Overview

URLthewaxingfactory.com/
IP 66.96.147.112 (United States)
ASN#29873 BIZLAND-SD
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-12-26 03:46:09 UTC
StatusLoading report..
IDS alerts0
Blocklist alert11
urlquery alerts No alerts detected
Tags None

Domain Summary (0)

No passive DNS data

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-26 2 thewaxingfactory.com/ Malware
2022-12-26 2 thewaxingfactory.com/index.html Malware
2022-12-26 2 thewaxingfactory.com/files/theme/mobile.js?1496698124 Malware
2022-12-26 2 thewaxingfactory.com/files/theme/custom.js?1496698124 Malware
2022-12-26 2 thewaxingfactory.com/files/theme/plugins.js?1496698124 Malware
2022-12-26 2 thewaxingfactory.com/uploads/1/0/6/2/106200053/published/the-waxing-factory (...) Malware
2022-12-26 2 for.dontkinhooot.tw/stat.js Malware
2022-12-26 2 for.dontkinhooot.tw/stat.js Malware
2022-12-26 2 for.dontkinhooot.tw/stat.js Malware
2022-12-26 2 for.dontkinhooot.tw/stat.js Malware
2022-12-26 2 thewaxingfactory.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[Cu (...) Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 66.96.147.112
Date UQ / IDS / BL URL IP
2023-02-17 08:33:24 +0000 0 - 0 - 1 express.ashrafhamza.com/admin/egypte/clients/ (...) 66.96.147.112
2023-02-17 01:03:08 +0000 0 - 0 - 1 express.ashrafhamza.com/admin/egypte/clients/ (...) 66.96.147.112
2023-01-08 12:15:20 +0000 0 - 1 - 0 download.hawklord.com/software10/switchsetup8 (...) 66.96.147.112
2023-01-08 12:15:19 +0000 0 - 1 - 0 download.hawklord.com/software10/tralih270172.exe 66.96.147.112
2023-01-08 12:15:18 +0000 0 - 1 - 0 download.hawklord.com/software10/dvdshrink32s (...) 66.96.147.112


Last 5 reports on ASN: BIZLAND-SD
Date UQ / IDS / BL URL IP
2023-03-28 01:22:46 +0000 0 - 1 - 0 internationalcon.com/ar/jakuzo/flo.exe 66.96.147.144
2023-03-27 17:33:18 +0000 0 - 1 - 0 compcommunity.com/ 66.96.149.24
2023-03-27 10:20:06 +0000 0 - 1 - 0 www.daltexit.com/daltexit/BDC/BankClear.exe 66.96.147.105
2023-03-27 09:50:39 +0000 0 - 1 - 0 www.daltexit.com/daltexit/BDC/BankClear.exe 66.96.147.105
2023-03-27 09:30:42 +0000 0 - 1 - 0 genensims.com/tut-defaultskins.htm 66.96.149.19


Last 1 reports on domain: thewaxingfactory.com
Date UQ / IDS / BL URL IP
2022-12-26 03:46:09 +0000 0 - 0 - 11 thewaxingfactory.com/ 66.96.147.112


No other reports with similar screenshot

JavaScript

Executed Scripts (18)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (57)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D2A320A9FEB1A874AF3DA921DB2A8619513968724EF8EB0715C010291C4CF8D9"
Last-Modified: Sun, 25 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3253
Expires: Mon, 26 Dec 2022 04:40:11 GMT
Date: Mon, 26 Dec 2022 03:45:58 GMT
Connection: keep-alive

                                        
                                            GET / HTTP/1.1 
Host: thewaxingfactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         66.96.147.112
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Mon, 26 Dec 2022 03:45:57 GMT
Content-Length: 246
Connection: keep-alive
Server: Apache/2
Location: http://thewaxingfactory.com/index.html
Cache-Control: max-age=3600
Expires: Mon, 26 Dec 2022 04:45:58 GMT
Age: 0


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   246
Md5:    277fe4ea24beb7142c293b64c8bd305a
Sha1:   d4d68d4fea33e3ed7fa0cdc809ec46c2326fc031
Sha256: b37ae78efe7df03854780b33a39de225c6d6b491f4f63de87bb277806f053e75

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "6D58B895476C9AB451D8FC51DF98809ADCA445BC6E9D720430E80A0C85242879"
Last-Modified: Sun, 25 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5404
Expires: Mon, 26 Dec 2022 05:16:02 GMT
Date: Mon, 26 Dec 2022 03:45:58 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Type, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 26 Dec 2022 02:46:27 GMT
age: 3571
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    30db107dcf4380cef05efea409c2e6a3
Sha1:   96e6a306fbc07299aba64e5c14e2bfca35872fa9
Sha256: b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "46FFF7230B88DE4CD81DFB0FEB783D2DEC27E49041F9257D2FB891030781BF6C"
Last-Modified: Fri, 23 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11694
Expires: Mon, 26 Dec 2022 07:00:52 GMT
Date: Mon, 26 Dec 2022 03:45:58 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: 5Sik/uyHA7W9i2nbvZUXdxB6UOC6W2QgcLrKF74YwWXJmXomENsMTks/iNfokT/rJHVb0/qIQEw=
x-amz-request-id: PDFQ9XBZN5CGJ6H7
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 26 Dec 2022 02:55:09 GMT
age: 3049
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    b1fcd419a4245617397846e8d17233f6
Sha1:   2a037ce244587640b27ead9a0ec2af4f862d91b2
Sha256: e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Mon, 26 Dec 2022 03:45:58 GMT
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /index.html HTTP/1.1 
Host: thewaxingfactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         66.96.147.112
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Date: Mon, 26 Dec 2022 03:45:58 GMT
Content-Length: 20478
Connection: keep-alive
Server: Apache/2
Last-Modified: Sun, 25 Dec 2022 01:31:45 GMT
Accept-Ranges: bytes
Cache-Control: max-age=3600
Etag: "4ffe-5f09cfb4a0bbe"
Expires: Mon, 26 Dec 2022 04:45:58 GMT
Age: 0


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1350)
Size:   20478
Md5:    9d4f91040bd9f5d49ef70d01447a7c40
Sha1:   92e235c2c1fa9b50dc73769eef66f7c954769851
Sha256: 6cdb786e0f36ba46f6467197c226d74553023b135601577371e32a6d9e47985b

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /css?family=Gentium+Basic:400,700,400italic,700italic&subset=latin,latin-ext HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thewaxingfactory.com/

search
                                         142.250.74.106
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Mon, 26 Dec 2022 03:45:58 GMT
Date: Mon, 26 Dec 2022 03:45:58 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  ASCII text
Size:   455
Md5:    8955f61f007b5180b2236ae60ce3fa3a
Sha1:   aea4f9cfcba95f2fd332ff56ae8105aa0eff1522
Sha256: c3b5d27e233d937b319c71d357d5e7f1f3e816ff2dae6d11357b3d3dee29f05c
                                        
                                            GET /css?family=Raleway:400,300,200,700&subset=latin,latin-ext HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thewaxingfactory.com/

search
                                         142.250.74.106
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Mon, 26 Dec 2022 03:45:58 GMT
Date: Mon, 26 Dec 2022 03:45:58 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  ASCII text
Size:   572
Md5:    2fa81690e41b4d84141465c6ad385eef
Sha1:   5c9d04e11dc99c2d3e6028f73ff93dad9f337d58
Sha256: fb4625e08d2005e21d7294dab87bc601e2360ae54f8921470fca000cd5f8ec4f
                                        
                                            GET /css?family=Playfair+Display:400,700,400italic,700italic&subset=latin,latin-ext HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thewaxingfactory.com/

search
                                         142.250.74.106
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Mon, 26 Dec 2022 03:45:58 GMT
Date: Mon, 26 Dec 2022 03:45:58 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  ASCII text
Size:   558
Md5:    de2df5765e9a8a64221d1bef18ff7825
Sha1:   6ba2e1fc90d3b8d134761cc55c21c84a8cf0fe3b
Sha256: 43737a44af8b68628ee3ef39ecab4749dfd0ca4808e78fdec75bc7be7d96a387
                                        
                                            GET /css?family=Montserrat:400,700&subset=latin,latin-ext HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thewaxingfactory.com/

search
                                         142.250.74.106
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Mon, 26 Dec 2022 03:45:58 GMT
Date: Mon, 26 Dec 2022 03:45:58 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  ASCII text
Size:   521
Md5:    b52e405858cd07e929b5387c0ed0d1de
Sha1:   8dc157b5ece5222f0f175eee9379a699dee76cd8
Sha256: e289bd897465ef8c6c74d81d09ee98cf500d744073df727158f6323caf335547
                                        
                                            GET /css?family=Lora:400,700,400italic,700italic&subset=latin,latin-ext HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thewaxingfactory.com/

search
                                         142.250.74.106
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Mon, 26 Dec 2022 03:45:58 GMT
Date: Mon, 26 Dec 2022 03:45:58 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  ASCII text
Size:   603
Md5:    12c9e8dd24f193e282f3e350296740b4
Sha1:   af62d74779c35a32dac013fdd63143d236069edf
Sha256: 1e50404b012030e1101f29006d7caadceeaf8e1c7aeab508113a1ec23da16f66
                                        
                                            GET /fonts/Saginaw/font.css?2 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thewaxingfactory.com/

search
                                         151.101.129.46
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Connection: keep-alive
Content-Length: 131
Server: nginx
Last-Modified: Mon, 12 Dec 2022 18:45:57 GMT
ETag: "639776e5-a4"
Expires: Tue, 27 Dec 2022 08:39:30 GMT
Cache-Control: max-age=1209600
X-Host: grn43.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 26 Dec 2022 03:45:58 GMT
Age: 1105589
X-Served-By: cache-sjc10023-SJC, cache-bma1626-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 3, 2
X-Timer: S1672026358.403728,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text
Size:   131
Md5:    c1ae75d75df5957897f43d7823111e07
Sha1:   7864652f9d0431d9159ca7b5c2a2019811ec26e3
Sha256: 9fd66d4bace1195b5e6961b92acbe5aee7b1cabbdbb22b90fdaef3402987d49c
                                        
                                            GET /css/social-icons.css?buildtime=1502843315 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thewaxingfactory.com/

search
                                         151.101.129.46
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Connection: keep-alive
Content-Length: 1638
Server: nginx
Last-Modified: Fri, 16 Dec 2022 00:32:45 GMT
ETag: W/"639bbcad-3319"
Expires: Fri, 30 Dec 2022 10:40:59 GMT
Cache-Control: max-age=1209600
X-Host: blu21.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 26 Dec 2022 03:45:58 GMT
Age: 839099
X-Served-By: cache-sjc10054-SJC, cache-bma1657-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 106, 1
X-Timer: S1672026358.403608,VS0,VE1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text, with very long lines (13080)
Size:   1638
Md5:    afb5892bb23e5ac676894e14d27e1287
Sha1:   1415f124674443dbad0492923e08f166f7e11fec
Sha256: 74bfb4e6f63e1b959529a4763197fb6b201457969d51251d0d64194b606e0caf
                                        
                                            GET /css/sites.css?buildTime=1671221571 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thewaxingfactory.com/

search
                                         151.101.129.46
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Connection: keep-alive
Content-Length: 29746
Server: nginx
Last-Modified: Fri, 16 Dec 2022 19:54:14 GMT
ETag: W/"639ccce6-347ac"
Expires: Fri, 30 Dec 2022 20:15:50 GMT
Cache-Control: max-age=1209600
X-Host: blu25.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 26 Dec 2022 03:45:58 GMT
Age: 804608
X-Served-By: cache-sjc10036-SJC, cache-bma1662-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 41, 496
X-Timer: S1672026358.402141,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   29746
Md5:    d10158b22b553f723d99dc78eaee6390
Sha1:   80f2d6670cfb0d01cd20c471cf8e3e6465ddd3f6
Sha256: 939c7a8e1ad74a44e0c847e38533e69e36454b6805d25acf3fb0cb5c472d245e
                                        
                                            GET /css/old/fancybox.css?1502843315 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thewaxingfactory.com/

search
                                         151.101.129.46
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Connection: keep-alive
Content-Length: 1218
Server: nginx
Last-Modified: Fri, 16 Dec 2022 19:54:20 GMT
ETag: "639cccec-f47"
Expires: Tue, 03 Jan 2023 07:43:23 GMT
Cache-Control: max-age=1209600
X-Host: blu124.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 26 Dec 2022 03:45:58 GMT
Age: 504154
X-Served-By: cache-sjc10073-SJC, cache-bma1643-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 18, 1
X-Timer: S1672026358.402344,VS0,VE1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text, with very long lines (3910)
Size:   1218
Md5:    b644e92258f4c7c0b4270047652d1e60
Sha1:   93734d52ee9e86a768159e514076051813c39cd9
Sha256: 29199496fb817668f887938571046abcdfb49063d0207d571b361f221f467907
                                        
                                            GET /js/lang/en/stl.js?buildTime=1502843315& HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thewaxingfactory.com/

search
                                         151.101.129.46
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Connection: keep-alive
Content-Length: 32800
Server: nginx
Last-Modified: Fri, 16 Dec 2022 19:53:10 GMT
ETag: "639ccca6-2c22a"
Expires: Wed, 04 Jan 2023 13:34:43 GMT
Cache-Control: max-age=1209600
X-Host: blu117.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 26 Dec 2022 03:45:58 GMT
Age: 396675
X-Served-By: cache-sjc10061-SJC, cache-bma1621-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 27, 1
X-Timer: S1672026358.402627,VS0,VE1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text, with very long lines (65024)
Size:   32800
Md5:    58a9c1c02a5743ff2107715d041d28b7
Sha1:   619d9394e8b3afce9f9cc066b924ddb5d3265265
Sha256: 98b8090e2292b69bb8ad0ef4082f55458b891130ee6b3d9c6fce5075eec64dbf
                                        
                                            GET /js/lang/en/stl.js?buildTime=1671221571& HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thewaxingfactory.com/

search
                                         151.101.129.46
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Connection: keep-alive
Content-Length: 32800
Server: nginx
Last-Modified: Fri, 16 Dec 2022 19:53:10 GMT
ETag: "639ccca6-2c22a"
Expires: Fri, 30 Dec 2022 20:13:42 GMT
Cache-Control: max-age=1209600
X-Host: grn43.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 26 Dec 2022 03:45:58 GMT
Age: 804736
X-Served-By: cache-sjc10058-SJC, cache-bma1626-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 40, 140
X-Timer: S1672026358.416921,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text, with very long lines (65024)
Size:   32800
Md5:    58a9c1c02a5743ff2107715d041d28b7
Sha1:   619d9394e8b3afce9f9cc066b924ddb5d3265265
Sha256: 98b8090e2292b69bb8ad0ef4082f55458b891130ee6b3d9c6fce5075eec64dbf
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 26 Dec 2022 03:45:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /js/site/main-customer-accounts-site.js?buildTime=1671221571 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thewaxingfactory.com/

search
                                         151.101.129.46
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Connection: keep-alive
Content-Length: 159020
Server: nginx
Last-Modified: Fri, 16 Dec 2022 19:54:38 GMT
ETag: "639cccfe-82588"
Expires: Fri, 30 Dec 2022 20:15:51 GMT
Cache-Control: max-age=1209600
X-Host: grn64.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 26 Dec 2022 03:45:58 GMT
Age: 804607
X-Served-By: cache-sjc10062-SJC, cache-bma1620-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 10, 1
X-Timer: S1672026358.490094,VS0,VE1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text, with very long lines (32007)
Size:   159020
Md5:    19fd4a473c58275a9e8110c598292a56
Sha1:   3ff56cbf5a3677387aef743acdf1a8abf822d28d
Sha256: 89b155f71eeef3fb8d9c95ff95288c29a0b5b722d9c0a3dfdeadfea8b8032884
                                        
                                            GET /gdpr/gdprscript.js?buildTime=1671221571&hasRemindMe=true&stealth=false HTTP/1.1 
Host: thewaxingfactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thewaxingfactory.com/index.html

search
                                         66.96.147.112
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Mon, 26 Dec 2022 03:45:58 GMT
Content-Length: 971
Connection: keep-alive
Server: Apache/2
Last-Modified: Fri, 26 Feb 2021 15:03:02 GMT
ETag: "3cb-5bc3e908355f6"
Accept-Ranges: bytes
Cache-Control: max-age=14400
Expires: Mon, 26 Dec 2022 07:45:58 GMT
Age: 0


--- Additional Info ---
Magic:  ASCII text, with very long lines (823)
Size:   971
Md5:    d1c8e0045f8f26e03009921099b76214
Sha1:   d7a5df15987971e861eaceafa3f57b9d60a0d44c
Sha256: 71c180ed6b55b974a8009ec77c3aec88b801cf3744536ae7445c6b50317f535d
                                        
                                            GET /js/site/main.js?buildTime=1671221571 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thewaxingfactory.com/

search
                                         151.101.129.46
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Connection: keep-alive
Content-Length: 146400
Server: nginx
Last-Modified: Fri, 16 Dec 2022 19:54:38 GMT
ETag: "639cccfe-74804"
Expires: Fri, 30 Dec 2022 20:15:50 GMT
Cache-Control: max-age=1209600
X-Host: blu13.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 26 Dec 2022 03:45:58 GMT
Age: 804608
X-Served-By: cache-sjc10073-SJC, cache-bma1620-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 43, 1
X-Timer: S1672026358.402288,VS0,VE1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

                                        
                                            GET /files/theme/mobile.js?1496698124 HTTP/1.1 
Host: thewaxingfactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thewaxingfactory.com/index.html

search
                                         66.96.147.112
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Mon, 26 Dec 2022 03:45:58 GMT
Content-Length: 11155
Connection: keep-alive
Server: Apache/2
Last-Modified: Fri, 26 Feb 2021 15:03:02 GMT
Accept-Ranges: bytes
Cache-Control: max-age=14400
Etag: "2b93-5bc3e90830fb5"
Expires: Mon, 26 Dec 2022 07:45:58 GMT
Age: 0


--- Additional Info ---
Magic:  ASCII text, with very long lines (782)
Size:   11155
Md5:    3fb900ff600910b0a8bfa22638b60c78
Sha1:   52ffb5868e89a4e5b2d2cd6b3c39a48704636d77
Sha256: 55bf1ba6bac560a22931d64590af8f173dc53c2a9060298e380fc3063a52d4af

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /files/theme/custom.js?1496698124 HTTP/1.1 
Host: thewaxingfactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thewaxingfactory.com/index.html

search
                                         66.96.147.112
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Mon, 26 Dec 2022 03:45:58 GMT
Content-Length: 3977
Connection: keep-alive
Server: Apache/2
Last-Modified: Fri, 26 Feb 2021 15:03:02 GMT
Accept-Ranges: bytes
Cache-Control: max-age=14400
Etag: "f89-5bc3e90829e66"
Expires: Mon, 26 Dec 2022 07:45:58 GMT
Age: 0


--- Additional Info ---
Magic:  ASCII text, with very long lines (764)
Size:   3977
Md5:    e05dd16662f99fd60107b9e78d41225a
Sha1:   14f33fea965a7ded8fe05feb6eed887ceedffe9c
Sha256: e35f69e36025776803b552e3df421daf3206b5d6fb89639a73d1898b95c7d7f7

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Last-Modified, Retry-After, Content-Type, Alert, Pragma, ETag, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 26 Dec 2022 03:33:30 GMT
age: 748
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /files/theme/plugins.js?1496698124 HTTP/1.1 
Host: thewaxingfactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thewaxingfactory.com/index.html

search
                                         66.96.147.112
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Mon, 26 Dec 2022 03:45:58 GMT
Content-Length: 85541
Connection: keep-alive
Server: Apache/2
Last-Modified: Fri, 26 Feb 2021 15:03:02 GMT
ETag: "14e25-5bc3e90833a9a"
Accept-Ranges: bytes
Cache-Control: max-age=14400
Expires: Mon, 26 Dec 2022 07:45:58 GMT
Age: 0


--- Additional Info ---
Magic:  ASCII text, with very long lines (744)
Size:   85541
Md5:    4a17f22df1512349eebc10bf0be9302d
Sha1:   cb3598f401cf5bd713ac50e8417cf42b9e9a1765
Sha256: f91a349654e6cd999777714bd5bee8e2757fa496a9285c4f54976a6b0d045efb

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /files/main_style.css?1502896090 HTTP/1.1 
Host: thewaxingfactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thewaxingfactory.com/index.html

search
                                         66.96.147.112
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Mon, 26 Dec 2022 03:45:58 GMT
Content-Length: 27107
Connection: keep-alive
Server: Apache/2
Last-Modified: Wed, 13 Oct 2021 02:53:05 GMT
ETag: "69e3-5ce330fb8111c"
Accept-Ranges: bytes
Cache-Control: max-age=14400
Expires: Mon, 26 Dec 2022 07:45:58 GMT
Age: 0


--- Additional Info ---
Magic:  ASCII text, with very long lines (531)
Size:   27107
Md5:    0dfa5caf70e54dc203b4b2ac0e072348
Sha1:   6cb253bd10be11d8a5262c4e36ae792d392d7bb1
Sha256: 7457ffb13cb975eed2d363c526fbe5348bac1748c983d1f9add61e50fcc06eb8
                                        
                                            GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://thewaxingfactory.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/

search
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 30928
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 23 Dec 2022 13:33:54 GMT
Expires: Sat, 23 Dec 2023 13:33:54 GMT
Cache-Control: public, max-age=31536000
Age: 223924
Last-Modified: Mon, 11 Jul 2022 18:57:39 GMT


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Size:   30928
Md5:    ac0d2859ea5f8fd6bcb3c305c08ec184
Sha1:   7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
Sha256: ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
                                        
                                            GET /s/gentiumbasic/v18/WnzmHAw9aB_JD2VGQVR80We3LAixMT8ub6KM.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://thewaxingfactory.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/

search
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 22912
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 26 Dec 2022 00:51:37 GMT
Expires: Tue, 26 Dec 2023 00:51:37 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Mon, 18 Jul 2022 19:23:00 GMT
Age: 10461


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 22912, version 1.0\012- data
Size:   22912
Md5:    f275bed2aafb7a6c43cf20ca29e971fe
Sha1:   303b96967e15f15f068a9e5790b206b7a303a2fb
Sha256: 2a64adc4944a33dade7ce5f07f3cc779418559a3505c7f4d88f44fb2f9f28734
                                        
                                            GET /s/gentiumbasic/v18/WnzjHAw9aB_JD2VGQVR80We3LAi5iho7.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://thewaxingfactory.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/

search
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 23452
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 24 Dec 2022 23:03:58 GMT
Expires: Sun, 24 Dec 2023 23:03:58 GMT
Cache-Control: public, max-age=31536000
Age: 103320
Last-Modified: Mon, 18 Jul 2022 19:47:23 GMT


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 23452, version 1.0\012- data
Size:   23452
Md5:    fd429ebb107aaeef4e7ab6c4f074fe69
Sha1:   c2179ec5537853c528ec55ea739918c0c73d12c2
Sha256: 3321247c19a6fc9f33ea7e8dd5d11d1bb2031a4b2e540cf2ae14680d9ef4ca82
                                        
                                            GET /s/gentiumbasic/v18/WnzgHAw9aB_JD2VGQVR80We3JLasnT0ebQ.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://thewaxingfactory.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/

search
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 23092
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 26 Dec 2022 00:51:38 GMT
Expires: Tue, 26 Dec 2023 00:51:38 GMT
Cache-Control: public, max-age=31536000
Age: 10460
Last-Modified: Mon, 18 Jul 2022 19:21:41 GMT


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 23092, version 1.0\012- data
Size:   23092
Md5:    fbc48f4ba67342809d14d913827fe06e
Sha1:   65c83346eba829399cc81adbcd92ec3310516bd2
Sha256: 93fee62a91f4982e7e8b93a0f1e19d1d2d99bbdd7c8cf5f4bfee53368fe26032
                                        
                                            GET /s/gentiumbasic/v18/Wnz9HAw9aB_JD2VGQVR80We3LA2JiA.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://thewaxingfactory.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/

search
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 22300
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 21 Dec 2022 14:18:11 GMT
Expires: Thu, 21 Dec 2023 14:18:11 GMT
Cache-Control: public, max-age=31536000
Age: 394067
Last-Modified: Mon, 18 Jul 2022 19:39:24 GMT


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 22300, version 1.0\012- data
Size:   22300
Md5:    52816d3afe8fe9387bedba3ead9ea741
Sha1:   7b1d04d4a5668d54eecce9f1e2532bc3cdcdc351
Sha256: d797eb315470e8d46f5253a69a148138ba87353a08d2e566c1b35fb58ae152d9
                                        
                                            GET /uploads/1/0/6/2/106200053/published/the-waxing-factory-sign-logo.jpeg?1494731478 HTTP/1.1 
Host: thewaxingfactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thewaxingfactory.com/index.html

search
                                         66.96.147.112
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Mon, 26 Dec 2022 03:45:58 GMT
Content-Length: 20773
Connection: keep-alive
Server: Apache/2
Last-Modified: Wed, 24 May 2017 21:19:42 GMT
Accept-Ranges: bytes
Cache-Control: max-age=14400
Etag: "5125-5504ba9ab5593"
Expires: Mon, 26 Dec 2022 07:45:58 GMT
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 886x184, components 3\012- data
Size:   20773
Md5:    46b7d756b0c8d694f0c2b813f2e2dbf4
Sha1:   0b42b14f83e8768057238a7652c0a5d9eea8574d
Sha256: 58960ba0c2989d221ad5b26aa4d1baf2a33d3839876a39aab902e884977e883d

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://thewaxingfactory.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/

search
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 46524
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 20 Dec 2022 14:12:39 GMT
Expires: Wed, 20 Dec 2023 14:12:39 GMT
Cache-Control: public, max-age=31536000
Age: 480799
Last-Modified: Mon, 18 Jul 2022 19:58:01 GMT


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 46524, version 1.0\012- data
Size:   46524
Md5:    c1fd378f54921c75e4ae1821e7b8fff6
Sha1:   2ce96e97783b2f154d07f4464ca6f8eb2469f2c1
Sha256: 405ceee1c2f5c31f1cb94ebc63d49a43fddd1471c2c7401a01c7c11bb1d93826
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6127
Cache-Control: max-age=111777
Date: Mon, 26 Dec 2022 03:45:58 GMT
Etag: "63a812a8-1d7"
Expires: Tue, 27 Dec 2022 10:48:55 GMT
Last-Modified: Sun, 25 Dec 2022 09:06:48 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /uploads/1/0/6/2/106200053/background-images/616604583.jpg HTTP/1.1 
Host: thewaxingfactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thewaxingfactory.com/index.html
Cookie: gdpr-kb=true

search
                                         66.96.147.112
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Mon, 26 Dec 2022 03:45:58 GMT
Content-Length: 124385
Connection: keep-alive
Server: Apache/2
Last-Modified: Wed, 24 May 2017 21:19:45 GMT
ETag: "1e5e1-5504ba9d00886"
Accept-Ranges: bytes
Cache-Control: max-age=14400
Expires: Mon, 26 Dec 2022 07:45:58 GMT
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 676x944, components 3\012- data
Size:   124385
Md5:    48ad4025e76896d7c8e074fc790f8d55
Sha1:   165daa62fd7c7838e1f6f51051a200ce7d258f13
Sha256: d5d39421f55727a53ca6cbeb08fe014e968e3c307ba7123a9b09a60f6894135e
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 6DChhqseSUAozGUMpH/Qaw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.13.173.34
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: w2ym5KdJCdT4yfX9uaAnobkNtwU=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "6BA4645804F8D4188C09BDFB44B5E666779640B0FBD82C6D6E0F6EBC66F277D7"
Last-Modified: Sun, 25 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21552
Expires: Mon, 26 Dec 2022 09:45:11 GMT
Date: Mon, 26 Dec 2022 03:45:59 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BB1F09F5C29D4AE541554325250FA54A301226F78A03C7CE5974C6CC3D92BBE2"
Last-Modified: Sun, 25 Dec 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21593
Expires: Mon, 26 Dec 2022 09:45:52 GMT
Date: Mon, 26 Dec 2022 03:45:59 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BB1F09F5C29D4AE541554325250FA54A301226F78A03C7CE5974C6CC3D92BBE2"
Last-Modified: Sun, 25 Dec 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21551
Expires: Mon, 26 Dec 2022 09:45:10 GMT
Date: Mon, 26 Dec 2022 03:45:59 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "6BA4645804F8D4188C09BDFB44B5E666779640B0FBD82C6D6E0F6EBC66F277D7"
Last-Modified: Sun, 25 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Mon, 26 Dec 2022 09:45:59 GMT
Date: Mon, 26 Dec 2022 03:45:59 GMT
Connection: keep-alive

                                        
                                            GET /stat.js HTTP/1.1 
Host: for.dontkinhooot.tw
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://thewaxingfactory.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.224.182.253
HTTP/1.1 404 Not Found
content-type: text/html; charset=iso-8859-1
                                        
date: Mon, 26 Dec 2022 03:45:59 GMT
server: Apache/2.4.38 (Debian)
content-length: 196
connection: close


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   196
Md5:    62962daa1b19bbcc2db10b7bfd531ea6
Sha1:   d64bae91091eda6a7532ebec06aa70893b79e1f8
Sha256: 80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /uploads/reseller/assets/1001-favicon.ico HTTP/1.1 
Host: www.weebly.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thewaxingfactory.com/

search
                                         74.115.50.110
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Server: nginx
Date: Mon, 26 Dec 2022 03:45:59 GMT
Content-Length: 3739
Connection: keep-alive
ETag: "630fbfe7-e9b"
X-Host: blu81.sf2p.intern.weebly.net
X-W-DC: SFO


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (368)
Size:   3739
Md5:    2eeb3e560ca8f369be20ceb5858a4701
Sha1:   6c53e6b66c1bc6d0b93116e14fb79c30424bf36c
Sha256: ac2d9485acf7e9c29d94d31f19d3aedda958cd4f6119ddc888fbbde52d6078dd
                                        
                                            GET /stat.js HTTP/1.1 
Host: for.dontkinhooot.tw
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://thewaxingfactory.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.224.182.253
HTTP/1.1 404 Not Found
content-type: text/html; charset=iso-8859-1
                                        
date: Mon, 26 Dec 2022 03:45:59 GMT
server: Apache/2.4.38 (Debian)
content-length: 196
connection: close


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   196
Md5:    62962daa1b19bbcc2db10b7bfd531ea6
Sha1:   d64bae91091eda6a7532ebec06aa70893b79e1f8
Sha256: 80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /stat.js HTTP/1.1 
Host: for.dontkinhooot.tw
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://thewaxingfactory.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.224.182.253
HTTP/1.1 404 Not Found
content-type: text/html; charset=iso-8859-1
                                        
date: Mon, 26 Dec 2022 03:45:59 GMT
server: Apache/2.4.38 (Debian)
content-length: 196
connection: close


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   196
Md5:    62962daa1b19bbcc2db10b7bfd531ea6
Sha1:   d64bae91091eda6a7532ebec06aa70893b79e1f8
Sha256: 80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /stat.js HTTP/1.1 
Host: for.dontkinhooot.tw
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://thewaxingfactory.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.224.182.253
HTTP/1.1 404 Not Found
content-type: text/html; charset=iso-8859-1
                                        
date: Mon, 26 Dec 2022 03:45:59 GMT
server: Apache/2.4.38 (Debian)
content-length: 196
connection: close


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   196
Md5:    62962daa1b19bbcc2db10b7bfd531ea6
Sha1:   d64bae91091eda6a7532ebec06aa70893b79e1f8
Sha256: 80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "6881D46EDD3D3730884DA6719176D7D4BC79AA6D05CDA0F4EF97AC10C4591279"
Last-Modified: Sun, 25 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5708
Expires: Mon, 26 Dec 2022 05:21:08 GMT
Date: Mon, 26 Dec 2022 03:46:00 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "6881D46EDD3D3730884DA6719176D7D4BC79AA6D05CDA0F4EF97AC10C4591279"
Last-Modified: Sun, 25 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5708
Expires: Mon, 26 Dec 2022 05:21:08 GMT
Date: Mon, 26 Dec 2022 03:46:00 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "6881D46EDD3D3730884DA6719176D7D4BC79AA6D05CDA0F4EF97AC10C4591279"
Last-Modified: Sun, 25 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5708
Expires: Mon, 26 Dec 2022 05:21:08 GMT
Date: Mon, 26 Dec 2022 03:46:00 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd9e22c8-a9cc-48fe-a821-b6c7e317e433.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10195
x-amzn-requestid: 04589666-4416-4780-a959-9e3c6b140194
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dq6efFnzIAMFebA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a77129-4415c578420b56920685c331;Sampled=0
x-amzn-remapped-date: Sat, 24 Dec 2022 21:37:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: slM8cEpVBQ5acYETTSdN8QQB4w3lNhFmGJnUFL67ZY8H5dVs5E2jvQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Dec 2022 07:48:52 GMT
age: 71828
etag: "78d9719593aa9e972921ae6555cf235286f50709"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10195
Md5:    10713b0c2cec301fcd45db80ae0a10eb
Sha1:   78d9719593aa9e972921ae6555cf235286f50709
Sha256: 32d4474f99a79b9e05b31722af47fa45b6876ebbb042b57260a351d2a2601fb7
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1170b8f7-9efd-47d4-8f22-05af9334d2a1.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9040
x-amzn-requestid: 155323c6-61ec-42c2-9a6d-a25493949cdf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: duMupGpNoAMFrBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a8c190-32280eaf0734f99d555ffb02;Sampled=0
x-amzn-remapped-date: Sun, 25 Dec 2022 21:33:04 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: hZzrydMtwKz3g7jNxoeX0aHGPGOHKZfr8hAdxFV6teHfI0G4HVJ20A==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Dec 2022 21:58:59 GMT
etag: "e97b3e4f82bfea16e1991c566fa647d0531a4265"
age: 20821
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9040
Md5:    4dba0cdb1d2b6c9d61f85f66817137bb
Sha1:   e97b3e4f82bfea16e1991c566fa647d0531a4265
Sha256: 2aee5b88869edcdcb8427831e1c547828f5f013e793646ebbe29e56955df90fa
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7dbee83-176a-4fa9-a42c-2a2c9db4001b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10961
x-amzn-requestid: 4013aad4-805c-4abd-a748-9619aad6c134
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: duNb5Ha0oAMFzfA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a8c2b2-5701d49371016fb7580ba6c8;Sampled=0
x-amzn-remapped-date: Sun, 25 Dec 2022 21:37:54 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Axg_RTSiVQPB7tFIaN91OfTysuh7NTs0FH5w_vI0SsV3Fv_m3X1YyQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Dec 2022 22:08:59 GMT
age: 20221
etag: "c9f17cad706817aa66832633d1307a91c8c7d61e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10961
Md5:    b46e077944b0d53e361327e6d690f2ec
Sha1:   c9f17cad706817aa66832633d1307a91c8c7d61e
Sha256: b00a16c34c95675a08bafb198f7cc4b374e88a9041a6bb8593a61cb08ef3c306
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a394e27-3391-4992-8278-c17b6af6f6e6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5205
x-amzn-requestid: e77f5360-eb30-4e16-b481-e9823a2b94a2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: duMunF_YIAMF_MA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a8c190-5727986253815e4d5fe64ee9;Sampled=0
x-amzn-remapped-date: Sun, 25 Dec 2022 21:33:04 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: hSuINwOLEb9yadXYM8-wjj5s50dflddwYw_WqqNuNiV7fUW0PUvRnw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Dec 2022 21:51:28 GMT
age: 21272
etag: "db8224a2f6a985ae37c1ba6b7edd669e8fd2b097"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5205
Md5:    b4c1c005f6a410f9a70bb3dfca6e3946
Sha1:   db8224a2f6a985ae37c1ba6b7edd669e8fd2b097
Sha256: 62018c535821be673031b5a9f48e0a208763ce2ba270cf1211b96a6bee950fbe
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8987286d-0da9-4e2a-a674-43d900e573e4.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8848
x-amzn-requestid: 0b602342-cbce-43d0-b9d3-6bd95221fb9b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: duO9oF1ioAMFwUw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a8c523-15e9ffaa144f9e001f19b3f4;Sampled=0
x-amzn-remapped-date: Sun, 25 Dec 2022 21:48:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XfAE8-I8KZDnzcB8lVz2buLE_9_sWPF_NVkt1xl-PNDyfKk_Tn6KFw==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Dec 2022 22:25:36 GMT
age: 19224
etag: "ab355a55dadbdb52f57f2179bcb016cd4bbeff48"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8848
Md5:    6e79b945cb70d09691397e022efa506b
Sha1:   ab355a55dadbdb52f57f2179bcb016cd4bbeff48
Sha256: 7d9ef5d21e701e90302a4c195cb84abb4419d2c5fada3878aea00a8fc9675685
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f5421b0-4d90-4126-813c-f0b20b8058dc.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6402
x-amzn-requestid: e473a47b-af93-4aef-87ee-0ae9bd9ea1fd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: duNbQHdWoAMFRZA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a8c2ae-571725cd15512b1d33f622c7;Sampled=0
x-amzn-remapped-date: Sun, 25 Dec 2022 21:37:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: sjzsgESZF2HPFLG-oYV2IkkmOmbWCxfWLndFjEAwvbrVIO18yH8Bfw==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Dec 2022 21:57:04 GMT
age: 20936
etag: "62ce877ea88dc4c691fce6ce36149eb3db8849ba"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6402
Md5:    4a39035081117434c8be0b4b9d247edd
Sha1:   62ce877ea88dc4c691fce6ce36149eb3db8849ba
Sha256: 594754f2ab4a2f394d465893b9f73364c6ca1d03b688c8bc71ae687b70364c4d
                                        
                                            POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 
Host: thewaxingfactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 83
Origin: http://thewaxingfactory.com
Connection: keep-alive
Referer: http://thewaxingfactory.com/index.html
Cookie: gdpr-kb=true

search
                                         66.96.147.112
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Date: Mon, 26 Dec 2022 03:46:01 GMT
Content-Length: 348
Connection: keep-alive
Server: Apache/2
X-Powered-By: PHP/7.4.10
Vary: X-W-SSL,User-Agent
X-Host: grn86.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
X-DS-Version: 1502896092
Age: 2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (348), with no line terminators
Size:   348
Md5:    a944dd688c99d2901d6719be713271c0
Sha1:   4f5454d5d434829baf46671638610791758725d9
Sha256: adb97e1bc686c58b4286f1208d2bd969687c6cf3e2fc468697dfd956d260de49

Alerts:
  Blocklists:
    - fortinet: Malware