| overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know |  198.187.31.243 | 301 Moved Permanently | 0 B |
URL User Request GET HTTP/2overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know IP198.187.31.243:443
CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /fha-cash-reserve-requirements-everything-you-need-to-know HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
content-type: text/html; charset=UTF-8
x-pingback: https://overhplusproperties.com/xmlrpc.php
x-redirect-by: WordPress
location: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
x-litespeed-cache: hit
content-length: 0
date: Fri, 10 May 2024 07:39:52 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/ | 198.187.31.243 | | 795 B |
IP198.187.31.243:0
CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash5d8d79c3cb9af023240b1be6f5057aaa df22980677b134e83d878893f7c7984e0d78a240 e8b101a7c7f64aad528cc734513cbeb02243c0af37930dc0f3239749cff184b6
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
keep-alive: timeout=5, max=100
content-type: text/html
content-length: 795
date: Fri, 10 May 2024 07:39:55 GMT
server: LiteSpeed
location: https://overhplusproperties.com/
x-turbo-charged-by: LiteSpeed
|
|
| overhplusproperties.com/ | 198.187.31.243 | | 58 kB |
IP198.187.31.243:0
CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (8586), with CRLF, LF line terminators Hash1cea7f47fed2cbeea01395ebb7936b1f 5987fd22fba2b3e6182e604aa9e40eaaa790ffdd 7deb43ec6bfaf9ebad25a6d0afdf3febf3c53b643ad32d106b88cb9c2a448415
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
link: <https://overhplusproperties.com/wp-json/>; rel="https://api.w.org/", <https://overhplusproperties.com/wp-json/wp/v2/pages/17651>; rel="alternate"; type="application/json", <https://overhplusproperties.com/>; rel=shortlink
etag: "6178-1715119723;br"
x-litespeed-cache: hit
content-encoding: br
vary: Accept-Encoding
content-length: 57764
date: Fri, 10 May 2024 07:39:55 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css?ver=6.5.3 |  104.17.24.14 | 200 OK | 10 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css?ver=6.5.3 IP104.17.24.14:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (59119) Hashecd507b3125edc4d2a03aa6ae5d07da9 a57ee68d11601b0fd8e5037fc241ff65a754473c 99464ceb71bc9bbdcc72275faefe44f98eb5cbb6b5d8ee665b87b35376f1a96e
GET /ajax/libs/font-awesome/5.15.4/css/all.min.css?ver=6.5.3 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://overhplusproperties.com
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 07:39:58 GMT
content-type: text/css; charset=utf-8
content-length: 10462
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "613fa20b-28de"
last-modified: Mon, 13 Sep 2021 19:10:03 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 91721
expires: Wed, 30 Apr 2025 07:39:58 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a8OY%2F7aRRii7HocIWWtaz2PYFb%2BK63t%2BaL3j9Sszq1Y1iCs49nkPEFxmYNRNSiZT7i0kXwMYlgzoiSdQ4bwiiUPX4zS%2BT4GthILw3QmV811qU8w5zISEEvd4X7y5tl2eHpsX79Ii"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 88184748099eb51b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-includes/css/dist/block-library/style.min.css?ver=6.5.3 | 198.187.31.243 | 200 OK | 14 kB |
URL GET HTTP/2overhplusproperties.com/wp-includes/css/dist/block-library/style.min.css?ver=6.5.3 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (59701) Hash51a8390b47aa0582cf2d9c96c5addee2 b16a640874025d085c38119a1a02a3460f83f2de 98cecf88a23542fa047ce46eedb650b5c5128761ed4386c0977b847094ddfa20
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.5.3 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Tue, 02 Apr 2024 21:59:08 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 14071
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| js-eu1.hs-scripts.com/143374183.js?integration=WordPress&ver=11.1.6 | 172.65.208.22 | 410 Gone | 99 B |
URL GET HTTP/2js-eu1.hs-scripts.com/143374183.js?integration=WordPress&ver=11.1.6 IP172.65.208.22:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerLet's Encrypt Subjecths-scripts.com Fingerprint10:6A:CE:54:F8:1D:59:1E:1F:7D:DB:76:07:FC:FF:1A:7D:70:E9:BD ValidityMon, 01 Apr 2024 23:22:11 GMT - Sun, 30 Jun 2024 23:22:10 GMT
Hash7aff9060b2879bc0220218fdb543ca47 3f6eade44c6c3d3b9174bf208eea6641dbb5a0cb a6f2bcba3bc68259bdfe85305e521f3186734c20d0af96c22fe4a162eef8f980
GET /143374183.js?integration=WordPress&ver=11.1.6 HTTP/1.1
Host: js-eu1.hs-scripts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 410 Gone
date: Fri, 10 May 2024 07:39:58 GMT
content-type: application/json;charset=utf-8
content-length: 99
vary: origin, Accept-Encoding
access-control-allow-credentials: true
x-content-type-options: nosniff
access-control-max-age: 3600
access-control-allow-origin: https://overhplusproperties.com
x-envoy-upstream-service-time: 5
x-evy-trace-route-service-name: envoyset-translator
x-evy-trace-virtual-host: all
x-hubspot-correlation-id: c2cdf689-a97b-400b-a9c6-965e42ec9855
x-evy-trace-served-by-pod: fra04/hubapi-td/envoy-proxy-68d6f869c4-jmnkh
x-evy-trace-listener: listener_https
x-evy-trace-route-configuration: listener_https/all
x-request-id: c2cdf689-a97b-400b-a9c6-965e42ec9855
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 881847493ee48295-ARN
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/wp-whatsapp/assets/dist/css/style.css?ver=6.5.3 | 198.187.31.243 | 200 OK | 5.0 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/wp-whatsapp/assets/dist/css/style.css?ver=6.5.3 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (42448), with no line terminators Hash2dd43823e520f244f9cb9b0f1e8e146b 8044ff241b36b7e8b853951dcf15f00ed71e60d8 20014dc5264616cdb0354172b34a78ce300a6f7a7d392109492ecf004c3aea7f
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/wp-whatsapp/assets/dist/css/style.css?ver=6.5.3 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Wed, 10 Apr 2024 17:35:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4985
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/redux-framework/redux-core/assets/css/extendify-utilities.css?ver=4.4.15 | 198.187.31.243 | 200 OK | 5.4 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/redux-framework/redux-core/assets/css/extendify-utilities.css?ver=4.4.15 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeassembler source, ASCII text, with very long lines (53434) Hashb49e6b83f7bd47e2b24fae34688e415c dee9efa699fb909e42ff4f7faac548a830dba8ce c89fbb7c3991d609883de7c21412f6b27f44b0d049c72e49011d9a0311ac2eba
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/redux-framework/redux-core/assets/css/extendify-utilities.css?ver=4.4.15 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Wed, 10 Apr 2024 17:35:35 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5382
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/buttonizer-multifunctional-button/assets/legacy/frontend.css?v=9f851fb3203c740b13d66b2369b3636d&ver=6.5.3 | 198.187.31.243 | 200 OK | 934 B |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/buttonizer-multifunctional-button/assets/legacy/frontend.css?v=9f851fb3203c740b13d66b2369b3636d&ver=6.5.3 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (7116) Hash9c8e291a9590fb94c64f981c45968305 c6f28911c1bc65dc22a43f49283d4af2ff08e54c a5a517dcd7ee8ef045de498a1784b06744782c7a69bfaa88a91b894f95da4b88
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/buttonizer-multifunctional-button/assets/legacy/frontend.css?v=9f851fb3203c740b13d66b2369b3636d&ver=6.5.3 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Thu, 01 Feb 2024 21:59:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 934
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/classified-ads/public/css/classified-ads-public.css?ver=1.0.0 | 198.187.31.243 | 200 OK | 98 B |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/classified-ads/public/css/classified-ads-public.css?ver=1.0.0 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
Hashe6094661d8923e95b233019ebff7c8f0 cfd836d385d475baffee45d85cfeb9bb36e70d9e 547dda3c14b284819be511be1e410da94a5efc6ccc4a9afe1c75394f9333191a
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/classified-ads/public/css/classified-ads-public.css?ver=1.0.0 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Fri, 27 Oct 2023 10:02:51 GMT
accept-ranges: bytes
content-length: 98
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.9.4 | 198.187.31.243 | 200 OK | 890 B |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.9.4 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
Hash3fd2afa98866679439097f4ab102fe0a dbc9c4139e49d0d9fb41b7191aad1a2db6c555fd ccd31ffa708d025833f954b3e0560cedd58df9a0d2706b2ccee5f501c5b2467b
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.9.4 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Tue, 07 May 2024 09:58:51 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 890
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ | 198.187.31.243 | 200 OK | 29 kB |
URL User Request GET HTTP/2overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ IP198.187.31.243:443
CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (8586), with CRLF, LF line terminators Hasha1153d791e63f82febd511386cef6125 4f63a0397e3eaf7b1ec78d3912b1dbb342c5b289 7beba09532ca400123995a8ebc0ba0d8048f005eb062abcbee6dbd300f605863
| Analyzer | Verdict | Alert |
|---|
| ThreatFox | malicious | GootLoader | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /fha-cash-reserve-requirements-everything-you-need-to-know/ HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
x-pingback: https://overhplusproperties.com/xmlrpc.php
set-cookie: _http_accept:image/webp=1; path=/; secure
PHPSESSID=c1bf10c00380b35c9dc072b0908ae122; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
link: <https://overhplusproperties.com/wp-json/>; rel="https://api.w.org/", <https://overhplusproperties.com/wp-json/wp/v2/posts/141109>; rel="alternate"; type="application/json", <https://overhplusproperties.com/?p=141109>; rel=shortlink
x-litespeed-cache-control: public,max-age=3600
x-litespeed-tag: 3a3_HTTP.404,3a3_HTTP.200,3a3_post,3a3_URL.3df379131f7f186715bb26844a07c264,3a3_Po.141109,3a3_
etag: "9482-1715326797;br"
x-litespeed-cache: miss
content-encoding: br
vary: Accept-Encoding
date: Fri, 10 May 2024 07:39:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/libs/fontawesome-5.8/css/fontawesome-5.css?ver=6.5.3 | 198.187.31.243 | 200 OK | 12 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/libs/fontawesome-5.8/css/fontawesome-5.css?ver=6.5.3 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hash04e0bc5d47cc7c3f141b883c287e1102 33399171b554d97e478288d6f40738b15ec6b93b a6a0eb5af2c63e4ca979d40be0f641f4761802f8f63be93cc1af58a0fdfe5805
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementinvader-addons-for-elementor/assets/libs/fontawesome-5.8/css/fontawesome-5.css?ver=6.5.3 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Wed, 13 Mar 2024 21:59:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 12037
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets.css?ver=1.1 | 198.187.31.243 | 200 OK | 99 B |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets.css?ver=1.1 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hash3299a01be355d29a91eb8843f6e7d01c 54a7bbe269e207b3a3f78f0e42a171d05be3204a e860e0852445620bbb4f9a53e9ddfc72fabb23f8591c631f1523512e45ecc100
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets.css?ver=1.1 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Wed, 13 Mar 2024 21:59:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 99
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/eli-hover.css?ver=6.5.3 | 198.187.31.243 | 200 OK | 686 B |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/eli-hover.css?ver=6.5.3 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hashbe8997b70d7219821b49ba19d30601bf 260b695069839a6655df466c095319730b0ca8ba df54f838f431e658045d193e991ece7a44be7cfa9a7a4dd21f6411933cb3ced1
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementinvader-addons-for-elementor/assets/css/eli-hover.css?ver=6.5.3 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Wed, 13 Mar 2024 21:59:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 686
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/libs/wdkscrollmobileswipe/wdk-scroll-mobile-swipe.css?ver=6.5.3 | 198.187.31.243 | 200 OK | 151 B |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/libs/wdkscrollmobileswipe/wdk-scroll-mobile-swipe.css?ver=6.5.3 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hash5775d9351ee67f276d26e798dc5bb14d 64f0d50a104cea669fc32cf5c93033ed9a4467be f3988bb707d913eb1451496ba7343216ad7abe2bc12c20eaaeb0a3161c76d561
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementinvader-addons-for-elementor/assets/libs/wdkscrollmobileswipe/wdk-scroll-mobile-swipe.css?ver=6.5.3 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Wed, 13 Mar 2024 21:59:28 GMT
accept-ranges: bytes
content-length: 151
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/elementinvader/public/css/elementinvader-public.css?ver=1.2.3 | 198.187.31.243 | 200 OK | 101 B |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/elementinvader/public/css/elementinvader-public.css?ver=1.2.3 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hash31ba9843265483773b6f175fae76c10d a0b3a2b589e84cd62c97c1984a554754ebc2a7e0 b707767f779334b647291a51b682c119812818c5e95c82392c08fec4eb6fccb5
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementinvader/public/css/elementinvader-public.css?ver=1.2.3 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Thu, 10 Aug 2023 10:01:14 GMT
accept-ranges: bytes
content-length: 101
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/search-filter/style.css?ver=1 | 198.187.31.243 | 200 OK | 225 B |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/search-filter/style.css?ver=1 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
Hash3b954135677c0387989e5fc0404c3439 7a017fbbdc742e0c6e7917a6a28e38f11dfff1e9 071ca38b8cec663d589e0f75341f534a696edc4aee2b99d6e502c98fa04ee020
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/search-filter/style.css?ver=1 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Thu, 05 Jan 2023 20:05:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 225
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/wordpress-social-login/assets/css/style.css?ver=6.5.3 | 198.187.31.243 | 200 OK | 268 B |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/wordpress-social-login/assets/css/style.css?ver=6.5.3 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashb751c4b6d30d0223e0b31e3d46ec5040 991f23e8cbd87030e94cdb5bd61245657acdc719 ddca68622fef19ca9794aecf8a9b9566a3838d5892a5138bf5f0e1a3d56b5c92
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/wordpress-social-login/assets/css/style.css?ver=6.5.3 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Sun, 21 Aug 2022 20:37:14 GMT
accept-ranges: bytes
content-length: 268
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/wpdirectorykit/public/css/wpdirectorykit-public.css?ver=1.3.0 | 198.187.31.243 | 200 OK | 6.5 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/wpdirectorykit/public/css/wpdirectorykit-public.css?ver=1.3.0 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (314), with CRLF line terminators Hashd927a4549632eddbfc9231b251a4a780 aef3c00929014ea30915d6a452a4f38bb83d6df0 6379db1aa42fd47763b135d4b595bd90af5f1572fcbf6afee4b11760eb6a026d
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/wpdirectorykit/public/css/wpdirectorykit-public.css?ver=1.3.0 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Wed, 10 Apr 2024 17:35:41 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6481
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/wpdirectorykit/public/css/wpdirectorykit-public-responsive.css?ver=1.3.0 | 198.187.31.243 | 200 OK | 831 B |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/wpdirectorykit/public/css/wpdirectorykit-public-responsive.css?ver=1.3.0 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hashb16ff39f47bb32ffc4d08390660883cb b1e025c8889a456aeab29a36db811881e0ddbfd9 436abd9d430e8698c1dd8cdfe877568cd66c68f740d4ccecc961545797c9d4f9
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/wpdirectorykit/public/css/wpdirectorykit-public-responsive.css?ver=1.3.0 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Wed, 10 Apr 2024 17:35:41 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 831
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/wpdirectorykit/public/css/wpdirectorykit-public-conflicts.css?ver=1.3.0 | 198.187.31.243 | 200 OK | 371 B |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/wpdirectorykit/public/css/wpdirectorykit-public-conflicts.css?ver=1.3.0 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hash9da0022703c8e5bd361040d3c09b0aae 93fb9fbe91fbc92af81443c5acbfbb78ef392dea 8c0c76ef6ed27427557cd23696523f94ca3dada60987f26b5059a27947d8a05f
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/wpdirectorykit/public/css/wpdirectorykit-public-conflicts.css?ver=1.3.0 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Wed, 10 Apr 2024 17:35:41 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 371
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.28 | 198.187.31.243 | 200 OK | 259 B |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.28 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
Hasha5bf64d5859ee94a3e8e93d592d6d2a0 049eb63b42dbb820b06870a430f523bf06880721 25825611ade7ceaed7df3862ec56dc91ad1d2be539966ef7bbe84306e51cfb08
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.28 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Tue, 16 Apr 2024 21:58:55 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 259
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.29.0 | 198.187.31.243 | 200 OK | 3.7 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.29.0 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (19732) Hash45f978120a537b249dfac36306ed5471 9eebc1e6fe55d9737d0e91bdfa3976b344ea2a09 67ac597bed179b5842d996fad80472c6b9514edde408ade8b892161bcf9e9c88
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.29.0 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Wed, 08 May 2024 09:59:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3724
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=AW-737683269 | 142.250.74.40 | 200 OK | 84 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=AW-737683269 IP142.250.74.40:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (1822) Hash9d3f4884e489af659c8a994a982fc1f6 01a9775b098d8dabb689d3d015a86f92a4bb77c0 ae4273ce0b6b9033615fe37ecbef667360fa8d0ea070022dd85c774ee5fd3692
GET /gtag/js?id=AW-737683269 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 10 May 2024 07:39:58 GMT
expires: Fri, 10 May 2024 07:39:58 GMT
cache-control: private, max-age=900
last-modified: Fri, 10 May 2024 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 83598
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-7CX2MZWSRC | 142.250.74.40 | 200 OK | 101 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-7CX2MZWSRC IP142.250.74.40:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (5955) Size101 kB (100917 bytes) Hashc8ac3870768b674a3d8978d3d8a19e55 114485ba959d9b212a084ee7a09f0690714b3afa 6a2346ce26fcb8ad635eb9a601289dd3ce1e9ded9834af84b5825545c7f5ae5e
GET /gtag/js?id=G-7CX2MZWSRC HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 10 May 2024 07:39:58 GMT
expires: Fri, 10 May 2024 07:39:58 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 100917
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.21.5 | 198.187.31.243 | 200 OK | 13 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.21.5 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (65496) Hash4e4688fea085d61271535dab1e7d3206 477df962f77485b7a4b938eca3c6153b61184bdc 4f98a7dcf1750b5881bdd2b8443254181773bd6d5d4e29e39115ea97439021a0
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.21.5 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Wed, 08 May 2024 09:59:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 13066
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5 | 198.187.31.243 | 200 OK | 4.2 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (16214) Hasha2431bc290cf34e330e11ec4cfce1247 32a53342901fef5f4f4dbb26a555e730f84437a4 c57e64fcb72bddafa9c38de574441c3e69ac6c961df96b0cad34da83658bd196
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Wed, 08 May 2024 09:59:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4248
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/elementor-pro/assets/css/frontend-lite.min.css?ver=3.16.2 | 198.187.31.243 | 200 OK | 1.5 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/elementor-pro/assets/css/frontend-lite.min.css?ver=3.16.2 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (11720) Hashc0ebad42a3c96f626e8d32d64779e58e dbf5066f0e541f61297476f0b588533d15aec738 41eac43c1137e23dc691d5605126f42c477b739d40867c3022a1c9a857dd3194
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor-pro/assets/css/frontend-lite.min.css?ver=3.16.2 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Fri, 06 Oct 2023 06:07:45 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1511
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/themes/houzez/css/bootstrap.min.css?ver=2.8.6.1 | 198.187.31.243 | 200 OK | 22 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/themes/houzez/css/bootstrap.min.css?ver=2.8.6.1 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (65324) Hash3afe15e976734d9daac26310110c4594 4f14a09a606c99a11f8fda15564ef66f70402826 680af6669abc319f9803f0fa26d443df1b6bc29133d88a8e4bea560ffed7288c
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/houzez/css/bootstrap.min.css?ver=2.8.6.1 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Thu, 05 Oct 2023 23:01:59 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 21469
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/themes/houzez/css/bootstrap-select.min.css?ver=2.8.6.1 | 198.187.31.243 | 200 OK | 2.0 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/themes/houzez/css/bootstrap-select.min.css?ver=2.8.6.1 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (10943), with CRLF line terminators Hash486d7426635cb3698ca5bd4c50e5a7f7 aefc4756004cdae1903f6aaceb5ef20f76b277e4 c22308edbb8e579501cdd58de2ce245ea13f2d9efde21c79a0938e21094305a3
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/houzez/css/bootstrap-select.min.css?ver=2.8.6.1 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Thu, 05 Oct 2023 23:01:59 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2016
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/themes/houzez/css/font-awesome/css/all.min.css?ver=2.8.6.1 | 198.187.31.243 | 200 OK | 12 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/themes/houzez/css/font-awesome/css/all.min.css?ver=2.8.6.1 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (58749) Hash84d8ad2b4fcdc0f0c58247e778133b3a 6f33eae92d42fe209167139940a0ad6a3c6c167e 14cbd9b866a9b092e3a2e03a93b128da5baca005fd8b44a1956146eaab7b48b7
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/houzez/css/font-awesome/css/all.min.css?ver=2.8.6.1 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Thu, 05 Oct 2023 23:02:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 12264
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/themes/houzez/css/slick-min.css?ver=2.8.6.1 | 198.187.31.243 | 200 OK | 446 B |
URL GET HTTP/2overhplusproperties.com/wp-content/themes/houzez/css/slick-min.css?ver=2.8.6.1 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (1364), with no line terminators Hash46a43cfe4ac1478327f418cc3f93e485 7cbf5e8d2e0f61151e30e30fa08178592e8931e3 d8a0e36ac60d150a3dbbc910a580cd121d784b02d61553b8a8c79317b315e277
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/houzez/css/slick-min.css?ver=2.8.6.1 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Thu, 05 Oct 2023 23:01:59 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 446
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/themes/houzez/css/slick-theme-min.css?ver=2.8.6.1 | 198.187.31.243 | 200 OK | 644 B |
URL GET HTTP/2overhplusproperties.com/wp-content/themes/houzez/css/slick-theme-min.css?ver=2.8.6.1 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeUnicode text, UTF-8 text, with very long lines (2396), with no line terminators Hash69f5b0c101a44a076aa45df578d2b19c d7b97077a859cf55aa3eb107e5164bb6741664a9 76c9603e03b0ad8dab6227560a3b0f994eca430276d6659edcc4b96270b97b51
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/houzez/css/slick-theme-min.css?ver=2.8.6.1 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Thu, 05 Oct 2023 23:01:59 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 644
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/wpdirectorykit/public/css/jquery-ui.css?ver=1.12.1 | 198.187.31.243 | 200 OK | 8.0 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/wpdirectorykit/public/css/jquery-ui.css?ver=1.12.1 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (2363), with CRLF line terminators Hash2d44e31250ba77d6e7033285511e51cc 7844a7b15e4af3daf150aa4148deb1dff0b1504a 5dfc5531390e20611fade3832d5e71da9043bdf242f0c8cbc11d18ee29ebe3d7
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/wpdirectorykit/public/css/jquery-ui.css?ver=1.12.1 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Wed, 10 Apr 2024 17:35:41 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7995
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/themes/houzez/css/bootstrap-datepicker.min.css?ver=2.8.6.1 | 198.187.31.243 | 200 OK | 1.9 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/themes/houzez/css/bootstrap-datepicker.min.css?ver=2.8.6.1 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (15554) Hasha9d80a7b09d06c2d6045a21c4c3b40fa b7515836a5f5aab0b72a44e4530076f2307e5372 f54d2528bd1f13dc03240cb2aa4b968d13535488ae0cc25ee7680a06f4ea8c01
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/houzez/css/bootstrap-datepicker.min.css?ver=2.8.6.1 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Thu, 05 Oct 2023 23:01:59 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1896
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/themes/houzez/css/styling-options.css?ver=2.8.6.1 | 198.187.31.243 | 200 OK | 3.5 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/themes/houzez/css/styling-options.css?ver=2.8.6.1 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
Hash604fe0fb4c1f8a25bf5cc5908c7ea157 67d2a9feadee47788858960af1114136eebf8646 bce887a9ac476791c86c1e6d551763c240084a5c155b3b01892032b2b75125ce
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/houzez/css/styling-options.css?ver=2.8.6.1 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Thu, 05 Oct 2023 23:01:59 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3483
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/ajax-search-lite/css/style.basic.css?ver=4.11.5 | 198.187.31.243 | 200 OK | 3.1 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/ajax-search-lite/css/style.basic.css?ver=4.11.5 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hashf9f3dc95e9215fbf325f43e79f376f03 5b0c62e2f187acf67b36e84c8d6a2a6ced24c190 50e78d616575712470f76136b2ed2b52b1bbb02fde3a6f2ced084980c2b4d602
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/ajax-search-lite/css/style.basic.css?ver=4.11.5 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Fri, 08 Dec 2023 21:59:15 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3119
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/ajax-search-lite/css/style-simple-red.css?ver=4.11.5 | 198.187.31.243 | 200 OK | 1.4 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/ajax-search-lite/css/style-simple-red.css?ver=4.11.5 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (10704), with no line terminators Hash3174c6856a9a534d015e5e43547daacd 8c07670c038aff034c950e520cc2fe19a2e7bca5 542894c8cf7ddd71840f66ca04f655cfbb1b7000e22e6e8ee7173342db5fc2f0
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/ajax-search-lite/css/style-simple-red.css?ver=4.11.5 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Fri, 08 Dec 2023 21:59:15 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1443
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0 | 198.187.31.243 | 200 OK | 6.7 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (30837) Hash008e0bb5ebfa7bc298a042f95944df25 93897ebc560b38a1d2bff43c22dd6a3b7ee90c0c c4047043368afb4baf1aed25d358a5c2a333842a3b436b58491ab36aeee65b9d
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Wed, 08 May 2024 09:59:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6657
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.9.20 | 198.187.31.243 | 200 OK | 819 B |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.9.20 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (3828) Hash8bb2b5364db51aded1e696f2a19b33ca 67b3ed522e1e35e9aa31c945cfe3802a8813e47c 683e7dd72e8bf31eaddb50de149bd4a87d9ed27541b29711a5cbcb1ea3262a45
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.9.20 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Wed, 08 May 2024 21:59:21 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 819
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 | 198.187.31.243 | 200 OK | 4.7 kB |
URL GET HTTP/2overhplusproperties.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (13479) Hash9ffeb32e2d9efbf8f70caabded242267 3ad0c10e501ac2a9bfa18f9cd7e700219b378738 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 08 Aug 2023 21:59:19 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4678
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/classified-ads/public/js/classified-ads-public.js?ver=1.0.0 | 198.187.31.243 | 200 OK | 412 B |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/classified-ads/public/js/classified-ads-public.js?ver=1.0.0 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text Hash49cea0a781874a962879c2caca9bc322 72c1650de2b93ef320d2db873fbb473fe360269c 57a50c99a31ef4e89e86664e96f6dfbdde163a2eb96e88b3b492c49aa4be2f37
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/classified-ads/public/js/classified-ads-public.js?ver=1.0.0 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Fri, 27 Oct 2023 10:02:51 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 412
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/wpdirectorykit/public/js/wdk-scroll-mobile-swipe.js?ver=1.1 | 198.187.31.243 | 200 OK | 3.5 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/wpdirectorykit/public/js/wdk-scroll-mobile-swipe.js?ver=1.1 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (2079), with CRLF line terminators Hashf638cecb21b3970743224672b8ce7668 9f20fe119cbccb518f5227910291f91e4a014fce 027b93ce3d2bf7a2dbf6e8eba046055f59d37ce81f120324ec477b2cd8793af7
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/wpdirectorykit/public/js/wdk-scroll-mobile-swipe.js?ver=1.1 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Wed, 10 Apr 2024 17:35:41 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3501
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/elementinvader/public/js/elementinvader-public.js?ver=1.2.3 | 198.187.31.243 | 200 OK | 416 B |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/elementinvader/public/js/elementinvader-public.js?ver=1.2.3 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash586e5c56701375ad84e2d013131c2dcd 71b618facdd14aca31a4de682c759a7e090e7220 1a494bad9094de648041f58491610d1bb694749987c076719de2075edd39b237
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementinvader/public/js/elementinvader-public.js?ver=1.2.3 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Thu, 10 Aug 2023 10:01:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 416
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/wpdirectorykit/public/js/wpdirectorykit-public.js?ver=1.3.0 | 198.187.31.243 | 200 OK | 4.7 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/wpdirectorykit/public/js/wpdirectorykit-public.js?ver=1.3.0 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (334), with CRLF line terminators Hash5120068324f11803f3ccc2248aa99f6e 0000a5cf1bbfd72215c8f6e5abd56a15a59a3b60 68f1d4d6679ef9b292ac78632b9b0fbf142a7af601e461b793e8e02f5d94356b
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/wpdirectorykit/public/js/wpdirectorykit-public.js?ver=1.3.0 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Wed, 10 Apr 2024 17:35:41 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4732
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/wpdirectorykit/public/js/wdk-dependfields-search.js?ver=6.5.3 | 198.187.31.243 | 200 OK | 402 B |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/wpdirectorykit/public/js/wdk-dependfields-search.js?ver=6.5.3 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash575dd6572d7e0429ba22b9295c7c1a66 d5c6037d477223adf37353d34316d3efc9b23987 ef6f7872866751a9a4c2a4bea5adc29ab48af7d2263191362433f8306bab838e
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/wpdirectorykit/public/js/wdk-dependfields-search.js?ver=6.5.3 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Wed, 10 Apr 2024 17:35:41 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 402
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/uploads/2023/10/OVERHPLUS-LOGO-PNG-2-114x114-1.png | 198.187.31.243 | 200 OK | 3.8 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/uploads/2023/10/OVERHPLUS-LOGO-PNG-2-114x114-1.png IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typePNG image data, 114 x 114, 8-bit colormap, non-interlaced Hash4418e719e1f16f4dd3113264f1b13628 d3ddd1f84eecab54120434c9cedd64bf016da6dd 667dcbe3683ec97ee535b7a78e059447c739e0f1ef79eefa31048819a62383d1
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2023/10/OVERHPLUS-LOGO-PNG-2-114x114-1.png HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: image/png
last-modified: Fri, 06 Oct 2023 14:25:13 GMT
accept-ranges: bytes
content-length: 3833
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.6.15 | 198.187.31.243 | 200 OK | 12 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.6.15 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeUnicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators Hashc1a7048ae35d20d88ec46d8d82add160 a5bf95a4ccc67eb6599c5ef6720b3406d508f14a 4e0444e1833b39198b3f37d6f556b0443dabff58bcd8e8b16530b0f980ea2b1b
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.6.15 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Thu, 05 Oct 2023 23:12:20 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 12061
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.4 | 198.187.31.243 | 200 OK | 3.2 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.4 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (11513), with no line terminators Hashefc27e253fae1b7b891fb5a40e687768 ad12044651ffac0badcd0e42f32edef91678b1ff 46e36dd6ca93014e4915c723632bf180d27cc96ccfb7c26e69213e1a82129a62
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.4 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 07 May 2024 09:58:51 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3228
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.9.4 | 198.187.31.243 | 200 OK | 3.9 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.9.4 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (13054), with no line terminators Hash917602d642f84a211838f0c1757c4dc1 392df3fb4b0ec96ce4ebb5616e6b2a5c55a54bf8 d702e5ed1e573918d912775ac1e88987fc177aa51efe1253a08f71ab54f96516
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.9.4 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 07 May 2024 09:58:51 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3919
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/js/main.js?ver=6.5.3 | 198.187.31.243 | 200 OK | 2.2 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/js/main.js?ver=6.5.3 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash87d46607c9e477c865ce4f2dac4b3c61 2ac9627cfba582def93f0fdaf6533f3d2f634c49 f8a6862f2c4b38ea8e174b59648f5210d2848df5a97568cf94ee8c384af34374
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementinvader-addons-for-elementor/assets/js/main.js?ver=6.5.3 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Wed, 13 Mar 2024 21:59:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2232
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/ibtana-visual-editor/js/jquery.ive-countdown.min.js?ver=2.4.5 | 198.187.31.243 | 200 OK | 2.4 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/ibtana-visual-editor/js/jquery.ive-countdown.min.js?ver=2.4.5 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (540), with CRLF line terminators Hash0359b13ef50f115d1ef6a74ea2d6f935 676e2fbdcd26634c35fb14989f060fe1ee700992 de5426cb12094b99983f6da7dad9136892d1e72d7a54fb538ec2195b36131104
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/ibtana-visual-editor/js/jquery.ive-countdown.min.js?ver=2.4.5 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Fri, 03 May 2024 09:59:37 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2407
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/wp-whatsapp/assets/js/whatsapp-button.js?ver=3.6.4 | 198.187.31.243 | 200 OK | 441 B |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/wp-whatsapp/assets/js/whatsapp-button.js?ver=3.6.4 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text Hash211d80171f64d99ab3049a06e55c595e aa94cc5304822f5efdeaf9b324e8af14a0224f30 6b4040ab94c49f9ad7d7bfe5e145a69a2130cfb2493477fc271199c015d4745b
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/wp-whatsapp/assets/js/whatsapp-button.js?ver=3.6.4 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Wed, 10 Apr 2024 17:35:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 441
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/themes/houzez/js/vendors/bootstrap-select.min.js?ver=1.13.18 | 198.187.31.243 | 200 OK | 15 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/themes/houzez/js/vendors/bootstrap-select.min.js?ver=1.13.18 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (53354) Hash3a7fa5da04cf747fa04aa1ec8d2c2794 f6ffcd620919065a9614ab16d7d7d255c508106e aa8d026a6e17274410d3a5e70a20856018771835d4e398f7969529f9e9b6c815
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/houzez/js/vendors/bootstrap-select.min.js?ver=1.13.18 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Thu, 05 Oct 2023 23:02:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 15419
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/wpdirectorykit/public/js/slick/slick.min.js?ver=1.8 | 198.187.31.243 | 200 OK | 15 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/wpdirectorykit/public/js/slick/slick.min.js?ver=1.8 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hashdb662f1499e90a76fd4de2fbc87250b3 def1bf16e5ddfddd29e53546627b5cd6f3915de6 6596a1e2c00a9382621eecdd04431e99c4638499a25fe64389d690a05d838a15
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/wpdirectorykit/public/js/slick/slick.min.js?ver=1.8 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Wed, 10 Apr 2024 17:35:41 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 14940
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2 | 198.187.31.243 | 200 OK | 2.3 kB |
URL GET HTTP/2overhplusproperties.com/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (8171), with no line terminators Hashdda652db133fddb9b80a05c6d1b5c540 60c8514c57a5db2980c4b046b0dd479bd427357b c1a9a3e223bad631dff12d33b5499eb145cb08d8621c20d9d73870e78d97afe4
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Wed, 29 Mar 2023 21:59:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2320
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/themes/houzez/js/vendors/modernizr.custom.js?ver=3.2.0 | 198.187.31.243 | 200 OK | 5.6 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/themes/houzez/js/vendors/modernizr.custom.js?ver=3.2.0 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (14495) Hash2e62c99b7d4074fa2d09be382b6713da e77d431143d38a0a658f9e4ed7aee6802137aec5 bf5d10cec5ce3e9e900f7c4020be9776c2045e3d90d19b67d4eac72cd2faeda1
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/houzez/js/vendors/modernizr.custom.js?ver=3.2.0 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Thu, 05 Oct 2023 23:02:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5603
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-includes/js/dist/dom-ready.min.js?ver=f77871ff7694fffea381 | 198.187.31.243 | 200 OK | 275 B |
URL GET HTTP/2overhplusproperties.com/wp-includes/js/dist/dom-ready.min.js?ver=f77871ff7694fffea381 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (422) Hashe4bc17cc45ca91ab0f09dea134975c51 3c03312717fb495c051d02a3d27ec0d8abc2557d 5a43a22e48f94b7a45a9a9b1a107f197213b73307fdfa2e6b2daadab264f94d2
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/dist/dom-ready.min.js?ver=f77871ff7694fffea381 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 02 Apr 2024 21:59:11 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 275
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-includes/js/dist/a11y.min.js?ver=d90eebea464f6c09bfd5 | 198.187.31.243 | 200 OK | 825 B |
URL GET HTTP/2overhplusproperties.com/wp-includes/js/dist/a11y.min.js?ver=d90eebea464f6c09bfd5 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (2322) Hash85ccfa6bfeb1f46e967d204f827ff4dc 37f9f7a030569dded1441f85916b7eb0eefd59eb bb4e63c126beae75728fc000a8847d4d91427b7a63e711f3668de1c20bd5d76c
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/dist/a11y.min.js?ver=d90eebea464f6c09bfd5 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 02 Apr 2024 21:59:10 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 825
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.2 | 198.187.31.243 | 200 OK | 1.0 kB |
URL GET HTTP/2overhplusproperties.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.2 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (3224) Hashc4a1336d5abc0f160d866481f99b1717 4498359374276a34a59ab798d667da38fd17a439 809ec973a018b6bf8ac18e74bfffc3d25182e6f44df00128d531cf3e07570ee6
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.2 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Wed, 02 Nov 2022 22:02:33 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1001
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-prereq.js?ver=4761 | 198.187.31.243 | 200 OK | 6.1 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-prereq.js?ver=4761 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (580) Hash217a60c26ac058061008ee939460cc0e 8a84d4cb092fbba8df7890a0dbff82fab87f127e dab69af700e302b9d41e9267aeff95d778fe26e000f4038b7b07cc1e3c87034e
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-prereq.js?ver=4761 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Fri, 08 Dec 2023 21:59:15 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6081
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/themes/houzez/js/vendors/slideout.min.js?ver=2.8.6.1 | 198.187.31.243 | 200 OK | 2.2 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/themes/houzez/js/vendors/slideout.min.js?ver=2.8.6.1 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (7314), with no line terminators Hash4bb5425e886f09bd7c3acf6757a9aa04 7166ed307b771398a593fc3d4f1c5d93fbbe19bb b7ecc9fe0f3f29720932349541d9e26ede1d95a0f173dcd7afff6834f796a9d8
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/houzez/js/vendors/slideout.min.js?ver=2.8.6.1 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Thu, 05 Oct 2023 23:02:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2219
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-results-vertical.js?ver=4761 | 198.187.31.243 | 200 OK | 541 B |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-results-vertical.js?ver=4761 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (543) Hash4c36f7b38ac79aeec73a608a3ff1bc07 c78d85d7bf0cd2be4900b85e64e6874f4ca3c803 45ae39b83ce75a8dbf0febf1e5b630fc54a713039ccfad6b46238212a1b858a9
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-results-vertical.js?ver=4761 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Fri, 08 Dec 2023 21:59:15 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 541
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 | 198.187.31.243 | 200 OK | 6.8 kB |
URL GET HTTP/2overhplusproperties.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (8189) Hashc4e68a0f3463c0bd3c39eab38815e881 0ce58644e9f3c5063a11453ff287c5ec096465a7 ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Wed, 29 Mar 2023 21:59:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6801
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-autocomplete.js?ver=4761 | 198.187.31.243 | 200 OK | 636 B |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-autocomplete.js?ver=4761 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (528) Hasha1c36aeb7a1e465a24899cbeaab3a3a6 8fb84b7536d214fefbf1d7d65ad887a4a441d4e9 358d031ae310f2f7949026440ade6a6e0d1bf52733503156366796bf2d401347
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-autocomplete.js?ver=4761 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Fri, 08 Dec 2023 21:59:15 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 636
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/wpdirectorykit/elementor-elements/assets/js/wdk-main.js?ver=1.0 | 198.187.31.243 | 200 OK | 1.2 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/wpdirectorykit/elementor-elements/assets/js/wdk-main.js?ver=1.0 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hashd2933fb32e39415707f20ddc1f332112 16d010d5bb52f7b6e194ec383c454d60916d85a8 0af75e655b0270b952b64ed0f19a193c8a34ad8a11928a5537960d12157ff87b
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/wpdirectorykit/elementor-elements/assets/js/wdk-main.js?ver=1.0 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Wed, 10 Apr 2024 17:35:41 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1226
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-includes/js/jquery/ui/menu.min.js?ver=1.13.2 | 198.187.31.243 | 200 OK | 2.9 kB |
URL GET HTTP/2overhplusproperties.com/wp-includes/js/jquery/ui/menu.min.js?ver=1.13.2 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (9937) Hashe2bc91c1d4c06617208975356d06bdf6 9b1e91e6de18346b34cc8adbd87d918c82e47afc dc50c28f1db50dbce579d4738a0e55001a5f954df3307ca5d502f42202d1d05c
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/ui/menu.min.js?ver=1.13.2 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Wed, 29 Mar 2023 21:59:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2883
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0 | 198.187.31.243 | 200 OK | 2.4 kB |
URL GET HTTP/2overhplusproperties.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (6625), with no line terminators Hashfd7ef2e4737acd74fd0dcdc3b515e304 0d792b33f12a48ee8aaaf2560a63a5682470645b 1d52e1ac7d3bc25a8b0ffc257153f9dd50249f96fe9a4df5e0d771241a69062c
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 07 Nov 2023 22:03:23 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2402
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-core.js?ver=4761 | 198.187.31.243 | 200 OK | 10 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-core.js?ver=4761 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (618) Hash69b2f78354cb0e95dd18259f97967632 aeff09a4e8e38c6cd47a438417f9dfd1027480cd c76c0b19f03b2ed4c56420f712e674fb0f98c5b1e2e5770b1b43a5d78ca2e694
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-core.js?ver=4761 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Fri, 08 Dec 2023 21:59:15 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 10168
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/themes/houzez/css/icons.css?ver=2.8.6.1 | 198.187.31.243 | 200 OK | 1.3 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/themes/houzez/css/icons.css?ver=2.8.6.1 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
Hash9da653fd629631565dc3aaae18aef817 d2fdb7ae40c23463f69f0e86fbb2b1d941ae417c 8d5eecac1eae5db784200e2a1403b665740a515331aa7c923173659c7eed5da2
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/houzez/css/icons.css?ver=2.8.6.1 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Thu, 05 Oct 2023 23:01:59 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1323
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 | 198.187.31.243 | 200 OK | 14 kB |
URL GET HTTP/2overhplusproperties.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (38582), with no line terminators Hash92f8c01350c630f414f5d0b015ad6864 eab40ab4e77f92f2fb17684aaf44b579a51b8034 17b79ece7ef9d1454a90156690d33d64387b67a7a7548fc826012512e287a937
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 02 Apr 2024 21:59:11 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 13501
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18 | 198.187.31.243 | 200 OK | 1.5 kB |
URL GET HTTP/2overhplusproperties.com/wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (4272) Hash072d3f6e5c446f57d5c544f9931860e2 ee6aa3d65b474309376468b24bb6f829a4514809 2cb546fbdda7995d374fffa4b2f6530bbcf57d014639ddf76de45df43d593045
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 02 Apr 2024 21:59:11 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1460
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.13.2 | 198.187.31.243 | 200 OK | 2.7 kB |
URL GET HTTP/2overhplusproperties.com/wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.13.2 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (8281) Hashce2136461c78408405538b0d3fa6b403 cf46492e7045a2671b2432ace845c9bc772924f4 1e4307ac8b8c4d489c755729b6b1914a876f8693590e802b43ee4ac91b9aa354
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.13.2 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Wed, 29 Mar 2023 21:59:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2677
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.9.20 | 198.187.31.243 | 200 OK | 3.5 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.9.20 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (10364), with no line terminators Hash751fdae094e65b39e6c662e969b8fbe8 dde2424b2be1db52fc16cbfa2d0d22112e1f9b2f ef9da71a42581033f8b96ead8c6c1e4f72b230e455472a22d120cd573de38537
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.9.20 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Wed, 08 May 2024 21:59:22 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3519
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-includes/js/jquery/ui/slider.min.js?ver=1.13.2 | 198.187.31.243 | 200 OK | 3.0 kB |
URL GET HTTP/2overhplusproperties.com/wp-includes/js/jquery/ui/slider.min.js?ver=1.13.2 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (10549) Hasha8f8aaa5156c364da8cf20f3a484d0c8 279953b7348d460444ece4548ed2d899ed5b52f7 3681c04c0ff2875ebbc18c582f7312f63a6fa21d4569c3bde1cf4a299d619311
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/ui/slider.min.js?ver=1.13.2 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Wed, 29 Mar 2023 21:59:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2980
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/themes/houzez/js/vendors/jquery.vide.min.js?ver=0.5.1 | 198.187.31.243 | 200 OK | 1.8 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/themes/houzez/js/vendors/jquery.vide.min.js?ver=0.5.1 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (4322) Hash901e2d8fd2af243d3d8dd68e38fa22da a1cacad6d220f356b78ee695bc1b5d28aa63cc09 be3950dab42791bb50d60a09c80869ba8c86f7dab74eff23b91a365d0c710831
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/houzez/js/vendors/jquery.vide.min.js?ver=0.5.1 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Thu, 05 Oct 2023 23:02:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1799
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/themes/houzez/style.css?ver=2.8.6.1 | 198.187.31.243 | 200 OK | 1.9 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/themes/houzez/style.css?ver=2.8.6.1 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (4148) Hashdc829eb308681afb8eed7d66762b36e6 d979dcec986914397f6a277bf5e09cd84c33637a e7c257a257ce310a4e4cdf7997d3f1721791d5a61961d668888c7be0404194f0
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/houzez/style.css?ver=2.8.6.1 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Thu, 05 Oct 2023 23:01:59 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1861
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/themes/houzez/js/vendors/theia-sticky-sidebar.min.js?ver=2.8.6.1 | 198.187.31.243 | 200 OK | 1.6 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/themes/houzez/js/vendors/theia-sticky-sidebar.min.js?ver=2.8.6.1 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (5235), with no line terminators Hash6c605d97cc48acafdf4ceead9af2c754 15fe000e8bb858ecd65560bec8f3c13121abed53 c095755d711e7f1746b7ad02888bc458e6a87584f7d151365f84eae846956961
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/houzez/js/vendors/theia-sticky-sidebar.min.js?ver=2.8.6.1 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Thu, 05 Oct 2023 23:02:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1588
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 | 198.187.31.243 | 200 OK | 3.5 kB |
URL GET HTTP/2overhplusproperties.com/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
Hasha8127c1a87bb4f99edbeec7c37311dcd 9997a1745f48bdd233dbe9bd8164daa53eba105b f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 02 Apr 2024 21:59:11 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3542
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-load.js?ver=4761 | 198.187.31.243 | 200 OK | 71 B |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-load.js?ver=4761 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
Hash2e69ad2b1a30e8f89971cb6912f079cf fe425f207b5ca32effaf1827173b16715a32e6a5 1771aad88d0164b8f869d097851c94cc83d1a837f12fe8de39d0f309fe45f33c
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-load.js?ver=4761 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Fri, 08 Dec 2023 21:59:15 GMT
accept-ranges: bytes
content-length: 71
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-wrapper.js?ver=4761 | 198.187.31.243 | 200 OK | 1.8 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-wrapper.js?ver=4761 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (806) Hashe5695937f6e0e31357ccc78cb83a74ed 56a4c5c63cd83444f48e0aec65e62aa55decc9dd 30dbace3242c382df25bdfcb858c88d826c3f2d845d899603babbd841d0770ce
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-wrapper.js?ver=4761 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Fri, 08 Dec 2023 21:59:15 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1791
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/themes/houzez/css/main.css?ver=2.8.6.1 | 198.187.31.243 | 200 OK | 53 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/themes/houzez/css/main.css?ver=2.8.6.1 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (1121) Hash337b51cacc260792ea3d2dbb604fb248 03bafbb463cc25848929d913a709b68cc05be303 f57a820be3a3c4ca9a5d955207d3b4bf69293b7c760f15cdf15cca5ca4fc794f
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/houzez/css/main.css?ver=2.8.6.1 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Thu, 05 Oct 2023 23:01:59 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 53340
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 | 198.187.31.243 | 200 OK | 30 kB |
URL GET HTTP/2overhplusproperties.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash826eb77e86b02ab7724fe3d0141ff87c 79cd3587d565afe290076a8d36c31c305a573d18 cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 07 Nov 2023 22:03:23 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 29744
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/themes/houzez/js/vendors/bootstrap.bundle.min.js?ver=4.5.0 | 198.187.31.243 | 200 OK | 21 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/themes/houzez/js/vendors/bootstrap.bundle.min.js?ver=4.5.0 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65297) Hash7fd2f04e75bd7ab1a79d80cdd4c33085 e02a14457b25e6df2568b772feab4387c00a4934 5edf297381b409d711bc8d27676951a59e151e783412850332519c05243d1e24
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/houzez/js/vendors/bootstrap.bundle.min.js?ver=4.5.0 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Thu, 05 Oct 2023 23:02:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 20813
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/wp-whatsapp/assets/dist/js/njt-whatsapp.js?ver=3.6.4 | 198.187.31.243 | 200 OK | 19 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/wp-whatsapp/assets/dist/js/njt-whatsapp.js?ver=3.6.4 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (52731), with no line terminators Hash8f6c78c3283b4fe1c7fa6bf343e1d8d0 fbe00cdcaa58ce6b2b541c1fe62e33adddff4ca4 ac6ad0343fa33fe9e944bf7e69cae3c5f4d77ac83fd9be5bee24197954453a86
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/wp-whatsapp/assets/dist/js/njt-whatsapp.js?ver=3.6.4 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Wed, 10 Apr 2024 17:35:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 18570
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/themes/houzez/js/custom.js?ver=2.8.6.1 | 198.187.31.243 | 200 OK | 27 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/themes/houzez/js/custom.js?ver=2.8.6.1 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text Hash4c02b1d719d5c1c7ec6ef2c2127d5f25 5b47de171f0d1df098678ef54eb807c804e66c5b 4aca7b87cd79e7741ba5b0fc279b30d97cc8d5bf180f027fd96f1eb925635c8b
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/houzez/js/custom.js?ver=2.8.6.1 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Thu, 05 Oct 2023 23:01:59 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 26749
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/uploads/2022/06/cropped-OVERHPLUS-LOGO-PNG-2-e1665175117924-1024x657.png | 198.187.31.243 | 200 OK | 33 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/uploads/2022/06/cropped-OVERHPLUS-LOGO-PNG-2-e1665175117924-1024x657.png IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typePNG image data, 1024 x 657, 8-bit colormap, non-interlaced Hash206109e1e96a9e1cbd03391001f9c062 7d642238824820e2407f3452402d2440ac8c5b45 8c3464875b637924d3a508d3778c16f114b0b3493c632dc636133c4cb557e4ab
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2022/06/cropped-OVERHPLUS-LOGO-PNG-2-e1665175117924-1024x657.png HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: image/png
last-modified: Fri, 18 Nov 2022 21:54:50 GMT
accept-ranges: bytes
content-length: 32799
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.6.15 | 198.187.31.243 | 200 OK | 60 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.6.15 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (45047), with CRLF line terminators Hash7722baa787dec6f4e3831067d4cea8f8 ace1624f275bc847a9b0b6d11df6284515a6c63f 52984e532d02a87a060764ff400626a1b81cc316284a8ba1feab5d94697119a0
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.6.15 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Thu, 05 Oct 2023 23:12:20 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 59951
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/buttonizer-multifunctional-button/assets/legacy/frontend.min.js?v=9f851fb3203c740b13d66b2369b3636d&ver=6.5.3 | 198.187.31.243 | 200 OK | 66 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/buttonizer-multifunctional-button/assets/legacy/frontend.min.js?v=9f851fb3203c740b13d66b2369b3636d&ver=6.5.3 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (64398) Hasheb783c542cf9579993f018ed0b8bbe99 6e945a4620432f465c530080e8bff016f46042d3 208c53e8ac495229437f6586207dd40bcfcd00a8f8167c0335d0bc965841d44c
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/buttonizer-multifunctional-button/assets/legacy/frontend.min.js?v=9f851fb3203c740b13d66b2369b3636d&ver=6.5.3 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Thu, 01 Feb 2024 21:59:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 65846
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.6.15 | 198.187.31.243 | 200 OK | 104 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.6.15 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (64288) Size104 kB (103977 bytes) Hash0c66e2218aea88286463aa42d24e5532 3d249460118fb011dcfb3c22f6304460255ef52e d83aec48544d062dde1996c25831b736a6262a98fc15a037ee5c72b1f9f0aeb2
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.6.15 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Thu, 05 Oct 2023 23:12:20 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 103977
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets/menu.css | 198.187.31.243 | 200 OK | 2.7 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets/menu.css IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hashd527b1bdf1002da69f92e505452d8c33 e49db65a8a297c0c7aa8290c91d681a4eba33adb 3aa03d5a85a9346e728fa5f53f410d12602d1a9718682d519bb8fdc4511b981a
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets/menu.css HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets.css?ver=1.1
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Wed, 13 Mar 2024 21:59:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2723
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/_animation.css | 198.187.31.243 | 200 OK | 184 B |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/_animation.css IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hash8a344aad61c92b41df63bc5502491be6 be90dc4ffcf536c09288ff33f92c1e630d53d42a 6a78a30bb7e1b8adb6f7c6da268441ff7e93e015332b899c9a73a06aa28bcc42
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementinvader-addons-for-elementor/assets/css/_animation.css HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets.css?ver=1.1
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Wed, 13 Mar 2024 21:59:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 184
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets/contact_form.css | 198.187.31.243 | 200 OK | 1.3 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets/contact_form.css IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hashc186404ed23a9364f1d47f516bb7dcd7 1635b1bdbb68f0545e4aa0ba96a89b4326cbaa8d 047fb5ec3f0db5444e87c1647ddf12a8260a51a8de85e97c023346fb0bc11188
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets/contact_form.css HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets.css?ver=1.1
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Wed, 13 Mar 2024 21:59:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1289
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets/map.css | 198.187.31.243 | 200 OK | 4.3 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets/map.css IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hasha9929ef1716d8ba1615c2cfe33534c38 6a23e64e9bf972912c8561ebb0bc1aaf28f3ecb2 73beab90a2e94d417314f49ddb6e96e32f1870059be60019cebf68f31e7b2d63
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets/map.css HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets.css?ver=1.1
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Wed, 13 Mar 2024 21:59:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4264
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets/newslatter_form.css | 198.187.31.243 | 200 OK | 0 B |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets/newslatter_form.css IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets/newslatter_form.css HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets.css?ver=1.1
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Wed, 13 Mar 2024 21:59:28 GMT
accept-ranges: bytes
content-length: 0
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets/blog-search.css | 198.187.31.243 | 200 OK | 1.1 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets/blog-search.css IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hash1eecfd57907a6d1e0a8067b2e14c6970 537de42678eff87b4a52ce70dcba34a83f9038a3 91912cca6c1ce236ae3eddc3b1122526603fa981fca2c01d9dd77368f2ed0932
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets/blog-search.css HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets.css?ver=1.1
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Wed, 13 Mar 2024 21:59:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1148
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets/blog-grid.css | 198.187.31.243 | 200 OK | 868 B |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets/blog-grid.css IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hashea6f3d84c52341b622b7803b1cd21d4e d805ae4ee3566e5f1f7e63e4d24322d4314d0742 a4656c7bdb2515eddda9be85861ac2708bf36c8ec516d1eeb44b22e08244994b
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets/blog-grid.css HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets.css?ver=1.1
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Wed, 13 Mar 2024 21:59:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 868
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Poppins:100,200,300,400,500,600,700,800,900,100italic,200italic,300italic,400italic,500italic,600italic,700italic,800italic,900italic&display=swap&ver=1701367897 | 142.250.74.106 | 200 OK | 1.9 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Poppins:100,200,300,400,500,600,700,800,900,100italic,200italic,300italic,400italic,500italic,600italic,700italic,800italic,900italic&display=swap&ver=1701367897 IP142.250.74.106:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typegzip compressed data, max compression Hash896ed3a2b3910e4d48f4a121402f0722 74bcf8b183db79c50561e26995770d887f211992 f4bea901c5c5771dc67812d95c9bcfc9327e58442fd0477c1685e679437ce6ca
GET /css?family=Poppins:100,200,300,400,500,600,700,800,900,100italic,200italic,300italic,400italic,500italic,600italic,700italic,800italic,900italic&display=swap&ver=1701367897 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 10 May 2024 07:39:58 GMT
date: Fri, 10 May 2024 07:39:58 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets/logo.css | 198.187.31.243 | 200 OK | 142 B |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets/logo.css IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hash279515feb7d5687ffdbd5ecc9c8523f1 e13fabcec355d14986f0bfb04bea9ddc52bf5936 8f5e13ebd18ff4bc0f45ead753724dcc3773846f2f5d735556c6396c977d7a3b
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets/logo.css HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets.css?ver=1.1
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Wed, 13 Mar 2024 21:59:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 142
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-NRV7FJKZ | 142.250.74.40 | 200 OK | 64 kB |
URL GET HTTP/3www.googletagmanager.com/gtm.js?id=GTM-NRV7FJKZ IP142.250.74.40:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (1822) Hash5bb2392a057770b9b2e29c353b643ab0 34f1472d8abc6afbd073823a301f827b947864a5 7e54321fe6bfe3d35771b335a5bceafcb2e8564a2a3b271b6058b3f20c575e0e
GET /gtm.js?id=GTM-NRV7FJKZ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 10 May 2024 07:39:59 GMT
expires: Fri, 10 May 2024 07:39:59 GMT
cache-control: private, max-age=900
last-modified: Fri, 10 May 2024 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 64423
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 | 142.250.74.163 | 200 OK | 7.9 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 IP142.250.74.163:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7884, version 1.0 Hash9212f6f9860f9fc6c69b02fedf6db8c3 ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b 7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://overhplusproperties.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 01:33:12 GMT
expires: Fri, 09 May 2025 01:33:12 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:38 GMT
content-type: font/woff2
age: 108407
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 | 142.250.74.163 | 200 OK | 7.7 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 IP142.250.74.163:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7748, version 1.0 Hasha09f2fccfee35b7247b08a1a266f0328 0da2d17e738f46d2a09e6fb7969da451719a9820 cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
GET /s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://overhplusproperties.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 10 May 2024 04:42:48 GMT
expires: Sat, 10 May 2025 04:42:48 GMT
cache-control: public, max-age=31536000
age: 10631
last-modified: Fri, 22 Mar 2024 00:01:14 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 | 142.250.74.163 | 200 OK | 8.0 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 IP142.250.74.163:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 8000, version 1.0 Hash72993dddf88a63e8f226656f7de88e57 179f97ec0275f09603a8db94d4380eb584d81cd5 f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://overhplusproperties.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 10 May 2024 02:15:02 GMT
expires: Sat, 10 May 2025 02:15:02 GMT
cache-control: public, max-age=31536000
age: 19497
last-modified: Fri, 22 Mar 2024 00:00:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 | 142.250.74.163 | 200 OK | 7.8 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 IP142.250.74.163:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7816, version 1.0 Hash25b0e113ca7cce3770d542736db26368 cb726212d5d525021752a1d8470a0fb593e0c49e 9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://overhplusproperties.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 01:56:05 GMT
expires: Fri, 09 May 2025 01:56:05 GMT
cache-control: public, max-age=31536000
age: 107034
last-modified: Fri, 22 Mar 2024 00:00:32 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/themes/houzez/fonts/houzez-iconfont.ttf?jd28ud | 198.187.31.243 | 200 OK | 39 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/themes/houzez/fonts/houzez-iconfont.ttf?jd28ud IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeTrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, houzez-iconfont Hashe2ed5db33e8e6e0566ab2580c9143dac 8bc500cf776f0a9a01f651e67d47827bd308f397 034024ac4b985d73a9b405f6581f5677561d172d67264943f318f333f6d0ce9c
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/houzez/fonts/houzez-iconfont.ttf?jd28ud HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/wp-content/themes/houzez/css/icons.css?ver=2.8.6.1
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:59 GMT
content-type: font/ttf
last-modified: Thu, 05 Oct 2023 23:02:00 GMT
accept-ranges: bytes
content-length: 38792
date: Fri, 10 May 2024 07:39:59 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/?acfbe0c=6259950 | 198.187.31.243 | 200 OK | 0 B |
URL GET HTTP/2overhplusproperties.com/?acfbe0c=6259950 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /?acfbe0c=6259950 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
set-cookie: _http_accept:image/webp=1; path=/; secure
content-type: text/html; charset=UTF-8
content-length: 0
date: Fri, 10 May 2024 07:40:00 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 | 142.250.74.163 | 200 OK | 7.8 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 IP142.250.74.163:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7840, version 1.0 Hash8d91ec1ca2d8b56640a47117e313a3e9 a9e9bafe64666f4595051a0e895b47a5fa39e67e 78bc3aa78faec288bbb3bf26c9a0fa4eb67b1e69da94a17233c5cab60525efdb
GET /s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://overhplusproperties.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7840
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 21:56:25 GMT
expires: Fri, 09 May 2025 21:56:25 GMT
cache-control: public, max-age=31536000
age: 35015
last-modified: Fri, 22 Mar 2024 00:02:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v21/pxiGyp8kv8JHgFVrJJLucHtA.woff2 | 142.250.74.163 | 200 OK | 8.7 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiGyp8kv8JHgFVrJJLucHtA.woff2 IP142.250.74.163:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 8668, version 1.0 Hasha242ba0df3a128a2cab929a8c45d5056 d70e2c70b21cbb66cd883ae56e2dedacefd81c7c 50d0c1742d80ac71f4cde20e8c04d41a24806af342831f479938b527fbff0972
GET /s/poppins/v21/pxiGyp8kv8JHgFVrJJLucHtA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://overhplusproperties.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8668
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 02:11:14 GMT
expires: Fri, 09 May 2025 02:11:14 GMT
cache-control: public, max-age=31536000
age: 106126
last-modified: Fri, 22 Mar 2024 00:00:54 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/elementor/assets/lib/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 | 198.187.31.243 | 200 OK | 77 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/elementor/assets/lib/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459 Hashaf7ae505a9eed503f8b8e6982036873e d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122; _gcl_au=1.1.1352911286.1715326799; _ga_7CX2MZWSRC=GS1.1.1715326799.1.0.1715326799.0.0.0; _ga=GA1.1.1553552394.1715326799
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:40:00 GMT
content-type: font/woff2
last-modified: Wed, 08 May 2024 09:59:32 GMT
accept-ranges: bytes
content-length: 77160
date: Fri, 10 May 2024 07:40:00 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| js-eu1.hs-scripts.com/143374183.js?integration=WordPress&ver=11.1.6 | 172.65.208.22 | 410 Gone | 99 B |
URL GET HTTP/2js-eu1.hs-scripts.com/143374183.js?integration=WordPress&ver=11.1.6 IP172.65.208.22:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerLet's Encrypt Subjecths-scripts.com Fingerprint10:6A:CE:54:F8:1D:59:1E:1F:7D:DB:76:07:FC:FF:1A:7D:70:E9:BD ValidityMon, 01 Apr 2024 23:22:11 GMT - Sun, 30 Jun 2024 23:22:10 GMT
Hash7aff9060b2879bc0220218fdb543ca47 3f6eade44c6c3d3b9174bf208eea6641dbb5a0cb a6f2bcba3bc68259bdfe85305e521f3186734c20d0af96c22fe4a162eef8f980
GET /143374183.js?integration=WordPress&ver=11.1.6 HTTP/1.1
Host: js-eu1.hs-scripts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 410 Gone
date: Fri, 10 May 2024 07:40:00 GMT
content-type: application/json;charset=utf-8
content-length: 99
vary: origin, Accept-Encoding
access-control-allow-credentials: true
x-content-type-options: nosniff
access-control-max-age: 3600
access-control-allow-origin: https://overhplusproperties.com
x-envoy-upstream-service-time: 5
x-evy-trace-route-service-name: envoyset-translator
x-evy-trace-virtual-host: all
x-hubspot-correlation-id: c2cdf689-a97b-400b-a9c6-965e42ec9855
x-evy-trace-served-by-pod: fra04/hubapi-td/envoy-proxy-68d6f869c4-jmnkh
x-evy-trace-listener: listener_https
x-evy-trace-route-configuration: listener_https/all
x-request-id: c2cdf689-a97b-400b-a9c6-965e42ec9855
cf-cache-status: HIT
age: 2
server: cloudflare
cf-ray: 8818475658fd8295-ARN
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/themes/houzez/css/font-awesome/webfonts/fa-solid-900.woff2 | 198.187.31.243 | 200 OK | 80 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/themes/houzez/css/font-awesome/webfonts/fa-solid-900.woff2 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 80148, version 331.17301 Hashc500da19d776384ba69573ae6fe274e7 6290834672aba86d5b6c1c73b30b57c9c53996f7 cfe3b7382e477059da11be2099914b94f0e2a4f08240c60542c376957b8d9658
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/houzez/css/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/wp-content/themes/houzez/css/font-awesome/css/all.min.css?ver=2.8.6.1
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122; _gcl_au=1.1.1352911286.1715326799; _ga_7CX2MZWSRC=GS1.1.1715326799.1.0.1715326799.0.0.0; _ga=GA1.1.1553552394.1715326799
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:40:00 GMT
content-type: font/woff2
last-modified: Thu, 05 Oct 2023 23:02:00 GMT
accept-ranges: bytes
content-length: 80148
date: Fri, 10 May 2024 07:40:00 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/themes/houzez/css/font-awesome/webfonts/fa-brands-400.woff2 | 198.187.31.243 | 200 OK | 77 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/themes/houzez/css/font-awesome/webfonts/fa-brands-400.woff2 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 77400, version 331.17301 Hashcac68c831145804808381a7032fdc7c2 62584b9868428fd75af3fc5ee2f9918dda428be5 1c87d2b26de7d55c66037916bbb4cba6c791da0e2adfa378332678ff13e12d9d
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/houzez/css/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/wp-content/themes/houzez/css/font-awesome/css/all.min.css?ver=2.8.6.1
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122; _gcl_au=1.1.1352911286.1715326799; _ga_7CX2MZWSRC=GS1.1.1715326799.1.0.1715326799.0.0.0; _ga=GA1.1.1553552394.1715326799
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:40:00 GMT
content-type: font/woff2
last-modified: Thu, 05 Oct 2023 23:02:00 GMT
accept-ranges: bytes
content-length: 77400
date: Fri, 10 May 2024 07:40:00 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-NRV7FJKZ | 142.250.74.40 | 200 OK | 64 kB |
URL GET HTTP/3www.googletagmanager.com/gtm.js?id=GTM-NRV7FJKZ IP142.250.74.40:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (1822) Hash0eac54fadc600b2de4bdf29d26710f2d 742863a3d5937caa1fd9965d22de6f57b64be825 805f2ff6e73b90225955c85d829ef1d633eaa2dba5d5b69fc1eea7a584d523c0
GET /gtm.js?id=GTM-NRV7FJKZ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 10 May 2024 07:40:00 GMT
expires: Fri, 10 May 2024 07:40:00 GMT
cache-control: private, max-age=900
last-modified: Fri, 10 May 2024 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 64422
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| overhplusproperties.com/wp-includes/js/wp-emoji-release.min.js?ver=6.5.3 | 198.187.31.243 | 200 OK | 4.7 kB |
URL GET HTTP/2overhplusproperties.com/wp-includes/js/wp-emoji-release.min.js?ver=6.5.3 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (15752) Hashb976b651932bfd25b9ddb5b7693d88a7 7fcb7cb5c11227f9213b1e08a07d0212209e1432 4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.5.3 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122; _gcl_au=1.1.1352911286.1715326799; _ga_7CX2MZWSRC=GS1.1.1715326799.1.0.1715326799.0.0.0; _ga=GA1.1.1553552394.1715326799
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 02 Apr 2024 21:59:10 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4676
date: Fri, 10 May 2024 07:40:00 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| secure.gravatar.com/avatar/3e38994bcc7c10e46325f2f81d7fc6b4?s=60&d=mm&r=g | 192.0.73.2 | 200 OK | 2.8 kB |
URL GET HTTP/2secure.gravatar.com/avatar/3e38994bcc7c10e46325f2f81d7fc6b4?s=60&d=mm&r=g IP192.0.73.2:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subject*.gravatar.com Fingerprint28:34:17:4E:69:95:4B:B9:70:DF:D4:0F:AA:2C:8D:60:F2:45:E7:D0 ValidityTue, 05 Dec 2023 00:00:00 GMT - Sat, 04 Jan 2025 23:59:59 GMT
File typePNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced Hash08a95fdb75ca6b42721f43cf7975d4af 764ff1d0577b5085f00f3ce7cc7bc943784f5882 7dae0e5c9da0bb4061252c4dfc3b9897c096a6465bf2b1fda1f928348f764fe9
GET /avatar/3e38994bcc7c10e46325f2f81d7fc6b4?s=60&d=mm&r=g HTTP/1.1
Host: secure.gravatar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 07:40:01 GMT
content-type: image/png
content-length: 2799
last-modified: Mon, 16 Oct 2023 16:50:02 GMT
link: <https://gravatar.com/avatar/3e38994bcc7c10e46325f2f81d7fc6b4?s=60&d=mm&r=g>; rel="canonical"
content-disposition: inline; filename="3e38994bcc7c10e46325f2f81d7fc6b4.png"
access-control-allow-origin: *
expires: Fri, 10 May 2024 07:45:01 GMT
cache-control: max-age=300
x-nc: HIT arn 1
alt-svc: h3=":443"; ma=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/uploads/2023/10/OVERHPLUS-LOGO-PNG-2-114x114-1.png | 198.187.31.243 | 200 OK | 3.8 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/uploads/2023/10/OVERHPLUS-LOGO-PNG-2-114x114-1.png IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typePNG image data, 114 x 114, 8-bit colormap, non-interlaced Hash4418e719e1f16f4dd3113264f1b13628 d3ddd1f84eecab54120434c9cedd64bf016da6dd 667dcbe3683ec97ee535b7a78e059447c739e0f1ef79eefa31048819a62383d1
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2023/10/OVERHPLUS-LOGO-PNG-2-114x114-1.png HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122; _gcl_au=1.1.1352911286.1715326799; _ga_7CX2MZWSRC=GS1.1.1715326799.1.0.1715326799.0.0.0; _ga=GA1.1.1553552394.1715326799
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:40:01 GMT
content-type: image/png
last-modified: Fri, 06 Oct 2023 14:25:13 GMT
accept-ranges: bytes
content-length: 3833
date: Fri, 10 May 2024 07:40:01 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/uploads/2023/10/OVERHPLUS-LOGO-PNG-2-72x72-1.png | 198.187.31.243 | 200 OK | 2.5 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/uploads/2023/10/OVERHPLUS-LOGO-PNG-2-72x72-1.png IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typePNG image data, 72 x 72, 8-bit colormap, non-interlaced Hashe30ce94c422e860f7dc9722073a100ca ce86da8415db46070dea87d14973f952ed8add44 4bff14f041b0e2da4e21a8ab44786d6e730b8c704782e4b77dad804498226157
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2023/10/OVERHPLUS-LOGO-PNG-2-72x72-1.png HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122; _gcl_au=1.1.1352911286.1715326799; _ga_7CX2MZWSRC=GS1.1.1715326799.1.0.1715326799.0.0.0; _ga=GA1.1.1553552394.1715326799
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:40:01 GMT
content-type: image/png
last-modified: Fri, 06 Oct 2023 14:26:31 GMT
accept-ranges: bytes
content-length: 2502
date: Fri, 10 May 2024 07:40:01 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/main.css?ver=6.5.3 | 198.187.31.243 | 200 OK | 4.7 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/main.css?ver=6.5.3 IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (5060), with no line terminators Hash31022a0d0e4b0e95948eb24ac066f485 f475129bee36d04b537c49e52352f8ac096c0fe4 f95502111b35be49ca8450cc8da69e2429b9fb09328d37aba14a102ee4199a5a
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementinvader-addons-for-elementor/assets/css/main.css?ver=6.5.3 HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Wed, 13 Mar 2024 21:59:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1151
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Open+Sans&display=swap | 142.250.74.106 | 200 OK | 6.0 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Open+Sans&display=swap IP142.250.74.106:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (6096), with no line terminators Hash7e18a097b51eb70d0d781735844b6897 bee01b4d68b934b8a85650c2edd6e0b51fd961b8 4eadd38b698cc5058bc6909316f68e23ad7784bcde595476b27b47a652ff83f0
GET /css?family=Open+Sans&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 10 May 2024 07:39:58 GMT
date: Fri, 10 May 2024 07:39:58 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets/slider.css | 198.187.31.243 | 200 OK | 9.8 kB |
URL GET HTTP/2overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets/slider.css IP198.187.31.243:443
Requested byhttps://overhplusproperties.com/fha-cash-reserve-requirements-everything-you-need-to-know/ CertificateIssuerSectigo Limited Subjectoverhplusproperties.com Fingerprint64:92:90:8F:D0:C9:81:72:39:E2:A8:B1:3A:E4:DF:03:A5:BB:AD:01 ValidityWed, 13 Sep 2023 00:00:00 GMT - Mon, 12 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (10500), with no line terminators Hashd6accf8fe97638dd5152c822057a5b8c 90a05ea95658449c6a85bb3f820573b842960916 252d75be3e2742205873ce6d920d643bb083a6413f63e1aa1c6a3dc2bc256924
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets/slider.css HTTP/1.1
Host: overhplusproperties.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://overhplusproperties.com/wp-content/plugins/elementinvader-addons-for-elementor/assets/css/widgets.css?ver=1.1
Cookie: _http_accept:image/webp=1; PHPSESSID=c1bf10c00380b35c9dc072b0908ae122
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Fri, 17 May 2024 07:39:58 GMT
content-type: text/css
last-modified: Wed, 13 Mar 2024 21:59:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1226
date: Fri, 10 May 2024 07:39:58 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
|
|