| |  45.112.246.84 | 301 Moved Permanently | 0 B |
URL User Request GET HTTP/2IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: www.feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
content-type: text/html; charset=UTF-8
x-redirect-by: WordPress
location: https://feelthemagic.org.au/
content-length: 0
date: Thu, 25 Apr 2024 23:43:53 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.3.4/assets/owl.carousel.min.css?ver=6.5.2 |  104.17.24.14 | 200 OK | 845 B |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.3.4/assets/owl.carousel.min.css?ver=6.5.2 IP104.17.24.14:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (3184) Hashb2752a850d44f50036628eeaef3bfcfa fba46353cf90450ef3d362a123f1e7af3e8c561e 521410e1fc44780061e09adc980275fb5ea277fd5d9e538454214ec4379ff4bc
GET /ajax/libs/OwlCarousel2/2.3.4/assets/owl.carousel.min.css?ver=6.5.2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 23:43:54 GMT
content-type: text/css; charset=utf-8
content-length: 845
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03cf0-d17"
last-modified: Mon, 04 May 2020 16:04:00 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 96327
expires: Tue, 15 Apr 2025 23:43:54 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AAD4F744vnLNyPRbs%2FoS6vXVVjqc7XhZjGUBS30xEHkhTsnxaTo4%2BNdAwPHXJNZe0rVqfz2JnuCYIZZ8djPk6FaUkkq0Q5s%2BVdGhAF%2BZjOZqsgs5rnTEf4bJbroO9JFgYRPCSKAy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87a232ae0d31b4ed-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/parallax/3.1.0/parallax.min.js?ver=6.5.2 | 104.17.24.14 | 200 OK | 4.7 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/parallax/3.1.0/parallax.min.js?ver=6.5.2 IP104.17.24.14:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (17272) Hash6dbee040c8d4fb731bd44936b2efc99a 0a7ac970f67b7fa08738a5be55233e9e741ad267 bf4d20b28de8c7f77428b24325ec3afb39b6f7e277f6b61666f3a0a17cc3b42b
GET /ajax/libs/parallax/3.1.0/parallax.min.js?ver=6.5.2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 23:43:54 GMT
content-type: application/javascript; charset=utf-8
content-length: 4655
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03f40-43a2"
last-modified: Mon, 04 May 2020 16:13:52 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2951920
expires: Tue, 15 Apr 2025 23:43:54 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GZSjEDGeqb1AbQHLt1ZENG9q2%2BXabYDZswEc2zW5x9gFV4wHiGucWZLTUzWXHAusWJtq2wFmg9zo%2Fx67mQFTbaC7oBNMBBiOUPthqC8gJHYqQ%2FD9FT5r2VG01tyDpdQKDw8cGifX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87a232ae0d32b4ed-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.3.4/assets/owl.theme.default.min.css?ver=6.5.2 | 104.17.24.14 | 200 OK | 331 B |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.3.4/assets/owl.theme.default.min.css?ver=6.5.2 IP104.17.24.14:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (846) Hash594b81805a98b267e47c70a8fad30d9f 684d84ec40b305ca14efc88c91f12972cb6342b4 924b0dc630d1c5dff9fa31aead9509775b1d476bfe0a5ac2977b2f11205a26ac
GET /ajax/libs/OwlCarousel2/2.3.4/assets/owl.theme.default.min.css?ver=6.5.2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 23:43:54 GMT
content-type: text/css; charset=utf-8
content-length: 331
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03cf0-3f5"
last-modified: Mon, 04 May 2020 16:04:00 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1277688
expires: Tue, 15 Apr 2025 23:43:54 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yi3Y5cgtfKzMjuI4hZ3tdt7qRfBpXw%2FHpofP91R%2B75OtL1yLRTdJEK0BHzcjW1Pxt6JeXEwn646x4DHpHCNZeHy7ZcB2fo4p9rfRsHP6HKU6W75BHlQiZML%2BRVUNsq7Q0djeBEzv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87a232ae0d36b4ed-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.1/css/all.min.css?ver=6.5.2 | 104.17.24.14 | 200 OK | 10 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.1/css/all.min.css?ver=6.5.2 IP104.17.24.14:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (58749) Hash870dbf9e3d22ee9d7cd21acc620e107b 61e37af38389d10e3ec44b0f5f05b10978c23768 d9716994f96b14296dd1b21d3e0a73f07ee88e7935d07ebdc51a9df7eb934a10
GET /ajax/libs/font-awesome/5.13.1/css/all.min.css?ver=6.5.2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 23:43:54 GMT
content-type: text/css; charset=utf-8
content-length: 10392
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eebda3d-e637"
last-modified: Thu, 18 Jun 2020 21:18:53 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 890914
expires: Tue, 15 Apr 2025 23:43:54 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KFXv0uvoRKungbLyhrS%2Bey606iSfXAOLuALlEAxR1abkb%2FASZTpulXejVYmxjuWRQB5k2yzs1sFtdU%2FRVh%2F3w2WY9SQAhteruxwH9nsv%2FtCYPniLNBt0TaNzQJx7%2F%2B00sTVBcYhA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87a232ae1d39b4ed-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.3.4/owl.carousel.min.js | 104.17.24.14 | 200 OK | 10 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.3.4/owl.carousel.min.js IP104.17.24.14:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (31997) Hashf416f9031fef25ae25ba9756e3eb6978 e2a600e433df72b4cfde93d7880e3114917a3cbe a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d
GET /ajax/libs/OwlCarousel2/2.3.4/owl.carousel.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 23:43:54 GMT
content-type: application/javascript; charset=utf-8
content-length: 10158
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03cf0-ad36"
last-modified: Mon, 04 May 2020 16:04:00 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 13471715
expires: Tue, 15 Apr 2025 23:43:54 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i0oUr957cto2LgihF6tancXRYliGiVz%2Fs6topCfYWFu71%2Fi2c2Kt3QK1P%2BJs91GftTrfipwJQ3mg57yh7Dw7kq4tmlhoJV6onUtImWkmJt68lW6d3j6cE0I6Uh9Of9x2Vi3Zb5iC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87a232ae1d3cb4ed-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-SFVYM1491N |  142.250.74.168 | 200 OK | 95 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-SFVYM1491N IP142.250.74.168:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (19111) Hash638b3231a3928f151a70a8fdfc8e68c5 04fb3c02fbf25b0aad61f321e92c90b9bbff05f0 9d1680567b88002ff6118b3e552e2953de74660d1ce47f7cb453b0c34506051b
GET /gtag/js?id=G-SFVYM1491N HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 23:43:54 GMT
expires: Thu, 25 Apr 2024 23:43:54 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 94856
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/jquery-tabs@0.5.3/jquery.tabs.min.js | 151.101.65.229 | 200 OK | 823 B |
URL GET HTTP/2cdn.jsdelivr.net/npm/jquery-tabs@0.5.3/jquery.tabs.min.js IP151.101.65.229:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeJavaScript source, ASCII text, with very long lines (1222) Hasha11ef6dc99c6cff94d6fd9da9713d284 6e61a4d414b7e83633cb921618f82686c1cc6536 006fcd0eac703e12716d34564d0a90145642399955b49c0cb05d5f7369ce39eb
GET /npm/jquery-tabs@0.5.3/jquery.tabs.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 0.5.3
x-jsd-version-type: version
etag: W/"952-bmGk1BS36DYzy5IWGPgmhsHMZTY"
content-encoding: br
accept-ranges: bytes
age: 1709893
date: Thu, 25 Apr 2024 23:43:54 GMT
x-served-by: cache-fra-etou8220100-FRA, cache-hel1410028-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 823
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/gh/alpinejs/alpine@v1.5.0/dist/alpine.js | 151.101.65.229 | 200 OK | 3.7 kB |
URL GET HTTP/2cdn.jsdelivr.net/gh/alpinejs/alpine@v1.5.0/dist/alpine.js IP151.101.65.229:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeJavaScript source, ASCII text, with very long lines (10147) Hash0ebdbece113565a9624066a4fe4e95e0 2c79f6c5cf7258f3ed5b7e00e509203712031f39 73dd696a1ec57c43a30ad2a6910fbeb0dd94bdb785e264d79fb87208afabf254
GET /gh/alpinejs/alpine@v1.5.0/dist/alpine.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.5.0
x-jsd-version-type: version
etag: W/"27c7-LHn2xc9yWPPtW34A5QkgNxIDHzk"
content-encoding: br
accept-ranges: bytes
age: 1781033
date: Thu, 25 Apr 2024 23:43:54 GMT
x-served-by: cache-fra-eddf8230106-FRA, cache-hel1410028-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3656
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/gh/st3ph/jquery.easyPaginate/lib/jquery.easyPaginate.js | 151.101.65.229 | 200 OK | 2.3 kB |
URL GET HTTP/2cdn.jsdelivr.net/gh/st3ph/jquery.easyPaginate/lib/jquery.easyPaginate.js IP151.101.65.229:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeJavaScript source, ASCII text Hashbbd7780438cdcd1eed6b8eb0e7d12cf5 a2def48f2182d2354851339297b41a15a73345da 03fda1b85d878c065aa3e54b5f86feff3c4160ebddfbe19e2de3fe3e52df3694
GET /gh/st3ph/jquery.easyPaginate/lib/jquery.easyPaginate.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: master
x-jsd-version-type: branch
etag: W/"2475-ot70jyGC0jVIUTOSl7QaFaczRdo"
content-encoding: br
accept-ranges: bytes
age: 42282
date: Thu, 25 Apr 2024 23:43:54 GMT
x-served-by: cache-fra-eddf8230064-FRA, cache-hel1410028-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2277
X-Firefox-Spdy: h2
|
|
| feelthemagic.org.au/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 | 45.112.246.84 | 200 OK | 14 kB |
URL GET HTTP/3feelthemagic.org.au/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeASCII text, with very long lines (59701) Hash51a8390b47aa0582cf2d9c96c5addee2 b16a640874025d085c38119a1a02a3460f83f2de 98cecf88a23542fa047ce46eedb650b5c5128761ed4386c0977b847094ddfa20
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 23:43:54 GMT
content-type: text/css
last-modified: Tue, 02 Apr 2024 22:41:46 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 14071
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
|
|
| feelthemagic.org.au/wp-content/plugins/add-search-to-menu/public/css/ivory-search.min.css?ver=5.5.6 | 45.112.246.84 | 200 OK | 1.5 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/plugins/add-search-to-menu/public/css/ivory-search.min.css?ver=5.5.6 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeASCII text, with very long lines (6640), with no line terminators Hash71c070bf1edf9096b5acac42b4430f9c a3e8550e5df92244db3775df5a3a9925bcfa9828 24d4d543bbeadbd760863ea450a255864acb17df7e254d5893c8c4b2845f6718
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/add-search-to-menu/public/css/ivory-search.min.css?ver=5.5.6 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 23:43:54 GMT
content-type: text/css
last-modified: Tue, 09 Apr 2024 23:37:46 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1519
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/themes/wp-spinnr/style.css?ver=6.5.2 | 45.112.246.84 | 200 OK | 777 B |
URL GET HTTP/3feelthemagic.org.au/wp-content/themes/wp-spinnr/style.css?ver=6.5.2 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
Hashb93a3c0591b0ac508a3608b1a5a2e007 2095f966968813c338b1861bcf411dbed7c8655b f20a8f07619bb74121949ef8bc7a441a527e0d103f0f19e81ec2b0a3af074dd2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/wp-spinnr/style.css?ver=6.5.2 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 23:43:54 GMT
content-type: text/css
last-modified: Fri, 25 Mar 2022 01:24:15 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 777
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/themes/wp-spinnr/inc/assets/css/fontawesome.min.css?ver=6.5.2 | 45.112.246.84 | 200 OK | 12 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/themes/wp-spinnr/inc/assets/css/fontawesome.min.css?ver=6.5.2 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeASCII text, with very long lines (56331) Hash164a58dcca37a5b00c22e06ee8e2fc68 72fee61a5a92cdc35b77313f3637a117310119f5 ce67cd6665e835604c7a650ea355d41857dcd2284618b61d82d252dca0abfe5d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/wp-spinnr/inc/assets/css/fontawesome.min.css?ver=6.5.2 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 23:43:54 GMT
content-type: text/css
last-modified: Fri, 25 Mar 2022 01:24:15 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 11796
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/themes/wp-spinnr-child/spinnr_custom_head.js?ver=1708924506 | 45.112.246.84 | 200 OK | 0 B |
URL GET HTTP/3feelthemagic.org.au/wp-content/themes/wp-spinnr-child/spinnr_custom_head.js?ver=1708924506 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/wp-spinnr-child/spinnr_custom_head.js?ver=1708924506 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript
last-modified: Mon, 26 Feb 2024 05:15:06 GMT
accept-ranges: bytes
content-length: 0
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/plugins/gravityforms/js/conditional_logic.min.js?ver=2.8.8 | 45.112.246.84 | 200 OK | 2.9 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/plugins/gravityforms/js/conditional_logic.min.js?ver=2.8.8 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeJavaScript source, ASCII text, with very long lines (9489), with no line terminators Hashdef700460bced6567249a8a2294a35aa a52212d33cdc811c52170fd905fc5e92d47b2c53 92fae22499860cc57a5d952b66f8975e0b26cc58f816db7a78a96625e141bab8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/gravityforms/js/conditional_logic.min.js?ver=2.8.8 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript
last-modified: Wed, 24 Apr 2024 15:04:26 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2935
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/themes/wp-spinnr-child/spinnr.min.css?ver=1650609059 | 45.112.246.84 | 200 OK | 148 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/themes/wp-spinnr-child/spinnr.min.css?ver=1650609059 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeASCII text, with very long lines (40185) Size148 kB (148396 bytes) Hash4a515c0814bf5e5f0aa78e7c5bd61826 2f44317efad5f5ff92901c0698cbb1a47a143a1e aa8127cecd6180114a6852cc8bc4bb2cc15ad84d0250de06a2ba401271c13729
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/wp-spinnr-child/spinnr.min.css?ver=1650609059 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 23:43:54 GMT
content-type: text/css
last-modified: Fri, 22 Apr 2022 06:30:59 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 148396
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/themes/wp-spinnr/inc/assets/css/navbar.css?ver=6.5.2 | 45.112.246.84 | 200 OK | 2.0 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/themes/wp-spinnr/inc/assets/css/navbar.css?ver=6.5.2 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeASCII text, with CRLF line terminators Hashd0e8ec4e84e90f9cfca55ba8b628ef48 da28cc181cae035966220fff242b2d2a876c6751 95e4e5fe6f3eb4737961f91be8ae3d3295d2050c92b3792ed09eaa0bf6376ac0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/wp-spinnr/inc/assets/css/navbar.css?ver=6.5.2 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 23:43:54 GMT
content-type: text/css
last-modified: Fri, 25 Mar 2022 01:24:15 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1959
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/plugins/gravityforms/legacy/css/formreset.min.css?ver=2.8.8 | 45.112.246.84 | 200 OK | 339 B |
URL GET HTTP/3feelthemagic.org.au/wp-content/plugins/gravityforms/legacy/css/formreset.min.css?ver=2.8.8 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeASCII text, with very long lines (3860), with no line terminators Hashdf29abec8ae1551476ce7a72240a17a5 94ce05333219e4df5e02753a7b4a9cf6bf7f4004 d70d9853ff87464d69a8174e3a76633bf29e45aaafcbccb214c10722b2b9714c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/gravityforms/legacy/css/formreset.min.css?ver=2.8.8 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 23:43:54 GMT
content-type: text/css
last-modified: Wed, 24 Apr 2024 15:04:27 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 339
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| cdnjs.cloudflare.com/ajax/libs/animate.css/4.0.0/animate.min.css | 104.17.24.14 | 200 OK | 4.2 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/animate.css/4.0.0/animate.min.css IP104.17.24.14:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (65346) Hash39aca93cfd689b19cc6241e859642a92 5022a36b3d077c80b0b4a550ddfb280aae28dafe eb2798553d86c6b1806d208320f645bd79eab0cebcf22176bddbc648e8f3ccd4
GET /ajax/libs/animate.css/4.0.0/animate.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:55 GMT
content-type: text/css; charset=utf-8
content-length: 4216
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb436a8-11848"
last-modified: Thu, 07 May 2020 16:26:16 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 98206
expires: Tue, 15 Apr 2025 23:43:55 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SSRQNpNHE5aq9b%2FkeTnDZ51xGxs93KdmT%2FByBXI2A%2Fb1d%2BSalPjvKQnd3gZd6v6EFj5nV%2BP1ZfKaDIQXkbDLixEug31vBS8KG1nacs4NBo4YyHUF5w6N5wARffkzp0S6OrMfCyjq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87a232b449f456a5-OSL
alt-svc: h3=":443"; ma=86400
|
|
| feelthemagic.org.au/wp-content/plugins/gravityforms/legacy/css/formsmain.min.css?ver=2.8.8 | 45.112.246.84 | 200 OK | 12 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/plugins/gravityforms/legacy/css/formsmain.min.css?ver=2.8.8 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash749bd114dc438e01825213cb4cc36608 d9df0bcba3b4ec38d2f7fad79e4dfea372400811 60185ba5f328c91103a2b7e6d798841923c2ff50b9c38f7c1a1d10d9121c0a98
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/gravityforms/legacy/css/formsmain.min.css?ver=2.8.8 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 23:43:54 GMT
content-type: text/css
last-modified: Wed, 24 Apr 2024 15:04:27 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 11647
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/plugins/gravityforms/legacy/css/readyclass.min.css?ver=2.8.8 | 45.112.246.84 | 200 OK | 3.2 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/plugins/gravityforms/legacy/css/readyclass.min.css?ver=2.8.8 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeASCII text, with very long lines (30750), with no line terminators Hash246f6bf5425059f3ec7de7d3cb2115bd 1f22ad77abb3e09acbb4b2dabebd12ca80299be3 dc699951ac63a66264d0a33df63389f8682df8f1ffa89457990a459a37675980
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/gravityforms/legacy/css/readyclass.min.css?ver=2.8.8 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 23:43:54 GMT
content-type: text/css
last-modified: Wed, 24 Apr 2024 15:04:27 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3191
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/plugins/gravityforms/legacy/css/browsers.min.css?ver=2.8.8 | 45.112.246.84 | 200 OK | 1.0 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/plugins/gravityforms/legacy/css/browsers.min.css?ver=2.8.8 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeASCII text, with very long lines (8407), with no line terminators Hash9d799292588689ed2eec46badc203766 f239c374e37fb0cd7fc9de88f9ac825ed5ab3c99 81556f38ccd763884270a287d8602759ecca85ec4f93548631550b4514393d46
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/gravityforms/legacy/css/browsers.min.css?ver=2.8.8 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 23:43:54 GMT
content-type: text/css
last-modified: Wed, 24 Apr 2024 15:04:27 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1048
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=8.26.0 | 45.112.246.84 | 200 OK | 3.0 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=8.26.0 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeJavaScript source, ASCII text, with very long lines (1392) Hash9593c634b81c031342cbe0fa03903d47 dd68ee9d73731b22fb7252f66be8bea5d17227c7 d7bdba02afa8c04c13f280c71a50f8c8186c883711c5dabbd13566dd738bff0a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=8.26.0 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript
last-modified: Tue, 16 Apr 2024 23:43:54 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3030
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/plugins/gravityforms/js/jquery.json.min.js?ver=2.8.8 | 45.112.246.84 | 200 OK | 850 B |
URL GET HTTP/3feelthemagic.org.au/wp-content/plugins/gravityforms/js/jquery.json.min.js?ver=2.8.8 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeJavaScript source, ASCII text, with very long lines (1836), with no line terminators Hashbd4a0f15980886a95cc5cbd16b77eae7 bfb0474f16e017c1ce9b33441b9b3f5d713a66f5 998a575c7b376128a98e6d67e29c42e1726aac3489cf2c0b2aaebf6f6ad0b546
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/gravityforms/js/jquery.json.min.js?ver=2.8.8 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript
last-modified: Wed, 24 Apr 2024 15:04:26 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 850
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 | 45.112.246.84 | 200 OK | 4.7 kB |
URL GET HTTP/3feelthemagic.org.au/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeJavaScript source, ASCII text, with very long lines (13479) Hash9ffeb32e2d9efbf8f70caabded242267 3ad0c10e501ac2a9bfa18f9cd7e700219b378738 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript
last-modified: Mon, 26 Feb 2024 00:42:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4678
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 | 45.112.246.84 | 200 OK | 30 kB |
URL GET HTTP/3feelthemagic.org.au/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash826eb77e86b02ab7724fe3d0141ff87c 79cd3587d565afe290076a8d36c31c305a573d18 cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript
last-modified: Mon, 26 Feb 2024 00:41:57 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 29744
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/plugins/gravityforms/assets/js/dist/utils.min.js?ver=50c7bea9c2320e16728e44ae9fde5f26 | 45.112.246.84 | 200 OK | 11 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/plugins/gravityforms/assets/js/dist/utils.min.js?ver=50c7bea9c2320e16728e44ae9fde5f26 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (38828), with no line terminators Hash50c7bea9c2320e16728e44ae9fde5f26 e4ea8549667ec13473b3b7c9b21face63d38b440 05a02a17f79ea82224a296d1b3067e36ae3440fca4172aead3b8fee4a4cfe770
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/gravityforms/assets/js/dist/utils.min.js?ver=50c7bea9c2320e16728e44ae9fde5f26 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript
last-modified: Wed, 24 Apr 2024 15:04:27 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 11283
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/themes/wp-spinnr/inc/assets/js/theme-script.min.js?ver=6.5.2 | 45.112.246.84 | 200 OK | 746 B |
URL GET HTTP/3feelthemagic.org.au/wp-content/themes/wp-spinnr/inc/assets/js/theme-script.min.js?ver=6.5.2 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeJavaScript source, ASCII text, with very long lines (2514), with no line terminators Hash32e8c583de914aff6922f017aa773338 382ec29e34325c10f7a6d43d96a57848c6858c93 f50477d0a20b0130368df559432df2732f27c243cd064982bab92248e2212c97
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/wp-spinnr/inc/assets/js/theme-script.min.js?ver=6.5.2 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript
last-modified: Mon, 26 Feb 2024 05:12:52 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 746
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/themes/wp-spinnr/inc/assets/js/skip-link-focus-fix.min.js?ver=20151215 | 45.112.246.84 | 200 OK | 171 B |
URL GET HTTP/3feelthemagic.org.au/wp-content/themes/wp-spinnr/inc/assets/js/skip-link-focus-fix.min.js?ver=20151215 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeASCII text, with very long lines (325), with no line terminators Hash06f019a6ff09db6b297570940eec1d5d 872efe186950ce534aad341e7030fe24f7c672dc 53f829ae556bf7011727483015d83a98bcdb4b5796eecb728827c1282c971536
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/wp-spinnr/inc/assets/js/skip-link-focus-fix.min.js?ver=20151215 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript
last-modified: Mon, 26 Feb 2024 05:12:08 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 171
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/themes/wp-spinnr-child/spinnr_custom.js?ver=1708926205 | 45.112.246.84 | 200 OK | 5.4 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/themes/wp-spinnr-child/spinnr_custom.js?ver=1708926205 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeJavaScript source, ASCII text, with very long lines (17074), with no line terminators Hash777c3c2d635d35ad71698725207a5aea 43f0b6029b99da5424e496ad635ca4d307b8c591 6e39cd649eafed2f7705310759237625b30d2cbc21096b5ae2a9d8e416c70a76
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/wp-spinnr-child/spinnr_custom.js?ver=1708926205 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript
last-modified: Mon, 26 Feb 2024 05:43:25 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5433
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/themes/wp-spinnr-child/spinnr_custom_body.js?ver=1708924484 | 45.112.246.84 | 200 OK | 238 B |
URL GET HTTP/3feelthemagic.org.au/wp-content/themes/wp-spinnr-child/spinnr_custom_body.js?ver=1708924484 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash697525c7d152318567ac6a18fa7e0b18 d930a83b7a1dd795ec4f991e17a1c7b85814e8f2 14fe942dc04e3dc5be3d095d4d185ce0aebb7032524616bfedffd2f39f8bf495
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/wp-spinnr-child/spinnr_custom_body.js?ver=1708924484 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript
last-modified: Mon, 26 Feb 2024 05:14:44 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 238
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/themes/wp-spinnr/inc/assets/js/navbar.js?ver=6.5.2 | 45.112.246.84 | 200 OK | 125 B |
URL GET HTTP/3feelthemagic.org.au/wp-content/themes/wp-spinnr/inc/assets/js/navbar.js?ver=6.5.2 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash00ac4ba47a21206683108d9e04e74097 677850e17f4190b9ba9bf7ad7e7dddaa3d67095f 36933668384fdf024eaea8788eac776814bde7f808cfd4217f4e9d77545de48b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/wp-spinnr/inc/assets/js/navbar.js?ver=6.5.2 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript
last-modified: Mon, 26 Feb 2024 05:11:36 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 125
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2 | 45.112.246.84 | 200 OK | 2.3 kB |
URL GET HTTP/3feelthemagic.org.au/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeJavaScript source, ASCII text, with very long lines (8171), with no line terminators Hashdda652db133fddb9b80a05c6d1b5c540 60c8514c57a5db2980c4b046b0dd479bd427357b c1a9a3e223bad631dff12d33b5499eb145cb08d8621c20d9d73870e78d97afe4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript
last-modified: Mon, 26 Feb 2024 00:42:18 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2320
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0 | 45.112.246.84 | 200 OK | 2.4 kB |
URL GET HTTP/3feelthemagic.org.au/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeJavaScript source, ASCII text, with very long lines (6625), with no line terminators Hashfd7ef2e4737acd74fd0dcdc3b515e304 0d792b33f12a48ee8aaaf2560a63a5682470645b 1d52e1ac7d3bc25a8b0ffc257153f9dd50249f96fe9a4df5e0d771241a69062c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript
last-modified: Mon, 26 Feb 2024 00:42:37 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2402
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 | 45.112.246.84 | 200 OK | 14 kB |
URL GET HTTP/3feelthemagic.org.au/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (38582), with no line terminators Hash92f8c01350c630f414f5d0b015ad6864 eab40ab4e77f92f2fb17684aaf44b579a51b8034 17b79ece7ef9d1454a90156690d33d64387b67a7a7548fc826012512e287a937
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript
last-modified: Tue, 02 Apr 2024 22:41:46 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 13501
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-includes/js/dist/dom-ready.min.js?ver=f77871ff7694fffea381 | 45.112.246.84 | 200 OK | 275 B |
URL GET HTTP/3feelthemagic.org.au/wp-includes/js/dist/dom-ready.min.js?ver=f77871ff7694fffea381 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeJavaScript source, ASCII text, with very long lines (422) Hashe4bc17cc45ca91ab0f09dea134975c51 3c03312717fb495c051d02a3d27ec0d8abc2557d 5a43a22e48f94b7a45a9a9b1a107f197213b73307fdfa2e6b2daadab264f94d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/dist/dom-ready.min.js?ver=f77871ff7694fffea381 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript
last-modified: Tue, 02 Apr 2024 22:41:46 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 275
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18 | 45.112.246.84 | 200 OK | 1.5 kB |
URL GET HTTP/3feelthemagic.org.au/wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeJavaScript source, ASCII text, with very long lines (4272) Hash072d3f6e5c446f57d5c544f9931860e2 ee6aa3d65b474309376468b24bb6f829a4514809 2cb546fbdda7995d374fffa4b2f6530bbcf57d014639ddf76de45df43d593045
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript
last-modified: Tue, 02 Apr 2024 22:41:46 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1460
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 | 45.112.246.84 | 200 OK | 3.5 kB |
URL GET HTTP/3feelthemagic.org.au/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
Hasha8127c1a87bb4f99edbeec7c37311dcd 9997a1745f48bdd233dbe9bd8164daa53eba105b f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript
last-modified: Tue, 02 Apr 2024 22:41:46 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3542
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-includes/js/dist/a11y.min.js?ver=d90eebea464f6c09bfd5 | 45.112.246.84 | 200 OK | 825 B |
URL GET HTTP/3feelthemagic.org.au/wp-includes/js/dist/a11y.min.js?ver=d90eebea464f6c09bfd5 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (2322) Hash85ccfa6bfeb1f46e967d204f827ff4dc 37f9f7a030569dded1441f85916b7eb0eefd59eb bb4e63c126beae75728fc000a8847d4d91427b7a63e711f3668de1c20bd5d76c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/dist/a11y.min.js?ver=d90eebea464f6c09bfd5 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript
last-modified: Tue, 02 Apr 2024 22:41:46 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 825
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/plugins/gravityforms/assets/js/dist/vendor-theme.min.js?ver=54e7080aa7a02c83aa61fae430b9d869 | 45.112.246.84 | 200 OK | 6.1 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/plugins/gravityforms/assets/js/dist/vendor-theme.min.js?ver=54e7080aa7a02c83aa61fae430b9d869 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (17289), with no line terminators Hash54e7080aa7a02c83aa61fae430b9d869 96dd0f5ca049a7cb23a13e28cfda2d3c14d4a6a1 6b63f93f45b836123619e22860a43538ac0cd157f7afd2f58134e28e5e18fa04
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/gravityforms/assets/js/dist/vendor-theme.min.js?ver=54e7080aa7a02c83aa61fae430b9d869 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript
last-modified: Wed, 24 Apr 2024 15:04:27 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6145
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/plugins/gravityforms/assets/js/dist/scripts-theme.min.js?ver=bab19fd84843dabc070e73326d787910 | 45.112.246.84 | 200 OK | 1.6 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/plugins/gravityforms/assets/js/dist/scripts-theme.min.js?ver=bab19fd84843dabc070e73326d787910 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeJavaScript source, ASCII text, with very long lines (4163), with no line terminators Hashbab19fd84843dabc070e73326d787910 4020215164c1ce9df6126944d88856b7c6ce3228 fff9001fa9a705871580a83e3c2916c7d136360c55bf0b5ac88d6e055085678d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/gravityforms/assets/js/dist/scripts-theme.min.js?ver=bab19fd84843dabc070e73326d787910 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript
last-modified: Wed, 24 Apr 2024 15:04:27 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1644
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/plugins/gravityformsrecaptcha/js/frontend.min.js?ver=1.4.0 | 45.112.246.84 | 200 OK | 468 B |
URL GET HTTP/3feelthemagic.org.au/wp-content/plugins/gravityformsrecaptcha/js/frontend.min.js?ver=1.4.0 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeJavaScript source, ASCII text, with very long lines (1110), with no line terminators Hashd39644514908bf8322428d443cf6a7d3 c31e1657e72366eba75a6eb70a0849d45ab72f5f 8b06d3affac3175146480932ddc0324f0f049a625788810d2e5d50a6061a3a57
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/gravityformsrecaptcha/js/frontend.min.js?ver=1.4.0 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript
last-modified: Mon, 26 Feb 2024 05:08:57 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 468
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/plugins/add-search-to-menu/public/js/ivory-search.min.js?ver=5.5.6 | 45.112.246.84 | 200 OK | 1.1 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/plugins/add-search-to-menu/public/js/ivory-search.min.js?ver=5.5.6 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeJavaScript source, ASCII text, with very long lines (4580), with no line terminators Hashce428a87a021e7b3f2eaf54cf42acdd8 61b07035596e0737e5bf55fb13be37b29124511a 66d0c8cbacc09ad8746e64ad28d887186d1f060f04c388c2f1102ee346120a8c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/add-search-to-menu/public/js/ivory-search.min.js?ver=5.5.6 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript
last-modified: Tue, 09 Apr 2024 23:37:46 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1074
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-SFVYM1491N>m=45je44o0v873134578za200&_p=1714088634474&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&gdid=dZGIzZG&cid=724446949.1714088635&ul=en-us&sr=1280x1024&ir=1&pscdl=noapi&_eu=EA&_s=1&sid=1714088634&sct=1&seg=0&dl=https%3A%2F%2Ffeelthemagic.org.au%2F&dt=Feel%20the%20Magic%20%E2%80%93%20Empowering%20children%20to%20thrive%20from%20grief&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.forceSSL=true&ep.link_attribution=true&tfd=3349 | 216.239.34.36 | 204 No Content | 0 B |
URL POST HTTP/2region1.analytics.google.com/g/collect?v=2&tid=G-SFVYM1491N>m=45je44o0v873134578za200&_p=1714088634474&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&gdid=dZGIzZG&cid=724446949.1714088635&ul=en-us&sr=1280x1024&ir=1&pscdl=noapi&_eu=EA&_s=1&sid=1714088634&sct=1&seg=0&dl=https%3A%2F%2Ffeelthemagic.org.au%2F&dt=Feel%20the%20Magic%20%E2%80%93%20Empowering%20children%20to%20thrive%20from%20grief&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.forceSSL=true&ep.link_attribution=true&tfd=3349 IP216.239.34.36:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-SFVYM1491N>m=45je44o0v873134578za200&_p=1714088634474&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&gdid=dZGIzZG&cid=724446949.1714088635&ul=en-us&sr=1280x1024&ir=1&pscdl=noapi&_eu=EA&_s=1&sid=1714088634&sct=1&seg=0&dl=https%3A%2F%2Ffeelthemagic.org.au%2F&dt=Feel%20the%20Magic%20%E2%80%93%20Empowering%20children%20to%20thrive%20from%20grief&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.forceSSL=true&ep.link_attribution=true&tfd=3349 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://feelthemagic.org.au
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://feelthemagic.org.au
date: Thu, 25 Apr 2024 23:43:55 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.1/webfonts/fa-brands-400.woff2 | 104.17.24.14 | 200 OK | 77 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.1/webfonts/fa-brands-400.woff2 IP104.17.24.14:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 77444, version 331.589 Hash91a23e8bf2b4b84c39311cb5eb23aaa0 992e28bfb17bebc55d628d1b743d4c7d20082c19 e98ae3ff936b4723cd8a2377d2c549a667ce87e81201ec4995cc01bd374c1288
GET /ajax/libs/font-awesome/5.13.1/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://feelthemagic.org.au
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:55 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 77444
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eebda3d-12e84"
last-modified: Thu, 18 Jun 2020 21:18:53 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 90348
expires: Tue, 15 Apr 2025 23:43:55 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qydNEpau3ddoW2oIHor6ktRdHkpCAKaU0x4DbqqpgPMr4OG%2FhcF5GUzRC1IpQ9hW1EnVYtuvW9By3760nlyAF2MVQkCWGLBZuVhQQSGjndoejOQm34zFjKK82Df2olKnFpE2Lk3T"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87a232b69b2456a5-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.1/webfonts/fa-regular-400.woff2 | 104.17.24.14 | 200 OK | 14 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.1/webfonts/fa-regular-400.woff2 IP104.17.24.14:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 13596, version 331.589 Hash5c674c9216c06ede2f618aa58ae71116 f31f61126938f879dab593a1323d080a86e0e745 de5fb40e0689f154902213527781c2fb83cddcbf8f622a1384f1e2a7e7693b21
GET /ajax/libs/font-awesome/5.13.1/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://feelthemagic.org.au
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:55 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 13596
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eebda3d-351c"
last-modified: Thu, 18 Jun 2020 21:18:53 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 11637753
expires: Tue, 15 Apr 2025 23:43:55 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=We53a21dkDZ0MwvSdHDCGOLyEJJCyllpP2Q558pqpA6Rfcn0P6sXRDSZ32WXnHpQgRsJ3sU4oiWcUOo2JaUAfPv4MJfED%2BanSt5qcCu3Fe4R%2BhfHdHhrk3cY5925XtcPT1nnt5ta"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87a232b6eb3556a5-OSL
alt-svc: h3=":443"; ma=86400
|
|
| feelthemagic.org.au/wp-content/uploads/2021/06/star.png | 45.112.246.84 | 200 OK | 1.4 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/uploads/2021/06/star.png IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Hashb538d4a5751a67e2faa8b77fc8adc9d1 b5478377b7979c18ac5a96a733fc5f274b1a4c11 16a2496f61f7da03cfe11e30e1f4c42e8ca272188eac4891b8fcaf495696ec37
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2021/06/star.png HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/wp-content/themes/wp-spinnr-child/spinnr.min.css?ver=1650609059
Cookie: _ga_SFVYM1491N=GS1.1.1714088634.1.0.1714088634.60.0.0; _ga=GA1.1.724446949.1714088635
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 23:43:56 GMT
content-type: image/png
last-modified: Wed, 30 Jun 2021 08:09:12 GMT
accept-ranges: bytes
content-length: 1442
date: Thu, 25 Apr 2024 23:43:56 GMT
server: LiteSpeed
|
|
| www.youtube.com/s/player/652ba3a2/player_ias.vflset/en_US/embed.js | 142.250.74.110 | 200 OK | 18 kB |
URL GET HTTP/3www.youtube.com/s/player/652ba3a2/player_ias.vflset/en_US/embed.js IP142.250.74.110:443
Requested byhttps://www.youtube.com/embed/qf5jmEkR94Q CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeJavaScript source, ASCII text, with very long lines (3391) Hashb8a3c4fd7c1fb6f69956d1bea9121dd2 57de75008387d06257afd0f49dd6be0604d86152 e37861096c74b59c925c2effffcda0d899e4ec45dbee22b9546e9f511a7dcede
GET /s/player/652ba3a2/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/qf5jmEkR94Q
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 18315
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 07:34:01 GMT
expires: Thu, 24 Apr 2025 07:34:01 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 04:20:05 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 144595
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.youtube.com/s/player/652ba3a2/www-player.css | 142.250.74.110 | 200 OK | 48 kB |
URL GET HTTP/3www.youtube.com/s/player/652ba3a2/www-player.css IP142.250.74.110:443
Requested byhttps://www.youtube.com/embed/qf5jmEkR94Q CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashc0aca454c0a9b539d3af1213a20c6625 9893a760290f6d8a9fed3a9f3129e7285b702430 13a3fa279a6816ddd952f42fd82f5bc170ac2ff89410d14d43954b342ad40040
GET /s/player/652ba3a2/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/qf5jmEkR94Q
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 48109
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 07:31:31 GMT
expires: Thu, 24 Apr 2025 07:31:31 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 04:20:05 GMT
content-type: text/css
vary: Accept-Encoding, Origin
age: 144745
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.youtube.com/s/player/652ba3a2/www-embed-player.vflset/www-embed-player.js | 142.250.74.110 | 200 OK | 97 kB |
URL GET HTTP/3www.youtube.com/s/player/652ba3a2/www-embed-player.vflset/www-embed-player.js IP142.250.74.110:443
Requested byhttps://www.youtube.com/embed/qf5jmEkR94Q CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeJavaScript source, ASCII text, with very long lines (829) Hash41348652979d359653fe6322a97908b4 8d8ff77af710d82f82b98bc4502f2ffc3f370f08 948bc1d531b416dc2a97f59988fcd3e17dd0d65822d742f4cec0708611efc443
GET /s/player/652ba3a2/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/qf5jmEkR94Q
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 97332
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 07:31:31 GMT
expires: Thu, 24 Apr 2025 07:31:31 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 04:20:05 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 144745
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.youtube.com/s/player/652ba3a2/player_ias.vflset/en_US/base.js | 142.250.74.110 | 200 OK | 810 kB |
URL GET HTTP/3www.youtube.com/s/player/652ba3a2/player_ias.vflset/en_US/base.js IP142.250.74.110:443
Requested byhttps://www.youtube.com/embed/qf5jmEkR94Q CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeJavaScript source, ASCII text, with very long lines (555) Size810 kB (809632 bytes) Hash99d94118b126f0e6fa930656e9aeec5f fde794b877a215638b07225c393d23d93d090169 d23c0ec3c06e663c17df265a07da5a6a5d0ced529cbf10c842df6cc9934867d7
GET /s/player/652ba3a2/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/qf5jmEkR94Q
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 809632
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 07:34:01 GMT
expires: Thu, 24 Apr 2025 07:34:01 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 04:20:05 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 144595
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.163 | 200 OK | 15 kB |
URL GET HTTP/3fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.163:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfFpWwpAAAAAA4Cn4RTugUJo2rA7sNLWgIOZkmh&co=aHR0cHM6Ly9mZWVsdGhlbWFnaWMub3JnLmF1OjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=yq43yk92giak CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 06:43:51 GMT
expires: Wed, 23 Apr 2025 06:43:51 GMT
cache-control: public, max-age=31536000
age: 234005
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| capture-api.ap3prod.com/-/events/page-event | 3.17.92.116 | 200 OK | 68 B |
URL POST HTTP/2capture-api.ap3prod.com/-/events/page-event IP3.17.92.116:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerAmazon Subject*.ap3prod.com Fingerprint0C:1D:79:62:05:7F:5C:31:32:AA:6D:CF:46:86:33:F5:41:03:4B:84 ValidityTue, 16 Jan 2024 00:00:00 GMT - Thu, 13 Feb 2025 23:59:59 GMT
Hash4077f4e5d51a016c392000acdee045e9 8b75279674da62590d825c804ffe9a18c1563ee4 b8dccd3f0d5ed6e089b6c194622ada9a35e287337eb498cd5db5b9bb35ac796e
POST /-/events/page-event HTTP/1.1
Host: capture-api.ap3prod.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 316
Origin: https://feelthemagic.org.au
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 23:43:56 GMT
content-type: application/json
content-length: 68
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-origin: *
allow: GET, POST, PUT, DELETE, OPTIONS
cache-control: no-cache, must-revalidate
expires: 0
pragma: no-cache
set-cookie: s=IGYq6rzN_86ZwpIAAGYq6rxYl5dmkQ_1ctylXDtB70Rcbg_COA; Path=/; Expires=Sun, 25 Apr 2027 23:43:56 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding, Accept-Encoding
x-version: master-2404230529-5282-21ec659
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 142.250.74.163 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP142.250.74.163:443
Requested byhttps://www.youtube.com/embed/qf5jmEkR94Q CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0 Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 22 Apr 2024 22:10:11 GMT
expires: Tue, 22 Apr 2025 22:10:11 GMT
cache-control: public, max-age=31536000
age: 264825
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| feelthemagic.org.au/wp-content/uploads/2022/05/green-arrow-right.svg | 45.112.246.84 | 200 OK | 350 B |
URL GET HTTP/3feelthemagic.org.au/wp-content/uploads/2022/05/green-arrow-right.svg IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeSVG Scalable Vector Graphics image Hash943370746033f16493f97a23609df7ce 6b822d90607f6773153c5668146cf3ce2fd7e427 4326039e16b571dfa8836daf661951490a8aeb7805450df786ee7843067b5ec5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2022/05/green-arrow-right.svg HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 23:43:54 GMT
content-type: image/svg+xml
last-modified: Thu, 12 May 2022 06:49:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 350
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| static.fundraiseup.com/embed-data/elements/XPXEXMAD.js | 172.67.72.38 | 200 OK | 1.1 kB |
URL GET HTTP/3static.fundraiseup.com/embed-data/elements/XPXEXMAD.js IP172.67.72.38:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
File typeASCII text, with very long lines (1744), with no line terminators Hashee049675da6d02de113ec1a5f37690d6 8dd08fd8b7793d2f2bf71d17a0f5fdcd1a718b23 f734ff2be3292fbc178d26d9b1dc70286c0ba9cf2fb45912eca8de8ae54fd688
GET /embed-data/elements/XPXEXMAD.js HTTP/1.1
Host: static.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:56 GMT
content-type: text/javascript
x-amz-id-2: s7WBSbp0BB9U+LciAhrYSJapG7h3B5C3gPFGMTTM41vEys8J1hdMoWOeeS0/E8vsdh3HRrPxyuo=
x-amz-request-id: RB5319NJ3HSCV8C4
last-modified: Thu, 25 Apr 2024 03:13:03 GMT
etag: W/"ee049675da6d02de113ec1a5f37690d6"
x-amz-server-side-encryption: AES256
cache-control: no-cache, no-store
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=spTVSdHry8Hnqgbi1rkAeSTDJCYFFb6sUzB43SNFfHIldp7OyBEM1vimO39OXKRhVnoGtWD48CGiwxNx1YY5hK7apQH1BS5rO1Pmu9jdv5QbOlxvkW%2FbIYwx8mc366OKAleRlJm47Jw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a232b9fdc11c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| feelthemagic.org.au/wp-content/uploads/2022/11/FTMHero1122_2.jpg | 45.112.246.84 | 200 OK | 426 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/uploads/2022/11/FTMHero1122_2.jpg IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=9, manufacturer=SONY, model=ILCE-7M3, orientation=upper-left, xresolution=138, yresolution=146, resolutionunit=2, software=GIMP 2.10.30, datetime=2022:11:08 16:59:32], progressive, precision 8, 1920x671, components 3 Size426 kB (426000 bytes) Hashb43e267bfcd3db92bc9330a5f4c8a084 1b726b882cf74730cfa2681d3161279be4cf6469 dc148c69b44332a8449590e3fb1a2dcb455af725e81f39e8edd8d71e7b2ecf78
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2022/11/FTMHero1122_2.jpg HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 23:43:54 GMT
content-type: image/jpeg
last-modified: Tue, 08 Nov 2022 05:59:52 GMT
accept-ranges: bytes
content-length: 426000
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/uploads/2022/11/Learn-more-about-us-at-our2.png | 45.112.246.84 | 200 OK | 963 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/uploads/2022/11/Learn-more-about-us-at-our2.png IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typePNG image data, 600 x 800, 8-bit/color RGBA, non-interlaced Size963 kB (962949 bytes) Hash9424081621a2ff461b4d2d1e0a43e770 5bd10e822b1162c927ce95be8678b72738786d65 4cce68325ebb6dc986a21f2d1130dd28e2bd06c69e6887d9522bb9d020eecbf2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2022/11/Learn-more-about-us-at-our2.png HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 23:43:54 GMT
content-type: image/png
last-modified: Thu, 10 Nov 2022 02:41:48 GMT
accept-ranges: bytes
content-length: 962949
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create | 142.250.74.74 | 200 OK | 0 B |
URL POST HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create IP142.250.74.74:443
Requested byhttps://www.youtube.com/embed/qf5jmEkR94Q CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Thu, 25 Apr 2024 23:43:57 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| static.fundraiseup.com/2153.8ae4106484d0.text-link-v2.js | 172.67.72.38 | 200 OK | 43 kB |
URL GET HTTP/3static.fundraiseup.com/2153.8ae4106484d0.text-link-v2.js IP172.67.72.38:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
File typeJavaScript source, ASCII text, with very long lines (4710), with no line terminators Hash7f4a38b9c43f9067074f6144127bee2f 10c4bc6bfc7104d65709720711bcd1f801df689f e92fd761d724ce1ae9a1cadf3c773c58528644a80987711a4022a7976dcfd940
GET /2153.8ae4106484d0.text-link-v2.js HTTP/1.1
Host: static.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:57 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: ZLETF3uAwRwXFlLuramg6GTqJgz9bFES39Kq30/KRPpQFmwHYn/DHPeiOiVzVWf6pqDHuWihF0w=
x-amz-request-id: 79H94AN63JXM1SPK
last-modified: Fri, 19 Apr 2024 10:35:05 GMT
etag: W/"7f4a38b9c43f9067074f6144127bee2f"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
cf-cache-status: HIT
age: 564235
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UjKLLEqgb8xsT2d9GDYzrp%2F4jDbcMQ4pXDUZFq4pok06zxmWu1%2BmjadKUSBgPNEuRkWZzmaIXJ5nDBRlUS5slWTpOoyQBC6mwZPEtluX%2Br7MX6jyYonTzBwgM9iDklBifk80tWOwOy4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a232be7f681c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.fundraiseup.com/widget/AFPEGGYN | 172.67.72.38 | 200 OK | 202 kB |
URL GET HTTP/2cdn.fundraiseup.com/widget/AFPEGGYN IP172.67.72.38:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
File typeJavaScript source, ASCII text, with very long lines (65535) Size202 kB (201903 bytes) Hash79af4e73e3b36ad3718134e1d0d5b9c5 8f856b59a0c29eaac14f1fbb2ed7c6336d78a48f e501a1df7376a819ca9cc4012dd73ecf6fd638b47b19c43d0a8b78e26b626680
GET /widget/AFPEGGYN HTTP/1.1
Host: cdn.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 23:43:56 GMT
content-type: text/javascript
etag: W/"3261809628"
link: <https://static.fundraiseup.com/424d4e104d21.elementsApi.js>; rel=preload; as=script, <https://static.fundraiseup.com/embed-data/elements-global/AFPEGGYN.js>; rel=preload; as=script, <https://static.fundraiseup.com/2441.e8ff3c73f704.async-vendors.js>; rel=preload; as=script, <https://static.fundraiseup.com/4215.ccc0934fbd14.elements-langs-vendors.js>; rel=preload; as=script, <https://static.fundraiseup.com/450.56acab907e46.elements-vendors.js>; rel=preload; as=script
set-cookie: fundraiseup_cid=; expires=Thu, 01 Jan 1970 00:00:00 GMT; domain=.fundraiseup.com; path=/; SameSite=None; Secure
fundraiseup_session=; expires=Thu, 01 Jan 1970 00:00:00 GMT; domain=.fundraiseup.com; path=/; SameSite=None; Secure
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XCJBkShL4g6Q8slZP9rmvV%2FWHO%2F87O9noaARwRU8CU5Hma0rl1cBgegS2my4iI0m4kj7YCTw9PH2PX%2FyY2JtQgGXniVrJZmeZaImFyzbOx3lvexyKbznt%2Fb55AAzZW9yLM7nUWA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a232b6fad056b4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api.js?render=6LfFpWwpAAAAAA4Cn4RTugUJo2rA7sNLWgIOZkmh&ver=1.4.0 | 142.250.74.164 | 200 OK | 72 kB |
URL GET HTTP/2www.google.com/recaptcha/api.js?render=6LfFpWwpAAAAAA4Cn4RTugUJo2rA7sNLWgIOZkmh&ver=1.4.0 IP142.250.74.164:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintCD:48:2A:0C:60:1D:37:5A:D4:D5:A9:F7:DE:A0:2B:5E:2F:29:76:73 ValidityMon, 18 Mar 2024 20:38:49 GMT - Mon, 10 Jun 2024 20:38:48 GMT
Hash0c6d4085e4f2e4efa49ba24c005be45b 3369e0c57c529896d06a6bdbabcf7cfdc8aee067 bb3a6493c26eb5d22c7cebc5c4fc10175ca50f34553648d480675698fbf1c621
GET /recaptcha/api.js?render=6LfFpWwpAAAAAA4Cn4RTugUJo2rA7sNLWgIOZkmh&ver=1.4.0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Thu, 25 Apr 2024 23:43:54 GMT
date: Thu, 25 Apr 2024 23:43:54 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| static.fundraiseup.com/checkout-styles.e9e67e3da1106f4e181f.js | 172.67.72.38 | 200 OK | 40 kB |
URL GET HTTP/3static.fundraiseup.com/checkout-styles.e9e67e3da1106f4e181f.js IP172.67.72.38:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators Hasheff5eb7205b5e4e1a418eebf8a0e87bd 345272e7906905f6784a03707ebfaadffa41a532 675c51a41293c16758406ba7a3d69ba5ae1e31bdcdb9c3a35c3a92d9c30a9070
GET /checkout-styles.e9e67e3da1106f4e181f.js HTTP/1.1
Host: static.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:57 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: NP+GKbFtrj3Qmd6emB1Rgx7oTvIfqLMMFN+O97nZgjlYrrb7waguAEdfBwdkyhcM8fIrlR/+Kls=
x-amz-request-id: H7Y1M0PY2568TRZ6
last-modified: Wed, 24 Apr 2024 08:55:12 GMT
etag: W/"eff5eb7205b5e4e1a418eebf8a0e87bd"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
cf-cache-status: HIT
age: 138359
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m16%2Bee1%2BlaCvAT1VEWEUs5dWVYwI%2FSg86HCWVTlCh5ealzA0VglAu2xhfSQBywSKWlRz7YbrmcxypqjN76V%2B2ZmpdqGvpNpq508ZC2RXITGVi5%2BPixrZiVhpvNtoluCQexEqFSaJcAY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a232be7f651c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| static.fundraiseup.com/450.56acab907e46.elements-vendors.js | 172.67.72.38 | 200 OK | 66 kB |
URL GET HTTP/3static.fundraiseup.com/450.56acab907e46.elements-vendors.js IP172.67.72.38:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (50328), with no line terminators Hash6b1152345e9e19f4059016a673925a4d 32a0f6b8551a628a6e6c2242ed07051d07f37ce0 a41882d61fd641cc0cbd00ae9e57014639683364df4919055a4547bbf1d8ef81
GET /450.56acab907e46.elements-vendors.js HTTP/1.1
Host: static.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:56 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: JAnpf4DTHpqGaqi6rOy9q4Xm2X6aPMxGQmXgeyDdBk4xVEBtT9un6cnz3heVaOhKRf47KIQBAEQ=
x-amz-request-id: 4ZB5QR9EF801Z3G0
last-modified: Tue, 23 Apr 2024 09:48:54 GMT
etag: W/"6b1152345e9e19f4059016a673925a4d"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
cf-cache-status: HIT
age: 221608
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D5J%2B3nhePpOHv5bR8J%2F0lpG0%2FZ3fUE7P1yeDSa%2FEVQppj2VjlVHw8mimf9vjzkN%2BP3ERNWo58Zk1GQSgGNqTKjYHDfwIkVvgohH9S689SgtHH4fk6vIQWdZjKCsWLILrRynvuhpyF1Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a232bb2e181c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 142.250.74.163 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP142.250.74.163:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://feelthemagic.org.au
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 08:04:32 GMT
expires: Wed, 23 Apr 2025 08:04:32 GMT
cache-control: public, max-age=31536000
age: 229165
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| static.fundraiseup.com/_/common-fonts/ibm-plex-sans/ibmplexsans-v19-400.woff2 | 172.67.72.38 | 200 OK | 57 kB |
URL GET HTTP/3static.fundraiseup.com/_/common-fonts/ibm-plex-sans/ibmplexsans-v19-400.woff2 IP172.67.72.38:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 56612, version 1.0 Hashb3d77a069162cf3bc9d1c7fe7ca9b231 c5acc98da76bf4d764096757df5476bb92b654b5 712ed3429bf093fbc63dafba14a3ed7034a083559f638c7b5247b1c6367907ba
GET /_/common-fonts/ibm-plex-sans/ibmplexsans-v19-400.woff2 HTTP/1.1
Host: static.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://feelthemagic.org.au
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:57 GMT
content-type: application/octet-stream
content-length: 56612
x-amz-id-2: 45JvX52nDhD1da+d/bVjHvX9bWVSVMe12/WkbwKkwOyA7zs1PyzCzAsjTP5dcIW73CIAewaBSyU=
x-amz-request-id: MA9ATX7XG819NZTX
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 24 Apr 2024 08:55:06 GMT
etag: "b3d77a069162cf3bc9d1c7fe7ca9b231"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BPRumb03N9TdUntFK8vGua3VAFJYJABBNqTUxPvtq9HXN6yO4XG0SXUCA9J0U%2BAv5Upzqj1zfD49P3jkMK5Sl1Q2iDG8aIn%2FPKL43YOxPMIBxVLiDD6hQRMfQLyMoJ7KLJ8JuO8X8hY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a232bff83e1c12-OSL
alt-svc: h3=":443"; ma=86400
|
|
| static.fundraiseup.com/4814.065e4f8f0c18.elements-crypto-currencies.js | 172.67.72.38 | 200 OK | 50 kB |
URL GET HTTP/3static.fundraiseup.com/4814.065e4f8f0c18.elements-crypto-currencies.js IP172.67.72.38:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (17487), with no line terminators Hash5ecaa40d178cdca7a2693aaadedf4a2a 88d6eab1ceac5108ee5a5fffa267a714b26ec267 c6ce0693131db81ef8baca7a9cd9bb7fc9047e853461c6fc6513e2be18c891a8
GET /4814.065e4f8f0c18.elements-crypto-currencies.js HTTP/1.1
Host: static.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:57 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: g+F7tktMcPQGE7fX5+HN6c7BRj8ebSTLRu60SIe+6KkLxrQwI4lPqMkpQ3mziFZ4LJm55At0Wzo=
x-amz-request-id: A4Q77KDFK3HREWAE
last-modified: Mon, 01 Apr 2024 12:15:22 GMT
etag: W/"5ecaa40d178cdca7a2693aaadedf4a2a"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2100576
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2iHwBPUFS4Jfptpx%2FgT2eJfV9uxduRZBygZmscbstDY7Ss3ze7g3YVsS0I2ET7nRAwfFN%2FUmDlb0zT%2FD0ZisAbhC%2BPeFPCgQNYOriIMM2YZKv6wx75YAwe%2BOGYv96f0II3QK4RwxREg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a232be7f691c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| feelthemagic.org.au/wp-content/uploads/2022/05/webinar-hero-image-template.jpg | 45.112.246.84 | 200 OK | 35 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/uploads/2022/05/webinar-hero-image-template.jpg IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x338, components 3 Hasha59759abad0e6792567acf733d9f4cb9 69adc97caa7d5fd52179822b2768738c8234d1c0 fd63c88c814d7858d05134432df2798ab96905c78e7130d77eb12d86fff29ba1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2022/05/webinar-hero-image-template.jpg HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 23:43:54 GMT
content-type: image/jpeg
last-modified: Fri, 20 May 2022 06:53:47 GMT
accept-ranges: bytes
content-length: 34733
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| static.fundraiseup.com/2441.e8ff3c73f704.async-vendors.js | 172.67.72.38 | 200 OK | 84 kB |
URL GET HTTP/3static.fundraiseup.com/2441.e8ff3c73f704.async-vendors.js IP172.67.72.38:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hashb2d62b74d99dc36c940ca730f4014e56 36abd2c18743b078202ce6b921471a22189e2e05 3df77ddee3e5870eb1bce45b9288ffe93271270896a25a38479384ca9e842f2e
GET /2441.e8ff3c73f704.async-vendors.js HTTP/1.1
Host: static.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:57 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: eEqvz8okgn1qMlXBhZnm0aioMoO0RNTZs09sRRy1MSf8PcX4SjP6r9nHzS8zvsm6vTY/Cvb2Uc4=
x-amz-request-id: 810B1J96VCTAFJTA
last-modified: Tue, 16 Apr 2024 09:30:35 GMT
etag: W/"b2d62b74d99dc36c940ca730f4014e56"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
cf-cache-status: HIT
age: 827463
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u93qYgZV%2FISwrXXrGoAXRhjw9hs9W8nmIKXy2oL42cWRaFkx0dpSXCgPHU%2BCK7%2FPo6GCH5e536VI6vHTrXNSsrU91svX5tHJCQkC7HlwJGRYEtyOnMuh3NJVsS5NVDenuVyMLXs4ku4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a232be7f6b1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT | 142.250.74.74 | 200 OK | 0 B |
URL POST HTTP/3jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT IP142.250.74.74:443
Requested byhttps://www.youtube.com/embed/qf5jmEkR94Q CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Thu, 25 Apr 2024 23:43:57 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| static.fundraiseup.com/src/socialProof/images/map-09.png | 172.67.72.38 | 200 OK | 2.4 kB |
URL GET HTTP/3static.fundraiseup.com/src/socialProof/images/map-09.png IP172.67.72.38:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
File typeRIFF (little-endian) data, Web/P image Hash97d28db73186b04b2bda7fd78fb6105d 9032516fb84f0b06cb01f1ef9964544833af0c5c c83054e9da3d44b7f0fa278ed4af44824c9caa83e8bcec07320060ffd571ebef
GET /src/socialProof/images/map-09.png HTTP/1.1
Host: static.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:57 GMT
content-type: image/webp
content-length: 2392
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=2839
content-disposition: inline; filename="map-09.webp"
etag: "52c13993f73a28ee47c4f2455151caab"
last-modified: Mon, 01 Apr 2024 12:15:47 GMT
vary: Accept
x-amz-id-2: 1K8MyFuRHqNTuQP3IoPQkYsyHVYaAgd62PwvTZSVLGnnPVIZwfllW8MDVkSfW6bm4s8/D9Kgi4E=
x-amz-request-id: B03VGYNVJZ7AD9VG
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2100423
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TXc1uRHhQwZj7A%2B%2BOMcW2jn3XmPtAj%2BNaOJlpdMSMKWTfhn%2FNg%2BL5Bv5Zk%2FLDgKQTFXbMc%2F0Sh0q6gk03vwSNPExItdfXHzaBsEt2CKNalOs2FNW4m5OgKISxRFp26iiYXbKfL5djxA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a232c1399d1c12-OSL
alt-svc: h3=":443"; ma=86400
|
|
| static.fundraiseup.com/_/common-fonts/ibm-plex-sans/ibmplexsans-v19-400.woff2 | 172.67.72.38 | 200 OK | 57 kB |
URL GET HTTP/3static.fundraiseup.com/_/common-fonts/ibm-plex-sans/ibmplexsans-v19-400.woff2 IP172.67.72.38:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 56612, version 1.0 Hashb3d77a069162cf3bc9d1c7fe7ca9b231 c5acc98da76bf4d764096757df5476bb92b654b5 712ed3429bf093fbc63dafba14a3ed7034a083559f638c7b5247b1c6367907ba
GET /_/common-fonts/ibm-plex-sans/ibmplexsans-v19-400.woff2 HTTP/1.1
Host: static.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://feelthemagic.org.au
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:57 GMT
content-type: application/octet-stream
content-length: 56612
x-amz-id-2: 45JvX52nDhD1da+d/bVjHvX9bWVSVMe12/WkbwKkwOyA7zs1PyzCzAsjTP5dcIW73CIAewaBSyU=
x-amz-request-id: MA9ATX7XG819NZTX
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 24 Apr 2024 08:55:06 GMT
etag: "b3d77a069162cf3bc9d1c7fe7ca9b231"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
cf-cache-status: HIT
age: 0
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sBn0%2Bi%2B%2FXKd4t%2BCd85scKkfSrm0k1ZRszgrNf8Zs7CKO5IEbnTeP2d0yzEoUZLgU5X7immbdhZMgGoeu2hQ0lsa7aDMIj8Jtekas%2BxyHtV%2BVuu1PcFGi0Pr4%2BCXete5bssF9AGlIRoE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a232c1499f1c12-OSL
alt-svc: h3=":443"; ma=86400
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT | 142.250.74.74 | 200 OK | 114 B |
URL POST HTTP/3jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT IP142.250.74.74:443
Requested byhttps://www.youtube.com/embed/qf5jmEkR94Q CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
Hashb153b4a12fdbe407e3e120f2e9680fc4 1c02c98ea0dd6030a1840672e5351796c3a80716 556a5dbcb1826f5dafddba04437020e176b48d73af1c5cc6626a02680ac91965
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1000
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 25 Apr 2024 23:43:57 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| static.fundraiseup.com/_/common-fonts/ibm-plex-sans/ibmplexsans-v19-500.woff2 | 172.67.72.38 | 200 OK | 60 kB |
URL GET HTTP/3static.fundraiseup.com/_/common-fonts/ibm-plex-sans/ibmplexsans-v19-500.woff2 IP172.67.72.38:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 60028, version 1.0 Hash81da6bff546099cbd91fb8bb63b13e5c dd04b9d84e07fdba07056359a06d4707fb51c264 27bca4f7e8a0c77b2107455545cc80f868856d90ac474946333e6367edc799e1
GET /_/common-fonts/ibm-plex-sans/ibmplexsans-v19-500.woff2 HTTP/1.1
Host: static.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://feelthemagic.org.au
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:57 GMT
content-type: application/octet-stream
content-length: 60028
x-amz-id-2: wFf0OzkWuvSXJlNmv7ce1o6CXCO8LmOPXSfQ4vKM0UpS/Iu/DXQgH+RmEb0y84zzwGQKmiWv9Xw=
x-amz-request-id: P9QH0C459RPK4D3Y
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Fri, 19 Apr 2024 10:36:07 GMT
etag: "81da6bff546099cbd91fb8bb63b13e5c"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=09Zkvc19Be283%2BaDjra8FohS%2FLC5dK0guV89rhph6oH2xa2gE2frON2hPBnC0WK12py79JtUlEEKjjapjPODiizgT1SQrYdM%2BBF000I6u3m1jrWoXYsQi%2Fw03NnIP2XRa%2FCLZRVxUKA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a232c159a11c12-OSL
alt-svc: h3=":443"; ma=86400
|
|
| static.fundraiseup.com/424d4e104d21.elementsApi.js | 172.67.72.38 | 200 OK | 48 kB |
URL GET HTTP/3static.fundraiseup.com/424d4e104d21.elementsApi.js IP172.67.72.38:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65375) Hash624b2502e138a31a66fb5853dc509283 539f49756ba42b7deb790623af1e92ed837ecfe9 99e3a28ca8c41dba4b32c119b924dcb615f065914aa95a8bd11ea6fa600aa35d
GET /424d4e104d21.elementsApi.js HTTP/1.1
Host: static.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:56 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: LGg/0Cc+brg7FnQe3QLB+o4VdXizEYDpbY6W1nRai0//HttKT1uaF0SAzLlbyYUv79ZPL9ENxPc=
x-amz-request-id: J0BCB7X79P99K66G
last-modified: Thu, 25 Apr 2024 20:36:13 GMT
etag: W/"624b2502e138a31a66fb5853dc509283"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
cf-cache-status: HIT
age: 10821
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VNOUh2VHOJexotT%2Bio%2Fg7nnRCntt2AKIDlT29P%2FfkkIUkfJvode7ofUfi2qdnU4%2F6jFsuSU1aK1j30pVK1fMXnqNebNiz4fQdNpvZIGWJSlH0P%2B%2FeG1jlsv6S%2BknxsvEEzYZEp2yOX4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a232b9fdc21c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| feelthemagic.org.au/wp-content/uploads/2021/06/wi_1.png | 45.112.246.84 | 200 OK | 9.1 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/uploads/2021/06/wi_1.png IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typePNG image data, 250 x 159, 8-bit/color RGBA, non-interlaced Hashdd80497d8cdf40a4177bc80223bcb6e2 d0257e697a55dbf9f9d953a7e9bd33fb6171b70f d847415250bfa2db5406b33f6d3110a2dfc370786b45051aa3fd91a2615339c9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2021/06/wi_1.png HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 23:43:54 GMT
content-type: image/png
last-modified: Wed, 30 Jun 2021 08:09:14 GMT
accept-ranges: bytes
content-length: 9079
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| static.fundraiseup.com/checkout-sentry-vendor.847cf8201ebdc93b4482.js | 172.67.72.38 | 200 OK | 95 kB |
URL GET HTTP/3static.fundraiseup.com/checkout-sentry-vendor.847cf8201ebdc93b4482.js IP172.67.72.38:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
File typeJavaScript source, ASCII text, with very long lines (65435) Hash487196182fbe1e1a18b251c7741d9819 d61960dc27fa9848d2d36d4675002793b44fd649 ecf816ecda05b758e2afb5197d1f879e762818cec3875bd1e32904cbd1dc4c09
GET /checkout-sentry-vendor.847cf8201ebdc93b4482.js HTTP/1.1
Host: static.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:57 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: TAGFIOucSO+8l5k1LwjW9vj1NnDJGwR3cIYyYuzr+gmsS+1cLFnugZvzayAOdLYUP+1YqiLQ6Fs=
x-amz-request-id: T04NPH4J7JCEAF3X
last-modified: Tue, 02 Apr 2024 08:45:47 GMT
etag: W/"487196182fbe1e1a18b251c7741d9819"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2017731
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FUtzfTvX8bSKChRc8HFwPrr85SRbCnOcaV8hRBiIhhnhrTTCSg%2BEGBEWJ6s0hnLMJy%2BMVCaIv9uzZopp0%2FGz3%2BiE1sNN7OZkxcLWwzKMRKffVsV1FZUrOmxn%2BRw%2BKw%2FHK%2B2AMKzRci0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a232be7f661c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| feelthemagic.org.au/wp-content/uploads/2021/06/wi_2.png | 45.112.246.84 | 200 OK | 4.7 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/uploads/2021/06/wi_2.png IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typePNG image data, 250 x 159, 8-bit/color RGBA, non-interlaced Hash5e7f1666e27bd98ea35ab6fc097ac8db e914a423076e7ab1ba9e6a19ce0248cff855a252 9c68e5e2ca1a658c8d6fec147e3d9b68dee676258c544686e6affdef87a31c13
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2021/06/wi_2.png HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 23:43:54 GMT
content-type: image/png
last-modified: Wed, 30 Jun 2021 08:09:17 GMT
accept-ranges: bytes
content-length: 4682
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/uploads/2021/06/wi_3.png | 45.112.246.84 | 200 OK | 6.9 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/uploads/2021/06/wi_3.png IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typePNG image data, 250 x 159, 8-bit/color RGBA, non-interlaced Hash9bbdde567b5c9903e306639045b3dc49 036d9ebd4df601795a7a082fd3532699000a57ba dc3235f1fb44fdacee3aa114628331cd2b190497aafe41503063f6e2fe93e652
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2021/06/wi_3.png HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 23:43:54 GMT
content-type: image/png
last-modified: Wed, 30 Jun 2021 08:09:19 GMT
accept-ranges: bytes
content-length: 6870
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/uploads/2021/06/logo_vertical.png | 45.112.246.84 | 200 OK | 14 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/uploads/2021/06/logo_vertical.png IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typePNG image data, 245 x 283, 8-bit/color RGBA, non-interlaced Hash38692b4baea12cdb350b9059866edac6 79fcaba61834da1202f71a310d8b8ae8dabfd3f6 d140151caa5ecd7647e48a39ff90a49380acf8c8b9b7d8af9d0ac77195ba5e66
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2021/06/logo_vertical.png HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 23:43:54 GMT
content-type: image/png
last-modified: Wed, 30 Jun 2021 08:09:07 GMT
accept-ranges: bytes
content-length: 13672
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/uploads/2021/06/charity.png | 45.112.246.84 | 200 OK | 35 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/uploads/2021/06/charity.png IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typePNG image data, 128 x 131, 8-bit/color RGBA, non-interlaced Hash0eb8d6f2bf8ba35bd48ba399e05b4dbf 13ab62de6166df3cd96b033cfe5ba26300213314 9599b164f2b3924b84524f883c5f59e80579fa2c80525f46de96e0830770de8e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2021/06/charity.png HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 23:43:54 GMT
content-type: image/png
last-modified: Tue, 29 Jun 2021 02:57:19 GMT
accept-ranges: bytes
content-length: 35165
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/uploads/2021/06/fom_1.png | 45.112.246.84 | 200 OK | 14 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/uploads/2021/06/fom_1.png IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typePNG image data, 273 x 270, 8-bit/color RGBA, non-interlaced Hashd4513a6a3e19a9d65193864d44fb3c98 294e211f9a5a72b9c910d5ea07b4ec38e96e850b 7f1a0c29276c1d946ab47d7d7cb3bb2ebd7a82d8982e8b6033263fe11a144a29
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2021/06/fom_1.png HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 23:43:54 GMT
content-type: image/png
last-modified: Wed, 30 Jun 2021 08:09:00 GMT
accept-ranges: bytes
content-length: 13460
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/uploads/2021/06/fom_2.png | 45.112.246.84 | 200 OK | 14 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/uploads/2021/06/fom_2.png IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typePNG image data, 273 x 270, 8-bit/color RGBA, non-interlaced Hash702c56458ac405e33021223b038b7d94 9185cb21960de9428a3bbe8d0ca4a4973ac918c2 7061a521a622814ca3bb8324be72bd40d1a035c575540ce9aaa9b24081acaf47
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2021/06/fom_2.png HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 23:43:54 GMT
content-type: image/png
last-modified: Wed, 30 Jun 2021 08:09:03 GMT
accept-ranges: bytes
content-length: 14384
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/uploads/2021/06/fom_3.png | 45.112.246.84 | 200 OK | 18 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/uploads/2021/06/fom_3.png IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typePNG image data, 273 x 270, 8-bit/color RGBA, non-interlaced Hash731d1a258a88392a9146651b8ad3cd98 1e429c7a5a0b470c6f648fc2e3483e99846091a6 b333993ae794e4456d320f161f3f9ee74c6a9a30be33cd08032ffbee979faa95
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2021/06/fom_3.png HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 23:43:54 GMT
content-type: image/png
last-modified: Wed, 30 Jun 2021 08:09:05 GMT
accept-ranges: bytes
content-length: 18052
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/uploads/2021/07/FTM5840_HG_LOZENGE_RGB.png | 45.112.246.84 | 200 OK | 18 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/uploads/2021/07/FTM5840_HG_LOZENGE_RGB.png IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typePNG image data, 271 x 268, 8-bit/color RGBA, non-interlaced Hashe2cc46a651a8a0346e7aa305290abbea e9fa18faa0accf0f2d01b48b2b2f817835b77cfa 2db97a9ff5063e4326db13f07e6d09baf509587706ddf74a4574c5e2474fe8c0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2021/07/FTM5840_HG_LOZENGE_RGB.png HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 23:43:54 GMT
content-type: image/png
last-modified: Fri, 30 Jul 2021 04:44:43 GMT
accept-ranges: bytes
content-length: 18224
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/uploads/2021/08/Family-Day-Icon.png | 45.112.246.84 | 200 OK | 15 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/uploads/2021/08/Family-Day-Icon.png IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typePNG image data, 274 x 271, 8-bit/color RGBA, non-interlaced Hashfd4fe3bf595791f4b02db1e8c6468211 1dd707b238b16e51fcb32e822b6f66535df98749 10cd334e5a07c0a39d056c24981544f4070f6e8d0ca75888c2d45c3e001ca4f4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2021/08/Family-Day-Icon.png HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 23:43:54 GMT
content-type: image/png
last-modified: Tue, 17 Aug 2021 01:40:52 GMT
accept-ranges: bytes
content-length: 15164
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/uploads/2021/08/Oct2020_web121-768x870.jpg | 45.112.246.84 | 200 OK | 110 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/uploads/2021/08/Oct2020_web121-768x870.jpg IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 768x870, components 3 Size110 kB (110218 bytes) Hash1ce48ed1595042a6b4fd7a4b68f3aeac 1ad4f8755d5016ca8fccbd4d88d5ab9cd57464a0 8c1da90701d8bdd1bb902586223938eddbea91e98dda6de091aeaed0a75d3db7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2021/08/Oct2020_web121-768x870.jpg HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 23:43:54 GMT
content-type: image/jpeg
last-modified: Tue, 24 Aug 2021 10:49:04 GMT
accept-ranges: bytes
content-length: 110218
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/uploads/2021/06/LOGO.png | 45.112.246.84 | 200 OK | 14 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/uploads/2021/06/LOGO.png IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typePNG image data, 348 x 124, 8-bit/color RGBA, non-interlaced Hash226311220836ba78791cd5deb9d143a2 046119535ab8be1afec2d9d93136d9d6e74d384f 288546060d19e328e8bf218f63692be68d441b71668a9b16947a4120a3619c0d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2021/06/LOGO.png HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 23:43:54 GMT
content-type: image/png
last-modified: Tue, 29 Jun 2021 02:13:50 GMT
accept-ranges: bytes
content-length: 13811
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/plugins/gravityforms/js/gravityforms.min.js?ver=2.8.8 | 45.112.246.84 | 200 OK | 13 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/plugins/gravityforms/js/gravityforms.min.js?ver=2.8.8 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeJavaScript source, ASCII text, with very long lines (46677), with no line terminators Hash70349a504137d637210d6daea2f7c95e 66291a5caa2d27beda7a6fb9985a60564fca468f 8e2ffd596c0b4460f148da17323c71c3a1cacb853b4502e5d6953cda9b107e33
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/gravityforms/js/gravityforms.min.js?ver=2.8.8 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript
last-modified: Wed, 24 Apr 2024 15:04:26 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 13228
date: Thu, 25 Apr 2024 23:43:54 GMT
server: LiteSpeed
|
|
| www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-SFVYM1491N&cid=724446949.1714088635>m=45je44o0v873134578za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=1871442254 | 142.250.74.163 | 200 OK | 42 B |
URL GET HTTP/2www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-SFVYM1491N&cid=724446949.1714088635>m=45je44o0v873134578za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=1871442254 IP142.250.74.163:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerGoogle Trust Services LLC Subject*.google.no Fingerprint4E:BD:F9:72:97:67:A2:4B:EE:E4:B0:03:CD:C8:F3:30:53:27:53:1D ValidityMon, 18 Mar 2024 20:50:06 GMT - Mon, 10 Jun 2024 20:50:05 GMT
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-SFVYM1491N&cid=724446949.1714088635>m=45je44o0v873134578za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=1871442254 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 25 Apr 2024 23:43:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.35 | 200 OK | 206 kB |
URL GET HTTP/2www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205803 bytes) Hashe2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://feelthemagic.org.au
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 20:51:00 GMT
expires: Thu, 24 Apr 2025 20:51:00 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 96778
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| feelthemagic.org.au/wp-content/uploads/2021/06/cropped-LOGO-32x32.png | 45.112.246.84 | 200 OK | 1.9 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/uploads/2021/06/cropped-LOGO-32x32.png IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Hash6a1c8cbe5aed6fbb41aebeb79f2ac753 100885df3297df4f2e69cb7fb74551bec61dfae3 3f24c97e6ea43050d702ad244ca8ce90a8001efa029cd294d6e54c18d69cf36d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2021/06/cropped-LOGO-32x32.png HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Cookie: _ga_SFVYM1491N=GS1.1.1714088634.1.0.1714088634.60.0.0; _ga=GA1.1.724446949.1714088635; ap3pages=1; fundraiseup_func={%22s%22:%221714088636338%22%2C%22sp%22:1%2C%22nsa%22:0%2C%22sls%22:%22DBRNNAGQ%22}; ap3c=IGYq6rzN_86ZwpIAAGYq6rxYl5dmkQ_1ctylXDtB70Rcbg_COA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 23:43:58 GMT
content-type: image/png
last-modified: Tue, 29 Jun 2021 02:14:51 GMT
accept-ranges: bytes
content-length: 1851
date: Thu, 25 Apr 2024 23:43:58 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 | 45.112.246.84 | 200 OK | 4.7 kB |
URL GET HTTP/3feelthemagic.org.au/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typeJavaScript source, ASCII text, with very long lines (15752) Hashb976b651932bfd25b9ddb5b7693d88a7 7fcb7cb5c11227f9213b1e08a07d0212209e1432 4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Cookie: _ga_SFVYM1491N=GS1.1.1714088634.1.0.1714088634.60.0.0; _ga=GA1.1.724446949.1714088635; ap3pages=1; fundraiseup_func={%22s%22:%221714088636338%22%2C%22sp%22:1%2C%22nsa%22:0%2C%22sls%22:%22DBRNNAGQ%22}; ap3c=IGYq6rzN_86ZwpIAAGYq6rxYl5dmkQ_1ctylXDtB70Rcbg_COA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript
last-modified: Tue, 02 Apr 2024 22:41:46 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4676
date: Thu, 25 Apr 2024 23:43:58 GMT
server: LiteSpeed
|
|
| feelthemagic.org.au/wp-content/uploads/2021/06/cropped-LOGO-192x192.png | 45.112.246.84 | 200 OK | 22 kB |
URL GET HTTP/3feelthemagic.org.au/wp-content/uploads/2021/06/cropped-LOGO-192x192.png IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hashbbacf59a566ab756ed14f820caad4921 2a939e806f039261081b0e30b120214ad8f9d83b ca42dcf75e7b12ebef04bb58f08fb82e9add4d9615882c0da8dc3551f6758e1c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2021/06/cropped-LOGO-192x192.png HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Cookie: _ga_SFVYM1491N=GS1.1.1714088634.1.0.1714088634.60.0.0; _ga=GA1.1.724446949.1714088635; ap3pages=1; fundraiseup_func={%22s%22:%221714088636338%22%2C%22sp%22:1%2C%22nsa%22:0%2C%22sls%22:%22DBRNNAGQ%22}; ap3c=IGYq6rzN_86ZwpIAAGYq6rxYl5dmkQ_1ctylXDtB70Rcbg_COA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 02 May 2024 23:43:58 GMT
content-type: image/png
last-modified: Tue, 29 Jun 2021 02:14:51 GMT
accept-ranges: bytes
content-length: 22348
date: Thu, 25 Apr 2024 23:43:58 GMT
server: LiteSpeed
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css | 142.250.74.35 | 200 OK | 25 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfFpWwpAAAAAA4Cn4RTugUJo2rA7sNLWgIOZkmh&co=aHR0cHM6Ly9mZWVsdGhlbWFnaWMub3JnLmF1OjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=yq43yk92giak CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeASCII text, with very long lines (56412), with no line terminators Hash2c00b9f417b688224937053cd0c284a5 17b4c18ebc129055dd25f214c3f11e03e9df2d82 1e754b107428162c65a26d399b66db3daaea09616bf8620d9de4bc689ce48eed
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24617
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 15:50:55 GMT
expires: Wed, 23 Apr 2025 15:50:55 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/css
vary: Accept-Encoding
age: 201183
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.35 | 200 OK | 206 kB |
URL GET HTTP/2www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205803 bytes) Hashe2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 20:51:00 GMT
expires: Thu, 24 Apr 2025 20:51:00 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 96778
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.163 | 200 OK | 15 kB |
URL GET HTTP/3fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.163:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfFpWwpAAAAAA4Cn4RTugUJo2rA7sNLWgIOZkmh&co=aHR0cHM6Ly9mZWVsdGhlbWFnaWMub3JnLmF1OjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=yq43yk92giak CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 06:43:51 GMT
expires: Wed, 23 Apr 2025 06:43:51 GMT
cache-control: public, max-age=31536000
age: 234007
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 142.250.74.163 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP142.250.74.163:443
Requested byhttps://www.youtube.com/embed/qf5jmEkR94Q CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0 Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 22 Apr 2024 22:10:11 GMT
expires: Tue, 22 Apr 2025 22:10:11 GMT
cache-control: public, max-age=31536000
age: 264827
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/api2/logo_48.png | 142.250.74.35 | 200 OK | 2.2 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/api2/logo_48.png IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfFpWwpAAAAAA4Cn4RTugUJo2rA7sNLWgIOZkmh&co=aHR0cHM6Ly9mZWVsdGhlbWFnaWMub3JnLmF1OjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=yq43yk92giak CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hashef9941290c50cd3866e2ba6b793f010d 4736508c795667dcea21f8d864233031223b7832 1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:54:07 GMT
expires: Thu, 02 May 2024 02:54:07 GMT
cache-control: public, max-age=604800
age: 74991
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/js/bg/Y9LiaqaJM7rIBAUMTg8Ck_H5fpJ61Keayeag6LMQ-3c.js | 142.250.74.164 | 200 OK | 7.4 kB |
URL GET HTTP/3www.google.com/js/bg/Y9LiaqaJM7rIBAUMTg8Ck_H5fpJ61Keayeag6LMQ-3c.js IP142.250.74.164:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfFpWwpAAAAAA4Cn4RTugUJo2rA7sNLWgIOZkmh&co=aHR0cHM6Ly9mZWVsdGhlbWFnaWMub3JnLmF1OjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=yq43yk92giak CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeJavaScript source, ASCII text, with very long lines (17602) Hasha881e4c268e13ad20405ae80fca4c36b dee477906e2c92b4c7747029a2409069b9b676ad 63d2e26aa68933bac804050c4e0f0293f1f97e927ad4a79ac9e6a0e8b310fb77
GET /js/bg/Y9LiaqaJM7rIBAUMTg8Ck_H5fpJ61Keayeag6LMQ-3c.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfFpWwpAAAAAA4Cn4RTugUJo2rA7sNLWgIOZkmh&co=aHR0cHM6Ly9mZWVsdGhlbWFnaWMub3JnLmF1OjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=yq43yk92giak
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 7447
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 05:05:57 GMT
expires: Thu, 24 Apr 2025 05:05:57 GMT
cache-control: public, max-age=31536000
age: 153481
last-modified: Tue, 16 Apr 2024 13:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.35 | 200 OK | 206 kB |
URL GET HTTP/2www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205803 bytes) Hashe2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 20:51:00 GMT
expires: Thu, 24 Apr 2025 20:51:00 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 96778
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 | 142.250.74.110 | 200 OK | 31 B |
URL POST HTTP/3www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 IP142.250.74.110:443
Requested byhttps://www.youtube.com/embed/qf5jmEkR94Q CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
Hash5e1fa6fd9abd549a576f3f24b1d3c8d4 d5335d7f7d33be6a0b663f03b2df4df2521c4a87 d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1714088639288
Content-Type: application/json
X-Goog-Visitor-Id: CgtFR2lrYzdTY3JDcyi81auxBjIOCgJOTxIIEgQSAgsMIBg%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240423.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1714088636533&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1248%2C702&vis=1&wgl=true&ca_type=image
Content-Length: 11472
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/qf5jmEkR94Q
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Thu, 25 Apr 2024 23:43:59 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| static.fundraiseup.com/src/socialProof/images/map-01.png | 172.67.72.38 | 200 OK | 2.6 kB |
URL GET HTTP/3static.fundraiseup.com/src/socialProof/images/map-01.png IP172.67.72.38:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
File typeRIFF (little-endian) data, Web/P image Hashabae80e0f9d049e15e972136a057bc51 45e3949ccee9d4a4e3024ee70be2592b61022e0c fcf2d1c5e30c1f6e272b9cca5f8cd63844bd28cc9856a393e88363a16d02ed85
GET /src/socialProof/images/map-01.png HTTP/1.1
Host: static.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:44:07 GMT
content-type: image/webp
content-length: 2566
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=3156
content-disposition: inline; filename="map-01.webp"
etag: "f6c0a737cfb8ac507bc055050bf1a99f"
last-modified: Mon, 01 Apr 2024 12:15:47 GMT
vary: Accept
x-amz-id-2: TcjzYzX0X0AYJqJ+g6rSl0vEIo/i6zrAqSfLZfrfvl6HvgL6hVwa7BpcHf/aVisECTrn2tnhLJw=
x-amz-request-id: XRS3ZZQWF6AMDMQ6
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2099225
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rQYp%2FpfB6M%2F2okYbCyKMIiYwQkTDBAaHupQlYXZrXee%2F%2FvhzNoPvzQLsd2%2BNv6EOhpNNHWYgu6HtWA5VsXM5hnkjRZ2sN9LZTn12rMgFkgZ%2FM4Z2gTbgkQidVxi6t4FJa%2FE6DedCAjE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a233005ca01c12-OSL
alt-svc: h3=":443"; ma=86400
|
|
| static.fundraiseup.com/src/socialProof/images/map-14.png | 172.67.72.38 | | 2.9 kB |
URL static.fundraiseup.com/src/socialProof/images/map-14.png IP172.67.72.38:0
CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
File typeRIFF (little-endian) data, Web/P image Hasha51eaa5b419d2fca18f41beae386a1e7 eee929e5c71e3c99b34b593c08c2926bd215ff08 8b3b389d5a36ac58b507e63a92b962037e1571ee3dabb9fa7b80c1a48a1229b7
GET /src/socialProof/images/map-14.png HTTP/1.1
Host: static.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:44:16 GMT
content-type: image/webp
content-length: 2856
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=3432
content-disposition: inline; filename="map-14.webp"
etag: "72a3d0f8c750be3bec851f879be74d45"
last-modified: Mon, 01 Apr 2024 12:15:48 GMT
vary: Accept
x-amz-id-2: 3+edmpfjnzXoOwe2t4f6lUSdBiYkosTBepLRf5OTzihW9l0caXeJztp3obqpRtmqoZRrVr37ijY=
x-amz-request-id: YRDY0F2DG0AVV7Q1
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2099962
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PgvQSofXcOZVGw7FA8gGoSYzTQkYB5tiszioyjoAe%2BkMksB5SJ%2FLK0ormXnzp9gRAZo%2BX24tzDwO90kcuW79FwCOd3i3Ev38JOothUD9mKucaOrqaB%2BiraIHvoxPjy9qnPB2AmZodpg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a23339e9171c12-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 | 142.250.74.110 | 200 OK | 31 B |
URL POST HTTP/3www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 IP142.250.74.110:443
Requested byhttps://www.youtube.com/embed/qf5jmEkR94Q CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
Hash5e1fa6fd9abd549a576f3f24b1d3c8d4 d5335d7f7d33be6a0b663f03b2df4df2521c4a87 d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1714088662951
Content-Type: application/json
X-Goog-Visitor-Id: CgtFR2lrYzdTY3JDcyi81auxBjIOCgJOTxIIEgQSAgsMIBg%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240423.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1714088636533&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1248%2C702&vis=1&wgl=true&ca_type=image
Content-Length: 970
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/qf5jmEkR94Q
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Thu, 25 Apr 2024 23:44:23 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| static.fundraiseup.com/8813.94b6e36eb248.8813.js | 172.67.72.38 | 200 OK | 21 kB |
URL GET HTTP/3static.fundraiseup.com/8813.94b6e36eb248.8813.js IP172.67.72.38:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
File typeJavaScript source, ASCII text, with very long lines (21296), with no line terminators Hashfcc59edae4c86162e1f16e669c19523f b82130598b04a447664eb1f63e28f3d9b611897c ce2533b1e91a31b7713fd4c3ad582066ea59c2a4995e157752276e5c70b3b077
GET /8813.94b6e36eb248.8813.js HTTP/1.1
Host: static.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:57 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: f0cgAEAkqqD+lD9qdp0sHYfSSGIU+Vqb4YU+w35WBxM60/iDOyl5WQ6PL1zit3LYeCKSvdvUKog=
x-amz-request-id: QS7KCMFB68C6GMM1
last-modified: Fri, 19 Apr 2024 10:35:07 GMT
etag: W/"fcc59edae4c86162e1f16e669c19523f"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
cf-cache-status: HIT
age: 564228
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=97Ufg87xM6ei%2BXVOkl7kOEJZCp4DBOwDTyg5n4aTsXZzuhiJdbP%2B0RmjEjywKUAmjJsIPtYRrqvWNq5fBjYj2xXsyPFWQAAMNMpTl%2B9qjua2JBI0JFkbSY2qMIedI4c88zbhHDXvvqg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a232bfafe31c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| static.fundraiseup.com/3827.ffad6f969b11.3827.js | 172.67.72.38 | 200 OK | 12 kB |
URL GET HTTP/3static.fundraiseup.com/3827.ffad6f969b11.3827.js IP172.67.72.38:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
File typeJavaScript source, ASCII text, with very long lines (12294), with no line terminators Hash4c3738d489de9b9ef4e876f3188d3881 08dc4dab532a695aed23d8483ca134f1c32dfaed 25911c986dd5d276af8b3cb1997fd3a0e06d4aba7bb0651fa325c743b9ec11e0
GET /3827.ffad6f969b11.3827.js HTTP/1.1
Host: static.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:56 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: gkxdwdfSFHSwbsggn9XgMtMLklYtEBh+vWZQzZlR2bPLNmR5y3cWszeSdh8v2LsWhaXBa23FxZs=
x-amz-request-id: K58XKFGYE81A3JVP
last-modified: Tue, 23 Apr 2024 09:48:53 GMT
etag: W/"4c3738d489de9b9ef4e876f3188d3881"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
cf-cache-status: HIT
age: 221608
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Cf6KCZrNgtv81FIlYUngAN39%2BtlhgwSOaPaN8S6TfYvcuh1mGSc0Y2DGxfFyqWL5keWsS6IBxXhHPv74c7e%2Bl14JIzuTHUyTC4Of4rK8oOaq3%2BRIDzKQPfIaJ4nZU7Y3wkQkurtuMtw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a232bb2e1c1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| static.fundraiseup.com/5434.add742c03c1b.donate-button-v2.js | 172.67.72.38 | 200 OK | 6.3 kB |
URL GET HTTP/3static.fundraiseup.com/5434.add742c03c1b.donate-button-v2.js IP172.67.72.38:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
File typeJavaScript source, ASCII text, with very long lines (6489), with no line terminators Hashfdfde681266b531055a912e9b883d6a3 4e4eddfdbb36c093774fa9d4485c518f8d543f06 4e4e3a357bd2e31efe04e45d570410d376b0bdd16b4b596fdd044356464704a1
GET /5434.add742c03c1b.donate-button-v2.js HTTP/1.1
Host: static.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:57 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: S2IFZbMsVdQm1n4URLtTMjVz4hxbVv9Yl8logAlD7Me0K6YOILSTJeELGbs298Nh+wuJR8XLBS0=
x-amz-request-id: 79H37MEPJB6GH366
last-modified: Fri, 19 Apr 2024 10:35:06 GMT
etag: W/"7ea6ed1e14eeb80daf56bd426888e92d"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
cf-cache-status: HIT
age: 564179
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Uw2r9RkBKWIisl03AnaGi8uDgUjW8aANTOuMnalbGiMBJmJSi5%2B8xHd1pViI48EHNLT8swG3wFG0PjBtcHHPYAyesOovVWaiLfMhDQqaAOXbUjeWAPc%2FIaUnLxhLhC8tn2TpYuWQtGQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a232be7f6d1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m | 142.250.74.164 | 200 OK | 102 B |
URL GET HTTP/3www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m IP142.250.74.164:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfFpWwpAAAAAA4Cn4RTugUJo2rA7sNLWgIOZkmh&co=aHR0cHM6Ly9mZWVsdGhlbWFnaWMub3JnLmF1OjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=yq43yk92giak CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeASCII text, with no line terminators Hash284b36421a1cf446f32cb8f7987b1091 eb14d6298c9da3fb26d75b54c087ea2df9f3f05f 94ab2be973685680d0be9c08d4e1a7465f3c09053cf631126bd33f49cc2f939b
GET /recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfFpWwpAAAAAA4Cn4RTugUJo2rA7sNLWgIOZkmh&co=aHR0cHM6Ly9mZWVsdGhlbWFnaWMub3JnLmF1OjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=yq43yk92giak
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Thu, 25 Apr 2024 23:43:58 GMT
date: Thu, 25 Apr 2024 23:43:58 GMT
cache-control: private, max-age=300
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| static.fundraiseup.com/9669.93cf223db103.9669.js | 172.67.72.38 | 200 OK | 12 kB |
URL GET HTTP/3static.fundraiseup.com/9669.93cf223db103.9669.js IP172.67.72.38:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
File typeJavaScript source, ASCII text, with very long lines (12112), with no line terminators Hash27049b982cdc401b200e34bbeaec6b74 f8da90f69f4ce83f99593bcfbc19643293b70104 3c61999c3a830e3761f44a51c92e5d5185c7d0e2f89327695681c7b6f0c1490c
GET /9669.93cf223db103.9669.js HTTP/1.1
Host: static.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:57 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: AemfZyb1ZdrBnkevy5YKFbgN982cOnCJRy8GMtmZx36QP7rM8tvLyLgi69yLA75W/ChCi+O1C+g=
x-amz-request-id: 79HB14AEPJ4PSMP3
last-modified: Fri, 19 Apr 2024 10:35:07 GMT
etag: W/"27049b982cdc401b200e34bbeaec6b74"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
cf-cache-status: HIT
age: 564235
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l3y%2BQwmjMloZTtAbkVdTkMRCykXHbEh7dEa7t2eIzCAgWIYChdDaNYJ0XW3LwhbCphIMhwTx%2Fx5DotH0Sp78zTAD2tckG%2BmR5WFGzC6cMMweusgr6KKghVhUa6hrjBRwnyVknW5WzP4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a232be7f6c1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.youtube.com/generate_204?huz-nw | 142.250.74.110 | 204 No Content | 0 B |
URL GET HTTP/3www.youtube.com/generate_204?huz-nw IP142.250.74.110:443
Requested byhttps://www.youtube.com/embed/qf5jmEkR94Q CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?huz-nw HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/qf5jmEkR94Q
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Thu, 25 Apr 2024 23:43:57 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| static.fundraiseup.com/embed-data/elements/XFGQNDXL.js | 172.67.72.38 | 200 OK | 898 B |
URL GET HTTP/3static.fundraiseup.com/embed-data/elements/XFGQNDXL.js IP172.67.72.38:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
File typeASCII text, with very long lines (1014), with no line terminators Hash2af0e7cb540287d307f1aa5e6164a989 f0667b6a1875b9b894ad1fa1de27b1e6a416132d 532c03e49d750b8506db5f05c383adb644a998a7b0191a110731a899e8656cde
GET /embed-data/elements/XFGQNDXL.js HTTP/1.1
Host: static.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:56 GMT
content-type: text/javascript
x-amz-id-2: +uJZo/wha9bCdIU7A+FW/Zve5CK48KajATMcOBs3jspb80I3Sm7LpV55cQSjpsFlpUh7bO0dWlc=
x-amz-request-id: DHP2E7VSAY8CJVHW
last-modified: Thu, 25 Apr 2024 03:13:03 GMT
etag: W/"aecfa56abb8e49cd9e72e0390e15d660"
x-amz-server-side-encryption: AES256
cache-control: no-cache, no-store
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lHH%2B5cTnKC9guFmtwG6RvxQXrd7oO85hyND5IOL1fwNNpcBrmb73oLNBMh3bol%2Bm8ifhl4uCkTKAVhucE8CYK7%2Fjyd41yQXA2hd9VK%2BsEui5A3e06dgmFlIYgshhl9QtUX%2BQ8ZfqIy4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a232b9fdc01c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| unpkg.com/isotope-layout@3/dist/isotope.pkgd.min.js | 104.17.248.203 | 302 Found | 35 kB |
URL GET HTTP/2unpkg.com/isotope-layout@3/dist/isotope.pkgd.min.js IP104.17.248.203:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerGoogle Trust Services LLC Subjectunpkg.com Fingerprint2E:F1:F6:31:28:EC:29:20:41:F4:58:4B:B1:CF:51:16:77:7E:BF:E3 ValidityMon, 01 Apr 2024 02:40:24 GMT - Sun, 30 Jun 2024 02:40:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /isotope-layout@3/dist/isotope.pkgd.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 25 Apr 2024 23:43:54 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /isotope-layout@3.0.6/dist/isotope.pkgd.min.js
vary: Accept, Accept-Encoding
content-encoding: br
via: 1.1 fly.io
fly-request-id: 01HWBT81H288PWD66RVK0CBXCB-arn
cf-cache-status: HIT
age: 58
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87a232ae481eb4ff-OSL
X-Firefox-Spdy: h2
|
|
| www.google.com/js/th/8MCXU0AIro2_0_rmGrwQkiCikxcMmBfRkjB6mvS6TbY.js | 142.250.74.164 | 200 OK | 53 kB |
URL GET HTTP/3www.google.com/js/th/8MCXU0AIro2_0_rmGrwQkiCikxcMmBfRkjB6mvS6TbY.js IP142.250.74.164:443
Requested byhttps://www.youtube.com/embed/qf5jmEkR94Q CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeJavaScript source, ASCII text, with very long lines (51575) Hash75aaf723d5862a8eb3eb263cef614157 c62cf17173a0c4155902b80f13f360936de119f9 f0c097534008ae8dbfd3fae61abc109220a293170c9817d192307a9af4ba4db6
GET /js/th/8MCXU0AIro2_0_rmGrwQkiCikxcMmBfRkjB6mvS6TbY.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 20286
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 19 Apr 2024 11:06:15 GMT
expires: Sat, 19 Apr 2025 11:06:15 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 16 Apr 2024 13:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 563862
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| unpkg.com/isotope-layout@3.0.6/dist/isotope.pkgd.min.js | 104.17.248.203 | 200 OK | 35 kB |
URL GET HTTP/2unpkg.com/isotope-layout@3.0.6/dist/isotope.pkgd.min.js IP104.17.248.203:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerGoogle Trust Services LLC Subjectunpkg.com Fingerprint2E:F1:F6:31:28:EC:29:20:41:F4:58:4B:B1:CF:51:16:77:7E:BF:E3 ValidityMon, 01 Apr 2024 02:40:24 GMT - Sun, 30 Jun 2024 02:40:23 GMT
File typeJavaScript source, ASCII text, with very long lines (32019) Hash2afcff647ed260006faa71c8e779e8d4 c4e5994f24ee8c8d2cf2d6602f0b56b9096a2e98 081ae9baaacc857c1c2cb51de6dbd0e1eb811c2761ef01a50df373f2f6eefe22
GET /isotope-layout@3.0.6/dist/isotope.pkgd.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://feelthemagic.org.au/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 23:43:55 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"8a75-xOWZTyTujI0s8tZgLwtWuQlqLpg"
via: 1.1 fly.io
fly-request-id: 01HG4WH0CZWFAZP654ZTVHENNA-arn
cf-cache-status: HIT
age: 13117451
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87a232b0c91db4ff-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| static.fundraiseup.com/embed-data/elements-global/AFPEGGYN.js | 172.67.72.38 | 200 OK | 28 kB |
URL GET HTTP/3static.fundraiseup.com/embed-data/elements-global/AFPEGGYN.js IP172.67.72.38:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
File typeASCII text, with very long lines (27739), with no line terminators Hash5994480611b455c71f4dfbafa16f122c 5f31823a027c00ece24b83f6efcae00f40b3c4e6 2c0e4b30ac74abe6d4bf19a67e83efd42604ad03e39d17562c625c4440ebb864
GET /embed-data/elements-global/AFPEGGYN.js HTTP/1.1
Host: static.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:56 GMT
content-type: text/javascript
x-amz-id-2: EWyO4GmtdIjeX9qKN8FnnT4HguDOoJeKnMvkuXd56ztAPqAO4nU59zsnLd5fvkpp7xWf1P7ce8w=
x-amz-request-id: W89PQPP5678DB7P5
last-modified: Thu, 25 Apr 2024 03:13:04 GMT
etag: W/"5994480611b455c71f4dfbafa16f122c"
x-amz-server-side-encryption: AES256
cache-control: no-cache, no-store
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LcOhyna7iWnih0ykjoET%2BhWc9T2pQf7U5tKaZqTPgEoO5%2B6dLd9lgnv8xAYodAF2qo63E972veoKeUW%2FZDFXapXww%2Fmfj8%2B2eRIZhBd0%2FmntWtG0BjR%2BB43%2F5I1nYWl5eTQs85n3bzE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a232b9fdbf1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| static.fundraiseup.com/checkout-vendors.2d92f6356093eb926860.js | 172.67.72.38 | 200 OK | 368 kB |
URL GET HTTP/3static.fundraiseup.com/checkout-vendors.2d92f6356093eb926860.js IP172.67.72.38:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
Size368 kB (367715 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /checkout-vendors.2d92f6356093eb926860.js HTTP/1.1
Host: static.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:57 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: /dkXb9Ry1dfjpuGxVTNUQNjUe9ZC8KHMwBzwEPJE4XEisGNXYuEg5Fo/8eXQXWXYtmtQ58GX0Qc=
x-amz-request-id: T04TDNFNQ1NF0EMK
last-modified: Tue, 02 Apr 2024 08:45:48 GMT
etag: W/"bb681c5c3cf52f1b85cf7d2698d826a1"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2039932
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WhKDCOclT6maHXWnGBLFCu9OHyZp2tekNp1XcY0l4aAi3NOJIS%2FiGYsKxLFKjjrig4JjINWtUnYMZOYlYd%2FZcKxVH2mBbRn92r46zuCqK6vcKoPX7q1IBsqMyNwr8dxMC%2BpH%2FtMvqkk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a232be7f641c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| i.ytimg.com/vi_webp/qf5jmEkR94Q/maxresdefault.webp | 172.217.21.182 | 200 OK | 48 kB |
URL GET HTTP/2i.ytimg.com/vi_webp/qf5jmEkR94Q/maxresdefault.webp IP172.217.21.182:443
Requested byhttps://www.youtube.com/embed/qf5jmEkR94Q CertificateIssuerGoogle Trust Services LLC Subjectedgestatic.com FingerprintF5:71:D6:56:B9:45:4B:F5:FD:12:4B:A7:FF:5F:1D:C9:74:FE:B0:C8 ValidityMon, 18 Mar 2024 19:37:13 GMT - Mon, 10 Jun 2024 19:37:12 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp Hashf25c8e8dfc33f968f3c71f88c87a180b 5340fbdad443aed1621bc90a82b8322f65d7bdbc 60c9f904b632784efd86a90133a302b9ab18a0ec6d684a77f49c5faea9453ee6
GET /vi_webp/qf5jmEkR94Q/maxresdefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/webp
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 48184
date: Thu, 25 Apr 2024 23:43:57 GMT
expires: Fri, 26 Apr 2024 01:43:57 GMT
cache-control: public, max-age=7200
etag: "1537852445"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| static.fundraiseup.com/4009.0d6244f2ec23.new-social-proof-v2-styles.js | 172.67.72.38 | 200 OK | 4.6 kB |
URL GET HTTP/3static.fundraiseup.com/4009.0d6244f2ec23.new-social-proof-v2-styles.js IP172.67.72.38:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
File typeJavaScript source, ASCII text, with very long lines (4722), with no line terminators Hash21377bd7d28091319053cdd6a93c3af3 35b5e78baa0218d8637d037bed604691e749017d 793721dd91a103e3689941dd93194fe01e04fcc89e9128fb5b6ca731ceb3bc1f
GET /4009.0d6244f2ec23.new-social-proof-v2-styles.js HTTP/1.1
Host: static.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:57 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: Sjm7eTVG75ly/RWa5+mHPcWO4a22lzKgVHB4VdgVD23JjIiq1gwVROWLGOa8Memz07hRHbU2CyU=
x-amz-request-id: 79HE0FZ6QN92EBE6
last-modified: Fri, 19 Apr 2024 10:35:05 GMT
etag: W/"36a0fbe127b2bdae2a50c2419502de67"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
cf-cache-status: HIT
age: 564206
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gdH4MSoBP5oNkuLlSQ1M8ZtZz6PRf2hgJ2e%2BpmCAOFnDELZLhTbX%2BFbCGDR1uPE%2FmqI9M3tEC8Au4mhp6T51Dmne1q6VNvwlKUhg69bJvcjWx%2BVnIl%2FfxLBM39Lx6G1nr3VIi8IAqlw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a232bfafe01c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800 | 142.250.74.74 | 200 OK | 67 kB |
URL GET HTTP/3fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800 IP142.250.74.74:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typeASCII text, with very long lines (1572) Hashc305a47d8111e802385ed8ff639b4479 6246d59c286f29ec692a165d8dc32e4f2bbcd91a 13b36e3ed76d8e00bbb541da922af895344bb8921edb34fac45ab5afe4186f71
GET /css2?family=Open+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 25 Apr 2024 23:43:57 GMT
date: Thu, 25 Apr 2024 23:43:57 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| static.fundraiseup.com/5478.e4727a3d3fb7.link-v2.js | 172.67.72.38 | 200 OK | 5.2 kB |
URL GET HTTP/3static.fundraiseup.com/5478.e4727a3d3fb7.link-v2.js IP172.67.72.38:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (5258), with no line terminators Hashe91af10ccfb795c3ede9f4536b5fa854 44ba438d6c35ba99c79bc938492b1cd64fd1a701 19126d4cf1f8e29ff12dd2a0f4cfd10e5be91aa7061ebdd43e4001a33c17713b
GET /5478.e4727a3d3fb7.link-v2.js HTTP/1.1
Host: static.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:56 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: RksWxAiLNEmJcAbNzRcdDw7tmDXnA2Za5w7sx9wTSHL7mrasEyZVdgZkSb0m53ZDpa8fMuId/6w=
x-amz-request-id: 79H909M0XGD3W3X0
last-modified: Fri, 19 Apr 2024 10:35:06 GMT
etag: W/"031b06c937da238ade72c2d66ed62005"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
cf-cache-status: HIT
age: 564235
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VY4IFrXSJgmw%2B2fOW1sBURiKaMhC%2F39LmAd1MvyuxVejQpLrZ2sMECgOf4yU4sX2rbpTAaLSQhmD5H9ZGV4037q1MGRb0LGgXnRdFIm2mi8y0NT3FFhmm3%2BOXP70cKFcS8GxgbG%2BnqI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a232bb2e1e1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| static.fundraiseup.com/1914.511e1dc64a31.1914.js | 172.67.72.38 | 200 OK | 25 kB |
URL GET HTTP/3static.fundraiseup.com/1914.511e1dc64a31.1914.js IP172.67.72.38:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
File typeJavaScript source, ASCII text, with very long lines (25265), with no line terminators Hasheaa96ec9681919631ec93a5ebed04978 6d6068aa0e00039b2f157d49b085d5cd78deece7 05e15a292a457956fcd574f6e52416774b40dec1ac3174e0bc5bc891228c6f22
GET /1914.511e1dc64a31.1914.js HTTP/1.1
Host: static.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:56 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: WJC5MwwXzONZl3IjpqeIM9ijrK1MaHY45rF00SvEsFtyZS17+fd6thdwrCwfBz2KmuE1Yq9ffSs=
x-amz-request-id: 49AA0R1N8Y5V502V
last-modified: Mon, 01 Apr 2024 12:15:16 GMT
etag: W/"eaa96ec9681919631ec93a5ebed04978"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2100593
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ewFu2L27QjvxKukBO7ZcGXV9TEp5iWqbZxLAN2APl8X16X48XKItaKcivxRD3w2OSuD64NdZ0Cx8D8jwgeYfZTzOLTaI308G1YVLmyyx7QifbgoEMEACrIvTznU%2BJSplmttTQDEtO5Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a232bb2e1a1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.youtube.com/s/player/652ba3a2/player_ias.vflset/en_US/remote.js | 142.250.74.110 | 200 OK | 121 kB |
URL GET HTTP/3www.youtube.com/s/player/652ba3a2/player_ias.vflset/en_US/remote.js IP142.250.74.110:443
Requested byhttps://www.youtube.com/embed/qf5jmEkR94Q CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeJavaScript source, ASCII text, with very long lines (543) Size121 kB (120596 bytes) Hash9d668a132668a3b12a1f63de79652558 62d5348005c50483fd8ae0ff7d27d4a0f52782d3 44c5b908d7442943299bb35bc2710932ccd07263d0b96226c6c9d02958387a5f
GET /s/player/652ba3a2/player_ias.vflset/en_US/remote.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/qf5jmEkR94Q
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 33657
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 07:34:01 GMT
expires: Thu, 24 Apr 2025 07:34:01 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 04:20:05 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 144596
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/anchor?ar=1&k=6LfFpWwpAAAAAA4Cn4RTugUJo2rA7sNLWgIOZkmh&co=aHR0cHM6Ly9mZWVsdGhlbWFnaWMub3JnLmF1OjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=yq43yk92giak | 142.250.74.164 | 200 OK | 45 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/anchor?ar=1&k=6LfFpWwpAAAAAA4Cn4RTugUJo2rA7sNLWgIOZkmh&co=aHR0cHM6Ly9mZWVsdGhlbWFnaWMub3JnLmF1OjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=yq43yk92giak IP142.250.74.164:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeHTML document, ASCII text, with very long lines (36270) Hash8655470a19a16660ecf6cf30b683bb7e dd3a296731a7b11fbc39f1ced299f025b3f029c7 aeb5d5c20fdb8d4849894d77f90ef6fd4e2157a40fb0cdaf2829ff0049e4a25a
GET /recaptcha/api2/anchor?ar=1&k=6LfFpWwpAAAAAA4Cn4RTugUJo2rA7sNLWgIOZkmh&co=aHR0cHM6Ly9mZWVsdGhlbWFnaWMub3JnLmF1OjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=yq43yk92giak HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 25 Apr 2024 23:43:58 GMT
content-security-policy: script-src 'nonce-BP_9iQ9rzGiFcaQyn7iauQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.youtube.com/embed/qf5jmEkR94Q | 142.250.74.110 | 200 OK | 92 kB |
URL GET HTTP/2www.youtube.com/embed/qf5jmEkR94Q IP142.250.74.110:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeHTML document, ASCII text, with very long lines (58090) Hashefcebd19497eeded073081e9b307ad39 48488e8bc0c9c894f357884f12a37b5fefe73378 0da4cab1c6299d0fd7b316b4af4ce8f80813962d3ef54fd4188e134c0f198dbe
GET /embed/qf5jmEkR94Q HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 25 Apr 2024 23:43:56 GMT
strict-transport-security: max-age=31536000
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
origin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=pMc6sdisQrM; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=EGikc7ScrCs; Domain=.youtube.com; Expires=Tue, 22-Oct-2024 23:43:56 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxIIEgQSAgsMIBg%3D; Domain=.youtube.com; Expires=Tue, 22-Oct-2024 23:43:56 GMT; Path=/; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| capture-api.ap3prod.com/-/events/cw-event | 3.17.92.116 | 200 OK | 93 kB |
URL POST HTTP/2capture-api.ap3prod.com/-/events/cw-event IP3.17.92.116:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerAmazon Subject*.ap3prod.com Fingerprint0C:1D:79:62:05:7F:5C:31:32:AA:6D:CF:46:86:33:F5:41:03:4B:84 ValidityTue, 16 Jan 2024 00:00:00 GMT - Thu, 13 Feb 2025 23:59:59 GMT
Hashe1d869c09d724d1c5ec180b6cf627fbe 3389236b4243af69d0f2c960ca2be93b40daf83c 30171814c8ed519ae8951dca88378bbf50a150eee71b9925ade548c3013f49a8
POST /-/events/cw-event HTTP/1.1
Host: capture-api.ap3prod.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 488
Origin: https://feelthemagic.org.au
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 23:43:57 GMT
content-type: application/json
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-origin: *
allow: GET, POST, PUT, DELETE, OPTIONS
cache-control: no-cache, must-revalidate
content-encoding: gzip
expires: 0
pragma: no-cache
set-cookie: s=IGYq6rzN_86ZwpIAAGYq6rxYl5dmkQ_1ctylXDtB70Rcbg_COA; Path=/; Expires=Sun, 25 Apr 2027 23:43:57 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding, Accept-Encoding
x-version: master-2404230529-5282-21ec659
X-Firefox-Spdy: h2
|
|
| | 45.112.246.84 | 200 OK | 130 kB |
URL User Request GET HTTP/2IP45.112.246.84:443 ASN#63956 5G NETWORK OPERATIONS PTY LTD
CertificateIssuerLet's Encrypt Subjectwww.feelthemagic.org.au Fingerprint9D:FF:B4:32:37:79:6A:3D:A6:EA:E8:2D:CE:B4:0A:C6:E0:B3:87:7A ValidityFri, 12 Apr 2024 03:22:22 GMT - Thu, 11 Jul 2024 03:22:21 GMT
Size130 kB (130317 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: feelthemagic.org.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
link: <https://feelthemagic.org.au/wp-json/>; rel="https://api.w.org/", <https://feelthemagic.org.au/wp-json/wp/v2/pages/5240>; rel="alternate"; type="application/json", <https://feelthemagic.org.au/>; rel=shortlink
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 23:43:53 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
|
|
| capture-api.ap3prod.com/-/widgets/get | 3.17.92.116 | 200 OK | 93 kB |
URL POST HTTP/2capture-api.ap3prod.com/-/widgets/get IP3.17.92.116:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerAmazon Subject*.ap3prod.com Fingerprint0C:1D:79:62:05:7F:5C:31:32:AA:6D:CF:46:86:33:F5:41:03:4B:84 ValidityTue, 16 Jan 2024 00:00:00 GMT - Thu, 13 Feb 2025 23:59:59 GMT
Hashcc5e1f496bde3d353960cd1e7bff7efd 7e85d0487d6334bcea8811bfb284eee9943f16ef 7c9cc4708b98a03d1dfc2fc2b4971b3c4f51a061f8575badec3022154d1a3011
POST /-/widgets/get HTTP/1.1
Host: capture-api.ap3prod.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 190
Origin: https://feelthemagic.org.au
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 23:43:57 GMT
content-type: application/json
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-origin: *
allow: GET, POST, PUT, DELETE, OPTIONS
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding, Accept-Encoding
x-version: master-2404230529-5282-21ec659
X-Firefox-Spdy: h2
|
|
| cdn2l.ink/app.js | 54.230.111.117 | 200 OK | 128 kB |
IP54.230.111.117:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerAmazon Subjectstatic.ap3prod.com Fingerprint0A:50:55:D9:67:8E:B9:8E:93:11:88:60:0C:B2:58:8A:10:71:DB:10 ValidityWed, 14 Jun 2023 00:00:00 GMT - Sat, 13 Jul 2024 23:59:59 GMT
Size128 kB (127460 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /app.js HTTP/1.1
Host: cdn2l.ink
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 23 Apr 2024 23:22:53 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Thu, 25 Apr 2024 23:23:54 GMT
cache-control: public, max-age=3600
etag: W/"8bea55aed5ca6782d002fe3adfbf70b0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pElZ2uqhkiWQackY157mVSBGsx6ObRBbAi97e53AkOrpguImCq3XcA==
age: 1248
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
|
|
| static.fundraiseup.com/4215.ccc0934fbd14.elements-langs-vendors.js | 172.67.72.38 | 200 OK | 317 kB |
URL GET HTTP/3static.fundraiseup.com/4215.ccc0934fbd14.elements-langs-vendors.js IP172.67.72.38:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
Size317 kB (316669 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /4215.ccc0934fbd14.elements-langs-vendors.js HTTP/1.1
Host: static.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:56 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: tlMoEuOZKMlLuzZfuzfbuSr4+HyVmrbEb4TTUhnQ4nyzVzg8UTGQ02xb22DrEvQ9DvQTyvHV230=
x-amz-request-id: W3SP141NWF0J54PN
last-modified: Fri, 19 Apr 2024 10:35:06 GMT
etag: W/"72490702b36e807f88303086b54b4fae"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
cf-cache-status: HIT
age: 564235
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PTzuDCVBeX8PfqFqyN0CEbsSGGD%2FjMe9vqODg8xcN4%2BedQ5hjB%2FirVZb4FH1yahYMMK1mpCr4w%2BdxpMBZIq%2F5pnSQ%2FUcOoyB82RdRAREs2170YMefN%2ByJoPRWXwz7FRHoldOPTIQw10%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a232bb2e191c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| yt3.ggpht.com/ytc/AIdro_kYfvOBUb0OK7CmLSaNbPpomUGzmwlZLj_89ZBkk-72ffs=s68-c-k-c0x00ffffff-no-rj | 142.250.74.161 | 200 OK | 5.0 kB |
URL GET HTTP/2yt3.ggpht.com/ytc/AIdro_kYfvOBUb0OK7CmLSaNbPpomUGzmwlZLj_89ZBkk-72ffs=s68-c-k-c0x00ffffff-no-rj IP142.250.74.161:443
Requested byhttps://www.youtube.com/embed/qf5jmEkR94Q CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47 ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3 Hashe10518602f852e7342c4ecf058cc69f8 e5def7007b2d5eace4b5f0ea7eac25587446f006 ac79418eae534a9e57f26d491d644320600532c1f85e8326d385dce145653676
GET /ytc/AIdro_kYfvOBUb0OK7CmLSaNbPpomUGzmwlZLj_89ZBkk-72ffs=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v12a"
expires: Fri, 26 Apr 2024 23:43:58 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Thu, 25 Apr 2024 23:43:58 GMT
server: fife
content-length: 5043
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| static.fundraiseup.com/_/common-fonts/ibm-plex-sans/ibmplexsans-v19-600.woff2 | 172.67.72.38 | 200 OK | 60 kB |
URL GET HTTP/3static.fundraiseup.com/_/common-fonts/ibm-plex-sans/ibmplexsans-v19-600.woff2 IP172.67.72.38:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 60464, version 1.0 Hash7bf70a9be49804e68eec46ae565c46ac 3904cd657e72b7998a43d36d975f9d240657b7f8 7675dc861b83880d95bd74152c397b7a1d8b1adb5caf47b2519a390dd58c3d58
GET /_/common-fonts/ibm-plex-sans/ibmplexsans-v19-600.woff2 HTTP/1.1
Host: static.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://feelthemagic.org.au
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:57 GMT
content-type: application/octet-stream
content-length: 60464
x-amz-id-2: W2DRXQ3yik+YyiJ8htV1hp/QTk9d6h8/+XgEvx1T6WxkgYyUGwzlWlYW1PR0GmI2krpDfIfLg4M=
x-amz-request-id: CEBXBA90TJV3RRZP
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 24 Apr 2024 08:55:06 GMT
etag: "7bf70a9be49804e68eec46ae565c46ac"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yX8U4LajzVT45LQDz19X3zaUt%2Fvn8czu5dhP4RkF2Es1wG8DzBt0aKkVboEAxyha7pVu5lUQzX%2FINEYQv%2F1bD0Hf3hyRKIUo0QIkCKJXj5gk3X%2BEtjllrT9hJrnvQCzwUkMnAV%2Frgz0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a232bff8421c12-OSL
alt-svc: h3=":443"; ma=86400
|
|
| static.fundraiseup.com/checkout.5bf380992c97aa58e3ce.js | 172.67.72.38 | 200 OK | 322 kB |
URL GET HTTP/3static.fundraiseup.com/checkout.5bf380992c97aa58e3ce.js IP172.67.72.38:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
Size322 kB (322540 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /checkout.5bf380992c97aa58e3ce.js HTTP/1.1
Host: static.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:57 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: YmxcKVYJ6HcyZGOIk1bL3rBSTlsfgr9KZuT5Gac+k1KwF1wEbAO0TdFrIu/u+ZFZLh06ROpvD4E=
x-amz-request-id: H7YDP6410SJ3R4YS
last-modified: Wed, 24 Apr 2024 08:55:12 GMT
etag: W/"ccc23508854cf248edf69e0b02c1e260"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
cf-cache-status: HIT
age: 138359
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HoPiqpe4YFKgKM4svYdWYyD%2FfNSOU4gUDUAwBGvznHfROqW3RdwfS29DK0TxXHGsdoV1uWWq6yTeEkCbYg7ZzegiWsy%2FPvMh8gZkrQ%2FDK0ZwpS6YsVZxiVyW74Kcls657JuyvuNIxwk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a232be7f631c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| static.fundraiseup.com/sentry.3e14a54438e991dd142b.js | 172.67.72.38 | 200 OK | 4.1 kB |
URL GET HTTP/3static.fundraiseup.com/sentry.3e14a54438e991dd142b.js IP172.67.72.38:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
File typeJavaScript source, ASCII text, with very long lines (4150), with no line terminators Hash739fb0305a1fcd0e295a6e2eb508c72a ff5cb041e69aadce272c8a6862556026884dc218 26500bda06749323ad917f4b947860644f0cf009b04ca94812fe47ee1af4d3a0
GET /sentry.3e14a54438e991dd142b.js HTTP/1.1
Host: static.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:57 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: I07KeFnzV2QOl2QiAG0bjeEXqNkALvdHDZEIXLpEvocQbMT25fTnTGYtcHY7YhTHAdF1cRtodiE=
x-amz-request-id: 0XRYBBVE513KAZ1P
last-modified: Mon, 08 Apr 2024 09:20:34 GMT
etag: W/"4fe20c3195145b9a164640a2a9ecae67"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1519493
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0kpsmjt7GJ7foT%2By1q9KL7oI%2F6eEBSOJXyVhjxw0XcgUMyFarnpyxak9%2BbmT%2FPCVeFXNURQ%2FXmtivzoJbJir8cy9sNUdFOVBQBhOTK6uCpoGx%2FsQ1X7%2FgPOu4yXmWaYOBgUnb3cQOXo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a232be7f671c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| static.fundraiseup.com/6824.e010e72f3ef6.social-proof-v2.js | 172.67.72.38 | 200 OK | 30 kB |
URL GET HTTP/3static.fundraiseup.com/6824.e010e72f3ef6.social-proof-v2.js IP172.67.72.38:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
File typeJavaScript source, ASCII text, with very long lines (30477), with no line terminators Hash4ec5600e37f178a0668c917f93e675ea 16f2ca262e27a52edf15fe570ff6bb9d70bdedbe 2dd9675e2aff0fd8149bcd499643e78aaf4cb516ae67458c0eaa1a67577d0af0
GET /6824.e010e72f3ef6.social-proof-v2.js HTTP/1.1
Host: static.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:57 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: vG+7WusO/itVLvIVOnFkN3ia89V2SZaFLf5EtZg1YTsAwbhCJ55j/Hu6VqVqAOEn5mX0oebCjPo=
x-amz-request-id: QS7JW8XWZ637X9J2
last-modified: Fri, 19 Apr 2024 10:35:06 GMT
etag: W/"4ec5600e37f178a0668c917f93e675ea"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
cf-cache-status: HIT
age: 564228
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gqcQ6hJOTTXcEQ8jApYZTyd7MXydghVEHfaLTCHaVQZUhxtzX%2BGVTB4gS6tVaqZNeoCXZW%2BAPGTdpP4R4DXnTotPVMvBbBEOjBpJS8MS8lPmpb6oi092p67ychyoUAauu4klityEoMU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a232bfafe61c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| static.fundraiseup.com/827.0df212a6fc27.donate-button-v2-styles.js | 172.67.72.38 | 200 OK | 3.2 kB |
URL GET HTTP/3static.fundraiseup.com/827.0df212a6fc27.donate-button-v2-styles.js IP172.67.72.38:443
Requested byhttps://feelthemagic.org.au/ CertificateIssuerLet's Encrypt Subjectfundraiseup.com FingerprintFC:E8:24:85:6F:30:4E:9B:AE:87:59:AB:63:D7:46:BF:2A:CF:29:8F ValidityFri, 19 Apr 2024 23:11:02 GMT - Thu, 18 Jul 2024 23:11:01 GMT
File typeJavaScript source, ASCII text, with very long lines (3256), with no line terminators Hash52092c7546826154cf45f6fda4e213e4 f9c68a9f0038bad3c492cdb78db3926d229fe769 b7a287672a7888914014486cad1b905dce6fba7a02c1c6d075965713eb71ac6d
GET /827.0df212a6fc27.donate-button-v2-styles.js HTTP/1.1
Host: static.fundraiseup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://feelthemagic.org.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 23:43:57 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: VD766PUcdLYeRvbx1qRcDf+OLWXD+f6suUvn73zPvPmlS+Rzcc9x0rUYvhh+hyUqbRDZDDK9J+8=
x-amz-request-id: 79HC0YVYWWWBC451
last-modified: Fri, 19 Apr 2024 10:35:07 GMT
etag: W/"8b7e02cf9ca5a55f3e9a3dd0fd2913c2"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
cf-cache-status: HIT
age: 564179
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JHUr2qYPcTYpbqkxmrvFaJKtXYMbIv1t6CSiBRHzEMTZITwdeARr3HXWf4J4wGMDDjgr16X%2FchT%2F6QpbU8FRaAO6LL3ErsDj1UdxgKuH535cNXiOMkZzQRoPAkvJrvnchk9EmTRmw%2FU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a232be7f6a1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|