| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashe36c852b5e145f2f09fe73111fb162e1 e439c6a462f86a3003d6464a8b9999b1c4d1e210 52a721168d0c41cb0854ff8c730fce3b79db2e804b383238e95ff1401922bd74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "52A721168D0C41CB0854FF8C730FCE3B79DB2E804B383238E95FF1401922BD74"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3290
Expires: Tue, 25 Oct 2022 21:36:29 GMT
Date: Tue, 25 Oct 2022 20:41:39 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashc2bba4cad162918b17858b60e909e4d9 d9a1d4f7fb7635ab233ebbf776e6de1a2857032b 3a1d27ec3d034d6326b32f6054b6be46079a86a33e75d5a2a3796a0c4c5eadab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2952
Cache-Control: max-age=135524
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 20:41:39 GMT
Etag: "6357acdf-1d7"
Expires: Thu, 27 Oct 2022 10:20:23 GMT
Last-Modified: Tue, 25 Oct 2022 09:31:11 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashc2bba4cad162918b17858b60e909e4d9 d9a1d4f7fb7635ab233ebbf776e6de1a2857032b 3a1d27ec3d034d6326b32f6054b6be46079a86a33e75d5a2a3796a0c4c5eadab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6513
Cache-Control: max-age=139085
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 20:41:39 GMT
Etag: "6357acdf-1d7"
Expires: Thu, 27 Oct 2022 11:19:44 GMT
Last-Modified: Tue, 25 Oct 2022 09:31:11 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
|
|
| firefox.settings.services.mozilla.com/v1/ |  34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash4736bac84ca28f2b1e961159fb4ea098 1319612979f53896fcfeacd4215c2715d4951e4c 5e81213e111ddf68c7f884f72b4e06fc4dc95eb902c3cf0762236b2418840dba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
Alt-Used: 0
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 25 Oct 2022 20:41:34 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 5
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash8db408c487f7d35bba323046736e8d3a 01b91e2dce7c6d3de9adfe6ff4d38f9b24ab7db0 9aeafc72c1a969243e1fc96f68ce18888034a749ee70582208bf814bd40b61a5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9AEAFC72C1A969243E1FC96F68CE18888034A749EE70582208BF814BD40B61A5"
Last-Modified: Tue, 25 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14716
Expires: Wed, 26 Oct 2022 00:46:55 GMT
Date: Tue, 25 Oct 2022 20:41:39 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash67d5a988edcda47bc3b3b3f65d32b4b6 d4f0e0da8b3690cc7da925026d3414b68c7d954f 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 1K616+hFM24Mx/Ec/PuQYjCW9gzVmP1LWalWJ7acxK9tbFxIaETd5pg2tcJ7VklL6EK99Jz48cc=
x-amz-request-id: 19CGM23AEA1QWQCP
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 25 Oct 2022 20:38:56 GMT
age: 163
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 25 Oct 2022 20:41:39 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash518ff04fd536958e285cf07aaf4a2786 fa5dad2391c2a9957340bd629f0462db4f412a5c 608c78964412d5dc7025e9cbfaef345d448a29eae0f11257c49a41f274917b9a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5232
Cache-Control: max-age=132740
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 20:41:40 GMT
Etag: "63579918-1d7"
Expires: Thu, 27 Oct 2022 09:34:00 GMT
Last-Modified: Tue, 25 Oct 2022 08:06:48 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 34.214.236.46 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP34.214.236.46:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: qXmIzAjIs003hDfVc6yioA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: iiQB4Tz4p4xLbRLMicMyn+6B9wg=
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash358ecd0ec047d700042e2a62f9847199 7bf4c552f47536fe451dc6ccfb0930c592084ef9 e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3057
Expires: Tue, 25 Oct 2022 21:32:38 GMT
Date: Tue, 25 Oct 2022 20:41:41 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash358ecd0ec047d700042e2a62f9847199 7bf4c552f47536fe451dc6ccfb0930c592084ef9 e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3057
Expires: Tue, 25 Oct 2022 21:32:38 GMT
Date: Tue, 25 Oct 2022 20:41:41 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash358ecd0ec047d700042e2a62f9847199 7bf4c552f47536fe451dc6ccfb0930c592084ef9 e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3057
Expires: Tue, 25 Oct 2022 21:32:38 GMT
Date: Tue, 25 Oct 2022 20:41:41 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash358ecd0ec047d700042e2a62f9847199 7bf4c552f47536fe451dc6ccfb0930c592084ef9 e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3057
Expires: Tue, 25 Oct 2022 21:32:38 GMT
Date: Tue, 25 Oct 2022 20:41:41 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash358ecd0ec047d700042e2a62f9847199 7bf4c552f47536fe451dc6ccfb0930c592084ef9 e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3057
Expires: Tue, 25 Oct 2022 21:32:38 GMT
Date: Tue, 25 Oct 2022 20:41:41 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F075a794f-9140-4676-afb2-493f44932cc3.jpeg | 34.120.237.76 | 200 OK | 4.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F075a794f-9140-4676-afb2-493f44932cc3.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash3cf322f19151bcfa374c2e32b9ac986f e8e69ac951def18bc1e03ecd4fe8a21d3b825b27 54ddfd1876f65e264b9b3209a0e805a3796013b4aacc8e9fd20b49754b4917a0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F075a794f-9140-4676-afb2-493f44932cc3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4206
x-amzn-requestid: 6b02f96a-ea03-4eff-acde-c73925260102
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ah3E3GPQoAMFpIA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63570552-77cf762d0e54f1f60efe52c3;Sampled=0
x-amzn-remapped-date: Mon, 24 Oct 2022 21:36:18 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: jiu-Z6DMgXxXdZ5BDwjNoq5Y15kBgM894k4EY2qSRZKdvk0bfkn89A==
via: 1.1 fec77e486350d1bd33f526a760d8b5a4.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 21:50:16 GMT
age: 82285
etag: "e8e69ac951def18bc1e03ecd4fe8a21d3b825b27"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F21cfb8fe-4b68-43f0-a196-17c9a1dd3acb.png | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F21cfb8fe-4b68-43f0-a196-17c9a1dd3acb.png IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashaf3d4b4d16ad8b30805be96afa6472e3 bceb257123711c43994e5a03e9caf22eeee16423 30d7fea8d87522ce3ba2abf2c47e0025af1b7c05d6b4ea9f26aaa1f06aff4a67
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F21cfb8fe-4b68-43f0-a196-17c9a1dd3acb.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10072
x-amzn-requestid: 2f26fcdb-0540-49ea-be46-83c00182fcc3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelB0FKvoAMFVFg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b53e-1be524647e3db4a211e4c4ff;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:42:22 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: sNu31Qx0p_Ikus0GsGKRNGVxOGnIRSewAXfkXyzOCmT6bJ1D1Qz-0w==
via: 1.1 e77661e211afe9242e85e573f12d5534.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 22:10:29 GMT
age: 81072
etag: "bceb257123711c43994e5a03e9caf22eeee16423"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d616770-e793-4da0-8ebe-826e806ececd.jpeg | 34.120.237.76 | 200 OK | 9.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d616770-e793-4da0-8ebe-826e806ececd.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash89448f1a52030b28e9ecfcdc190787d4 5080ba75c230fd2b303f29a9b64868c6e8771df8 10a736997d441e274a54e9689c349d407087fef7aa7c0f4d0a7a603e446fdabd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d616770-e793-4da0-8ebe-826e806ececd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9209
x-amzn-requestid: 94dad7b4-9c12-4bda-9202-3b7427185182
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aLiElGzEIAMFnOg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634e16e9-3c79cd392d5bc4312a730cda;Sampled=0
x-amzn-remapped-date: Tue, 18 Oct 2022 03:00:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: c5_B2RXKJx7FHrQvHdCG50zcDFWUqaaZu0GYuCxEI8fpK019dSlD3Q==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 13:16:32 GMT
age: 26709
etag: "5080ba75c230fd2b303f29a9b64868c6e8771df8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda327ff0-bd82-4034-a53b-e04d5c486276.jpeg | 34.120.237.76 | 200 OK | 8.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda327ff0-bd82-4034-a53b-e04d5c486276.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash531f350512ac7712d932234803aa4602 2fb4599ad3d513a160c1f29fefda27b45852c381 7a4da3420f736c098806676359b8ff80578a2e1e98fc0e20e45e2d6192e1d566
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda327ff0-bd82-4034-a53b-e04d5c486276.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8090
x-amzn-requestid: a84a2888-e0eb-40d3-8377-9c1ea2af733c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aVb2oH2uoAMFueA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63520cf7-204870ee3f63ced427033eb5;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 03:07:35 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: fUBXr7SKYdvhryoB8p9to-Eo8twjspRYnHO2xf9TtvLJIIyOwe3W1w==
via: 1.1 1de1880e08f1cae7d1aca174a29a5c1e.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 07:43:49 GMT
age: 46672
etag: "2fb4599ad3d513a160c1f29fefda27b45852c381"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Facb7f3ea-1b51-4cac-a5ab-7201a12df641.jpeg | 34.120.237.76 | 200 OK | 8.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Facb7f3ea-1b51-4cac-a5ab-7201a12df641.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash8502c90bf679dce29b1c2a87606bbb3e 7940c911dea3882ab8a7ff70240f4edc1b89a56d ccc5ab3068b7f90276124148a812eb26951a95d7c146bdcf28a69a3d05f76ee2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Facb7f3ea-1b51-4cac-a5ab-7201a12df641.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8735
x-amzn-requestid: 51dfaabc-ee88-465f-8da7-fd6739cf7794
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aZSHjHeLIAMF8mQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635396fc-1e4ad2d647a7f07a094574be;Sampled=0
x-amzn-remapped-date: Sat, 22 Oct 2022 07:08:44 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: dgxcF8hXUOo_WqQwpd0yctMNPuB-IfmSRxD1_TRG7zuV3b5EbpVIig==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 07:51:44 GMT
age: 46197
etag: "7940c911dea3882ab8a7ff70240f4edc1b89a56d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5799e548-737d-43a5-ae0b-3ccb8e2f1daf.jpeg | 34.120.237.76 | 200 OK | 8.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5799e548-737d-43a5-ae0b-3ccb8e2f1daf.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash6977b5f01197ed4e914157b59ce56c2a 0c4bc06cb32bae6cdcbd61fde8b6289fa901a0c2 98ed9be1f79f4d1ff9acd3dc22aa64f7e0218d7c4854fc7cb71e70dd341dd7ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5799e548-737d-43a5-ae0b-3ccb8e2f1daf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8031
x-amzn-requestid: 39e6cba4-dc3b-4fe8-9f00-f9042b3dfb3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ah3D7E2SoAMF_TA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6357054c-541d3ed176c9176913844804;Sampled=0
x-amzn-remapped-date: Mon, 24 Oct 2022 21:36:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: KfIXjRxRZXL0gD2Etdn5kfEjPkqA-faF2KHqrWikR0etkh6oGU4ifw==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 21:50:09 GMT
age: 82292
etag: "0c4bc06cb32bae6cdcbd61fde8b6289fa901a0c2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ibasdistribuidora.com.br/mqou/ossuielqetimas | 162.241.2.83 | 301 Moved Permanently | 0 B |
URL HTTP/1.1ibasdistribuidora.com.br/mqou/ossuielqetimas IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /mqou/ossuielqetimas HTTP/1.1
Host: ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 25 Oct 2022 20:41:40 GMT
Server: Apache
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: https://ibasdistribuidora.com.br/mqou/ossuielqetimas
Content-Length: 0
Keep-Alive: timeout=5, max=75
Content-Type: text/html; charset=UTF-8
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash18fd0c24728d897c93d2cd45d3fd91fd f42f0e16dc0666fb450462fb4d741410ac4660ce 2b000237fbb898417067bb4ccf483a0ff1c0307f367494eddd46d6b90f9aaf7f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2B000237FBB898417067BB4CCF483A0FF1C0307F367494EDDD46D6B90F9AAF7F"
Last-Modified: Tue, 25 Oct 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21564
Expires: Wed, 26 Oct 2022 02:41:07 GMT
Date: Tue, 25 Oct 2022 20:41:43 GMT
Connection: keep-alive
|
|
| ibasdistribuidora.com.br/mqou/ossuielqetimas | 162.241.2.83 | 301 Moved Permanently | 0 B |
URL HTTP/2ibasdistribuidora.com.br/mqou/ossuielqetimas IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /mqou/ossuielqetimas HTTP/1.1
Host: ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-redirect-by: WordPress
location: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
content-length: 0
content-type: text/html; charset=UTF-8
date: Tue, 25 Oct 2022 20:41:44 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashf1ae675435a8f16bc0b04ec012c41979 182f87a81464c80b0b25fb524c59592cd40b0ef4 9191ced121d8740b4ed3af75db3033e72c0c44c0b45004abd714583deaa749a4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 20:41:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash19132f29a8811a10f90eca2d81e5deb8 3b9e0bbf9f40f46b57dad5567b008e58b5770565 708aeab241760b108d60c1462b1979e59cf473242222e9270705ba70642b04f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 20:41:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash19132f29a8811a10f90eca2d81e5deb8 3b9e0bbf9f40f46b57dad5567b008e58b5770565 708aeab241760b108d60c1462b1979e59cf473242222e9270705ba70642b04f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 20:41:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.googletagmanager.com/gtag/js?id=G-4DTP9188L1 | 142.250.74.168 | 200 OK | 77 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=G-4DTP9188L1 IP142.250.74.168:0
File typeASCII text, with very long lines (21373) Hash19cc314fdabfca9ebb87384566419cc0 15969776631709d1ca8c9867e156a4bdc597c06a e9e1904612f0f40de9a0114c08f750529cb949c1fdde58f406799bbab9341a2e
GET /gtag/js?id=G-4DTP9188L1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 25 Oct 2022 20:41:45 GMT
expires: Tue, 25 Oct 2022 20:41:45 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76633
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashf1ae675435a8f16bc0b04ec012c41979 182f87a81464c80b0b25fb524c59592cd40b0ef4 9191ced121d8740b4ed3af75db3033e72c0c44c0b45004abd714583deaa749a4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 20:41:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash19132f29a8811a10f90eca2d81e5deb8 3b9e0bbf9f40f46b57dad5567b008e58b5770565 708aeab241760b108d60c1462b1979e59cf473242222e9270705ba70642b04f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 20:41:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hash6b183dc2bd0829ce80eb64a0a28d91e7 432f422b2723fdba3f195d9d28ab75492ad497d2 cae00bc5a9c3b9e166805e53c4175d96a0b739817d883f477102e1501a49ac57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 20:41:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google.com/recaptcha/api.js?render=6Lf0LLcgAAAAACqeDql7l8uqEaPrudFBR3k1SSnQ&ver=3.0 | 142.250.74.164 | 400 Bad Request | 119 B |
URL HTTP/2www.google.com/recaptcha/api.js?render=6Lf0LLcgAAAAACqeDql7l8uqEaPrudFBR3k1SSnQ&ver=3.0 IP142.250.74.164:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text Hash96612d2b1b529ecfcf09798c3eb100bf 4f32d5d3ccf4d44ae71309dfa8d6f9d396614a27 7c58bfa17d0c600b7455e6bfb3d8371fbf93da20a7a53ed1efad37d692f1cba0
GET /recaptcha/api.js?render=6Lf0LLcgAAAAACqeDql7l8uqEaPrudFBR3k1SSnQ&ver=3.0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 400 Bad Request
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Tue, 25 Oct 2022 20:41:45 GMT
expires: Tue, 25 Oct 2022 20:41:45 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 119
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash130509513bc271340f20f1c556b2592a 6fd8b0623344d4c06ecf4e0708eb51a37d79ed9d 6a69bfbb5b21f5cfae366b21ab59426e78d51467926430c7bbf44d7f8ac704de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 20:41:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.ibasdistribuidora.com.br/wp-includes/css/dist/block-library/style.min.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 | 162.241.2.83 | 200 OK | 17 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-includes/css/dist/block-library/style.min.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (43771) Hash2a67a4888baa44de739f3fe56203ce07 da175eae57f26b655747d79f055477e3fee1abb9 3a4d7627476a0099ca4bcc101685f27de04cb49dd66ef842d72c6cda270599dd
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/css/dist/block-library/style.min.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 04 Jul 2022 12:10:36 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 16594
content-type: text/css
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.5.1 | 162.241.2.83 | 200 OK | 3.0 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.5.1 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (10435), with no line terminators Hasha6099ee677b6d930b6b878cf0cb08422 a2eb69454196d4250d624d25aaec587e97686642 755acd6dc98e63baff6d8b105b1bcaf63b79f935381fb3f32a79dace7faae0ac
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.5.1 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Oct 2022 01:29:09 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 2985
content-type: text/css
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/portfolio-wp/css/crp-main-front.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 | 162.241.2.83 | 200 OK | 1.2 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/portfolio-wp/css/crp-main-front.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash720f08ab12b3de9d3f317cca3649819b 6abb57f1d4c0826c19a5c11828a7718fab06f920 730373856a26979964812f3050deeb43b031088e5f4e24611419b55b4e299f74
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/portfolio-wp/css/crp-main-front.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 21 Mar 2022 15:12:30 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 1179
content-type: text/css
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/portfolio-wp/css/crp-tiled-layer.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 | 162.241.2.83 | 200 OK | 208 B |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/portfolio-wp/css/crp-tiled-layer.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash70e326d8c2eef397ce0809af3948aa02 15dd940ffece90a2cd0a672896ad56a33600185e 1b1a1034a1e9e77f7b54600fe249adb42dc1236adeb8f0840a96c8d85dff97fb
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/portfolio-wp/css/crp-tiled-layer.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 21 Mar 2022 15:12:30 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 208
content-type: text/css
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/portfolio-wp/css/crp-captions.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 | 162.241.2.83 | 200 OK | 680 B |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/portfolio-wp/css/crp-captions.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashb5f90a0b798a4561469ed05eefb9eecc a67f056d3b9b191218c7e04dd000a3ec256c2b50 bf73f64b1cf50834eca1404f0854ab6155a85a4af04926d0402a8b1b79b40055
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/portfolio-wp/css/crp-captions.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 21 Mar 2022 15:12:30 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 680
content-type: text/css
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4 | 162.241.2.83 | 409 Conflict | 83 B |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text, with no line terminators Hash26267cd8990f15d3bbea71684a6d5995 ac3b38cf3fe0e112bb6aeb7e05226b7133575d93 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
|
|
| region1.google-analytics.com/g/collect?v=2&tid=G-4DTP9188L1>m=2oeaj0&_p=1034052857&cid=206565984.1666730503&ul=en-us&sr=1280x1024&_s=1&sid=1666730502&sct=1&seg=0&dl=https%3A%2F%2Fwww.ibasdistribuidora.com.br%2Fmqou%2Fossuielqetimas&dt=P%C3%A1gina%20n%C3%A3o%20encontrada%20-%20Ibas%20Distribuidora&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 | 216.239.34.36 | 204 No Content | 0 B |
URL HTTP/2region1.google-analytics.com/g/collect?v=2&tid=G-4DTP9188L1>m=2oeaj0&_p=1034052857&cid=206565984.1666730503&ul=en-us&sr=1280x1024&_s=1&sid=1666730502&sct=1&seg=0&dl=https%3A%2F%2Fwww.ibasdistribuidora.com.br%2Fmqou%2Fossuielqetimas&dt=P%C3%A1gina%20n%C3%A3o%20encontrada%20-%20Ibas%20Distribuidora&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 IP216.239.34.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-4DTP9188L1>m=2oeaj0&_p=1034052857&cid=206565984.1666730503&ul=en-us&sr=1280x1024&_s=1&sid=1666730502&sct=1&seg=0&dl=https%3A%2F%2Fwww.ibasdistribuidora.com.br%2Fmqou%2Fossuielqetimas&dt=P%C3%A1gina%20n%C3%A3o%20encontrada%20-%20Ibas%20Distribuidora&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ibasdistribuidora.com.br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.ibasdistribuidora.com.br
date: Tue, 25 Oct 2022 20:41:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/portfolio-wp/js/crp-main-front.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 | 162.241.2.83 | 200 OK | 32 B |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/portfolio-wp/js/crp-main-front.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashf2ae7c86567ca7fba3b0628532cbbe97 263eb90029982dca43d2f6b0d2d348ba9e9ea5c0 1b38b44c435dd1b5e516a01e3d473ce083ddbf00f0c81399c41820f344608858
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/portfolio-wp/js/crp-main-front.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 21 Mar 2022 15:12:30 GMT
accept-ranges: none
content-length: 32
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/themes/cleenday/style.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 | 162.241.2.83 | 200 OK | 384 B |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/themes/cleenday/style.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (354) Hash491a355d29f8590e4976f3a9b5a55937 3918b54743670bcdfdc07fe2df6f2117c2f18743 b8c916058fe7682f2f7f1a66aedd91563f204e32341e765c3f6cbabb53e0f959
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/cleenday/style.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 20 Aug 2021 00:00:04 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 384
content-type: text/css
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/themes/cleenday/css/pluggable/page-404.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 | 162.241.2.83 | 200 OK | 1.1 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/themes/cleenday/css/pluggable/page-404.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash4b9de2c3d51eaaad5d143e47e95b1281 7fad23594b0aa03f5be8c7f89ce5a2da51b0b302 bf1c78702c1e2b7f03bc738833f280c25e9bdd69d177d92d2ed7099c4401c887
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/cleenday/css/pluggable/page-404.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 20 Aug 2021 00:00:04 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 1109
content-type: text/css
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/portfolio-wp/css/owl-carousel/layout.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 | 162.241.2.83 | 200 OK | 1.2 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/portfolio-wp/css/owl-carousel/layout.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash391a7e7b8e0b51b4ea018a28ee463e21 39b5076be2ccd5a3bdfb843ffd86ea283fa2c7d7 91aa42096a0da71207a7b20950dfa790f6bfac37a5dc4f6f315aec5ee324996a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/portfolio-wp/css/owl-carousel/layout.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 21 Mar 2022 15:12:30 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 1224
content-type: text/css
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/portfolio-wp/css/fontawesome/font-awesome.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 | 162.241.2.83 | 200 OK | 5.8 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/portfolio-wp/css/fontawesome/font-awesome.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typetroff or preprocessor input, ASCII text, with very long lines (372) Hash080fe88ad10538a472e0b9e33456f8e6 efad8a4a3c7ba42e9b7cbfaff9fee80c7e4d224f 8c12516988b08754510a05cd224dc605a353376f878e05b13031744383adf72f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/portfolio-wp/css/fontawesome/font-awesome.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 21 Mar 2022 15:12:30 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 5796
content-type: text/css
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.4.6 | 162.241.2.83 | 200 OK | 17 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.4.6 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeUnicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators Hashc2ec888b3d936132bfde9ff05afaf6a3 0d9b91bd7bb2fb23fdb5f72964c5b9b566ab61d6 8299c3ed9821fde8a2e013d64ef52fc056197bb21fa31c8203fe44740ba035b8
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.4.6 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Mar 2021 14:00:12 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 17430
content-type: text/css
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/themes/cleenday/fonts/flaticon/flaticon.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 | 162.241.2.83 | 200 OK | 574 B |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/themes/cleenday/fonts/flaticon/flaticon.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashcfecff682f265cecf6541250891ca290 394021741a14c6a1b8fc77d182ea6510dde09aa9 5ee2fb68a970cbcc25fd852c4d82e626e059f446e40c3eae9c78c4129244769b
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/cleenday/fonts/flaticon/flaticon.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 20 Aug 2021 00:00:04 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 574
content-type: text/css
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/portfolio-wp/css/owl-carousel/assets/owl.carousel.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 | 162.241.2.83 | 200 OK | 1.2 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/portfolio-wp/css/owl-carousel/assets/owl.carousel.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash90d428c7385c993aceddf428f011ef7e 6962c12d8693dbc6225ab5fc9e5e6f9236b18071 30b4b639c08d4f178709a0f95c131508e78e11beefc24a4cf6ac2eaf23babf2a
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/portfolio-wp/css/owl-carousel/assets/owl.carousel.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 21 Mar 2022 15:12:30 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 1233
content-type: text/css
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/themes/cleenday/css/pluggable/gutenberg.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 | 162.241.2.83 | 200 OK | 1.0 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/themes/cleenday/css/pluggable/gutenberg.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashabd5482bae3a8031bc38de1ceb46781a 6589b735ea8fdae90199389460bf80cbc9757636 30d8d9f49c6cb9271ea7a9cbcaeebf79952d61cee04b6ba7441564bbdc14d722
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/cleenday/css/pluggable/gutenberg.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 20 Aug 2021 00:00:04 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 1020
content-type: text/css
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/themes/cleenday/css/responsive.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 | 162.241.2.83 | 200 OK | 6.3 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/themes/cleenday/css/responsive.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeassembler source, ASCII text, with very long lines (1267) Hash7788c1d36981a29c1f805f61ce7876fa 43115ec0f12183cc935fc097049716c19714dc2e 43cf15ac3b5b12aa5f3efb570773ec1da65ff3a20ce6cfe2dd316ff0e85085f6
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/cleenday/css/responsive.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 20 Aug 2021 00:00:04 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 6314
content-type: text/css
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4 | 162.241.2.83 | 409 Conflict | 83 B |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text, with no line terminators Hash26267cd8990f15d3bbea71684a6d5995 ac3b38cf3fe0e112bb6aeb7e05226b7133575d93 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 | 162.241.2.83 | 409 Conflict | 83 B |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text, with no line terminators Hash26267cd8990f15d3bbea71684a6d5995 ac3b38cf3fe0e112bb6aeb7e05226b7133575d93 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.7.8 | 162.241.2.83 | 200 OK | 4.4 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.7.8 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (26516) Hashfdd462f58aee3f9349eabdefb5ca0b57 bb6e017d5537630516ccb98952593690a8c69864 ca51806fcedbe90dd613c4c28673af8693381806a5cb3b43dce2ea4f43e8b314
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.7.8 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Oct 2022 01:29:05 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 4436
content-type: text/css
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | 162.241.2.83 | 200 OK | 4.6 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (11126) Hashacdb97105af28a7066790c6748ae2e1e 65794d2c5a9d04f747faf370bc8bacd330e69e5a dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Nov 2020 09:06:06 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 4618
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.0.0 | 162.241.2.83 | 200 OK | 1.2 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.0.0 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text, with very long lines (3037), with no line terminators Hash267e8958dbad03e5b8e684648aa15aa2 fb81c3ab32d537817004715e011c33f2f7efaa81 8d2937738bf3b55c9ec65b0f2429361d4a2b0679f52ef2b9700192ae20acb03e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.0.0 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Oct 2022 01:29:09 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 1202
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/portfolio-wp/js/crp-helper.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 | 162.241.2.83 | 200 OK | 2.0 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/portfolio-wp/js/crp-helper.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash203e7983d1cd90db657d6c75c93da2d8 bcc37c86d2677d00bf9ac945d73d1a2d5558e152 2ac330b649602d635c42c74f8bbab76ad4cad7492e34fc4f23ac61a7a4c7f417
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/portfolio-wp/js/crp-helper.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 21 Mar 2022 15:12:30 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 1970
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.6.4 | 162.241.2.83 | 409 Conflict | 83 B |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.6.4 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text, with no line terminators Hash26267cd8990f15d3bbea71684a6d5995 ac3b38cf3fe0e112bb6aeb7e05226b7133575d93 769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.6.4 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/portfolio-wp/js/jquery/jquery.modernizr.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 | 162.241.2.83 | 200 OK | 7.9 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/portfolio-wp/js/jquery/jquery.modernizr.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text, with very long lines (564) Hash8e3230f864d2daca83e2f6aef3970343 1b03f3eb78a881decf521def54abba9f2e4b6380 1ea51501df2b6eafcabfa90d095dc237ba591c519b9251eebf0941b7946bf30e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/portfolio-wp/js/jquery/jquery.modernizr.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 21 Mar 2022 15:12:30 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 7908
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/portfolio-wp/js/jquery/jquery.lightgallery.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 | 162.241.2.83 | 200 OK | 8.9 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/portfolio-wp/js/jquery/jquery.lightgallery.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (336) Hashb410004dae6284d284bda174f65d2e03 b9c68f800105cc7657ca3b21f04093732877053e 38d0fcf8ed296c4dd27b214d26e6b0b333a2717f5454ec86155e0d064aba2aff
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/portfolio-wp/js/jquery/jquery.lightgallery.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 21 Mar 2022 15:12:30 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 8868
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.7.8 | 162.241.2.83 | 200 OK | 13 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.7.8 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (59158) Hashe6b67e11736ae36a062b381717f2ea9f a663a79bc8d42aa58bfea1351cc27e0d0b09c9b2 a07a94d36246d0b3e5b9b18e274e31995d0e23cda955babf5e350e91a879523d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.7.8 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Oct 2022 01:29:05 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 12862
content-type: text/css
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=7.0.0 | 162.241.2.83 | 200 OK | 13 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=7.0.0 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeUnicode text, UTF-8 text, with very long lines (62753), with no line terminators Hashebad0134e03078f66fa63f2a89d17d81 bccc743a9a5d015e06c7f622b4687142b2cd2fe5 42e7dbb97a0b72fa2bc44035d713982a7ff653cb63c0a7ef09e1fd4fe69c4d14
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=7.0.0 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Oct 2022 01:29:09 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 13255
content-type: text/css
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.7.8 | 162.241.2.83 | 200 OK | 4.4 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.7.8 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (14869) Hash7bab7ad64ffbd7846dd6819250b93e2e c924918d540389aff62220088b6761f38a5da272 045250efe67364c953a91f6a60cf407ebb5cfdb2da04e84c3d98e5bab5eca9ba
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.7.8 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Oct 2022 01:29:05 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 4359
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/assets/css/photoswipe/default-skin/default-skin.min.css?ver=7.0.0 | 162.241.2.83 | 200 OK | 2.3 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/assets/css/photoswipe/default-skin/default-skin.min.css?ver=7.0.0 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (7887), with no line terminators Hash5ee0a5bb15a0a3016316cc499a4872d5 75ccabaedbc64937c41db46fa04ab962c1ab9c1b 7f5c0290c50ba573d8cb9a62bd8c1bcd4a0de4b2e145f7f5fada7d97392a0ef5
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/css/photoswipe/default-skin/default-skin.min.css?ver=7.0.0 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Oct 2022 01:29:09 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 2311
content-type: text/css
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-includes/js/wp-emoji-release.min.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 | 162.241.2.83 | 200 OK | 5.3 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-includes/js/wp-emoji-release.min.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (15660) Hash710f8b142ea44c0682dc2c30f318f065 49144e9b3a76d3d383b1d4359cf7a25e947f4233 708bb5819879a2a2c7670abc20a58cca68a415ffd621011cbc4c3c9d82dddc50
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/wp-emoji-release.min.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 12 Apr 2022 05:56:22 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 5321
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=7.0.0 | 162.241.2.83 | 200 OK | 3.1 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=7.0.0 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (17809), with no line terminators Hash97f3e7860b3e0d99f3c0327b0045363a 885af5049143e765b7fd0f3a0a860613b05d12d1 ff05d291dd422f8bee80e816eb1480c67fb3e0d6071bebd8f04c86de87a70080
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=7.0.0 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Oct 2022 01:29:09 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 3086
content-type: text/css
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/themes/cleenday/css/dynamic.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 | 162.241.2.83 | 200 OK | 8.2 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/themes/cleenday/css/dynamic.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash986530714ee40594c4f72b1e9c4673c4 a16060aa72d85da087c7927509cd7be7a9e97d47 25d3efa4aa78611cbc539b276397ac457df63580703aef44ab36575b8d77f076
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/cleenday/css/dynamic.css?ver=6a1dc8f3a7733e3eaf78839a26ceb669 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 20 Aug 2021 00:00:04 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 8223
content-type: text/css
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/portfolio-wp/js/crp-tiled-layer.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 | 162.241.2.83 | 200 OK | 3.7 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/portfolio-wp/js/crp-tiled-layer.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashb3ae8cd6842c7353a6ab93aad99b1074 b270f18255439b6c9ae565f55f2270f08d20bce1 40e60cd5592c0a19d72038403ea34801d0ca527edf35a5349568df826025b7cc
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/portfolio-wp/js/crp-tiled-layer.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 21 Mar 2022 15:12:30 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 3731
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/assets/css/photoswipe/photoswipe.min.css?ver=7.0.0 | 162.241.2.83 | 200 OK | 1.2 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/assets/css/photoswipe/photoswipe.min.css?ver=7.0.0 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (3287), with no line terminators Hash11f7a6ddd7e2e236cd8e226dec51cdfc 153d8e70ee244d351264838750b7234e323b987e 56deb1fee625119e221a50a5c5d9bfa8ec79b54790a373b99b9da6fb2a3d3283
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/css/photoswipe/photoswipe.min.css?ver=7.0.0 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Oct 2022 01:29:09 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 1150
content-type: text/css
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.0.0 | 162.241.2.83 | 200 OK | 1.0 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.0.0 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (1668) Hash0bebfb5722cbc8ac04e62aa40698be49 3bc5e4f29cb19a2d80d46dee242dabf7e42c0fd3 70d02eabbadbe176455a2bb53d8d567feca69847c067a5274987a8bdc65e3c05
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.0.0 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Oct 2022 01:29:09 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 1000
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.0.0 | 162.241.2.83 | 200 OK | 792 B |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.0.0 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (2139), with no line terminators Hash1ca3f41c13e0027acc45f0601f8b640f cced34af0c6a59e9cee4229faa66ab39c7031506 d3bc5eaf4c6be9473dbba690825cce9a1a6f4accb6721dae7875efef54942f41
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.0.0 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Oct 2022 01:29:09 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 792
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.3.2 | 162.241.2.83 | 200 OK | 2.9 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.3.2 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (8016), with no line terminators Hash3fb911c81f788558bc6d1107199f3531 6dc32db62563450febea4e0f43b7da34defbb99a 7ac7ac2450edf5bb80788a92c271b0a0e806aacbfd4cced63e941a3035cf43c1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.3.2 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Oct 2022 14:00:57 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 2938
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/themes/cleenday/js/theia-sticky-sidebar.min.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 | 162.241.2.83 | 200 OK | 2.0 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/themes/cleenday/js/theia-sticky-sidebar.min.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text, with very long lines (5370) Hash718a6b3fd0338fd4548e5a807d4018ea 829de974351da189bfa94be21d4f91ec66922986 5821b29e8b7921aa8c1f6740a13e4a8b43fa981e17747ae68be38168e8540aef
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/cleenday/js/theia-sticky-sidebar.min.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Mar 2021 20:24:52 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 2010
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.3.2 | 162.241.2.83 | 200 OK | 900 B |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.3.2 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (3432) Hash1e0ef5b4ebd931aecd01564980628978 e618b92e03a6c4bd4abffed22abb1e835c05a601 1deef467f6db854d82e8c6288086664c7cf60a41b18bb7216d63bb83061ba878
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.3.2 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Oct 2022 14:00:57 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 900
content-type: text/css
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.7.8 | 162.241.2.83 | 200 OK | 2.3 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.7.8 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (4918) Hasha8a064f7e05640436a939b0839c64a66 e9bbdd085a3038acd63d108accba8dfb5499f4c0 2173daddf76795f8194c34463bfc5c9be793aecc545b4672ed5a6f9afcb473c3
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.7.8 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Oct 2022 01:29:05 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 2313
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/akismet/_inc/akismet-frontend.js?ver=1664387936 | 162.241.2.83 | 200 OK | 3.8 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/akismet/_inc/akismet-frontend.js?ver=1664387936 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash66b85ee07e712680856a30dbbffd6851 1b7f567df71b51b648eac224f3782aed0f2eb740 ff6d4e7e045697210f93d5d8f201ac69ddf676e0d4e1fd60e6e778cb4931f9f3
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/akismet/_inc/akismet-frontend.js?ver=1664387936 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Sep 2022 17:58:56 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 3830
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/themes/cleenday/js/theme.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 | 162.241.2.83 | 200 OK | 690 B |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/themes/cleenday/js/theme.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
Hasha4f31ec2dd361d795084f663ecc43540 3a44ec22837f968c184cd19f061926dd620bbd9b 1d340b677761ede11bbe3830582b9852636055bf75d25ec4afb93d4b5c22746a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/cleenday/js/theme.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Mar 2021 20:24:52 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 690
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.7.8 | 162.241.2.83 | 200 OK | 13 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.7.8 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeUnicode text, UTF-8 text, with very long lines (32889) Hasha3a9966edbcf4ff24cbce6355e84c975 4c31a0c1e12987b364c178689b8283d09e4f8a63 d50d738abb2b285ac79c3552d286706f3a99e60add08edad08f20b2d4adbdb8d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.7.8 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Oct 2022 01:29:05 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 13281
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/assets/js/zoom/jquery.zoom.min.js?ver=1.7.21-wc.7.0.0 | 162.241.2.83 | 200 OK | 1.2 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/assets/js/zoom/jquery.zoom.min.js?ver=1.7.21-wc.7.0.0 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (2600) Hash82d334d0191f63e669e37839ecc8cf50 4d3ef9949112d860962c100d669682bd83c7b2bf c20723c202cc484a6b9f0e2f07f65145ebccdc1cc90a33cf5937f7644ec2528d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/zoom/jquery.zoom.min.js?ver=1.7.21-wc.7.0.0 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Oct 2022 01:29:09 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 1221
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.7.8 | 162.241.2.83 | 200 OK | 16 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.7.8 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (40474) Hasheb7e2c1cbf83cab4aa6a7fef0dd47eb2 774647abb91ffaee699a8047c9d2fd8a65daff35 bdb3c3194100984be02d52864d7ade76025aa5c3028133d27d947ffb2a75b1e7
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.7.8 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Oct 2022 01:29:05 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 16151
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/themes/cleenday/img/404.png | 162.241.2.83 | 200 OK | 3.3 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/themes/cleenday/img/404.png IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typePNG image data, 494 x 130, 8-bit colormap, non-interlaced\012- data Hash307be7f9d95e927ae221ac5e88cd9ff3 5742382af067f8ed70cc87aa9072c3835f53b224 fe51802bc78d5ca333ac708dc715b61e281731499a7447fb6e6beb457d4d79b3
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/cleenday/img/404.png HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 20 Aug 2021 00:00:04 GMT
accept-ranges: bytes
content-length: 3307
content-type: image/png
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe.min.js?ver=4.1.1-wc.7.0.0 | 162.241.2.83 | 200 OK | 14 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe.min.js?ver=4.1.1-wc.7.0.0 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (30938) Hash79bb4fef1e4c810dd44798e06e3aa043 9dd8de6728e1da516f8a0746caa0e46531d19981 0c19b1939955595b8d548127df6ac5a8844868dde69459db4fea6729924bf61f
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe.min.js?ver=4.1.1-wc.7.0.0 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Oct 2022 01:29:09 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 14315
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/cleenday-core/includes/elementor//assets/js/wgl_elementor_widgets.js?ver=1.0.0 | 162.241.2.83 | 200 OK | 642 B |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/cleenday-core/includes/elementor//assets/js/wgl_elementor_widgets.js?ver=1.0.0 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash28a07a48384bd6f99c89ebf4fdb5726c b9b9930773e929ce3ab9409598a6a296001f1ba9 4d4682da9e78e47587c20523f7485e5a72bfbef04b4e5dcaa8274f249c7b5707
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/cleenday-core/includes/elementor//assets/js/wgl_elementor_widgets.js?ver=1.0.0 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Mar 2021 20:25:40 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 642
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 | 162.241.2.83 | 200 OK | 8.2 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeUnicode text, UTF-8 text, with very long lines (8189) Hasha0a1c8194f131320e1798f90a7b1262a 3346d35be1f2e4886f19e7fcc0cc96ee4753d9ed 7f618ab13cec0933ec2c61fa2b580ad77ca41522028649677494219fa9ce56db
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 08 Apr 2022 20:07:18 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 8169
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/cleenday-core/includes/elementor/assets/js/wgl_elementor_column.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 | 162.241.2.83 | 200 OK | 224 B |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/cleenday-core/includes/elementor/assets/js/wgl_elementor_column.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashe6e8774ecc76a6b4b710d28208ac8240 c269ef57ed6f5c7fd0e3638b696e1495434de779 d4d8555921f78bececaa8748032b505d959398dc33e7110b8094302b85f78998
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/cleenday-core/includes/elementor/assets/js/wgl_elementor_column.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Mar 2021 20:25:40 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 224
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.0.0 | 162.241.2.83 | 200 OK | 1.1 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.0.0 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (2938), with no line terminators Hash769e9d3f7fc383ec1a02024e39730474 4f5a5edf28ed19b48c5e40747ec6896f0df8f09e 4636689d57889e984a7a1a1c6e2516b7a2d951407ca826aaf505c50002e2b486
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.0.0 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Oct 2022 01:29:09 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 1093
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/uploads/2021/02/logo-foot-1.png | 162.241.2.83 | 200 OK | 12 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/uploads/2021/02/logo-foot-1.png IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typePNG image data, 384 x 180, 8-bit/color RGBA, non-interlaced\012- data Hashc7777d912c55ae1378a511729e12191b 394dfd433f649bfd9c0858279522e34e489deb6e f1cac92c74297a59e43445c7286d4b4d0d46953821c7027baecde453712988f7
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/uploads/2021/02/logo-foot-1.png HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 03 Sep 2021 21:19:27 GMT
accept-ranges: bytes
content-length: 11753
content-type: image/png
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 | 162.241.2.83 | 200 OK | 3.7 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (12198), with no line terminators Hashe2a8decccf4d0a6b925af707a36077a9 26a0febc9c3d91e75410f74b9ec62099ba1cbe90 09e0e638a6f53c0fdcfeeb8ae91f3a404bef47b471324e335e29be14a2aa87f7
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Oct 2022 01:29:05 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 3747
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Inter:400,600,400,600%7CSpartan:500,500,600,700&subset=latin&display=swap&ver=1631830316 | 142.250.74.10 | 200 OK | 3.3 kB |
URL HTTP/2fonts.googleapis.com/css?family=Inter:400,600,400,600%7CSpartan:500,500,600,700&subset=latin&display=swap&ver=1631830316 IP142.250.74.10:0
File typeASCII text, with very long lines (6475) Hash594cc831a2800e0518d93e8dd21f3b89 98671cc19a7d0005d66226041bc212beffce4999 8c06e5a00c0c761bac2a8f04970c25d1b193e0844a712345a71048998321649a
GET /css?family=Inter:400,600,400,600%7CSpartan:500,500,600,700&subset=latin&display=swap&ver=1631830316 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 25 Oct 2022 20:41:45 GMT
date: Tue, 25 Oct 2022 20:41:45 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/uploads/2021/05/favicon_2.png | 162.241.2.83 | 200 OK | 18 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/uploads/2021/05/favicon_2.png IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typePNG image data, 469 x 512, 8-bit/color RGBA, non-interlaced\012- data Hash0775dbffe2ec19ffa29b9170c7bf2385 1e31c3da61e2049cd70a5206a44624436c82662f 3649e340b7554b9549fcf0460c734c6b03ebaa6c0fcca7c2d750ff1609beb7ff
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/uploads/2021/05/favicon_2.png HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 16 Sep 2021 14:40:00 GMT
accept-ranges: bytes
content-length: 17972
content-type: image/png
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe-ui-default.min.js?ver=4.1.1-wc.7.0.0 | 162.241.2.83 | 200 OK | 4.2 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe-ui-default.min.js?ver=4.1.1-wc.7.0.0 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeHTML document, ASCII text, with very long lines (9536) Hash2d97cfca2040861c1c4422641fc3569a 0c8fccf6d66281373d63efea29f820cc08f628bd 601e970cb467a2e14a2fd0756a62b0bc1b531530389822bfa9279cc1fdadcf31
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/photoswipe/photoswipe-ui-default.min.js?ver=4.1.1-wc.7.0.0 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Oct 2022 01:29:09 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 4227
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/cleenday-core/includes/elementor/assets/js/wgl_elementor_sections.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 | 162.241.2.83 | 200 OK | 6.3 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/cleenday-core/includes/elementor/assets/js/wgl_elementor_sections.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
Hash592fe012c5955d1c2843ef39aea5ba2c 7a53aa18e78b5a5141dcfa4e91806fe42b564eef 53eaa57ade718aff58114f8a4b40139a1ad43207cb465f1e3b2ba9ee9920284b
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/cleenday-core/includes/elementor/assets/js/wgl_elementor_sections.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Mar 2021 20:25:40 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 6261
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-includes/js/underscore.min.js?ver=1.13.3 | 162.241.2.83 | 200 OK | 8.3 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-includes/js/underscore.min.js?ver=1.13.3 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (18876) Hash61a4a3c276f704185a925bfa0f4d8b1b 0176eb701bb114d9cb170193f6208ec4fbb35f71 f0875cbb46e9eeb5e497dd52d8c33725509228193c2dbe9ab464f62a15c2f0e2
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/underscore.min.js?ver=1.13.3 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 27 Apr 2022 14:39:20 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 8313
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/uploads/2021/03/logo.png | 162.241.2.83 | 200 OK | 38 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/uploads/2021/03/logo.png IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typePNG image data, 624 x 224, 8-bit/color RGBA, non-interlaced\012- data Hashc8dba1a5530699df9ac9d8ec40aba47b 54dd6cacf96fb41730f414723b83c1248da73e37 3ff2979b7739e350fef510504814b12d1acf2174a36987014e538a18b273ebb4
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/uploads/2021/03/logo.png HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 03 Sep 2021 22:25:08 GMT
accept-ranges: bytes
content-length: 37824
content-type: image/png
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/assets/js/flexslider/jquery.flexslider.min.js?ver=2.7.2-wc.7.0.0 | 162.241.2.83 | 200 OK | 8.5 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/assets/js/flexslider/jquery.flexslider.min.js?ver=2.7.2-wc.7.0.0 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (22741), with no line terminators Hash92e2471e6c28343b865c8c6bed3743bd 8a03728161868942917e470754fb91ae4fa846a6 14328ee645bcf68ecbd02de75f79f8ab786f9769bb4e9378b62065c20a4a9506
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/flexslider/jquery.flexslider.min.js?ver=2.7.2-wc.7.0.0 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Oct 2022 01:29:09 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 8510
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/assets/js/frontend/single-product.min.js?ver=7.0.0 | 162.241.2.83 | 200 OK | 2.2 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/assets/js/frontend/single-product.min.js?ver=7.0.0 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeUnicode text, UTF-8 text, with very long lines (6322), with no line terminators Hashd2d75f439b54a67da84ba78d10e1ce2d cd1d027adb0ff23735a3c322a2a3171fac1d93e0 af4bef00c2107776fc2023511f58e4cb2b23543213fe3af24c05d34810037a0c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/single-product.min.js?ver=7.0.0 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Oct 2022 01:29:09 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 2181
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js?ver=7.0.0 | 162.241.2.83 | 200 OK | 4.6 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js?ver=7.0.0 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (13887), with no line terminators Hash4d728e71811e2eec3160d805315170dc 1a2ebcf16c0e29b7ae388187f4dd528e671fec5e 53ce82cb57a4d3fa593c481a1788d16cc939d0d7b0b7fa2f7c914e8cfbf77b1c
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js?ver=7.0.0 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Oct 2022 01:29:09 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 4621
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0 | 162.241.2.83 | 200 OK | 4.0 kB |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with very long lines (19233) Hash2701214b028ad24fa347df8335b36d12 156bc8a7ad2657f00881890637f07c6052636499 9a6e62615ceeec7a9763e4f9614e4715d04fd87873b23db2b3ead06c996cad27
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Oct 2022 01:29:05 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-length: 4008
content-type: text/css
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-includes/js/jquery/jquery.min.js?ver=3.6.0 | 162.241.2.83 | 200 OK | 0 B |
URL HTTP/2www.ibasdistribuidora.com.br/wp-includes/js/jquery/jquery.min.js?ver=3.6.0 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 10 Mar 2021 15:07:24 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.4.6 | 162.241.2.83 | 200 OK | 0 B |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.4.6 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.4.6 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 19 Mar 2021 18:46:44 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/themes/cleenday/js/theme-addons.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 | 162.241.2.83 | 200 OK | 0 B |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/themes/cleenday/js/theme-addons.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/themes/cleenday/js/theme-addons.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 02 Apr 2021 14:01:42 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/portfolio-wp/js/owl-carousel/owl.carousel.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 | 162.241.2.83 | 200 OK | 0 B |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/portfolio-wp/js/owl-carousel/owl.carousel.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/portfolio-wp/js/owl-carousel/owl.carousel.js?ver=6a1dc8f3a7733e3eaf78839a26ceb669 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 21 Mar 2022 15:12:30 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/mqou/ossuielqetimas | 162.241.2.83 | 404 Not Found | 0 B |
URL HTTP/2www.ibasdistribuidora.com.br/mqou/ossuielqetimas IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /mqou/ossuielqetimas HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 404 Not Found
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://www.ibasdistribuidora.com.br/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Tue, 25 Oct 2022 20:41:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Inter%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CSpartan%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6a1dc8f3a7733e3eaf78839a26ceb669 | 142.250.74.10 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Inter%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CSpartan%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6a1dc8f3a7733e3eaf78839a26ceb669 IP142.250.74.10:0
GET /css?family=Inter%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CSpartan%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6a1dc8f3a7733e3eaf78839a26ceb669 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 25 Oct 2022 20:41:45 GMT
date: Tue, 25 Oct 2022 20:41:45 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.5.1 | 162.241.2.83 | 200 OK | 0 B |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.5.1 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.5.1 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Oct 2022 01:29:09 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.7.8 | 162.241.2.83 | 200 OK | 0 B |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.7.8 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.7.8 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Oct 2022 01:29:05 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ibasdistribuidora.com.br/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.4.4 | 162.241.2.83 | 200 OK | 0 B |
URL HTTP/2www.ibasdistribuidora.com.br/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.4.4 IP162.241.2.83:0 ASN#46606 UNIFIEDLAYER-AS-1
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.4.4 HTTP/1.1
Host: www.ibasdistribuidora.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ibasdistribuidora.com.br/mqou/ossuielqetimas
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Jan 2021 13:05:34 GMT
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Tue, 25 Oct 2022 20:41:46 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
0.0.0.0