a9a 86f640e134a741a0f906a8e3a0f5c6659dd0e394 a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16035
Expires: Mon, 30 Jan 2023 23:08:15 GMT
Date: Mon, 30 Jan 2023 18:41:00 GMT
Connection: keep-alive
|
|
| push.services.mozilla.com/ | 34.215.56.181 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP34.215.56.181:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: aCRMuPhpGpsFDYZxXinm1g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: WuFHSq1c5kjQjSCsKsRGJ4yTS2I=
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hashd81f874741beb45c89de8bb5c6de438e a251ab903e654953631d84721479bbae55aa5cdf ec28dafa2a54818028d4dfe99218d9e4b507f3bd7efaabfba630d85f24d4d75d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 18:41:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.googletagmanager.com/gtag/js?id=G-TZYDKS969T | 142.250.74.168 | 200 OK | 77 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=G-TZYDKS969T IP142.250.74.168:0
File typeASCII text, with very long lines (19796) Hashad7ed9b341eabaea04a1139cb0b70047 3968a6451180fc8f3fde3e152fbd1b835bc8a98a 1c7c8cd81ae4501c75a593c94da3aae92e21623b0043e8fa97bbe5e3274a8a91
GET /gtag/js?id=G-TZYDKS969T HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 30 Jan 2023 18:41:01 GMT
expires: Mon, 30 Jan 2023 18:41:01 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77324
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hashba2ca6af7b23ce2e11aa4f9d86e66269 212aef55d64b6add292dcf6241b16e7c93d1bae2 f163a94d190f5aeeb05b2e344bc8e1544d9701772b08585e9c92b529c8652b3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 18:41:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/zfQUKmFUorFJLGlIe7IYjfOC3yJyoul0q6aebVPn.png | 13.59.135.123 | 200 OK | 12 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/zfQUKmFUorFJLGlIe7IYjfOC3yJyoul0q6aebVPn.png IP13.59.135.123:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash9f638bc365d499d619e1812b48e02535 7a6112cbd51239cccb1bff06161a9dba03fb0658 450de00842c905e55e59ba2acf2f3641377f15d2c18bfd8b662f78a729f81da7
GET /wp-content/uploads/themamaskitchen.com/2022/08/zfQUKmFUorFJLGlIe7IYjfOC3yJyoul0q6aebVPn.png HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:01 GMT
content-type: image/webp
content-length: 11960
last-modified: Thu, 29 Dec 2022 02:44:51 GMT
etag: "63acff23-2eb8"
expires: Tue, 30 Jan 2024 18:41:01 GMT
cache-control: max-age=31536000
referrer-policy: no-referrer-when-downgrade
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/2020-06-04-1.jpg | 13.59.135.123 | 200 OK | 38 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/2020-06-04-1.jpg IP13.59.135.123:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 800x1200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash606041a85a978866522cb2ca61cbb00a 6435cb4a25696d51010db6d9233175d7ad968829 3a9c8fa0f24b62cf155d734644ebb27e8e48b2ec9e1aae97a2bd56eb00c3dd42
GET /wp-content/uploads/themamaskitchen.com/2022/08/2020-06-04-1.jpg HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:01 GMT
content-type: image/webp
content-length: 38386
last-modified: Thu, 29 Dec 2022 02:43:22 GMT
etag: "63acfeca-95f2"
expires: Tue, 30 Jan 2024 18:41:01 GMT
cache-control: max-age=31536000
referrer-policy: no-referrer-when-downgrade
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/2020-06-04-6.jpg | 13.59.135.123 | 200 OK | 33 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/2020-06-04-6.jpg IP13.59.135.123:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 800x1200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash2c379595493d2c062ba75c6c016ad395 4caa4fe6dcfcb32c28134ca2099476b4c389d470 ad0d808d7a003e76d22bc460a96e6a60f3f950fb24252ea842e5e77caa5729f3
GET /wp-content/uploads/themamaskitchen.com/2022/08/2020-06-04-6.jpg HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:01 GMT
content-type: image/webp
content-length: 33250
last-modified: Thu, 29 Dec 2022 02:43:11 GMT
etag: "63acfebf-81e2"
expires: Tue, 30 Jan 2024 18:41:01 GMT
cache-control: max-age=31536000
referrer-policy: no-referrer-when-downgrade
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/css/magnific_popup.css?ver=4.9.0 | 13.59.135.123 | 200 OK | 40 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/css/magnific_popup.css?ver=4.9.0 IP13.59.135.123:0
Hash3e74e15dc6a1bc5d1a0ad1d8e14562c9 ab60bb4a22657843fa749fa834c5df96a881c7f8 17c11614c1fb25dda97358e84b48df5e4c3e5cccd0d4915ffcc8618254bc470d
GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/css/magnific_popup.css?ver=4.9.0 HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:01 GMT
content-type: text/css
last-modified: Tue, 29 Nov 2022 20:30:52 GMT
etag: W/"63866bfc-1946"
expires: Tue, 30 Jan 2024 18:41:01 GMT
pragma: public
cache-control: max-age=31536000, public
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hashb67335a8e235eacf68e4b7f98cc5dc40 887a9b34cf2ba9371bbe8c93e362c174668cf812 1ad2f6328af6d819acd85f4e4646afcafd945e17e555d5eeb54244db83cd48fa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 18:41:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/2020-06-04.jpg | 13.59.135.123 | 200 OK | 61 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/2020-06-04.jpg IP13.59.135.123:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 800x1200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash4b02913f15f806b7724ace2734968537 dbc6ad2d2ee72b66d51962867e586f78f9b2fcaa 5c32d0b25f98328ed6c6503194a55db253289cb807e57a3aa9e2567ba5e31652
GET /wp-content/uploads/themamaskitchen.com/2022/08/2020-06-04.jpg HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:01 GMT
content-type: image/webp
content-length: 61384
last-modified: Thu, 29 Dec 2022 02:43:08 GMT
etag: "63acfebc-efc8"
expires: Tue, 30 Jan 2024 18:41:01 GMT
cache-control: max-age=31536000
referrer-policy: no-referrer-when-downgrade
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hashdb3290a85d0ba4da27406ae9636aa618 4c69da45eddd66a1e26fce5562fc45eda7005309 19db4d0cc84bff9586883a5fa69c426af0b5fc1c2760ee7c259b0307c8afa6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 18:41:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.themamaskitchen.com/wp-content/plugins/supreme-modules-pro-for-divi/public/js/imagesloaded.pkgd.min.js?ver=4.9.0 | 13.59.135.123 | 200 OK | 22 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/plugins/supreme-modules-pro-for-divi/public/js/imagesloaded.pkgd.min.js?ver=4.9.0 IP13.59.135.123:0
Hash051fe051ec3b3b5d55d99d19cebd689a 840da95b3471918756c193e77ef507a22e464075 57c057497dbb973540283d0dbac0e544d8820b6e99ef59b911837a651c206c14
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/supreme-modules-pro-for-divi/public/js/imagesloaded.pkgd.min.js?ver=4.9.0 HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:01 GMT
content-type: application/javascript
last-modified: Mon, 14 Feb 2022 13:22:50 GMT
etag: W/"620a57aa-15da"
expires: Tue, 30 Jan 2024 18:41:01 GMT
pragma: public
cache-control: max-age=31536000, public
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hashdb3290a85d0ba4da27406ae9636aa618 4c69da45eddd66a1e26fce5562fc45eda7005309 19db4d0cc84bff9586883a5fa69c426af0b5fc1c2760ee7c259b0307c8afa6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 18:41:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.themamaskitchen.com/wp-content/themes/Divi/js/scripts.min.js?ver=4.19.2 | 13.59.135.123 | 200 OK | 105 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/themes/Divi/js/scripts.min.js?ver=4.19.2 IP13.59.135.123:0
Size105 kB (105342 bytes) Hash5bb659b10c5ef83e96cf91d69b9ff0af 8e660423bd45a096550327ba68f4511b48838dc2 80042ea6172d6c91b65bea9a398b6100e924e7a4daf0f493887daec78ee06afa
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/Divi/js/scripts.min.js?ver=4.19.2 HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:01 GMT
content-type: application/javascript
last-modified: Tue, 29 Nov 2022 20:32:09 GMT
etag: W/"63866c49-42f69"
expires: Tue, 30 Jan 2024 18:41:01 GMT
pragma: public
cache-control: max-age=31536000, public
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCu173w3aXo.woff2 | 142.250.74.35 | 200 OK | 20 kB |
URL HTTP/2fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCu173w3aXo.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 19464, version 1.0\012- data Hash765a7790e9005f066ddfbc939bdd4621 c730bde751b462838db69f24c2c94019f964e029 3c316558e18d2996ed4394bc36b17d993c21584f30d16dd0e6d87673f5892c18
GET /s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCu173w3aXo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://www.themamaskitchen.com/
Origin: https://www.themamaskitchen.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19464
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 28 Jan 2023 01:15:10 GMT
expires: Sun, 28 Jan 2024 01:15:10 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Jul 2022 18:54:07 GMT
content-type: font/woff2
age: 235551
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtZ6Hw3aXw.woff | 142.250.74.35 | 200 OK | 25 kB |
URL HTTP/2fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtZ6Hw3aXw.woff IP142.250.74.35:0
File typeWeb Open Font Format, TrueType, length 24876, version 1.1\012- data Hashd5a3c0efc10edabdaf37c0dae79c9800 64d3aad753a0f43a11b6c3a57646058771eb861d 06addb5aa6e1b1334e0d3e22834cda351879423f5082c895ad6b521219253678
GET /s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtZ6Hw3aXw.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://www.themamaskitchen.com/
Origin: https://www.themamaskitchen.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 24876
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 02:10:12 GMT
expires: Fri, 26 Jan 2024 02:10:12 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Jul 2022 18:54:05 GMT
content-type: font/woff
age: 405049
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/plugins/supreme-modules-pro-for-divi/includes/extensions/Popup/frontend.min.js?ver=4.9.0 | 13.59.135.123 | 200 OK | 3.0 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/plugins/supreme-modules-pro-for-divi/includes/extensions/Popup/frontend.min.js?ver=4.9.0 IP13.59.135.123:0
Hash7d3d21bbb92cecd42189a94c8de4cbcb 753b61895c390c55130b7892bd87e1f84fdaa618 09630e6c9fb01cb5b9f18d20fda7810c6129599b68a442327b318bbb9f4cf292
GET /wp-content/plugins/supreme-modules-pro-for-divi/includes/extensions/Popup/frontend.min.js?ver=4.9.0 HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:01 GMT
content-type: application/javascript
last-modified: Wed, 26 Oct 2022 22:22:02 GMT
etag: W/"6359b30a-1c78"
expires: Tue, 30 Jan 2024 18:41:01 GMT
pragma: public
cache-control: max-age=31536000, public
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQEl5fsA-I.woff2 | 142.250.74.35 | 200 OK | 32 kB |
URL HTTP/2fonts.gstatic.com/s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQEl5fsA-I.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 31708, version 1.0\012- data Hash6c2294291ee58b672e5a745a9eb392bb 4fcc516d643698148ebf5070798ee005a4f9f177 b668d955df96f96f37b11c29184fd822e9d6c578d31ddc1bc68e82bb5e3625b2
GET /s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQEl5fsA-I.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://www.themamaskitchen.com/
Origin: https://www.themamaskitchen.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 31708
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 28 Jan 2023 18:36:25 GMT
expires: Sun, 28 Jan 2024 18:36:25 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 09 Aug 2022 02:13:41 GMT
content-type: font/woff2
age: 173076
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQWlhfsA-I.woff2 | 142.250.74.35 | 200 OK | 33 kB |
URL HTTP/2fonts.gstatic.com/s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQWlhfsA-I.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 33344, version 1.0\012- data Hash44cc870876facc1e3ff7561125a40a47 c924182ddfada22995588e70a47b86597acfc3cf c3b46ddc853156ec58a1516ec7289830daa3024d66ffbc59091715a4a81f5b75
GET /s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQWlhfsA-I.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://www.themamaskitchen.com/
Origin: https://www.themamaskitchen.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 22:35:24 GMT
expires: Fri, 26 Jan 2024 22:35:24 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 09 Aug 2022 02:20:12 GMT
content-type: font/woff2
age: 331537
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQdl9fsA-I.woff2 | 142.250.74.35 | 200 OK | 33 kB |
URL HTTP/2fonts.gstatic.com/s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQdl9fsA-I.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 33268, version 1.0\012- data Hash723a92f257ce3797f88a7203c35d184d ae2fb3bf81fa8261933717ec51aeb7dfc7934583 d23bda1e1a0c7826f5498b19e9b2c61e17e29f8241a3a60766b5123e4c6a39b1
GET /s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQdl9fsA-I.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://www.themamaskitchen.com/
Origin: https://www.themamaskitchen.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33268
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 24 Jan 2023 19:16:33 GMT
expires: Wed, 24 Jan 2024 19:16:33 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 09 Aug 2022 02:17:10 GMT
content-type: font/woff2
age: 516268
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCs16Hw3aXo.woff2 | 142.250.74.35 | 200 OK | 19 kB |
URL HTTP/2fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCs16Hw3aXo.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 19332, version 1.0\012- data Hashb3d584f731bc94608f56ced58cfe7c9d 28246b96dea97367e9fb7a3cd799d08a177fc85d c65b3db605be9709573951eb560b092f6ac76af88231a59fad750cc69d1e49a3
GET /s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCs16Hw3aXo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://www.themamaskitchen.com/
Origin: https://www.themamaskitchen.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19332
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Jan 2023 02:14:26 GMT
expires: Sat, 27 Jan 2024 02:14:26 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Jul 2022 18:55:52 GMT
content-type: font/woff2
age: 318395
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/ | 13.59.135.123 | 200 OK | 229 kB |
IP13.59.135.123:0
Size229 kB (229424 bytes) Hash0fbff2b9f632bc81add1f5d51ff832e3 a0e3b2bd94c0301aa02e2355cb01e1d519b106fe bc103d4856d0a19b627a35ee76fe3c76fff09962d064d8844ac3befb8c2a9d27
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET / HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:00 GMT
content-type: text/html; charset=UTF-8
last-modified: Mon, 30 Jan 2023 18:41:00 GMT
etag: W/"b8fb95b66fec24ff23dc535b4cd2ed97"
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: frame-src 'self' https://*.facebook.com https://*.doubleclick.net https://*.menusifudemos.com https://*.menusifu.com https://*.youtube.com https://*.google.com https://*.elegantthemes.com https://*.twitter.com https://*.yelp.com https://*.resy.com https://*.instagram.com https://reservationgenie.com https://*.reservationgenie.com; connect-src 'self' https://*.menusifu.com https://*.googleapis.com https://*.google.com https://*.gstatic.com https://*.google-analytics.com https://yoast.com https://*.yoast.com; font-src 'self' data: https://*.gstatic.com https://*.menusifu.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.gstatic.com https://*.google.com https://*.doubleclick.net https://*.googleadservices.com https://*.googletagmanager.com https://*.cloudflare.com https://*.googleapis.com https://*.youtube.com https://*.twitter.com https://*.menusifu.com https://*.jsdelivr.net https://*.google-analytics.com https://*.resy.com https://*.instagram.com; style-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.menusifu.com https://*.cloudflare.com; img-src 'self' data: https://customer-website-uploads.s3.amazonaws.com https://*.google-analytics.com https://*.google.com https://*.googletagmanager.com https://*.gravatar.com https://*.gstatic.com https://*.googleapis.com https://*.menusifu.com https://*.youtube.com https://s.w.org https://*.doubleclick.net https://*.adnxs.com https://*.googleadservices.com https://*.ipromote.com; media-src 'self' https://customer-website-uploads.s3.amazonaws.com https://*.menusifu.com https://*.youtube.com; frame-ancestors 'self' https://*.menusifudemos.com https://*.menusifu.com; worker-src 'self' blob:; default-src none
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/plugins/supreme-modules-pro-for-divi/public/js/masonry.pkgd.min.js?ver=4.9.0 | 13.59.135.123 | 200 OK | 9.0 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/plugins/supreme-modules-pro-for-divi/public/js/masonry.pkgd.min.js?ver=4.9.0 IP13.59.135.123:0
Hashf861f377daa2181e622013367ae21839 4d54365ea6c8dbba72a370bb33e96875043bd80c 628db9592645ae0b77dfc295296c606535186fa0578d4a54d62e2a57bb94ccd3
GET /wp-content/plugins/supreme-modules-pro-for-divi/public/js/masonry.pkgd.min.js?ver=4.9.0 HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:01 GMT
content-type: application/javascript
last-modified: Mon, 14 Feb 2022 13:22:50 GMT
etag: W/"620a57aa-5e27"
expires: Tue, 30 Jan 2024 18:41:01 GMT
pragma: public
cache-control: max-age=31536000, public
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 54.230.245.118 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP54.230.245.118:0
Hash7d1606f5c519441db2dbde08202f10c7 eadd969862bc4a02d78711958acd79df7fd73199 a5a6c0d45fee9b1f72e6ff12ddff55839b95060b6d7e7b4e9d64ecddf1a8e665
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 30 Jan 2023 18:41:01 GMT
Last-Modified: Mon, 30 Jan 2023 18:34:24 GMT
Server: ECS (dcb/7EA2)
X-Cache: Miss from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: A0sTFCj-uvLUl2WmymICNVi7trGQaBq7atBEO1nLXR6e7UUPojH8WA==
Age: 398
|
|
| website-cdn.menusifu.com/public/images/Sample+Background+Image+2.png | 54.230.111.60 | 200 OK | 26 kB |
URL HTTP/2website-cdn.menusifu.com/public/images/Sample+Background+Image+2.png IP54.230.111.60:0
File typePNG image data, 1920 x 442, 8-bit colormap, non-interlaced\012- data Hash3eca2fc51916715efad0a9c2a3f5aa63 47ea83e61653d6feccefbce76508b520cf9ca131 1b0997f980e775731e222ae4d3c01cf7203e70b500e98626ef3d058e01cf13ee
GET /public/images/Sample+Background+Image+2.png HTTP/1.1
Host: website-cdn.menusifu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 25726
date: Sun, 15 Jan 2023 14:44:07 GMT
last-modified: Mon, 15 Nov 2021 14:39:13 GMT
etag: "3eca2fc51916715efad0a9c2a3f5aa63"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: C62Ib6e_f96IwcctcGhgRBS6dEmIWXloWfwDTVEnHTM1DdkhfYeARw==
age: 1310215
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/plugins/supreme-modules-pro-for-divi/includes/modules/ImageCarousel/frontend.min.js?ver=4.9.0 | 13.59.135.123 | 200 OK | 35 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/plugins/supreme-modules-pro-for-divi/includes/modules/ImageCarousel/frontend.min.js?ver=4.9.0 IP13.59.135.123:0
Hasha4e505ae93287fdcefd4fe9555e00eb0 48e4d7fd492a08b85b5f8878a350cdbe7d022e54 50b15a9e56dd96673f9e0d55386bc59633c8ca5264f9ff560b8086a06288c477
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/supreme-modules-pro-for-divi/includes/modules/ImageCarousel/frontend.min.js?ver=4.9.0 HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:01 GMT
content-type: application/javascript
last-modified: Tue, 06 Dec 2022 18:15:28 GMT
etag: W/"638f86c0-1f45"
expires: Tue, 30 Jan 2024 18:41:01 GMT
pragma: public
cache-control: max-age=31536000, public
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| region1.google-analytics.com/g/collect?v=2&tid=G-TZYDKS969T>m=2oe1p0&_p=1655973765&cid=658838663.1675104075&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675104074&sct=1&seg=0&dl=https%3A%2F%2Fwww.themamaskitchen.com%2F&dt=Mama%27s%20Kitchen%20-%20Chinese%20Restaurant%20%7C%20Online%20Order%20%7C%20Houston%20%7C%20TX&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 | 216.239.32.36 | 204 No Content | 0 B |
URL HTTP/2region1.google-analytics.com/g/collect?v=2&tid=G-TZYDKS969T>m=2oe1p0&_p=1655973765&cid=658838663.1675104075&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675104074&sct=1&seg=0&dl=https%3A%2F%2Fwww.themamaskitchen.com%2F&dt=Mama%27s%20Kitchen%20-%20Chinese%20Restaurant%20%7C%20Online%20Order%20%7C%20Houston%20%7C%20TX&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 IP216.239.32.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-TZYDKS969T>m=2oe1p0&_p=1655973765&cid=658838663.1675104075&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675104074&sct=1&seg=0&dl=https%3A%2F%2Fwww.themamaskitchen.com%2F&dt=Mama%27s%20Kitchen%20-%20Chinese%20Restaurant%20%7C%20Online%20Order%20%7C%20Houston%20%7C%20TX&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Origin: https://www.themamaskitchen.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.themamaskitchen.com
date: Mon, 30 Jan 2023 18:41:02 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 54.230.245.118 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP54.230.245.118:0
Hash7d1606f5c519441db2dbde08202f10c7 eadd969862bc4a02d78711958acd79df7fd73199 a5a6c0d45fee9b1f72e6ff12ddff55839b95060b6d7e7b4e9d64ecddf1a8e665
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Mon, 30 Jan 2023 18:41:01 GMT
Etag: "63d6fc17-1d7"
Server: ECS (dcb/7F38)
X-Cache: Miss from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: qoZ7GGVA55G5Yc1yflXqtK6ae9e-9nqWqPSAeQrjxsguKULGwPqMTg==
|
|
| website-cdn.menusifu.com/public/images/Sample+Background+Image+4.png | 54.230.111.60 | 200 OK | 46 kB |
URL HTTP/2website-cdn.menusifu.com/public/images/Sample+Background+Image+4.png IP54.230.111.60:0
File typePNG image data, 1920 x 851, 8-bit colormap, non-interlaced\012- data Hash66a81ebe3d0a6fb48713e808c6bc49fa 15c005304693a8287ba533b97641ce3a3153007c 3c7f550c87e7946055e279beed06ad2c9af5034aeb6c9aca3049fad1a7439242
GET /public/images/Sample+Background+Image+4.png HTTP/1.1
Host: website-cdn.menusifu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 45683
date: Thu, 12 Jan 2023 06:53:45 GMT
last-modified: Mon, 15 Nov 2021 14:39:41 GMT
etag: "66a81ebe3d0a6fb48713e808c6bc49fa"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UaOyY0MABlQMcu1x2UmuC3xwyHhuU20k6X6UFmvdzCvO-Ia5oPnPPg==
age: 1597638
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0 | 13.59.135.123 | 200 OK | 38 kB |
URL HTTP/2www.themamaskitchen.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0 IP13.59.135.123:0
File typeASCII text, with very long lines (65447) Hashda1d04545f3e96beaed5420238315631 b953d62cc7a25be1a234ac325bed74838b342a0b d4b196e7db823ffbd8f94d502499313b4704f7c5aadfe5d8b7d4ffa4842bb7cc
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:01 GMT
content-type: application/javascript
last-modified: Tue, 06 Dec 2022 23:04:37 GMT
etag: W/"638fca85-15db1"
expires: Tue, 30 Jan 2024 18:41:01 GMT
pragma: public
cache-control: max-age=31536000, public
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/2020-06-04-3.jpg | 13.59.135.123 | 200 OK | 90 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/2020-06-04-3.jpg IP13.59.135.123:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 800x1200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash173197244e8af4374668592e70164a5b 1fec06f9965d1ef679793e86b7866da848f849d0 1d4ca419e55c0be4e3b155302f33d024d25f8a115233e909851843181123f509
GET /wp-content/uploads/themamaskitchen.com/2022/08/2020-06-04-3.jpg HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Cookie: _ga_TZYDKS969T=GS1.1.1675104074.1.0.1675104074.0.0.0; _ga=GA1.1.658838663.1675104075
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:02 GMT
content-type: image/webp
content-length: 89528
last-modified: Thu, 29 Dec 2022 02:43:18 GMT
etag: "63acfec6-15db8"
expires: Tue, 30 Jan 2024 18:41:02 GMT
cache-control: max-age=31536000
referrer-policy: no-referrer-when-downgrade
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/2022-07-27-1.jpg | 13.59.135.123 | 200 OK | 56 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/2022-07-27-1.jpg IP13.59.135.123:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 800x1200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash29ae45cf9f9b26392e32b4509fb3b37a 435f25f9ad2dc5bb4e7ca129f1a82f8670f1e724 26cf19293faff25b703194e24371f655291a96878c4145e10c01453da40bc7a4
GET /wp-content/uploads/themamaskitchen.com/2022/08/2022-07-27-1.jpg HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Cookie: _ga_TZYDKS969T=GS1.1.1675104074.1.0.1675104074.0.0.0; _ga=GA1.1.658838663.1675104075
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:02 GMT
content-type: image/webp
content-length: 55846
last-modified: Thu, 29 Dec 2022 02:43:05 GMT
etag: "63acfeb9-da26"
expires: Tue, 30 Jan 2024 18:41:02 GMT
cache-control: max-age=31536000
referrer-policy: no-referrer-when-downgrade
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/2021-04-09.jpg | 13.59.135.123 | 200 OK | 65 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/2021-04-09.jpg IP13.59.135.123:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x800, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash5000bf7e58d3b6f0e289ca9c5a0d9ab1 6847ee69cf612f2bdb7677f9976b1243082159c7 67527bb9425f06d439570fb3f7f08b9b288a0dc7717da89b1c9692d029790cd0
GET /wp-content/uploads/themamaskitchen.com/2022/08/2021-04-09.jpg HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Cookie: _ga_TZYDKS969T=GS1.1.1675104074.1.0.1675104074.0.0.0; _ga=GA1.1.658838663.1675104075
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:02 GMT
content-type: image/webp
content-length: 65292
last-modified: Thu, 29 Dec 2022 02:45:03 GMT
etag: "63acff2f-ff0c"
expires: Tue, 30 Jan 2024 18:41:02 GMT
cache-control: max-age=31536000
referrer-policy: no-referrer-when-downgrade
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash1141ae65ad448fb3438690d5042af728 aa8b236bb1099c9440bfe3e98530939623250c03 e55eeaf5cd454042706c3e2d7d2b0211e91087b430cb5bae6b9e030392f57b4b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 18:41:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash75bf326700e29b1b06e57fb96ee2b064 4f979f28905b65637a058cd44be6c25bb51a42e4 385f7a9c4112c4d674264d02229719e7f82e7039e681db8aaa6685ebab2be0c1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 18:41:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| maps.googleapis.com/maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=3.exp&language=en_US&callback=onApiLoad | 216.58.207.202 | 200 OK | 56 kB |
URL HTTP/2maps.googleapis.com/maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=3.exp&language=en_US&callback=onApiLoad IP216.58.207.202:0
File typeASCII text, with very long lines (2469) Hash3826393ccc25fa22e3ed4bd39f9a9372 6efc289097db54c39884bc75e7096dad890d555d de06520f12d4d2ac2cb631be6246ceffd0408386bff5c2edae00dbb36c4838e6
GET /maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=3.exp&language=en_US&callback=onApiLoad HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 56002
x-xss-protection: 0
x-frame-options: SAMEORIGIN
date: Mon, 30 Jan 2023 18:28:34 GMT
expires: Mon, 30 Jan 2023 18:58:34 GMT
cache-control: public, max-age=1800
content-type: text/javascript; charset=UTF-8
age: 748
server-timing: gfet4t7; dur=0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/2020-07-12.jpg | 13.59.135.123 | 200 OK | 80 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/2020-07-12.jpg IP13.59.135.123:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x800, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash1e0f4c35335c267ca64619b7478d17c3 ed696c44d1512866c0189de451a680f4cc320b86 92daae479a7b7a5e6a472b5ce673a2ca5a3fdfcb6b09d4a2260dc5b7b4bb9799
GET /wp-content/uploads/themamaskitchen.com/2022/08/2020-07-12.jpg HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Cookie: _ga_TZYDKS969T=GS1.1.1675104074.1.0.1675104074.0.0.0; _ga=GA1.1.658838663.1675104075
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:02 GMT
content-type: image/webp
content-length: 79906
last-modified: Thu, 29 Dec 2022 02:45:07 GMT
etag: "63acff33-13822"
expires: Tue, 30 Jan 2024 18:41:02 GMT
cache-control: max-age=31536000
referrer-policy: no-referrer-when-downgrade
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/2020-06-04-2.jpg | 13.59.135.123 | 200 OK | 78 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/2020-06-04-2.jpg IP13.59.135.123:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x800, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hashb9ebf6524d940677fa7962f684e8edc2 68429d14b5d4ab2787a7367dfea54e440548863b 4d5f0d415c2506f0ac776749e3e4f22635c34d9cea4a5bd371f13c5fa1a02960
GET /wp-content/uploads/themamaskitchen.com/2022/08/2020-06-04-2.jpg HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Cookie: _ga_TZYDKS969T=GS1.1.1675104074.1.0.1675104074.0.0.0; _ga=GA1.1.658838663.1675104075
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:02 GMT
content-type: image/webp
content-length: 77762
last-modified: Thu, 29 Dec 2022 02:43:00 GMT
etag: "63acfeb4-12fc2"
expires: Tue, 30 Jan 2024 18:41:02 GMT
cache-control: max-age=31536000
referrer-policy: no-referrer-when-downgrade
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/ZzzeWo5gxNzswgoxnT6k6nh1uDGCzZyUauGKfpmr.jpg | 13.59.135.123 | 200 OK | 64 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/ZzzeWo5gxNzswgoxnT6k6nh1uDGCzZyUauGKfpmr.jpg IP13.59.135.123:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x800, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hashae68e3548f13e3fb2d5d18d43577bb83 d8aef506ee8f0087354458f012db669499d44489 06527a9888124ffe329944bcf7536b7805cb46b4efac44454c0f125af4783c9e
GET /wp-content/uploads/themamaskitchen.com/2022/08/ZzzeWo5gxNzswgoxnT6k6nh1uDGCzZyUauGKfpmr.jpg HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Cookie: _ga_TZYDKS969T=GS1.1.1675104074.1.0.1675104074.0.0.0; _ga=GA1.1.658838663.1675104075
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:02 GMT
content-type: image/webp
content-length: 64368
last-modified: Thu, 29 Dec 2022 02:44:47 GMT
etag: "63acff1f-fb70"
expires: Tue, 30 Jan 2024 18:41:02 GMT
cache-control: max-age=31536000
referrer-policy: no-referrer-when-downgrade
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/2020-06-04-4.jpg | 13.59.135.123 | 200 OK | 70 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/2020-06-04-4.jpg IP13.59.135.123:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x800, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hashe1d28bee05d2b2452246c9821587a0ba 3b061d5710f5f57f2cd2ca302b26352f176575e6 e405078df72a9e4a198cb25b9d2d59f34a3be56cf8bcc7180340d46e1b2976c3
GET /wp-content/uploads/themamaskitchen.com/2022/08/2020-06-04-4.jpg HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Cookie: _ga_TZYDKS969T=GS1.1.1675104074.1.0.1675104074.0.0.0; _ga=GA1.1.658838663.1675104075
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:02 GMT
content-type: image/webp
content-length: 69598
last-modified: Thu, 29 Dec 2022 02:45:11 GMT
etag: "63acff37-10fde"
expires: Tue, 30 Jan 2024 18:41:02 GMT
cache-control: max-age=31536000
referrer-policy: no-referrer-when-downgrade
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/themes/Divi/js/smoothscroll.js?ver=4.19.2 | 13.59.135.123 | 200 OK | 140 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/themes/Divi/js/smoothscroll.js?ver=4.19.2 IP13.59.135.123:0
Size140 kB (140455 bytes) Hash288d903232ddade798f794b252129e1e 45f2c9f8951790a6f5b7bc215fea6dc2b633def8 948726ae1229cfc766308d2e4a3fb372a82ca50d119080ade0626ee3984192e7
GET /wp-content/themes/Divi/js/smoothscroll.js?ver=4.19.2 HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:01 GMT
content-type: application/javascript
last-modified: Tue, 29 Nov 2022 20:32:09 GMT
etag: W/"63866c49-1652"
expires: Tue, 30 Jan 2024 18:41:01 GMT
pragma: public
cache-control: max-age=31536000, public
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash75bf326700e29b1b06e57fb96ee2b064 4f979f28905b65637a058cd44be6c25bb51a42e4 385f7a9c4112c4d674264d02229719e7f82e7039e681db8aaa6685ebab2be0c1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 18:41:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/2022-07-27.jpg | 13.59.135.123 | 200 OK | 103 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/2022-07-27.jpg IP13.59.135.123:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x800, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Size103 kB (103420 bytes) Hash307234ce60b228ea4e7874e0952174ae 0ee5516227a66efeabb7b83faef8f7d98fc53eab 605452a3d9f9a702b48e1a64397bada072b13c38bcb5cf779eb0ec74b1a41a81
GET /wp-content/uploads/themamaskitchen.com/2022/08/2022-07-27.jpg HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Cookie: _ga_TZYDKS969T=GS1.1.1675104074.1.0.1675104074.0.0.0; _ga=GA1.1.658838663.1675104075
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:02 GMT
content-type: image/webp
content-length: 103420
last-modified: Thu, 29 Dec 2022 02:44:56 GMT
etag: "63acff28-193fc"
expires: Tue, 30 Jan 2024 18:41:02 GMT
cache-control: max-age=31536000
referrer-policy: no-referrer-when-downgrade
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/Beef-Mixed-Vege-Buns-UB-1920.jpg | 13.59.135.123 | 200 OK | 45 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/Beef-Mixed-Vege-Buns-UB-1920.jpg IP13.59.135.123:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x800, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash4139b3262b9615c43e17bfb570fb9a8b 6e17762e1ede5b0c8ef1740ce371c9b22b242b4a 919d49ad172a9ad329a79899f3eee5cb33e8fba3d78fb508c8a5618b4e08e772
GET /wp-content/uploads/themamaskitchen.com/2022/08/Beef-Mixed-Vege-Buns-UB-1920.jpg HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Cookie: _ga_TZYDKS969T=GS1.1.1675104074.1.0.1675104074.0.0.0; _ga=GA1.1.658838663.1675104075
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:02 GMT
content-type: image/webp
content-length: 44566
last-modified: Thu, 29 Dec 2022 02:42:43 GMT
etag: "63acfea3-ae16"
expires: Tue, 30 Jan 2024 18:41:02 GMT
cache-control: max-age=31536000
referrer-policy: no-referrer-when-downgrade
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| maps.gstatic.com/maps-api-v3/embed/js/51/7/init_embed.js | 142.250.74.3 | 200 OK | 69 kB |
URL HTTP/2maps.gstatic.com/maps-api-v3/embed/js/51/7/init_embed.js IP142.250.74.3:0
File typeASCII text, with very long lines (2599) Hashfd4867728783671f13b38d1f073e7be9 ff5ba304ce5b2838e4b49b6cff833dede37e1098 52a398663110b5dc50e72094c287b049ec5ed33a2b639418e4e1a9c3d313b82c
GET /maps-api-v3/embed/js/51/7/init_embed.js HTTP/1.1
Host: maps.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 69373
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 28 Jan 2023 03:51:36 GMT
expires: Sun, 28 Jan 2024 03:51:36 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 23 Jan 2023 21:48:16 GMT
content-type: text/javascript
age: 226166
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/Vegetables-Fried-Noodles-UB.jpg | 13.59.135.123 | 200 OK | 52 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/Vegetables-Fried-Noodles-UB.jpg IP13.59.135.123:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x800, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash574a04d71a4ada44e1a5d34d9562b551 37b29e6aeb31a7593bcd0c44f9b400bb443b4797 a9c9d6013d77bb9a2b8ce97ee106974eacb4121cd804dcdae2971487ebf541bc
GET /wp-content/uploads/themamaskitchen.com/2022/08/Vegetables-Fried-Noodles-UB.jpg HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Cookie: _ga_TZYDKS969T=GS1.1.1675104074.1.0.1675104074.0.0.0; _ga=GA1.1.658838663.1675104075
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:02 GMT
content-type: image/webp
content-length: 51460
last-modified: Thu, 29 Dec 2022 02:41:56 GMT
etag: "63acfe74-c904"
expires: Tue, 30 Jan 2024 18:41:02 GMT
cache-control: max-age=31536000
referrer-policy: no-referrer-when-downgrade
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/Stir-Fried-Baby-Bok-Choy-UB.jpg | 13.59.135.123 | 200 OK | 44 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/Stir-Fried-Baby-Bok-Choy-UB.jpg IP13.59.135.123:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x800, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash6fbe77bec957d80affe557f3a18d02ce 9546670eb958905819b7720477c0836a6efd0a6c c9163ba7015694c4a30c8f2e717584165fcb5aaafe80bb107e7705870325a8f4
GET /wp-content/uploads/themamaskitchen.com/2022/08/Stir-Fried-Baby-Bok-Choy-UB.jpg HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Cookie: _ga_TZYDKS969T=GS1.1.1675104074.1.0.1675104074.0.0.0; _ga=GA1.1.658838663.1675104075
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:02 GMT
content-type: image/webp
content-length: 43594
last-modified: Thu, 29 Dec 2022 02:42:01 GMT
etag: "63acfe79-aa4a"
expires: Tue, 30 Jan 2024 18:41:02 GMT
cache-control: max-age=31536000
referrer-policy: no-referrer-when-downgrade
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/Spicy-Fried-Cauliflower-UB.jpg | 13.59.135.123 | 200 OK | 45 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/Spicy-Fried-Cauliflower-UB.jpg IP13.59.135.123:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x800, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hashed06cab7dc6aabe91de8e8ecef0c2a30 84de09e80c1b7c3a93ba8837274586513c93d067 b49a6dd5e2b9ab96f44f16235c68fe0d5cecb11e18575b940388a221beb79dca
GET /wp-content/uploads/themamaskitchen.com/2022/08/Spicy-Fried-Cauliflower-UB.jpg HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Cookie: _ga_TZYDKS969T=GS1.1.1675104074.1.0.1675104074.0.0.0; _ga=GA1.1.658838663.1675104075
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:02 GMT
content-type: image/webp
content-length: 44702
last-modified: Thu, 29 Dec 2022 02:42:06 GMT
etag: "63acfe7e-ae9e"
expires: Tue, 30 Jan 2024 18:41:02 GMT
cache-control: max-age=31536000
referrer-policy: no-referrer-when-downgrade
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/Orange-Beef-2-UB-1920.jpg | 13.59.135.123 | 200 OK | 55 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/Orange-Beef-2-UB-1920.jpg IP13.59.135.123:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x800, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash9235b1ef5b1f8c422e8be90cd2651832 f52dad2a865f9c39dba759428111b11c8151e2f3 cf67791cbe640d7863accb96479d0fdb41f6dc52c929f83e1b01fd1cb910949d
GET /wp-content/uploads/themamaskitchen.com/2022/08/Orange-Beef-2-UB-1920.jpg HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Cookie: _ga_TZYDKS969T=GS1.1.1675104074.1.0.1675104074.0.0.0; _ga=GA1.1.658838663.1675104075
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:02 GMT
content-type: image/webp
content-length: 54558
last-modified: Thu, 29 Dec 2022 02:42:10 GMT
etag: "63acfe82-d51e"
expires: Tue, 30 Jan 2024 18:41:02 GMT
cache-control: max-age=31536000
referrer-policy: no-referrer-when-downgrade
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/Lotus-Root-in-West-Lake-UB.jpg | 13.59.135.123 | 200 OK | 39 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/Lotus-Root-in-West-Lake-UB.jpg IP13.59.135.123:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x800, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash23703a6c4fcfd846b0ab405184a6b72a e445a0c0f245ddd2b590c52361104b1b2b28dfe8 125a818f69b2a1617c9653bfd233ac992c398e8fbb04471a47c2c5946bdffaf4
GET /wp-content/uploads/themamaskitchen.com/2022/08/Lotus-Root-in-West-Lake-UB.jpg HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Cookie: _ga_TZYDKS969T=GS1.1.1675104074.1.0.1675104074.0.0.0; _ga=GA1.1.658838663.1675104075
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:02 GMT
content-type: image/webp
content-length: 39256
last-modified: Thu, 29 Dec 2022 02:42:15 GMT
etag: "63acfe87-9958"
expires: Tue, 30 Jan 2024 18:41:02 GMT
cache-control: max-age=31536000
referrer-policy: no-referrer-when-downgrade
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/Dry-Fried-Green-Beans-UB.jpg | 13.59.135.123 | 200 OK | 53 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/Dry-Fried-Green-Beans-UB.jpg IP13.59.135.123:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x800, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hashda2a4ed58fcffdcb65b8e3932d0b1e5c 93a0d4a0019d2b32c72f2777a3833fa38e3c438e d16fa31b0c70c878d4fe9e0770aa9b94f5fbc6648c8f2f47071dcd67672a4d92
GET /wp-content/uploads/themamaskitchen.com/2022/08/Dry-Fried-Green-Beans-UB.jpg HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Cookie: _ga_TZYDKS969T=GS1.1.1675104074.1.0.1675104074.0.0.0; _ga=GA1.1.658838663.1675104075
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:02 GMT
content-type: image/webp
content-length: 52828
last-modified: Thu, 29 Dec 2022 02:42:24 GMT
etag: "63acfe90-ce5c"
expires: Tue, 30 Jan 2024 18:41:02 GMT
cache-control: max-age=31536000
referrer-policy: no-referrer-when-downgrade
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/Beef-Temptation2-UB-1920.jpg | 13.59.135.123 | 200 OK | 53 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/Beef-Temptation2-UB-1920.jpg IP13.59.135.123:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x800, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash8bb27746e9c6bbd7fc722e17af3b1d4f 710e7f4a2f99ea7a0b50bcbf1462d92881dcc0a4 d2be2e2c9623abfc90622ce9544d634fa058f93c73a99613a430e84e46880b8e
GET /wp-content/uploads/themamaskitchen.com/2022/08/Beef-Temptation2-UB-1920.jpg HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Cookie: _ga_TZYDKS969T=GS1.1.1675104074.1.0.1675104074.0.0.0; _ga=GA1.1.658838663.1675104075
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:02 GMT
content-type: image/webp
content-length: 53198
last-modified: Thu, 29 Dec 2022 02:42:38 GMT
etag: "63acfe9e-cfce"
expires: Tue, 30 Jan 2024 18:41:02 GMT
cache-control: max-age=31536000
referrer-policy: no-referrer-when-downgrade
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/Corn-with-Salted-Egg-Yolk-2.jpg | 13.59.135.123 | 200 OK | 84 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/Corn-with-Salted-Egg-Yolk-2.jpg IP13.59.135.123:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x800, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash424b1ede6e0b500b9a9ff3198cb13e5f 27f48577adafe1d2ed77612bd61b7a7d339559da da9d7c15abcd8a6ca1fb3adc703af7ee61fd961064f2f95714d01ba70e66a083
GET /wp-content/uploads/themamaskitchen.com/2022/08/Corn-with-Salted-Egg-Yolk-2.jpg HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Cookie: _ga_TZYDKS969T=GS1.1.1675104074.1.0.1675104074.0.0.0; _ga=GA1.1.658838663.1675104075
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:02 GMT
content-type: image/webp
content-length: 83544
last-modified: Thu, 29 Dec 2022 02:42:28 GMT
etag: "63acfe94-14658"
expires: Tue, 30 Jan 2024 18:41:02 GMT
cache-control: max-age=31536000
referrer-policy: no-referrer-when-downgrade
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/2022-07-26.jpg | 13.59.135.123 | 200 OK | 114 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/2022-07-26.jpg IP13.59.135.123:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x800, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Size114 kB (114524 bytes) Hash0bb440571df8c53ba5927089e6b29080 93199bcfe28d6a828da16e8f1f69fa2747d6c69e ea4e5f59b3fff3c1a736f699dc4545dffc90c8884d0ca884df06a1841ce56fa0
GET /wp-content/uploads/themamaskitchen.com/2022/08/2022-07-26.jpg HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Cookie: _ga_TZYDKS969T=GS1.1.1675104074.1.0.1675104074.0.0.0; _ga=GA1.1.658838663.1675104075
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:02 GMT
content-type: image/webp
content-length: 114524
last-modified: Thu, 29 Dec 2022 02:44:59 GMT
etag: "63acff2b-1bf5c"
expires: Tue, 30 Jan 2024 18:41:02 GMT
cache-control: max-age=31536000
referrer-policy: no-referrer-when-downgrade
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashdfb84426fed94988d5c90372baff059c f1c4740830034ff8a5759d59ae3f657ea524d083 d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6175
Expires: Mon, 30 Jan 2023 20:23:57 GMT
Date: Mon, 30 Jan 2023 18:41:02 GMT
Connection: keep-alive
|
|
| www.themamaskitchen.com/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/magnific-popup.js?ver=4.9.0 | 13.59.135.123 | 200 OK | 10 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/magnific-popup.js?ver=4.9.0 IP13.59.135.123:0
Hash2a5173ea11232d771ad85c43ae111cb6 6cead2db6290ec7027d7b903a6a1d0309b66ab4d 4d478780d18edf6270f309f877c332a679a9349b7b3d3cb769237fe231fcd1cc
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/magnific-popup.js?ver=4.9.0 HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:01 GMT
content-type: application/javascript
last-modified: Thu, 21 Apr 2022 02:59:41 GMT
etag: W/"6260c89d-5902"
expires: Tue, 30 Jan 2024 18:41:01 GMT
pragma: public
cache-control: max-age=31536000, public
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashdfb84426fed94988d5c90372baff059c f1c4740830034ff8a5759d59ae3f657ea524d083 d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6175
Expires: Mon, 30 Jan 2023 20:23:57 GMT
Date: Mon, 30 Jan 2023 18:41:02 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg | 34.120.237.76 | 200 OK | 7.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash131eb343c5abd61939457d69bd371348 ffb2035cf64fc83f01db5c6f26ffa264b6aac95b 8486eb9dc6325018f8721bc6f37408f260b6e652b145280f2d778d860d3ec2d5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7538
x-amzn-requestid: 8bec493a-9c81-4cfd-b6e9-66f4f3d55cb7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fOOJQEZSoAMFb1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf2a3b-5f0c9f3e4cac1ba26c802050;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 00:45:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 3uybP14DBtrEK8ieNWHaQfz3Zl_JMl0_L9CGZgcusTjVCFIIaTpwIQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 00:23:18 GMT
age: 65864
etag: "ffb2035cf64fc83f01db5c6f26ffa264b6aac95b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg | 34.120.237.76 | 200 OK | 7.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash3e04b9eaf7449828136ad59e4c9d69f1 b820be4ed885dcf288eb6460c57e1fa7b1c7c476 df75cf7183d401a19655aab025d08ad2c498573c88b32e9b258d951d2993b936
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7679
x-amzn-requestid: 0c7983d5-6040-44e9-b394-21c3784702a2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkEtEfHoAMFaNA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6ea-54c55dbd09ca642048af8916;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Wx-qjsrMLYpLmE-8QmpR46BeRySbUGL2Rrr6LqhEQ8jaEEj_6Aj0qg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:52:09 GMT
age: 74933
etag: "b820be4ed885dcf288eb6460c57e1fa7b1c7c476"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg | 34.120.237.76 | 200 OK | 9.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash51aa950d5eed7b90cab6632107092edc e4388ced02e5576867e77547496dec1ac2338ef7 588830e5f725e8e56270565e40f817f2658b0ee7c0425d138e5f65a17ff40483
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9457
x-amzn-requestid: 7c48e5ca-2128-43da-ba83-fd91568af1ef
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkBOGHVoAMFQtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6d4-1b850ffd543f51f92dec3894;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: soTFEnYjNcti77h3FpnztwzR7ypv68NbyoI6DxS0NhU412ykFsWAgA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 22:00:38 GMT
age: 74424
etag: "e4388ced02e5576867e77547496dec1ac2338ef7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash65c02d8a1b0d6a210cb2a649c5c67469 027dbc7a104c922904f067ed15d696c363c11774 89d5443a1d313c632d09a583ef602aa4645a16986076387329f434262d15b0a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10997
x-amzn-requestid: a6fac0ab-1acf-4808-8785-3b4ec5e32edf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhj30FX7IAMFa5w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e698-005109ec2e76529e793678d6;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: skGKI_MWvDwpAbGibUcr8wTlimgoPU9ZYhEHltd3uhdJZ_GoNznVAA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:53:08 GMT
age: 74874
etag: "027dbc7a104c922904f067ed15d696c363c11774"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg | 34.120.237.76 | 200 OK | 8.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashfe31ee140c2fd62e616c8a1edc9e78bb 7aa5fbdc8156514770ae620e81f1afef1c77890f 799af4bf9fa07ed27ebdc9d1a3344ee8a2b6529f076c263495b93290c47a1cc4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8464
x-amzn-requestid: bf2cf356-ebb1-469b-ba35-a79bb009cad6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhj3qGeboAMFzNw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e697-7c96841f52b6a96d1b0eaf34;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: UNub7Gd4S0ogn5EJhtJVu8q1qML5_4eL2lIPQXiAuXy_q-XiR4s-5w==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:55:21 GMT
etag: "7aa5fbdc8156514770ae620e81f1afef1c77890f"
content-type: image/jpeg
age: 74741
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg | 34.120.237.76 | 200 OK | 4.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash4205d8106659e00fff1cbe9262918b8c ab4f6528594a1725934727dc7d834c028a79c609 31f1a28602a194bd0856495d4d81d5c72cd7ff4e5bad6bdd1a31ec3041f4a2cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4475
x-amzn-requestid: b7b272d6-3089-4f33-89b5-5cb388640e10
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_e6HsaIAMF5Lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445f8-1789f7f4264270916da323db;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:45:28 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 4jPbm4WufkUKm7ljLvpHrJUFhr-JQ_nl3iYfI5S8nTqEszFdUtz9EQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:56:46 GMT
age: 74656
etag: "ab4f6528594a1725934727dc7d834c028a79c609"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/themes/Divi/core/admin/js/common.js?ver=4.19.2 | 13.59.135.123 | 200 OK | 278 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/themes/Divi/core/admin/js/common.js?ver=4.19.2 IP13.59.135.123:0
Size278 kB (278525 bytes) Hash36231d8487d6c4494b86b98229d3c1bd 804381fe30d9558df8e3be9f4a6f48543c6e1856 169df6ccc6903aaa860fd93627dd494cc3f66ac0d932410767e92fda3fce42f7
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/Divi/core/admin/js/common.js?ver=4.19.2 HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:01 GMT
content-type: application/javascript
last-modified: Thu, 21 Apr 2022 02:59:34 GMT
etag: W/"6260c896-53f"
expires: Tue, 30 Jan 2024 18:41:01 GMT
pragma: public
cache-control: max-age=31536000, public
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/11/2bad039456bfac22cea0b6872f5b86e.png | 13.59.135.123 | 200 OK | 36 kB |
URL HTTP/2www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/11/2bad039456bfac22cea0b6872f5b86e.png IP13.59.135.123:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 940x788, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash6e30531271d795a425497af36d4f51be f4be06ca97e1dcdbf462e31c578f19afce59590f f45984306ab8343d682b854520c5f781ff3b4d2f49113a25b1d284987848365f
GET /wp-content/uploads/themamaskitchen.com/2022/11/2bad039456bfac22cea0b6872f5b86e.png HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Cookie: _ga_TZYDKS969T=GS1.1.1675104074.1.0.1675104074.0.0.0; _ga=GA1.1.658838663.1675104075
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:02 GMT
content-type: image/webp
content-length: 36508
last-modified: Thu, 29 Dec 2022 02:40:34 GMT
etag: "63acfe22-8e9c"
expires: Tue, 30 Jan 2024 18:41:02 GMT
cache-control: max-age=31536000
referrer-policy: no-referrer-when-downgrade
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55e9b24d-3c7c-46d8-89b7-084483cc3d1d.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55e9b24d-3c7c-46d8-89b7-084483cc3d1d.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash5190c0bdc6abe0ee258e9f8c20ddaf51 d60f280f8a742480527dbc32d08f321f972d4fcf 874b38a04aa3736e65aaef72da2cc2efceb208618267107a495bdfe51ec58e58
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55e9b24d-3c7c-46d8-89b7-084483cc3d1d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 12507
x-amzn-requestid: 85c9adcd-b997-48ca-bbfb-ccdeaf3e8cfb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhklyFaJoAMFqKA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e7be-2bcdd8c353d8429d2b1e95f6;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:40:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UDJKl99GiUxTW_EgWFDjLaJZbKFhfaJR-XRLsbQphwHuCXczDlxrDA==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:54:37 GMT
age: 74792
etag: "d60f280f8a742480527dbc32d08f321f972d4fcf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/2020-06-04-5.jpg | 13.59.135.123 | 200 OK | 0 B |
URL HTTP/2www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/2020-06-04-5.jpg IP13.59.135.123:0
GET /wp-content/uploads/themamaskitchen.com/2022/08/2020-06-04-5.jpg HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:01 GMT
content-type: image/webp
content-length: 68320
last-modified: Thu, 29 Dec 2022 02:43:15 GMT
etag: "63acfec3-10ae0"
expires: Tue, 30 Jan 2024 18:41:01 GMT
cache-control: max-age=31536000
referrer-policy: no-referrer-when-downgrade
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/plugins/supreme-modules-pro-for-divi/public/js/js.cookie.js?ver=4.9.0 | 13.59.135.123 | 200 OK | 0 B |
URL HTTP/2www.themamaskitchen.com/wp-content/plugins/supreme-modules-pro-for-divi/public/js/js.cookie.js?ver=4.9.0 IP13.59.135.123:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/supreme-modules-pro-for-divi/public/js/js.cookie.js?ver=4.9.0 HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:01 GMT
content-type: application/javascript
last-modified: Thu, 10 Mar 2022 14:47:20 GMT
etag: W/"622a0f78-691"
expires: Tue, 30 Jan 2024 18:41:01 GMT
pragma: public
cache-control: max-age=31536000, public
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/plugins/supreme-modules-pro-for-divi/styles/style.min.css?ver=4.9.0 | 13.59.135.123 | 200 OK | 0 B |
URL HTTP/2www.themamaskitchen.com/wp-content/plugins/supreme-modules-pro-for-divi/styles/style.min.css?ver=4.9.0 IP13.59.135.123:0
GET /wp-content/plugins/supreme-modules-pro-for-divi/styles/style.min.css?ver=4.9.0 HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:01 GMT
content-type: text/css
last-modified: Tue, 06 Dec 2022 18:16:04 GMT
etag: W/"638f86e4-757d0"
expires: Tue, 30 Jan 2024 18:41:01 GMT
pragma: public
cache-control: max-age=31536000, public
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/plugins/supreme-modules-pro-for-divi/public/css/animate.css?ver=4.9.0 | 13.59.135.123 | 200 OK | 0 B |
URL HTTP/2www.themamaskitchen.com/wp-content/plugins/supreme-modules-pro-for-divi/public/css/animate.css?ver=4.9.0 IP13.59.135.123:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/supreme-modules-pro-for-divi/public/css/animate.css?ver=4.9.0 HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:01 GMT
content-type: text/css
last-modified: Mon, 14 Feb 2022 13:22:50 GMT
etag: W/"620a57aa-14d7b"
expires: Tue, 30 Jan 2024 18:41:01 GMT
pragma: public
cache-control: max-age=31536000, public
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/et-cache/6/et-divi-dynamic-6-late.css | 13.59.135.123 | 200 OK | 0 B |
URL HTTP/2www.themamaskitchen.com/wp-content/et-cache/6/et-divi-dynamic-6-late.css IP13.59.135.123:0
GET /wp-content/et-cache/6/et-divi-dynamic-6-late.css HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Cookie: _ga_TZYDKS969T=GS1.1.1675104074.1.0.1675104074.0.0.0; _ga=GA1.1.658838663.1675104075
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:01 GMT
content-type: text/css
last-modified: Sat, 14 Jan 2023 06:40:54 GMT
etag: W/"63c24e76-1c61d"
expires: Tue, 30 Jan 2024 18:41:01 GMT
pragma: public
cache-control: max-age=31536000, public
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/plugins/supreme-modules-pro-for-divi/includes/modules/MasonryGallery/frontend.min.js?ver=4.9.0 | 13.59.135.123 | 200 OK | 0 B |
URL HTTP/2www.themamaskitchen.com/wp-content/plugins/supreme-modules-pro-for-divi/includes/modules/MasonryGallery/frontend.min.js?ver=4.9.0 IP13.59.135.123:0
GET /wp-content/plugins/supreme-modules-pro-for-divi/includes/modules/MasonryGallery/frontend.min.js?ver=4.9.0 HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:01 GMT
content-type: application/javascript
last-modified: Fri, 02 Sep 2022 11:58:20 GMT
etag: W/"6311efdc-59a"
expires: Tue, 30 Jan 2024 18:41:01 GMT
pragma: public
cache-control: max-age=31536000, public
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/favicon.ico | 13.59.135.123 | 404 Not Found | 0 B |
URL HTTP/2www.themamaskitchen.com/favicon.ico IP13.59.135.123:0
GET /favicon.ico HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Cookie: _ga_TZYDKS969T=GS1.1.1675104074.1.0.1675104074.0.0.0; _ga=GA1.1.658838663.1675104075
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Mon, 30 Jan 2023 18:41:02 GMT
content-type: text/html
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/et-cache/6/et-divi-dynamic-6.css?ver=1673678285 | 13.59.135.123 | 200 OK | 0 B |
URL HTTP/2www.themamaskitchen.com/wp-content/et-cache/6/et-divi-dynamic-6.css?ver=1673678285 IP13.59.135.123:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/et-cache/6/et-divi-dynamic-6.css?ver=1673678285 HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:01 GMT
content-type: text/css
last-modified: Sat, 14 Jan 2023 06:38:05 GMT
etag: W/"63c24dcd-4585"
expires: Tue, 30 Jan 2024 18:41:01 GMT
pragma: public
cache-control: max-age=31536000, public
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | 13.59.135.123 | 200 OK | 0 B |
URL HTTP/2www.themamaskitchen.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 IP13.59.135.123:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:01 GMT
content-type: application/javascript
last-modified: Tue, 06 Dec 2022 23:04:37 GMT
etag: W/"638fca85-2bd8"
expires: Tue, 30 Jan 2024 18:41:01 GMT
pragma: public
cache-control: max-age=31536000, public
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/plugins/supreme-modules-pro-for-divi/public/css/readmore.css?ver=4.9.0 | 13.59.135.123 | 200 OK | 0 B |
URL HTTP/2www.themamaskitchen.com/wp-content/plugins/supreme-modules-pro-for-divi/public/css/readmore.css?ver=4.9.0 IP13.59.135.123:0
GET /wp-content/plugins/supreme-modules-pro-for-divi/public/css/readmore.css?ver=4.9.0 HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:01 GMT
content-type: text/css
last-modified: Mon, 28 Nov 2022 16:20:34 GMT
etag: W/"6384dfd2-644"
expires: Tue, 30 Jan 2024 18:41:01 GMT
pragma: public
cache-control: max-age=31536000, public
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/plugins/supreme-modules-pro-for-divi/public/js/swiper-bundle.min.js?ver=4.9.0 | 13.59.135.123 | 200 OK | 0 B |
URL HTTP/2www.themamaskitchen.com/wp-content/plugins/supreme-modules-pro-for-divi/public/js/swiper-bundle.min.js?ver=4.9.0 IP13.59.135.123:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/supreme-modules-pro-for-divi/public/js/swiper-bundle.min.js?ver=4.9.0 HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:01 GMT
content-type: application/javascript
last-modified: Mon, 14 Feb 2022 13:22:50 GMT
etag: W/"620a57aa-239c1"
expires: Tue, 30 Jan 2024 18:41:01 GMT
pragma: public
cache-control: max-age=31536000, public
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/plugins/supreme-modules-pro-for-divi/public/css/swiper.css?ver=4.9.0 | 13.59.135.123 | 200 OK | 0 B |
URL HTTP/2www.themamaskitchen.com/wp-content/plugins/supreme-modules-pro-for-divi/public/css/swiper.css?ver=4.9.0 IP13.59.135.123:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/supreme-modules-pro-for-divi/public/css/swiper.css?ver=4.9.0 HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:01 GMT
content-type: text/css
last-modified: Mon, 14 Feb 2022 13:22:50 GMT
etag: W/"620a57aa-586a"
expires: Tue, 30 Jan 2024 18:41:01 GMT
pragma: public
cache-control: max-age=31536000, public
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/plugins/supreme-modules-pro-for-divi/public/css/popup.css?ver=4.9.0 | 13.59.135.123 | 200 OK | 0 B |
URL HTTP/2www.themamaskitchen.com/wp-content/plugins/supreme-modules-pro-for-divi/public/css/popup.css?ver=4.9.0 IP13.59.135.123:0
GET /wp-content/plugins/supreme-modules-pro-for-divi/public/css/popup.css?ver=4.9.0 HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:01 GMT
content-type: text/css
last-modified: Wed, 26 Oct 2022 15:21:12 GMT
etag: W/"63595068-1b3e"
expires: Tue, 30 Jan 2024 18:41:01 GMT
pragma: public
cache-control: max-age=31536000, public
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids.js?ver=4.19.2 | 13.59.135.123 | 200 OK | 0 B |
URL HTTP/2www.themamaskitchen.com/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids.js?ver=4.19.2 IP13.59.135.123:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids.js?ver=4.19.2 HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:01 GMT
content-type: application/javascript
last-modified: Thu, 21 Apr 2022 02:59:41 GMT
etag: W/"6260c89d-d15"
expires: Tue, 30 Jan 2024 18:41:01 GMT
pragma: public
cache-control: max-age=31536000, public
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/Stir-Fried-Vermicelli-with-Cabbage-UB.jpg | 13.59.135.123 | 200 OK | 0 B |
URL HTTP/2www.themamaskitchen.com/wp-content/uploads/themamaskitchen.com/2022/08/Stir-Fried-Vermicelli-with-Cabbage-UB.jpg IP13.59.135.123:0
GET /wp-content/uploads/themamaskitchen.com/2022/08/Stir-Fried-Vermicelli-with-Cabbage-UB.jpg HTTP/1.1
Host: www.themamaskitchen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.themamaskitchen.com/
Connection: keep-alive
Cookie: _ga_TZYDKS969T=GS1.1.1675104074.1.0.1675104074.0.0.0; _ga=GA1.1.658838663.1675104075
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:41:02 GMT
content-type: image/webp
content-length: 38550
last-modified: Thu, 29 Dec 2022 02:44:52 GMT
etag: "63acff24-9696"
expires: Tue, 30 Jan 2024 18:41:02 GMT
cache-control: max-age=31536000
referrer-policy: no-referrer-when-downgrade
vary: Accept
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
0.0.0.0