| www.skidrowcodex.net/tag/the-callisto-protocol-news/ |  172.67.217.92 | 301 Moved Permanently | 0 B |
URL HTTP/1.1www.skidrowcodex.net/tag/the-callisto-protocol-news/ IP172.67.217.92:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /tag/the-callisto-protocol-news/ HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 04 Dec 2022 22:46:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 04 Dec 2022 23:46:07 GMT
Location: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NIdNp%2BkP5wUwoenY2eKiWK%2FvNZlzd8nkQDEy15KQyud5X3tFWJfX16Qvq5TvYt%2BwkDfDZkmgEI22VxAJm6eDCavOHu%2FUkupswCJ%2FrF3oo32qYliZjYtAuBWYvihsrdegssM3%2FOVB7A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7748138a8876b503-OSL
alt-svc: h2=":443"; ma=60
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashcfec3d7283a9b66d2be426ce54d210f3 808c1feb1ba918951d1928c1f6bfc0c253262774 1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7929
Expires: Mon, 05 Dec 2022 00:58:16 GMT
Date: Sun, 04 Dec 2022 22:46:07 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashfb2c0697c6d9a96a5411dd2952947458 79e57f831ec396bbdaa5bfe9472a05e6c9fb31f4 3fd7edcc349ab4402f62e54a142be6b4cecf0e7ee3f431d3168bdf0643ba4d92
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2639
Cache-Control: max-age=131349
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:46:07 GMT
Etag: "638c76f5-1d7"
Expires: Tue, 06 Dec 2022 11:15:16 GMT
Last-Modified: Sun, 04 Dec 2022 10:31:17 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
|
|
| firefox.settings.services.mozilla.com/v1/ | 34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash30db107dcf4380cef05efea409c2e6a3 96e6a306fbc07299aba64e5c14e2bfca35872fa9 b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 04 Dec 2022 22:18:24 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1664
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash1ea206ac3c440825741687351f8c6e4e 2f38dafd8c43dcce2411a0590bc5c02cd6286735 7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3886
Expires: Sun, 04 Dec 2022 23:50:54 GMT
Date: Sun, 04 Dec 2022 22:46:08 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash9ebddc2b260d081ebbefee47c037cb28 492bad62a7ca6a74738921ef5ae6f0be5edebf39 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: e6Bw3d31x2xvq5Z6qXBTAeaJtmc/qPm8fVkfkB7PmZ1cRorgQMZCc/WOoghaN/lYM3/MI5wKI2Q=
x-amz-request-id: DF9KXXXGE7590P4S
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 04 Dec 2022 21:47:08 GMT
age: 3540
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/addons/clan-wars/css/widget.css?ver=1.5.5 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/addons/clan-wars/css/widget.css?ver=1.5.5 IP172.67.217.92:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/skidrowcodex-main/addons/clan-wars/css/widget.css?ver=1.5.5 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
content-length: 0
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Sun, 20 Sep 2020 13:10:50 GMT
cache-control: public, max-age=31536000
expires: Sat, 07 Jan 2023 20:25:12 GMT
x-powered-by: PleskLin
cf-cache-status: HIT
age: 28606856
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SKPOU5D8IgoJP87%2FxBW%2FPZb5W3Z241Uq8VegkkmlYiZi1fJMrRFV%2FnLYmWzfZrlxr2MLpFBEku1uWr2HLYCXv4oZ6P5Bhcy1%2FElJq4ksfHAEHF9oW6I0jOCt7ybR8%2BJnphBdsL3HTQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138eaceeb51e-OSL
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash122124f83967c12700f5a6f5546b0f1f d7acd2db61ad811c388a44b7bd407fa5f4aea8ee b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:46:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.skidrowcodex.net/wp-content/uploads/2019/01/new-logo.png | 172.67.217.92 | 200 OK | 48 kB |
URL HTTP/2www.skidrowcodex.net/wp-content/uploads/2019/01/new-logo.png IP172.67.217.92:0
File typePNG image data, 767 x 99, 8-bit/color RGBA, interlaced\012- data Hash3927a87b7eb1db967c93304ddbff8a71 839edda3002bbd220823d7700b0e8dcbf18acbd1 085b6558baab0ac6b5251b0f57a1a2a072f7e73822632f9e3e4298af0a27de95
GET /wp-content/uploads/2019/01/new-logo.png HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: image/png
content-length: 47724
last-modified: Wed, 20 Jul 2022 22:26:07 GMT
cache-control: public, max-age=16070400
expires: Mon, 02 Jan 2023 20:32:56 GMT
etag: "62d880ff-ba6c"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 7870328
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EgUU3B%2BvPntchMzjjgdzuJnx%2F3fynT4PC%2BPQgYN%2FLxm%2FooDGyulpWapMqb6fNc5ychXpKWf9gmLkv0tE%2BtDSbBfi4wyn%2BvsfZju4g7DWlRpHXOaGvGLUCL6DYDYbqVfTJa7g4EKCHQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138f2dbab51e-OSL
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-includes/css/buttons.min.css | 172.67.217.92 | 200 OK | 1.7 kB |
URL HTTP/2www.skidrowcodex.net/wp-includes/css/buttons.min.css IP172.67.217.92:0
File typeASCII text, with very long lines (5819) Hashbf873c76c8f667c830be6f93430953d5 19e730c266292ee47d3e14208ed88b0f808fea5c 2ce357a748d09efe57a8ad7855326704548c3151acdb27208071c4fd9620b703
GET /wp-includes/css/buttons.min.css HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css
last-modified: Fri, 10 Sep 2021 02:18:46 GMT
etag: W/"613ac086-16de"
x-powered-by: PleskLin
cache-control: max-age=16070400
cf-cache-status: HIT
age: 28608722
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LYOe0AUsxJm2jAU2TBUgeNcXdbVwUPlpWkwkQ6g4WuSu5XNlPzynplvERSi7FDsVihdBfJ6KXBGCkiYKaClfRs6jRYKLNRz%2BbDvkvbYv99pUdMWhauCSLPgtp76BnwllZLULCkEm1w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138edd2db51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-includes/css/dashicons.min.css | 172.67.217.92 | 200 OK | 671 kB |
URL HTTP/2www.skidrowcodex.net/wp-includes/css/dashicons.min.css IP172.67.217.92:0
File typeASCII text, with very long lines (58981) Size671 kB (671297 bytes) Hashcdb00b6220817a878cb7248445813df5 bf901191eaf784ad038fd248a18eaf4a49f97ceb be72833a10dc84b66bb9aa4b7bb04fb42df2b13f7aef34250bd2782a8229efa5
GET /wp-includes/css/dashicons.min.css HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
last-modified: Fri, 10 Sep 2021 02:18:46 GMT
cache-control: public, max-age=31536000
expires: Tue, 04 Jul 2023 17:33:08 GMT
etag: W/"613ac086-e688"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 13237980
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r0yGBkHOJjSQdVrZOH84VnLnjXpuDpLDmgWnHLplocUmvkjeJWYDV41Vq1vwCYlvWuob6bdMRdP7ocXP6z969bzpi7XX1nq5V9Jcx8Z3bJoEtA64TcpoU5A0Zf26TEV6cG3j5P2gtQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138edd2eb51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/plugins/wp-rocket/assets/js/heartbeat.js?ver=3.12.3.2 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/wp-rocket/assets/js/heartbeat.js?ver=3.12.3.2 IP172.67.217.92:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/wp-rocket/assets/js/heartbeat.js?ver=3.12.3.2 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Sat, 26 Nov 2022 10:16:55 GMT
cache-control: public, max-age=31536000
expires: Sun, 26 Nov 2023 10:17:48 GMT
x-powered-by: PleskLin
cf-cache-status: HIT
age: 736008
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MAc4GzkMikwx9NU91L0HWvSqqE9xPLnJ3YVRL43jjolYLYC1oRqug%2F6q2Elx4r8RAZZRDayzw2%2Bgy5Ud3lFFY7n7uhlb9BeIshLTjB%2FLCkG4O4yFSAuvcmTRlWJnA4eS9LZJTxJmdw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774813900f3db51e-OSL
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash7c9e0bb25e8c28e8b10038806b0a7190 9fa6097aeb8eacde8ba7c9ab80a7a7d2405ae2bc f4864000960be2f888ed7d2467f74130231fed6f56ad48ff15861f5769e95a58
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:46:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash122124f83967c12700f5a6f5546b0f1f d7acd2db61ad811c388a44b7bd407fa5f4aea8ee b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:46:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google.com/recaptcha/api.js?onload=gglcptch_onload_callback&render=explicit&ver=1.68 | 142.250.74.132 | 200 OK | 583 B |
URL HTTP/2www.google.com/recaptcha/api.js?onload=gglcptch_onload_callback&render=explicit&ver=1.68 IP142.250.74.132:0
File typeASCII text, with very long lines (919), with no line terminators Hash133c3083d1bebbc7ebd5fe03d9d1c1fc bf762852d90b2d54084f63599d5be2fe914d6804 a4ea368314b92212c46bf7e333ee73322567fa1ff971ab5d94cf46fc74c81e7e
GET /recaptcha/api.js?onload=gglcptch_onload_callback&render=explicit&ver=1.68 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Sun, 04 Dec 2022 22:46:08 GMT
date: Sun, 04 Dec 2022 22:46:08 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 583
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash8ead0ac4ce19cef2471bae0458759d89 af02fd3fcd2e10cfa2458407c0c2e59a43e18517 507b93c64bab73e393cf8d8131415ef4d4b01e65e0f2ab73597715197845e75e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:46:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 34.102.187.140 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 04 Dec 2022 22:08:58 GMT
cache-control: public,max-age=3600
age: 2230
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/plugins/buddypress/bp-core/css/blocks/login-form.min.css?ver=10.6.0 | 172.67.217.92 | 200 OK | 1.2 kB |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/buddypress/bp-core/css/blocks/login-form.min.css?ver=10.6.0 IP172.67.217.92:0
File typeASCII text, with very long lines (727), with no line terminators Hash6eea69f78fadd1f92dcafb17895e20e7 35e453d918cf853fbd9d3db85683d34b2cd7e655 2a7ba26f7f57a9bb6f859b53b12af25324bebf5344c5e48f18f0414ba5e25d26
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/buddypress/bp-core/css/blocks/login-form.min.css?ver=10.6.0 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Thu, 03 Nov 2022 19:26:24 GMT
cache-control: public, max-age=31536000
expires: Fri, 03 Nov 2023 19:29:50 GMT
x-powered-by: PleskLin
cf-cache-status: HIT
age: 2690112
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WLZRWg9aTQZLtgbQ%2FWE0tLLkeGd3w%2B370j3wIPlewvHqZFMnTX7FMHll5X2pXdpeSWzcYOmfsMwVf%2Fve0%2BRUjYfd6cu0l76nOLXoiesihPxj4NDqNea1oFahEldz7qO%2BZbn0PBPGdg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138e6c9fb51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/plugins/countdown-timer/js/webtoolkit.sprintf.js?ver=3.0.7 | 172.67.217.92 | 200 OK | 2.4 kB |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/countdown-timer/js/webtoolkit.sprintf.js?ver=3.0.7 IP172.67.217.92:0
File typeASCII text, with very long lines (506), with CRLF line terminators Hashe1ba142100a95a8209133575ebf59060 a981d5b720c8f4830a64148ec5f102c27db40a60 6a15667ac666f4521cb5a99cd4d2d3dc9dbf0023c74d36f5bb3ca666b384d56a
GET /wp-content/plugins/countdown-timer/js/webtoolkit.sprintf.js?ver=3.0.7 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 05 Jan 2022 14:58:08 GMT
cache-control: public, max-age=31536000
expires: Wed, 07 Jun 2023 00:33:02 GMT
etag: W/"61d5b200-864"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 15631986
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1s9AXJN%2B0lPSWxmTQjeQbgThuKi3qRnZfvtUMJ3Uwp5VCSNOa3%2FnH%2BfTv9PaWvY8RNSo51J2%2BNAmP3sJsK278z7ev42D98jND%2BhZF%2FX6kziw9hDyNYmI0mSiTzFtVCI9P6Cr9vgqng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138f1da4b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/js/social.js | 172.67.217.92 | 200 OK | 669 B |
URL HTTP/2www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/js/social.js IP172.67.217.92:0
Hash8dd60ccfae77ccd4a9053bb569d726d4 8f05d37d504d07837d6c1cef05d7509662d2c658 10805b4a0c1fb6fbaaeb7e25945258b9455d3aaba6a6eede794710c24e3e5bbc
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/skidrowcodex-main/js/social.js HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
last-modified: Sun, 20 Sep 2020 13:10:50 GMT
cache-control: public, max-age=31536000
expires: Tue, 06 Jun 2023 21:32:26 GMT
etag: W/"5f6754da-418"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 15642822
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jp1VEsLdbye8BBgEEMFOQgYoQy4v9L8NO3uKKl%2FlDEyqCg%2BtseybYMFvzKr45AUgcdRMQMI3a2cP4EMGXgOmcKdssa7FwE%2B%2Fbx4E%2FVTI78G7v9hadxY%2FixGAfSgs4M3DpgDmilYFgA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138fdedab51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| disparitydegenerateconstrict.com/9e/55/c2/9e55c24c07205b6a363c94f4ff46ad27.js | 173.233.137.60 | 200 OK | 13 kB |
URL HTTP/1.1disparitydegenerateconstrict.com/9e/55/c2/9e55c24c07205b6a363c94f4ff46ad27.js IP173.233.137.60:0
File typeASCII text, with very long lines (37134), with no line terminators Hash20425181966f44f606e9b48f01bc1876 6e389ac950c1618220df6e2ca6128471faa8fd71 5a07b7cf4c9192e1e4e02a767dce746afb48b722bea3c8b756a99bb6b299f231
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /9e/55/c2/9e55c24c07205b6a363c94f4ff46ad27.js HTTP/1.1
Host: disparitydegenerateconstrict.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 04 Dec 2022 22:46:09 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6bb19ea898d9cab64ddc6eedf9cd5884
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| disparitydegenerateconstrict.com/2a/a0/d7/2aa0d74e87039503a470d3942c5f7ea4.js | 173.233.137.60 | 200 OK | 21 kB |
URL HTTP/1.1disparitydegenerateconstrict.com/2a/a0/d7/2aa0d74e87039503a470d3942c5f7ea4.js IP173.233.137.60:0
File typeHTML document, ASCII text, with very long lines (60172), with no line terminators Hash0f852bab11ff72169ae2bd2f0b0ad2c4 8e287f0f38f3811e3dd8395f076cae23bd6ea214 24407023325c310d5619dea68fdbae6b382d0f7b8c1d4dc2b3d533a0e8e7b633
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /2a/a0/d7/2aa0d74e87039503a470d3942c5f7ea4.js HTTP/1.1
Host: disparitydegenerateconstrict.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 04 Dec 2022 22:46:09 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 32e78be4dcbc53adc012cf17294a0f5d
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| www.skidrowcodex.net/wp-includes/js/plupload/moxie.min.js?ver=1.3.5 | 172.67.217.92 | 200 OK | 30 kB |
URL HTTP/2www.skidrowcodex.net/wp-includes/js/plupload/moxie.min.js?ver=1.3.5 IP172.67.217.92:0
File typeASCII text, with very long lines (65536), with no line terminators Hash5b584b14c4923b775448c61b5eb6b934 5e642c6a0f94022acbe35cd219f53251fa184807 9d8cdf7b38249c6a754131f887ee5e1b3cc2ae456dddffcbc54137c491709cd4
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/plupload/moxie.min.js?ver=1.3.5 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 31 Jan 2022 17:44:17 GMT
cache-control: public, max-age=31536000
expires: Thu, 02 Mar 2023 03:17:52 GMT
etag: W/"61f81ff1-15666"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 24002895
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Era9oR%2FG3o0zi1W7MxaS1h1Ld54jBCJG%2FOiOZcvY%2FixgVdr0KN61xfLC0la7gpkhj06E3CWzbwpfrUxFWL%2B5B6NXa%2FrjcC7zuuhUPb1Ri31wt5%2FmKLnwKMg%2BPf7JRI%2FIA9by9NH1Cg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138f1d9eb51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Oswald%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%20%20%20%20%20%20%20%20%7CRoboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%20%20%20%20%20%20%20%20%7COpen%2BSans%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7COpen%20Sans&display=swap | 142.250.74.106 | 200 OK | 3.1 kB |
URL HTTP/2fonts.googleapis.com/css?family=Oswald%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%20%20%20%20%20%20%20%20%7CRoboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%20%20%20%20%20%20%20%20%7COpen%2BSans%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7COpen%20Sans&display=swap IP142.250.74.106:0
Hash7d6d9b9304a0220a0bab7b68ef9862bf 360cc438f615f9389043288aea6366138ce64378 94674788aba5d3ffa081e9bd31825bb4039c08a06a6c471d1ec45505b6fd972e
GET /css?family=Oswald%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%20%20%20%20%20%20%20%20%7CRoboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%20%20%20%20%20%20%20%20%7COpen%2BSans%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7COpen%20Sans&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 04 Dec 2022 22:46:08 GMT
date: Sun, 04 Dec 2022 22:46:08 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/img/lock.png | 172.67.217.92 | 200 OK | 17 kB |
URL HTTP/2www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/img/lock.png IP172.67.217.92:0
File typePNG image data, 96 x 110, 8-bit/color RGBA, interlaced\012- data Hashfecbdc317a3aff1c4d00e72b38282968 238bec1cac1ed867e9b4d0ac6bcca911eb03fec8 babd158fc7016951651bb505e64df065de6136b972abaf3c6fe2deb7824b0c2d
GET /wp-content/themes/skidrowcodex-main/img/lock.png HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/css/main.css?ver=20160930
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:09 GMT
content-type: image/png
content-length: 16785
last-modified: Wed, 20 Jul 2022 22:26:07 GMT
cache-control: public, max-age=16070400
expires: Mon, 02 Jan 2023 20:32:56 GMT
etag: "62d880ff-4191"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 7870329
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QCk0SCMunMuAotWZj9aS%2BLmL%2FqG699Nlv6a1PApQUhkueYgUhHMtz6CX0SFXpRudaq23aCs%2Bp53nHLcR2FMw11k5Xh6TqV3g5e7GciddK%2BYSSa6yj7vbotmGvmGfvNPOXOQQYyQPqg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 774813954d07b51e-OSL
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 52.89.255.30 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.89.255.30:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: gzGb6z9VsxJwUnYAvnz3xg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Fb9/Kvne87PPOGhckv7AQNoXywQ=
|
|
| www.skidrowcodex.net/wp-includes/js/media-models.min.js | 172.67.217.92 | 200 OK | 7.1 kB |
URL HTTP/2www.skidrowcodex.net/wp-includes/js/media-models.min.js IP172.67.217.92:0
File typeASCII text, with very long lines (14258) Hasha3d4f80b11295e772cf5f3bca628aeca b629a8b2ef496b82e9e17f0c768352f6072b4a3a d5a08bc2bc6c16e1f6f8bc5d5d463d408e1829787db7283158e71291958e9566
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/media-models.min.js HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 25 May 2022 22:03:40 GMT
cache-control: public, max-age=31536000
expires: Wed, 07 Jun 2023 00:33:03 GMT
etag: W/"628ea7bc-37d5"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 15631985
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JjtjG2LrN1xKDhSrc%2Fy4mm%2F1PUx2WiIB%2BhTzpOBhtwsnPCVSUcgKSzv7AStmKC%2FT0%2BaSlBouvUfiZZ5nrlSOxzfUznVpTRTBScvF9vcr7CoY1JiKd7%2BG%2FsaHB%2F1Rx2urrT4ANbn6vw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138feef7b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/addons/clan-wars/js/tipsy/tipsy.css?ver=0.1.7 | 172.67.217.92 | 200 OK | 6.3 kB |
URL HTTP/2www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/addons/clan-wars/js/tipsy/tipsy.css?ver=0.1.7 IP172.67.217.92:0
Hash0fc0a148a2c91cf82d749ca5a9fe47e2 682dd1a6ddc00b455593497b71445390188e841c 7cc7373887f8211bf3d36e900f9256edad1028ce10e808eb0cdbb52504be329b
GET /wp-content/themes/skidrowcodex-main/addons/clan-wars/js/tipsy/tipsy.css?ver=0.1.7 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Sun, 20 Sep 2020 13:10:50 GMT
cache-control: public, max-age=31536000
expires: Sat, 07 Jan 2023 20:25:12 GMT
x-powered-by: PleskLin
cf-cache-status: HIT
age: 28606856
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uY0uBvRYnmiG%2F1DREYkTRzn0M7kTQOoRktVtrinWyAPzCkLgShLFXvO62KHRZmq1zSoEmD4WsNHhmwCW4ZRgbALLUKYfFU0t%2FlZH8otI7uVCWPucHSYH28smIE4Wt8vfNuFDyKrxmQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138e6c95b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/plugins/buddypress/bp-members/css/blocks/members.min.css?ver=10.6.0 | 172.67.217.92 | 200 OK | 32 kB |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/buddypress/bp-members/css/blocks/members.min.css?ver=10.6.0 IP172.67.217.92:0
File typeASCII text, with very long lines (3917), with no line terminators Hash26934d871b50cf555c94f5a41f32a94c b46efb33669b97a3b7d6127727ab393948392075 7d88f10d89c4dd7e768ad39ada0431071b4ffbdddd35609f1f26a849eff3927c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/buddypress/bp-members/css/blocks/members.min.css?ver=10.6.0 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 03 Nov 2022 19:26:25 GMT
vary: Accept-Encoding
cache-control: public, max-age=31536000
expires: Fri, 10 Nov 2023 21:58:05 GMT
etag: W/"636415e1-f4d"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 2076409
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4VLgVMUgjyfZijj%2FF9SdUOJ8hF2UiX38QJWYEvOhvjjBwQ2JtRXvXfTrau%2B8Mdag%2B%2BkA0BGL4W%2FO01%2FLkBE%2FK0ADFE13Qg9ryXigUMK9%2FTww6J5dybkTBEEOMrKgUsgB9q3uyhhl5g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138e6ca6b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-includes/css/dist/block-library/style.min.css | 172.67.217.92 | 200 OK | 15 kB |
URL HTTP/2www.skidrowcodex.net/wp-includes/css/dist/block-library/style.min.css IP172.67.217.92:0
File typeUnicode text, UTF-8 text, with very long lines (33376) Hasha9609533b3732ea66cd3f11d8a04cb8d 94d30e44cc9bc0cf44f762fa4052f80ed4207a7d 95e291ba3177ac159845b909ddd386589f42ebfe7edb6ef6092b0861f2d90956
GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css
last-modified: Fri, 10 Sep 2021 02:18:46 GMT
etag: W/"613ac086-13abe"
x-powered-by: PleskLin
cache-control: max-age=16070400
cf-cache-status: HIT
age: 28608722
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P72jC44Jk9j%2B6Iogf%2FdrajmOLLcSZS0aYcxb5WcRoD6TTorLOWWR4TX%2FwWiGrUdcWvEahfgG7VrLhCnn4hFdka6ewcXCiiKaw0yHnKDnhQWvcpcfo5tWhhM3AbeDU7E2Vcz%2B16Xyzw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138e6c9ab51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/plugins/buddypress/bp-members/css/blocks/member.min.css?ver=10.6.0 | 172.67.217.92 | 200 OK | 1.5 kB |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/buddypress/bp-members/css/blocks/member.min.css?ver=10.6.0 IP172.67.217.92:0
File typeASCII text, with very long lines (1898), with no line terminators Hash1e3e54cd78cfa2f493641249f0bcca5e f0ea62cc2ad8785a7a2b1278a47f59814c7ed535 6e45d2e8bd33ee5b5702fccc43f7b1c88b59b9079202ffbeb69fd48796e3fae1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/buddypress/bp-members/css/blocks/member.min.css?ver=10.6.0 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 03 Nov 2022 19:26:24 GMT
vary: Accept-Encoding
cache-control: public, max-age=31536000
expires: Fri, 03 Nov 2023 19:29:50 GMT
etag: W/"636415e0-76a"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 2690112
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FdNGvIfdPqwZ3PDP4JK4umc0s7sNX0EiGVDMzUw77q4xrrwrKkJpnk3lk3Z5r5eoW4qnJJSsqOKqmMob9QJP5xdgIKi%2F%2BDaPTE0yGbfYWEcNN1Stf%2BGbe639fCQJT3zNHz4fO7XcoA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138e6ca4b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/plugins/buddypress/bp-members/css/blocks/dynamic-members.min.css?ver=10.6.0 | 172.67.217.92 | 200 OK | 1.4 kB |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/buddypress/bp-members/css/blocks/dynamic-members.min.css?ver=10.6.0 IP172.67.217.92:0
File typeASCII text, with very long lines (621), with no line terminators Hash2f7fcafe9062fdc4840ecc0f4e24efe2 9b800704357fa97e478d0e2a2cfb5b992963f5a4 79d8c6e29d556cd1b7edb7009cfa90aa9682de2bd5fffcc1676f220b544790b5
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/buddypress/bp-members/css/blocks/dynamic-members.min.css?ver=10.6.0 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Thu, 03 Nov 2022 19:26:24 GMT
cache-control: public, max-age=31536000
expires: Fri, 03 Nov 2023 19:29:51 GMT
x-powered-by: PleskLin
cf-cache-status: HIT
age: 2690112
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=In%2BAW2pUL%2Bm%2Frbn%2FHYCjDg9h88Vxof57yprxGHdwtBfSAR0eMCApE6wc8LbQNNvUEv8XC8ZvimbcCxq1wWtQhM0wTZQPXTMeaezM0W2ueNsWolUUJ5gH2ebxwOpVx7PU%2FS58do8qXA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138e6ca8b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/fontawesome6/webfonts/fa-solid-900.woff2 | 172.67.217.92 | 200 OK | 154 kB |
URL HTTP/2www.skidrowcodex.net/fontawesome6/webfonts/fa-solid-900.woff2 IP172.67.217.92:0
File typeWeb Open Font Format (Version 2), TrueType, length 154228, version 769.768\012- data Size154 kB (154228 bytes) Hash55b416a8df21f9f987aa352f10d1343b 2717f3f58271f2f2e6120d9937c7227002656d34 d76fb4e841748a3f6bc63efa23156e02631c283bf41f84efcbdaf339ea3e1b73
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /fontawesome6/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.skidrowcodex.net/fontawesome6/css/all.css?ver=1.0.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:09 GMT
content-type: font/woff2
content-length: 154228
last-modified: Wed, 20 Jul 2022 22:25:55 GMT
cache-control: max-age=16070400
expires: Wed, 01 Feb 2023 21:43:32 GMT
etag: "62d880f3-25a74"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 5274129
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o1WBtjHanbznIfemY4wU1kNY3iqHErUdWaraxOnB9qpJxs4Z%2Bnj4qyW9340L6RWhm0E2fYbZ%2BlClVb%2BHi9I1g9Je3FphZ2pmp58k9FGvherHhaJTowjyeKSEDtrtfACtbILgg3VM9w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 774813956d2ab51e-OSL
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/fontawesome6/webfonts/fa-brands-400.woff2 | 172.67.217.92 | 200 OK | 106 kB |
URL HTTP/2www.skidrowcodex.net/fontawesome6/webfonts/fa-brands-400.woff2 IP172.67.217.92:0
File typeWeb Open Font Format (Version 2), TrueType, length 105536, version 769.768\012- data Size106 kB (105536 bytes) Hashcd2b4095e9ce66cde642c3502a4022d9 a280ecdddd14695fad22599301ab03adfe5224c0 404c746c8f7e3f9b7611a8f23d908c1a32a5c972236b9d89bb68b05d9bf4b905
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /fontawesome6/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.skidrowcodex.net/fontawesome6/css/all.css?ver=1.0.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:09 GMT
content-type: font/woff2
content-length: 105536
last-modified: Wed, 20 Jul 2022 22:25:55 GMT
cache-control: max-age=16070400
expires: Wed, 01 Feb 2023 21:43:32 GMT
etag: "62d880f3-19c40"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 5274129
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nMRp2eSx%2BhDPLw6bnLzb8CfudtvSUX0TFVnHW6DjI8vK2cdCyP7JqnZimoDJEfy1A%2FpJpRYqpGrrLpbG3jrkAR6DobujcLDWYDl%2BiIyqH973gnNYiV5xhaQK9Wuud9alz7Y84iiyyg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77481395ddafb51e-OSL
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashda9700d928847bca71f73dc9ca89bd1c 2f156a1557a7504da776ed9a82dc52563662be6f 428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:46:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| e1.o.lencr.org/ | 23.36.77.32 | 200 OK | 346 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashffb1fa188f11f4b1ec69136d1920502b 8aac404d7cf025e415c22f6170fea74bf537c603 7beabb9b7af824e542dc5f62308e6d44c4a38dee34d69836ca4c1cf966592b82
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "7BEABB9B7AF824E542DC5F62308E6D44C4A38DEE34D69836CA4C1CF966592B82"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12469
Expires: Mon, 05 Dec 2022 02:13:58 GMT
Date: Sun, 04 Dec 2022 22:46:09 GMT
Connection: keep-alive
|
|
| www.skidrowcodex.net/wp-content/plugins/buddypress/bp-activity/css/blocks/latest-activities.min.css?ver=10.6.0 | 172.67.217.92 | 200 OK | 23 kB |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/buddypress/bp-activity/css/blocks/latest-activities.min.css?ver=10.6.0 IP172.67.217.92:0
File typeASCII text, with very long lines (1877), with no line terminators Hash68c58b2adcbeeb96028ac4f9b2190555 900cd7dbde20e407ad2f69bb221726ca7e73b6b6 7803d9aa5bebf034977c5c6c3bb047412790984455a29fe208fea13fad52642a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/buddypress/bp-activity/css/blocks/latest-activities.min.css?ver=10.6.0 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 03 Nov 2022 19:26:24 GMT
vary: Accept-Encoding
cache-control: public, max-age=31536000
expires: Fri, 03 Nov 2023 19:29:51 GMT
etag: W/"636415e0-755"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 2690112
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kUYljYDbChlORkK0gO8VAUhMG%2BEvFqIJZbJmN%2Bop9cHvlndHhnVQS7ycbXvm2FWwlzLPcSbtL8Zild2gODgdXM4rEKD2OVmXIGCRM5wfz7LBHMXuxenEJwe1VpWbAjHUfK3npaQw6w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138e7cb0b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 142.250.74.35 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.skidrowcodex.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:34:15 GMT
expires: Thu, 30 Nov 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 357114
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 | 142.250.74.35 | 200 OK | 17 kB |
URL HTTP/2fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 16740, version 1.0\012- data Hashe43b535855a4ae53bd5b07a6eeb3bf67 6507312d9491156036316484bf8dc41e8b52ddd9 b34551ae25916c460423b82beb8e0675b27f76a9a2908f18286260fbd6de6681
GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.skidrowcodex.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 18:52:55 GMT
expires: Tue, 28 Nov 2023 18:52:55 GMT
cache-control: public, max-age=31536000
age: 532394
last-modified: Mon, 15 Aug 2022 18:14:44 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2 | 142.250.74.35 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 15752, version 1.0\012- data Hashb20371a6daf29d4a1f2e85dbbf40fb20 0355a01c1ccb45cb728e7e07c41c8ebf456f70bb 7e262106f82cc52663e403f5b73795bbeab9ca0630c33c03579354fbcd4fae1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.skidrowcodex.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15752
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:42:34 GMT
expires: Thu, 30 Nov 2023 19:42:34 GMT
cache-control: public, max-age=31536000
age: 356615
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashd4a65a7ef2375a9ffd3fd6d709f671d3 def53740ba6ae4dc0eab3f5f923245d995dec54d c3a5694e62ac490c8ced17753e123691016c2910008b70a2d02e0343adbed4bf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C3A5694E62AC490C8CED17753E123691016C2910008B70A2D02E0343ADBED4BF"
Last-Modified: Sun, 04 Dec 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14362
Expires: Mon, 05 Dec 2022 02:45:31 GMT
Date: Sun, 04 Dec 2022 22:46:09 GMT
Connection: keep-alive
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashda9700d928847bca71f73dc9ca89bd1c 2f156a1557a7504da776ed9a82dc52563662be6f 428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:46:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.88 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.88:0
Hashf0f8b0d8806166791f6d6d9a9aa908ca e30099fed67b541c022984b41b6de1e9ca8e01bb c8d3589546edd372653dbcc6fe1bc48340d7bf5dc3b0f37324a9ff8014aa912b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=141398
Date: Sun, 04 Dec 2022 22:46:09 GMT
Etag: "638ca11c-1d7"
Expires: Tue, 06 Dec 2022 14:02:47 GMT
Last-Modified: Sun, 04 Dec 2022 13:31:08 GMT
Server: ECS (nyb/1D35)
X-Cache: Miss from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Nd5cAcMFdxHa0LfCi-AKAgDsG8bA8KoVxYFrJYmVSSbDM_8fcykggg==
Age: 1899
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.88 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.88:0
Hashf0f8b0d8806166791f6d6d9a9aa908ca e30099fed67b541c022984b41b6de1e9ca8e01bb c8d3589546edd372653dbcc6fe1bc48340d7bf5dc3b0f37324a9ff8014aa912b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=141243
Date: Sun, 04 Dec 2022 22:46:09 GMT
Etag: "638ca11c-1d7"
Expires: Tue, 06 Dec 2022 14:00:12 GMT
Last-Modified: Sun, 04 Dec 2022 13:31:08 GMT
Server: ECS (nyb/1D25)
X-Cache: Miss from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: t2fSd1M8s14EdTK4_xDBmhfx0hdIMbZagLJge1EVbfL1LRfQkGAilA==
Age: 1744
|
|
| simplewebanalysis.com/stats |  52.28.211.11 | 200 OK | 40 B |
URL HTTP/2simplewebanalysis.com/stats IP52.28.211.11:0
File typeASCII text, with no line terminators Hashf3aa9527c55bbd16ab24aaf9c59ea879 c6bd97c656cd444b259a02381cbdf2c6735655e3 a0a8494f682098081456466daa992624af4119a4c03d95c2d38f7fdc2b08142c
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.skidrowcodex.net
Connection: keep-alive
Referer: https://www.skidrowcodex.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:09 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.skidrowcodex.net
access-control-allow-credentials: true
set-cookie: uid_id2=59883ae9-3f5e-4a6f-abc3-5406c993df3d:3:1; expires=Wed, 01 Dec 2032 22:46:09 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/plugins/buddypress/bp-core/js/vendor/jquery-scroll-to.min.js?ver=10.6.0 | 172.67.217.92 | 200 OK | 2.4 kB |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/buddypress/bp-core/js/vendor/jquery-scroll-to.min.js?ver=10.6.0 IP172.67.217.92:0
File typeASCII text, with very long lines (2273), with no line terminators Hashd1198abd02ef15496c8305fa7da3f98d 161aa6216bb5faee5f097f08a5d1b1fda9372902 475f723afc47dc87a6e949e88798635f9af1dec5e7f7781ccff0543abbff538b
GET /wp-content/plugins/buddypress/bp-core/js/vendor/jquery-scroll-to.min.js?ver=10.6.0 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 03 Nov 2022 19:26:24 GMT
vary: Accept-Encoding
cache-control: public, max-age=31536000
expires: Fri, 03 Nov 2023 19:29:51 GMT
etag: W/"636415e0-8e1"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 2690111
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U66BJ5eB1MGixyQZmgUkbkxjAkuOw%2FBvWMlWapXMXaPFqpk9HDGnfTgz%2BA6%2F1aV6IbN5mN7Kvj55W4Z20xD5af9A6CexZyAuRrftN%2B37zaRjBrqz1wvmEOW3IaY17vmVRPEanT4%2BgQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138f1d94b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/img/arrow-menu.png | 172.67.217.92 | 200 OK | 958 B |
URL HTTP/2www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/img/arrow-menu.png IP172.67.217.92:0
File typePNG image data, 9 x 9, 8-bit/color RGBA, non-interlaced\012- data Hashf9c0ecfcff60768fbd06b8530b5893d8 278c5069e07702d4879e9071a6b0771dcdf52276 a67a4f1d3647720231c97244d0c0ff6dfa49b83f7191dd86d19940a3d3f96685
GET /wp-content/themes/skidrowcodex-main/img/arrow-menu.png HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/css/main.css?ver=20160930
Cookie: __unam=bb01aea-184df517038-13c6bd1d-1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:09 GMT
content-type: image/png
content-length: 958
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Wed, 20 Jul 2022 22:26:07 GMT
cache-control: public, max-age=16070400
expires: Mon, 02 Jan 2023 20:10:27 GMT
x-powered-by: PleskLin
cf-cache-status: HIT
age: 7871678
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rc2rrNZ4yM7buE73wSbUKB68w1d9cCWELMzjsImjwDyATQXMJ3BHpUups3CNjPpW%2Bkf6aeQgifsK9%2BerlPxMfy3UrryGU75D%2Bl3eBWkkBb9ZdHytHV9t%2B%2FB4iufWuodnYnAaD4%2F90A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774813975fc3b51e-OSL
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/fontawesome6/webfonts/fa-regular-400.woff2 | 172.67.217.92 | 200 OK | 24 kB |
URL HTTP/2www.skidrowcodex.net/fontawesome6/webfonts/fa-regular-400.woff2 IP172.67.217.92:0
File typeWeb Open Font Format (Version 2), TrueType, length 23940, version 769.768\012- data Hashe8a1ba418ee6d897d1339ef22e6d8e60 379ca48f70f3d4f79f8bf1079881c7c5af4f44a4 6a274e7629c0d71dcf8cab1e7733687ebfe32e2c53b4ca9fad050b4f1d5471f3
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /fontawesome6/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.skidrowcodex.net/fontawesome6/css/all.css?ver=1.0.0
Cookie: __unam=bb01aea-184df517038-13c6bd1d-1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:09 GMT
content-type: font/woff2
content-length: 23940
last-modified: Wed, 20 Jul 2022 22:25:55 GMT
cache-control: max-age=16070400
expires: Thu, 02 Feb 2023 01:34:36 GMT
etag: "62d880f3-5d84"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 5260265
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VJLwuBvD5L4jxOU%2FixJgUl%2BVyoYqI0CPkNP%2FSAI67rsbEFfDw1crOf3dXgs0cIcagPSB0DQcDRU93T1I4It%2BLiTMTksV%2F96mR6ot1eJSzJJteXNHl2Vul%2FusF%2BXmtwXcnE4v2mhTbQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 774813976fd0b51e-OSL
X-Firefox-Spdy: h2
|
|
| e1.o.lencr.org/ | 23.36.77.32 | 200 OK | 346 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashffb1fa188f11f4b1ec69136d1920502b 8aac404d7cf025e415c22f6170fea74bf537c603 7beabb9b7af824e542dc5f62308e6d44c4a38dee34d69836ca4c1cf966592b82
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "7BEABB9B7AF824E542DC5F62308E6D44C4A38DEE34D69836CA4C1CF966592B82"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12469
Expires: Mon, 05 Dec 2022 02:13:58 GMT
Date: Sun, 04 Dec 2022 22:46:09 GMT
Connection: keep-alive
|
|
| www.skidrowcodex.net/wp-content/plugins/buddypress/bp-core/js/jquery-query.min.js?ver=10.6.0 | 172.67.217.92 | 200 OK | 2.5 kB |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/buddypress/bp-core/js/jquery-query.min.js?ver=10.6.0 IP172.67.217.92:0
File typeASCII text, with no line terminators Hash3c1064a2016cf5720b4ed2a1083f65b0 d294ca09aa51f3205b294f748a3162869d1323b1 824662fd7d1a5d892021bd827dfce345128920672a9203f212d906855f41f58b
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/buddypress/bp-core/js/jquery-query.min.js?ver=10.6.0 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Thu, 03 Nov 2022 19:26:24 GMT
cache-control: public, max-age=31536000
expires: Fri, 03 Nov 2023 19:29:51 GMT
x-powered-by: PleskLin
cf-cache-status: HIT
age: 2690111
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oLGmXyMtZNb41DRnw0od%2FXQen2nBOrzgl%2FSEeoi1TaQiwXmq%2FD6By%2BYhVVc1Xh1Pc69Y%2Fa77iq0MT99RCpClIdz%2FHLFytr7VwUAqwGQwY0JaI1ahxWbh1ngSDNSANF276jR5zKSjIg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138f0d84b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/uploads/2018/12/1.png | 172.67.217.92 | 200 OK | 19 kB |
URL HTTP/2www.skidrowcodex.net/wp-content/uploads/2018/12/1.png IP172.67.217.92:0
File typePNG image data, 128 x 128, 8-bit/color RGBA, interlaced\012- data Hash700155633ff3880e5a61acd8eff30ff6 d677135c3e4492843b08b70b8e8b320e021a601e 7c260b19a9bf5b4832893c1f5db13c166cb54e964477049c4856146ad41ec9ca
GET /wp-content/uploads/2018/12/1.png HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Cookie: __unam=bb01aea-184df517038-13c6bd1d-1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:09 GMT
content-type: image/png
content-length: 18576
last-modified: Wed, 20 Jul 2022 22:26:07 GMT
cache-control: public, max-age=16070400
expires: Mon, 02 Jan 2023 19:51:32 GMT
etag: "62d880ff-4890"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 7872812
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OaLi4R9Ehfie06yGy0hdNS65RLkhMzDYE0gmcrJH3AVyittFwD8pdmXnhv56Sxxr01Y%2FfyDhyTHtXHAmHj%2FUtLY567p6OWgip%2BIRkG3%2BSKncA1VMOoH5LmZFNKQNYlyjLquplFgq%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77481397e87fb51e-OSL
X-Firefox-Spdy: h2
|
|
| ws.sharethis.com/button/async-buttons.js | 54.230.111.82 | 200 OK | 19 kB |
URL HTTP/2ws.sharethis.com/button/async-buttons.js IP54.230.111.82:0
File typeASCII text, with very long lines (65536), with no line terminators Hash0b3b7d06f8df8276ede0facec198706e 3e42fc6cacb95a5fa1b56c5b3984e8269752fbbe 342ffe242184c80ddf304e21db8b256ccb8aecb1f4bd9363802dcf2f36053837
GET /button/async-buttons.js HTTP/1.1
Host: ws.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 18813
content-encoding: gzip
server: nginx/1.20.1
x-robots-tag: noindex, nofollow
date: Sat, 03 Dec 2022 21:42:44 GMT
cache-control: max-age=259200
expires: Tue, 06 Dec 2022 21:42:44 GMT
etag: W/"634f1895-16245"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yppDS2465kZOMoxM9mXIpBmtrGd5QGGnbPNYYNGDLMlsBYrpSQkBPA==
age: 90205
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js | 142.250.74.35 | 200 OK | 163 kB |
URL HTTP/2www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js IP142.250.74.35:0
File typeASCII text, with very long lines (730) Size163 kB (162976 bytes) Hash79d18cf4265108d7cecca1bf4ada6109 e51d0285a545381d4c39e9e0292a650ffeeecbb9 59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.skidrowcodex.net
Connection: keep-alive
Referer: https://www.skidrowcodex.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 19:09:57 GMT
expires: Tue, 28 Nov 2023 19:09:57 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 531372
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash3c4319f54a5675ee9acda96c58f97ac6 210ea86db1836d430b321d59b4bd1b016c914f22 cb20ad3ec895ed3a2ae9b1a90dda6b7cc174d8851f3a15ba054a435746cbdc65
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:46:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ws.sharethis.com/button/css/buttons-secure.css | 54.230.111.82 | 200 OK | 3.9 kB |
URL HTTP/2ws.sharethis.com/button/css/buttons-secure.css IP54.230.111.82:0
File typeASCII text, with very long lines (23158), with no line terminators Hash61da924a747e08c5f54a6cb31c724a48 8e49d971d6a667c3888a481b742e05cafcf72a43 54302324d4b6aa780466c869b9932504d0b1eaa7ef1df6c5481b35fb0625343a
GET /button/css/buttons-secure.css HTTP/1.1
Host: ws.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 3851
content-encoding: gzip
last-modified: Tue, 18 Oct 2022 21:20:21 GMT
server: nginx/1.20.1
x-robots-tag: noindex, nofollow
date: Sat, 03 Dec 2022 23:28:19 GMT
etag: W/"634f1895-5a76"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tBZ_G4awUaMsaP64rHSZjvRjsldCFpotIV6yJsLHrH0B1jzlGCjInQ==
age: 83873
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/analytics.js | 142.250.74.46 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.46:0
File typeASCII text, with very long lines (1325) Hash47e6f374ca946fddd5b59871b325736c baa9282efc8785e84d247c3bff518eaa45f101c4 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sun, 04 Dec 2022 20:46:55 GMT
expires: Sun, 04 Dec 2022 22:46:55 GMT
cache-control: public, max-age=7200
age: 7154
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash3c4319f54a5675ee9acda96c58f97ac6 210ea86db1836d430b321d59b4bd1b016c914f22 cb20ad3ec895ed3a2ae9b1a90dda6b7cc174d8851f3a15ba054a435746cbdc65
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:46:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashde7882ab113113ac974214ed195c1c09 6403b2259bd82f2e3bbbce830e20c7efd1dba98f 8be10c0fe85e64985905329b6984d6ad82f762d5cc93b09e5850a23e9a1c02cd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8BE10C0FE85E64985905329B6984D6AD82F762D5CC93B09E5850A23E9A1C02CD"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2749
Expires: Sun, 04 Dec 2022 23:31:59 GMT
Date: Sun, 04 Dec 2022 22:46:10 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash6ddd743262cc2727e40e84514b13c68a a9e579263bdb29ebc08ed46d9af5d8308f0bf6ea e927bd50b4fad2320c331c115457c053cf542096113a7668afe3590e1635d911
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E927BD50B4FAD2320C331C115457C053CF542096113A7668AFE3590E1635D911"
Last-Modified: Sun, 04 Dec 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8103
Expires: Mon, 05 Dec 2022 01:01:13 GMT
Date: Sun, 04 Dec 2022 22:46:10 GMT
Connection: keep-alive
|
|
| banquetunarmedgrater.com/advertisers.js | 192.243.61.225 | 200 OK | 0 B |
URL HTTP/1.1banquetunarmedgrater.com/advertisers.js IP192.243.61.225:0 ASN#39572 DataWeb Global Group B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sun, 04 Dec 2022 22:46:10 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9674733fc4e448d6f98bc552cc3c5c0d
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| www.skidrowcodex.net/wp-content/plugins/buddypress/bp-groups/css/blocks/group.min.css?ver=10.6.0 | 172.67.217.92 | 200 OK | 1.1 kB |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/buddypress/bp-groups/css/blocks/group.min.css?ver=10.6.0 IP172.67.217.92:0
File typeASCII text, with very long lines (2029), with no line terminators Hash2e2702331ac7ec33392adc54bf9254cd 2e28f5a07f43499d56ebbb2e65f0cd0162ff3499 add426154c48a4c4a0b341264887a1a39641568104a92284e9d141aaf363a82b
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/buddypress/bp-groups/css/blocks/group.min.css?ver=10.6.0 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 03 Nov 2022 19:26:24 GMT
vary: Accept-Encoding
cache-control: public, max-age=31536000
expires: Fri, 03 Nov 2023 19:29:51 GMT
etag: W/"636415e0-7ed"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 2690112
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xptoUbNvcOHz78ebffDg0mknvhIR1cNRbF7wz5EWZbZWC6C3y5jcLqDjBXoBj7xhWyUfo%2FQOYsbUt6p0dQwfIjcn2zV%2FGskKX%2FsVva9CX6ceywqHmC4RVfLZBRYoDoTjOgZfSH4yUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138e7cb3b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash83e0936435ad95a15c9ec5ff9520f4fe a8225ee0d8ae117f977f7ff817c342c62e91b5a9 ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8574
Expires: Mon, 05 Dec 2022 01:09:04 GMT
Date: Sun, 04 Dec 2022 22:46:10 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash83e0936435ad95a15c9ec5ff9520f4fe a8225ee0d8ae117f977f7ff817c342c62e91b5a9 ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8574
Expires: Mon, 05 Dec 2022 01:09:04 GMT
Date: Sun, 04 Dec 2022 22:46:10 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash83e0936435ad95a15c9ec5ff9520f4fe a8225ee0d8ae117f977f7ff817c342c62e91b5a9 ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8574
Expires: Mon, 05 Dec 2022 01:09:04 GMT
Date: Sun, 04 Dec 2022 22:46:10 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash83e0936435ad95a15c9ec5ff9520f4fe a8225ee0d8ae117f977f7ff817c342c62e91b5a9 ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8574
Expires: Mon, 05 Dec 2022 01:09:04 GMT
Date: Sun, 04 Dec 2022 22:46:10 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash83e0936435ad95a15c9ec5ff9520f4fe a8225ee0d8ae117f977f7ff817c342c62e91b5a9 ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8574
Expires: Mon, 05 Dec 2022 01:09:04 GMT
Date: Sun, 04 Dec 2022 22:46:10 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd33bab20-1689-4962-985e-15e304482bee.jpeg | 34.120.237.76 | 200 OK | 9.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd33bab20-1689-4962-985e-15e304482bee.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash37b58bb09c00b591c2819c89e371d927 aa487f4a7767cb4591fe620592da65bde90c0aa2 9b7791d79d1e9702c23e63450d556e7f1f287f4d02788fc147822c1d90f64657
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd33bab20-1689-4962-985e-15e304482bee.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9825
x-amzn-requestid: 1ab366f4-78f2-4aaa-af7b-aa203c2d8234
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_1ZE23IAMFnhw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d1355-35c7b5bb6e4623e93900810c;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:38:29 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: iTF4eWWXKKT97b6S9ONW7NopJ8hXWdOe9y3IwzVF7J9m2eJlT43bCg==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:49:04 GMT
age: 3426
etag: "aa487f4a7767cb4591fe620592da65bde90c0aa2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d407108-e7e2-4672-80f5-d4b4c3e66151.jpeg | 34.120.237.76 | 200 OK | 6.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d407108-e7e2-4672-80f5-d4b4c3e66151.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash3130c86c084c4c925fb9179dfa5c145d 203f27660f3885d5c1bc68a535baef4e48ff6582 faf2c48c2286fe2149908947de9037640007d32e13694c1261f610250caf3f8f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d407108-e7e2-4672-80f5-d4b4c3e66151.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6173
x-amzn-requestid: dc73ee0d-b1ec-407f-8e98-3ba264725ee3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_sqHqwIAMFwqA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d131d-56d74e8d45baa9e87136708f;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:37:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Gp9v8CfWmPctcSly9jWOxy0VCbBOE-CZs9z636yfpgpVi8eNt_PVvg==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:48:29 GMT
etag: "203f27660f3885d5c1bc68a535baef4e48ff6582"
content-type: image/jpeg
age: 3461
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/plugins/buddypress/bp-groups/css/blocks/dynamic-groups.min.css?ver=10.6.0 | 172.67.217.92 | 200 OK | 8.7 kB |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/buddypress/bp-groups/css/blocks/dynamic-groups.min.css?ver=10.6.0 IP172.67.217.92:0
File typeASCII text, with very long lines (621), with no line terminators Hash420862a7ce94a1f8077e6f62bf8e3e1e 9f8e716bf31f34b2d109506e828185129e630a5c 61004e85a912fd1e9464c652af986eb1f7d85b6e84c7d88ffa28e090a3cc1bc9
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/buddypress/bp-groups/css/blocks/dynamic-groups.min.css?ver=10.6.0 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Thu, 03 Nov 2022 19:26:24 GMT
cache-control: public, max-age=31536000
expires: Fri, 03 Nov 2023 19:29:51 GMT
x-powered-by: PleskLin
cf-cache-status: HIT
age: 2690112
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PEd3pZK8mpaSyrfvGSlh7Ou671rbgAAIu68Y45fgBZNKLZ20qL%2Bi3Ri9iF%2F2IUQOdDYG4mRCWRrXx1heJJr8ZcqmUtFylSKxG1BaPgSjuCSdZ%2Flju9cYKrDxl9COYiJZDOVE4x1EEg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138e8cbeb51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feff698a5-ffc4-43ea-b7a3-b681cafeb108.jpeg | 34.120.237.76 | 200 OK | 13 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feff698a5-ffc4-43ea-b7a3-b681cafeb108.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash5d72fb8d20c29763234c2817b119d11b d4924ec714f5157bcb2fddcb5f768188a3dd37dc e9aa59142e0673ed3f58b36beaca48213c678dbe4655f9c4b64581cb0f6f22f6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feff698a5-ffc4-43ea-b7a3-b681cafeb108.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12830
x-amzn-requestid: 66f5f2fa-8472-4484-bbea-20ece7e98b1f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cmcsxGDyIAMFX4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c0e51-146167697890d9312ce3dbac;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 03:04:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CYvQg9Tc0rQB9_DoDW4RoLx2GEdMSEaXViCY3qXbijd0P5mMSZWE6Q==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 03:35:27 GMT
age: 69043
etag: "d4924ec714f5157bcb2fddcb5f768188a3dd37dc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa1caf4c1-b9c0-4db1-a780-00b9a6198731.jpeg | 34.120.237.76 | 200 OK | 5.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa1caf4c1-b9c0-4db1-a780-00b9a6198731.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash8d76ec668361348eb17d54001fd2e6c6 534299a20a76ea6e3250f0fb35fe772cac04ef51 22676fae3909acf18e6cd4f505ec718fdac156990edb20926afdae2a359a2859
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa1caf4c1-b9c0-4db1-a780-00b9a6198731.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5209
x-amzn-requestid: 682056d5-7815-4fd1-b05b-723619128d8a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjKUXF5eoAMFRvQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638abdb5-6df5d866267739212832ee66;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 03:08:37 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: pFKMx6_a5Ml_dBK1dafOt4KFMeC5SwUqNlNpc8sO4DVj0Ocb2Yksrw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 03:17:39 GMT
age: 70111
etag: "534299a20a76ea6e3250f0fb35fe772cac04ef51"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47f316c5-1381-4b6e-9e8d-f1956258ef3e.jpeg | 34.120.237.76 | 200 OK | 6.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47f316c5-1381-4b6e-9e8d-f1956258ef3e.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasha349d02cce160f72cc93f6fb6e45fa46 a6f82481ea0a820da0f199e8f9051a4aa4013c82 ab320118577a2dcb6ab7ad904d6350e187501a94b39b71fdd70b31cbc8853b24
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47f316c5-1381-4b6e-9e8d-f1956258ef3e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6826
x-amzn-requestid: f0abdba6-14c8-4aae-ba3b-37ba0af2ff08
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_t2FsLIAMFekA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d1325-3452be066acddb554f528cc3;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:37:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: d5IKLNblcA9AzCoGMpGmIGwUu-kQlHlouju5mm2NwsSOin4MFT40mg==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:56:21 GMT
age: 2989
etag: "a6f82481ea0a820da0f199e8f9051a4aa4013c82"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| lightssyrupdecree.com/sbar.json?key=9e55c24c07205b6a363c94f4ff46ad27 | 173.233.137.52 | 200 OK | 4.2 kB |
URL HTTP/1.1lightssyrupdecree.com/sbar.json?key=9e55c24c07205b6a363c94f4ff46ad27 IP173.233.137.52:0
File typeJSON data\012- , ASCII text, with very long lines (6042), with no line terminators Hash8db71168f2cad64c388858bbffadcf3c bf2a067c59ce29545aebc7a1cab88a3a27f586cf 016b3697dc080a65e63cd4a480e58a8e793dda7b88fa1f3c3e281c0a407c6b80
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /sbar.json?key=9e55c24c07205b6a363c94f4ff46ad27 HTTP/1.1
Host: lightssyrupdecree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.skidrowcodex.net
Connection: keep-alive
Referer: https://www.skidrowcodex.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 04 Dec 2022 22:46:10 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.skidrowcodex.net
Access-Control-Allow-Origin: https://www.skidrowcodex.net
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=16905685; expires=Mon, 05 Dec 2022 22:46:10 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 05 Dec 2022 22:46:10 GMT; secure; SameSite=None
uncs=1; expires=Mon, 05 Dec 2022 22:46:10 GMT; secure; SameSite=None
pdhtkv29=true; expires=Mon, 05 Dec 2022 22:46:10 GMT; secure; SameSite=None
uncs29=1; expires=Mon, 05 Dec 2022 22:46:10 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3f32548e30138938310a3fd9db249b53
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashd616b0b14e0c5cda5c98d0b99cccbaf3 657299c8f642a892045dbfe2a6958133e6b57f99 3590d6a37989c47a5d082655909defed76f2f4a467d3f6700134bba4ffb130f7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3590D6A37989C47A5D082655909DEFED76F2F4A467D3F6700134BBA4FFB130F7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3900
Expires: Sun, 04 Dec 2022 23:51:10 GMT
Date: Sun, 04 Dec 2022 22:46:10 GMT
Connection: keep-alive
|
|
| lightssyrupdecree.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3sSDenJxDx6UAS8KMun56UzGHFbjGgnGJO6uBgQP1VXVk3Kqq5qq7ulJ8BBckL0szJ702Pkm2aAusnv0IEjHiwSEjIjkYLyJd3HPMpOB0QdV7331vcP3vVefH2QXxEdGz7feM3tSKboQVP3KK9tSc5O7ysbtSs2v%2BsuVbakXm8uV%2FviyvddrflD1X628I1jXLNT9mu%2FX%2FFplVVoRmf7ChIVMHrZr1bZfbdartaCJvv0%2FdpkHRz3w3gW5CslHT%2B389BiSldDxoxvCdVOTvPZ2nCmaGoseP%2F5Ad7XJNeJZGVkPkT6edsO4ESFfXoHRx1MHML3DsQOEckS832oI9fFUJsLe0aXSUEFohPxZ5L0SQpWQtAQzdyD5GQEYx8YmdPxgw9ic7l6ydMyOyPyTvyHzEZn%2F%2FXno%2BNsVJfuVW0ZlqTTaoR8VkP0SslMiyU6Q7nmQ%2BQlY%2Bhkk%2F5ksPFmHjg83nTKQvJi4l7KEjEooMQB1HrLxkR6yyEOWeIj5eYUG7cj3W1EYNRpLTcZYo8FYsLTIA95oLkU%2BMjaWN0CaDMDUAMzuI7H76Mr7Z8FV2OwHuJ0Cjntw6Yh47%2B%2BjxwvkgiB3BDklyCVBnhLkveKIK1d3xQOuXBbWprk%2BzY1iaNLOAT0yaUdocpBckOfGo%2FG8f35FV5xX2iIIWL3J%2FFbdD8JF2lhssHYzakZRc5HyegtOFpDuysTtnhyRa92PkcgRmfvuaYT0BE6dgMlroNmLoPmwVfdBd4bNJR97%2BpHrSm5NzgwX%2FaoWKbgpkKTzSHe9A3VBXpisqf0ngWCn17%2B4t%2FnHMv8IzBZIbIFP5I8EHXV3eNPk5PCmyR15vJmkMpZ7dLzCWylNxdzX74rd3Fi%2BdsMNvnqTjYlx%2BfC2cOk61VzqjiPfrEjOhV01lgny%2FZrbFuFW5nZWMquzZH3rrdW1OLHCOWl0CSrPPvwUTI7IM7Y7%2BZwv%2FfUGpC1hswJxdkqmAWlKsGQfLpmpd4bAqllPmHjIs2Jo6%2BHsUUkCJWaYhgXcf3A4qw%2FcXXSsB5regY4L9GyBnipA1QAumxumiT29%2FktjEgiVNwyV9Q5DZdX9y9E6eV4RQeRHwq%2BLMGqHUYv6vB012yFt10QrDGgNqRuxey%2FX%2FwUAAP%2F%2FAQAA%2F%2F8gUHNWdAQAAA%3D%3D | 173.233.137.52 | 200 OK | 7 B |
URL HTTP/1.1lightssyrupdecree.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3sSDenJxDx6UAS8KMun56UzGHFbjGgnGJO6uBgQP1VXVk3Kqq5qq7ulJ8BBckL0szJ702Pkm2aAusnv0IEjHiwSEjIjkYLyJd3HPMpOB0QdV7331vcP3vVefH2QXxEdGz7feM3tSKboQVP3KK9tSc5O7ysbtSs2v%2BsuVbakXm8uV%2FviyvddrflD1X628I1jXLNT9mu%2FX%2FFplVVoRmf7ChIVMHrZr1bZfbdartaCJvv0%2FdpkHRz3w3gW5CslHT%2B389BiSldDxoxvCdVOTvPZ2nCmaGoseP%2F5Ad7XJNeJZGVkPkT6edsO4ESFfXoHRx1MHML3DsQOEckS832oI9fFUJsLe0aXSUEFohPxZ5L0SQpWQtAQzdyD5GQEYx8YmdPxgw9ic7l6ydMyOyPyTvyHzEZn%2F%2FXno%2BNsVJfuVW0ZlqTTaoR8VkP0SslMiyU6Q7nmQ%2BQlY%2Bhkk%2F5ksPFmHjg83nTKQvJi4l7KEjEooMQB1HrLxkR6yyEOWeIj5eYUG7cj3W1EYNRpLTcZYo8FYsLTIA95oLkU%2BMjaWN0CaDMDUAMzuI7H76Mr7Z8FV2OwHuJ0Cjntw6Yh47%2B%2BjxwvkgiB3BDklyCVBnhLkveKIK1d3xQOuXBbWprk%2BzY1iaNLOAT0yaUdocpBckOfGo%2FG8f35FV5xX2iIIWL3J%2FFbdD8JF2lhssHYzakZRc5HyegtOFpDuysTtnhyRa92PkcgRmfvuaYT0BE6dgMlroNmLoPmwVfdBd4bNJR97%2BpHrSm5NzgwX%2FaoWKbgpkKTzSHe9A3VBXpisqf0ngWCn17%2B4t%2FnHMv8IzBZIbIFP5I8EHXV3eNPk5PCmyR15vJmkMpZ7dLzCWylNxdzX74rd3Fi%2BdsMNvnqTjYlx%2BfC2cOk61VzqjiPfrEjOhV01lgny%2FZrbFuFW5nZWMquzZH3rrdW1OLHCOWl0CSrPPvwUTI7IM7Y7%2BZwv%2FfUGpC1hswJxdkqmAWlKsGQfLpmpd4bAqllPmHjIs2Jo6%2BHsUUkCJWaYhgXcf3A4qw%2FcXXSsB5regY4L9GyBnipA1QAumxumiT29%2FktjEgiVNwyV9Q5DZdX9y9E6eV4RQeRHwq%2BLMGqHUYv6vB012yFt10QrDGgNqRuxey%2FX%2FwUAAP%2F%2FAQAA%2F%2F8gUHNWdAQAAA%3D%3D IP173.233.137.52:0
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3sSDenJxDx6UAS8KMun56UzGHFbjGgnGJO6uBgQP1VXVk3Kqq5qq7ulJ8BBckL0szJ702Pkm2aAusnv0IEjHiwSEjIjkYLyJd3HPMpOB0QdV7331vcP3vVefH2QXxEdGz7feM3tSKboQVP3KK9tSc5O7ysbtSs2v%2BsuVbakXm8uV%2FviyvddrflD1X628I1jXLNT9mu%2FX%2FFplVVoRmf7ChIVMHrZr1bZfbdartaCJvv0%2FdpkHRz3w3gW5CslHT%2B389BiSldDxoxvCdVOTvPZ2nCmaGoseP%2F5Ad7XJNeJZGVkPkT6edsO4ESFfXoHRx1MHML3DsQOEckS832oI9fFUJsLe0aXSUEFohPxZ5L0SQpWQtAQzdyD5GQEYx8YmdPxgw9ic7l6ydMyOyPyTvyHzEZn%2F%2FXno%2BNsVJfuVW0ZlqTTaoR8VkP0SslMiyU6Q7nmQ%2BQlY%2Bhkk%2F5ksPFmHjg83nTKQvJi4l7KEjEooMQB1HrLxkR6yyEOWeIj5eYUG7cj3W1EYNRpLTcZYo8FYsLTIA95oLkU%2BMjaWN0CaDMDUAMzuI7H76Mr7Z8FV2OwHuJ0Cjntw6Yh47%2B%2BjxwvkgiB3BDklyCVBnhLkveKIK1d3xQOuXBbWprk%2BzY1iaNLOAT0yaUdocpBckOfGo%2FG8f35FV5xX2iIIWL3J%2FFbdD8JF2lhssHYzakZRc5HyegtOFpDuysTtnhyRa92PkcgRmfvuaYT0BE6dgMlroNmLoPmwVfdBd4bNJR97%2BpHrSm5NzgwX%2FaoWKbgpkKTzSHe9A3VBXpisqf0ngWCn17%2B4t%2FnHMv8IzBZIbIFP5I8EHXV3eNPk5PCmyR15vJmkMpZ7dLzCWylNxdzX74rd3Fi%2BdsMNvnqTjYlx%2BfC2cOk61VzqjiPfrEjOhV01lgny%2FZrbFuFW5nZWMquzZH3rrdW1OLHCOWl0CSrPPvwUTI7IM7Y7%2BZwv%2FfUGpC1hswJxdkqmAWlKsGQfLpmpd4bAqllPmHjIs2Jo6%2BHsUUkCJWaYhgXcf3A4qw%2FcXXSsB5regY4L9GyBnipA1QAumxumiT29%2FktjEgiVNwyV9Q5DZdX9y9E6eV4RQeRHwq%2BLMGqHUYv6vB012yFt10QrDGgNqRuxey%2FX%2FwUAAP%2F%2FAQAA%2F%2F8gUHNWdAQAAA%3D%3D HTTP/1.1
Host: lightssyrupdecree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/
Cookie: u_pl=16905685; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 04 Dec 2022 22:46:10 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 598c336ad859ab1a5cd5fbbfc27f9317
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| organexpectationsmaintain.com/pixel/pure | 192.243.61.225 | 204 No Content | 0 B |
URL HTTP/1.1organexpectationsmaintain.com/pixel/pure IP192.243.61.225:0 ASN#39572 DataWeb Global Group B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
OPTIONS /pixel/pure HTTP/1.1
Host: organexpectationsmaintain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.skidrowcodex.net/
Origin: https://www.skidrowcodex.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.22.0
Date: Sun, 04 Dec 2022 22:46:10 GMT
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 1728000
Content-Type: text/plain; charset=utf-8
Content-Length: 0
|
|
| e1.o.lencr.org/ | 23.36.77.32 | 200 OK | 346 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hasha9ff5fa0b5c4765b050f2381f57f5520 0ce842b0fbaef98e256cc66eff4615df094b9d51 95e33b8d7c38a952cbc353b5e2587cd1154da32d9ba29f010bd4b70a4ff2c487
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "95E33B8D7C38A952CBC353B5E2587CD1154DA32D9BA29F010BD4B70A4FF2C487"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5848
Expires: Mon, 05 Dec 2022 00:23:38 GMT
Date: Sun, 04 Dec 2022 22:46:10 GMT
Connection: keep-alive
|
|
| www.skidrowcodex.net/wp-content/plugins/buddypress/bp-groups/css/blocks/groups.min.css?ver=10.6.0 | 172.67.217.92 | 200 OK | 18 kB |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/buddypress/bp-groups/css/blocks/groups.min.css?ver=10.6.0 IP172.67.217.92:0
File typeASCII text, with very long lines (3457), with no line terminators Hash26339e230d2380b965e47db496db8f6c 65b2e67f7b6df7dc5f2b20bd7ebcb8f598fdbdc1 9129e69c8f062457c9db47cffa3d0876e8590997ab13bd13f11bff12fe5271e9
GET /wp-content/plugins/buddypress/bp-groups/css/blocks/groups.min.css?ver=10.6.0 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 03 Nov 2022 19:26:24 GMT
vary: Accept-Encoding
cache-control: public, max-age=31536000
expires: Fri, 03 Nov 2023 19:29:51 GMT
etag: W/"636415e0-d81"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 2690112
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MQcvwcnS2OZD2DZSKBMcOCg8XIk20LTHVoFHV%2BFGlfEUBgjlfTDSZgnmtU%2BsKyQrqXDyB4vJrzwAMUVR8mVfkMHp%2BQddxBde3vbQfOQiYCFCBR6VxBW8LnduZ0Vofiab3k7lkR6sMw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138e7cbdb51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| lightssyrupdecree.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F50%2F77%2Fd2%2F5077d2a4de96d9464e3c0d2ecf8bb3de%2F1601543282.html&l=1209&fd=116 | 173.233.137.52 | 200 OK | 0 B |
URL HTTP/1.1lightssyrupdecree.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F50%2F77%2Fd2%2F5077d2a4de96d9464e3c0d2ecf8bb3de%2F1601543282.html&l=1209&fd=116 IP173.233.137.52:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F50%2F77%2Fd2%2F5077d2a4de96d9464e3c0d2ecf8bb3de%2F1601543282.html&l=1209&fd=116 HTTP/1.1
Host: lightssyrupdecree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/
Cookie: u_pl=16905685; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 04 Dec 2022 22:46:10 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| organexpectationsmaintain.com/pixel/pure | 192.243.61.225 | 204 No Content | 0 B |
URL HTTP/1.1organexpectationsmaintain.com/pixel/pure IP192.243.61.225:0 ASN#39572 DataWeb Global Group B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
OPTIONS /pixel/pure HTTP/1.1
Host: organexpectationsmaintain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.skidrowcodex.net/
Origin: https://www.skidrowcodex.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.22.0
Date: Sun, 04 Dec 2022 22:46:10 GMT
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 1728000
Content-Type: text/plain; charset=utf-8
Content-Length: 0
|
|
| cdn.barscreative1.com/sb/au/50/77/d2/5077d2a4de96d9464e3c0d2ecf8bb3de/1601543282.html | 45.133.44.3 | 200 OK | 461 B |
URL HTTP/2cdn.barscreative1.com/sb/au/50/77/d2/5077d2a4de96d9464e3c0d2ecf8bb3de/1601543282.html IP45.133.44.3:0 ASN#39572 DataWeb Global Group B.V.
File typeHTML document text\012- HTML document, ASCII text Hash186ef88be072a4247214744fa3779b0b 9cb0e80fe5dca29d3d2526b3100248eaa664973b f670b62c086feb7cea5b545ec6539292d23d04e49e3aea64b14874a076d8d8b4
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /sb/au/50/77/d2/5077d2a4de96d9464e3c0d2ecf8bb3de/1601543282.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.skidrowcodex.net
Connection: keep-alive
Referer: https://www.skidrowcodex.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:10 GMT
content-type: text/html; charset=utf-8
server: nginx/1.17.6
last-modified: Sat, 07 May 2022 03:21:28 GMT
etag: W/"6275e5b8-4b9"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Sun, 04 Dec 2022 23:46:10 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| e1.o.lencr.org/ | 23.36.77.32 | 200 OK | 346 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hasha9ff5fa0b5c4765b050f2381f57f5520 0ce842b0fbaef98e256cc66eff4615df094b9d51 95e33b8d7c38a952cbc353b5e2587cd1154da32d9ba29f010bd4b70a4ff2c487
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "95E33B8D7C38A952CBC353B5E2587CD1154DA32D9BA29F010BD4B70A4FF2C487"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5847
Expires: Mon, 05 Dec 2022 00:23:38 GMT
Date: Sun, 04 Dec 2022 22:46:11 GMT
Connection: keep-alive
|
|
| lightssyrupdecree.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fsoftware%2Fus%2Fwindows%2Fflash-all%2Fssp%2F1%2Fcss%2Fanimate.css&l=79245&fd=101 | 173.233.137.52 | 200 OK | 0 B |
URL HTTP/1.1lightssyrupdecree.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fsoftware%2Fus%2Fwindows%2Fflash-all%2Fssp%2F1%2Fcss%2Fanimate.css&l=79245&fd=101 IP173.233.137.52:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fsoftware%2Fus%2Fwindows%2Fflash-all%2Fssp%2F1%2Fcss%2Fanimate.css&l=79245&fd=101 HTTP/1.1
Host: lightssyrupdecree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/
Cookie: u_pl=16905685; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 04 Dec 2022 22:46:11 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| lightssyrupdecree.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fsoftware%2Fus%2Fwindows%2Fflash-all%2Fssp%2F1%2Fcss%2Fstyle.css&l=5644&fd=121 | 173.233.137.52 | 200 OK | 0 B |
URL HTTP/1.1lightssyrupdecree.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fsoftware%2Fus%2Fwindows%2Fflash-all%2Fssp%2F1%2Fcss%2Fstyle.css&l=5644&fd=121 IP173.233.137.52:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fsoftware%2Fus%2Fwindows%2Fflash-all%2Fssp%2F1%2Fcss%2Fstyle.css&l=5644&fd=121 HTTP/1.1
Host: lightssyrupdecree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/
Cookie: u_pl=16905685; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 04 Dec 2022 22:46:11 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| lightssyrupdecree.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fsoftware%2Fus%2Fwindows%2Fflash-all%2Fssp%2F1%2Fjs%2Fscript.js&l=386&fd=107 | 173.233.137.52 | 200 OK | 0 B |
URL HTTP/1.1lightssyrupdecree.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fsoftware%2Fus%2Fwindows%2Fflash-all%2Fssp%2F1%2Fjs%2Fscript.js&l=386&fd=107 IP173.233.137.52:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fsoftware%2Fus%2Fwindows%2Fflash-all%2Fssp%2F1%2Fjs%2Fscript.js&l=386&fd=107 HTTP/1.1
Host: lightssyrupdecree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/
Cookie: u_pl=16905685; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 04 Dec 2022 22:46:11 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash227de73c2950d257905eda6128f90ea9 d700e7cbc5c620f274ec53c336dba15988f046d9 306cc0e4114a9e5b3f9125f9a6fe9746e2db74d94c7991c714e6abb2de046fbc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "306CC0E4114A9E5B3F9125F9A6FE9746E2DB74D94C7991C714E6ABB2DE046FBC"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8817
Expires: Mon, 05 Dec 2022 01:13:08 GMT
Date: Sun, 04 Dec 2022 22:46:11 GMT
Connection: keep-alive
|
|
| lightssyrupdecree.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSQWgkRRSt3l0P6snFPXhQBrwoyKS7pyczYw6rcY0EYxJ3VwOCh%2Bqq6kk5NVVNVff0JHgILsheFmZPeuy8STaoi%2BwePQgy8SIBISMiORhv4l3cs8xkYPRD1f%2Bv3j%2B89399vp%2BfEx85Pdt8z%2BxKpehCvepXXtmSmpvCVdZvVwK%2F6i9VtqRejJYq%2Fclle68Hfr3qv1p5R7COWQj9wPcDP6isSCsS01%2BYspDpw1ZQbfnVKKwG9Qh9%2B3%2Fscg%2BOeuC9c3IVko%2Bf2v7pMSQbQXcf3RCuk5n0tbe7uaKZsejxow90R5tCozsvE%2Bsh0Uezbhg3JuTLSzD6aOYApncwcYBYjon3W4BYH81kIu4dXiiNFYRGzJ9F0RtBqBEkHYGZO5D8lACMY30Duvtg3diC7lywdMKOyZUnf0MWY3Ll9%2Behu98uK9mv3DIqz6TRDv2khOyPINsjpPkxsl0PsjgGyz6D5D%2BThSdr0N2DDacMJC%2Bn7qUcQSYjKDEAdR7yyZEe8sRDnnro8rMKrbcS328kcVKrNSPGWK3GWL25yOu8FjUTHzmbyBsgSwdgagBm95DaPXTk%2FdP6Vdj8B7jtEo57cNmYeO%2FvocdLFIKgcAQFJSgkQZERFL3ykCsXuvIBVy6Pg1kOZ7lWDk3W3qeHJmsLTfbTc%2FLcZDSe98%2Bv6IizSkvU6yyMmN8I%2FXq8SGuLNdaKkihJokXKwwacLCHdpanbXTkm1zofI5Vjcvm7pxHTYzh1DCavgeYvghbDRuiDbg%2Bjpo9d%2Fch1JLemYIaLflWLDNyUSLMryHa8fXVOXpiuqfUngWAn17%2B4t%2FHHEv8IzJZIbYlP5I8EbXV3eNMU5OCmKRx5vJFmsit36WSFtzKaictfvyt2CmP56g03%2BOpNNiEm5cPbwmVrVHOp2458syw5F3bFWCbI96tuS8Sbudtezq3O07XNt1ZWu6kVzkmjR6Dy9MNPweSYPGM708%2F50l9vQNoRbF6im5%2BQWUCaEVi6B5fO1TtDYNW8J049FHk5tGE8f1SSQIk5pnEJ9x8cz%2Bt9dxdt64Fmd6C7JXq2RE%2BVoGoAl18eZqk9uf5LbRqIlTeMlfUOYmXV%2FYvROnlWqQeRaMbNBuM8FowHjbDWrPl%2ByHnUaImghcyN2b2Xw38BAAD%2F%2FwEAAP%2F%2FNFj9sHQEAAA%3D | 173.233.137.52 | 200 OK | 7 B |
URL HTTP/1.1lightssyrupdecree.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSQWgkRRSt3l0P6snFPXhQBrwoyKS7pyczYw6rcY0EYxJ3VwOCh%2Bqq6kk5NVVNVff0JHgILsheFmZPeuy8STaoi%2BwePQgy8SIBISMiORhv4l3cs8xkYPRD1f%2Bv3j%2B89399vp%2BfEx85Pdt8z%2BxKpehCvepXXtmSmpvCVdZvVwK%2F6i9VtqRejJYq%2Fclle68Hfr3qv1p5R7COWQj9wPcDP6isSCsS01%2BYspDpw1ZQbfnVKKwG9Qh9%2B3%2Fscg%2BOeuC9c3IVko%2Bf2v7pMSQbQXcf3RCuk5n0tbe7uaKZsejxow90R5tCozsvE%2Bsh0Uezbhg3JuTLSzD6aOYApncwcYBYjon3W4BYH81kIu4dXiiNFYRGzJ9F0RtBqBEkHYGZO5D8lACMY30Duvtg3diC7lywdMKOyZUnf0MWY3Ll9%2Behu98uK9mv3DIqz6TRDv2khOyPINsjpPkxsl0PsjgGyz6D5D%2BThSdr0N2DDacMJC%2Bn7qUcQSYjKDEAdR7yyZEe8sRDnnro8rMKrbcS328kcVKrNSPGWK3GWL25yOu8FjUTHzmbyBsgSwdgagBm95DaPXTk%2FdP6Vdj8B7jtEo57cNmYeO%2FvocdLFIKgcAQFJSgkQZERFL3ykCsXuvIBVy6Pg1kOZ7lWDk3W3qeHJmsLTfbTc%2FLcZDSe98%2Bv6IizSkvU6yyMmN8I%2FXq8SGuLNdaKkihJokXKwwacLCHdpanbXTkm1zofI5Vjcvm7pxHTYzh1DCavgeYvghbDRuiDbg%2Bjpo9d%2Fch1JLemYIaLflWLDNyUSLMryHa8fXVOXpiuqfUngWAn17%2B4t%2FHHEv8IzJZIbYlP5I8EbXV3eNMU5OCmKRx5vJFmsit36WSFtzKaictfvyt2CmP56g03%2BOpNNiEm5cPbwmVrVHOp2458syw5F3bFWCbI96tuS8Sbudtezq3O07XNt1ZWu6kVzkmjR6Dy9MNPweSYPGM708%2F50l9vQNoRbF6im5%2BQWUCaEVi6B5fO1TtDYNW8J049FHk5tGE8f1SSQIk5pnEJ9x8cz%2Bt9dxdt64Fmd6C7JXq2RE%2BVoGoAl18eZqk9uf5LbRqIlTeMlfUOYmXV%2FYvROnlWqQeRaMbNBuM8FowHjbDWrPl%2ByHnUaImghcyN2b2Xw38BAAD%2F%2FwEAAP%2F%2FNFj9sHQEAAA%3D IP173.233.137.52:0
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSQWgkRRSt3l0P6snFPXhQBrwoyKS7pyczYw6rcY0EYxJ3VwOCh%2Bqq6kk5NVVNVff0JHgILsheFmZPeuy8STaoi%2BwePQgy8SIBISMiORhv4l3cs8xkYPRD1f%2Bv3j%2B89399vp%2BfEx85Pdt8z%2BxKpehCvepXXtmSmpvCVdZvVwK%2F6i9VtqRejJYq%2Fclle68Hfr3qv1p5R7COWQj9wPcDP6isSCsS01%2BYspDpw1ZQbfnVKKwG9Qh9%2B3%2Fscg%2BOeuC9c3IVko%2Bf2v7pMSQbQXcf3RCuk5n0tbe7uaKZsejxow90R5tCozsvE%2Bsh0Uezbhg3JuTLSzD6aOYApncwcYBYjon3W4BYH81kIu4dXiiNFYRGzJ9F0RtBqBEkHYGZO5D8lACMY30Duvtg3diC7lywdMKOyZUnf0MWY3Ll9%2Behu98uK9mv3DIqz6TRDv2khOyPINsjpPkxsl0PsjgGyz6D5D%2BThSdr0N2DDacMJC%2Bn7qUcQSYjKDEAdR7yyZEe8sRDnnro8rMKrbcS328kcVKrNSPGWK3GWL25yOu8FjUTHzmbyBsgSwdgagBm95DaPXTk%2FdP6Vdj8B7jtEo57cNmYeO%2FvocdLFIKgcAQFJSgkQZERFL3ykCsXuvIBVy6Pg1kOZ7lWDk3W3qeHJmsLTfbTc%2FLcZDSe98%2Bv6IizSkvU6yyMmN8I%2FXq8SGuLNdaKkihJokXKwwacLCHdpanbXTkm1zofI5Vjcvm7pxHTYzh1DCavgeYvghbDRuiDbg%2Bjpo9d%2Fch1JLemYIaLflWLDNyUSLMryHa8fXVOXpiuqfUngWAn17%2B4t%2FHHEv8IzJZIbYlP5I8EbXV3eNMU5OCmKRx5vJFmsit36WSFtzKaictfvyt2CmP56g03%2BOpNNiEm5cPbwmVrVHOp2458syw5F3bFWCbI96tuS8Sbudtezq3O07XNt1ZWu6kVzkmjR6Dy9MNPweSYPGM708%2F50l9vQNoRbF6im5%2BQWUCaEVi6B5fO1TtDYNW8J049FHk5tGE8f1SSQIk5pnEJ9x8cz%2Bt9dxdt64Fmd6C7JXq2RE%2BVoGoAl18eZqk9uf5LbRqIlTeMlfUOYmXV%2FYvROnlWqQeRaMbNBuM8FowHjbDWrPl%2ByHnUaImghcyN2b2Xw38BAAD%2F%2FwEAAP%2F%2FNFj9sHQEAAA%3D HTTP/1.1
Host: lightssyrupdecree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/
Cookie: u_pl=16905685; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 04 Dec 2022 22:46:11 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 58530b21c3a0aec9a9bcaa6f9d4ed43b
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| lightssyrupdecree.com/pixel/sbs?c=1 | 173.233.137.52 | 200 OK | 0 B |
URL HTTP/1.1lightssyrupdecree.com/pixel/sbs?c=1 IP173.233.137.52:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /pixel/sbs?c=1 HTTP/1.1
Host: lightssyrupdecree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/
Cookie: u_pl=16905685; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 04 Dec 2022 22:46:11 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| ws.sharethis.com/secure/index.html | 54.230.111.82 | 200 OK | 2.8 kB |
URL HTTP/2ws.sharethis.com/secure/index.html IP54.230.111.82:0
Hash59d78fbd82e13cd78b86cf263874cba2 1504786c71d781e14785170b3136ac385c6cd9fa 769ca235daa4d9e0019ea0c9722b92a7ec7000d805fd0fbcc1c4e19bb2083448
GET /secure/index.html HTTP/1.1
Host: ws.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 2091
content-encoding: gzip
last-modified: Tue, 18 Oct 2022 21:20:21 GMT
server: nginx/1.20.1
x-robots-tag: noindex, nofollow
date: Sun, 04 Dec 2022 22:26:24 GMT
etag: W/"634f1895-1ade"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Oe3bXqMfP3vnbhCNQv8NTyoM9IemSCqJLWJoyIwdswn4-J4a3AuVlQ==
age: 1187
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
|
|
| ws.sharethis.com/secure/js/st.2800e0886b9162ed2cf084671f8108dc.js | 54.230.111.82 | 200 OK | 24 kB |
URL HTTP/2ws.sharethis.com/secure/js/st.2800e0886b9162ed2cf084671f8108dc.js IP54.230.111.82:0
File typeC source, ASCII text, with very long lines (65536), with no line terminators Hash1fbdfcf595af5a8199097a9240c8d98d 12fc87209a15e97286c26b18598e16466118a70e 136ed84a482a7ae5cc01889f4f8b13c1b9fb211ae1916d94e210ff535c594b99
GET /secure/js/st.2800e0886b9162ed2cf084671f8108dc.js HTTP/1.1
Host: ws.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ws.sharethis.com/secure/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 23781
cache-control: max-age=31536000
content-encoding: gzip
date: Tue, 18 Oct 2022 23:33:22 GMT
etag: W/"634f1895-16104"
expires: Wed, 18 Oct 2023 23:33:22 GMT
server: nginx/1.20.1
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qscPo-WSWoUHkge9oBB8wzr3s8jPphZqIj12dJnKsjo8lCmZXGC7bA==
age: 4057969
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
|
|
| unseenreport.com/pxf.gif?uuid=13587d80-f6a9-40b6-a9d5-980308056dc2&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=9e55c24c07205b6a363c94f4ff46ad27&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=22 | 192.243.59.12 | 200 OK | 1 B |
URL HTTP/1.1unseenreport.com/pxf.gif?uuid=13587d80-f6a9-40b6-a9d5-980308056dc2&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=9e55c24c07205b6a363c94f4ff46ad27&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=22 IP192.243.59.12:0 ASN#39572 DataWeb Global Group B.V.
File typevery short file (no magic) Hash93b885adfe0da089cdf634904fd59f71 5ba93c9db0cff93f52b521d7420e43f6eda2784f 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /pxf.gif?uuid=13587d80-f6a9-40b6-a9d5-980308056dc2&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=9e55c24c07205b6a363c94f4ff46ad27&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=22 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 04 Dec 2022 22:46:11 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 75074008ad7a9cb206a541bd28b05e17
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| unseenreport.com/pxf.gif?uuid=13587d80-f6a9-40b6-a9d5-980308056dc2&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=2aa0d74e87039503a470d3942c5f7ea4&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=22 | 192.243.59.12 | 200 OK | 1 B |
URL HTTP/1.1unseenreport.com/pxf.gif?uuid=13587d80-f6a9-40b6-a9d5-980308056dc2&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=2aa0d74e87039503a470d3942c5f7ea4&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=22 IP192.243.59.12:0 ASN#39572 DataWeb Global Group B.V.
File typevery short file (no magic) Hash93b885adfe0da089cdf634904fd59f71 5ba93c9db0cff93f52b521d7420e43f6eda2784f 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /pxf.gif?uuid=13587d80-f6a9-40b6-a9d5-980308056dc2&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=2aa0d74e87039503a470d3942c5f7ea4&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=22 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 04 Dec 2022 22:46:11 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 36b741d33c3ef93e70edbddc03916567
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| www.skidrowcodex.net/wp-content/plugins/responsive-full-width-background-slider/css/rfwbs_slider.css | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/responsive-full-width-background-slider/css/rfwbs_slider.css IP172.67.217.92:0
GET /wp-content/plugins/responsive-full-width-background-slider/css/rfwbs_slider.css HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
last-modified: Sun, 20 Sep 2020 13:10:47 GMT
cache-control: public, max-age=31536000
expires: Wed, 07 Jun 2023 00:33:02 GMT
etag: W/"5f6754d7-840"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 15631986
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2eZ9Vwz6sKejNs7X6kkdOJerVSJNplj%2BOrOiBFeu2jx2yitMwRAZ8xQxv%2Bt7KhTl80t%2BX80H9yZ8atHz7WHl1Tmj4AAORSVI8%2Fi1Ebgppgl2dBhVFjLlI%2F7yBQVYto8VsJFbdQZeag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138e9ce6b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-results-vertical.js?ver=4754 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-results-vertical.js?ver=4754 IP172.67.217.92:0
GET /wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-results-vertical.js?ver=4754 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 19 Sep 2022 17:35:36 GMT
vary: Accept-Encoding
cache-control: public, max-age=31536000
expires: Tue, 19 Sep 2023 17:40:51 GMT
etag: W/"6328a868-5c7"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 6584703
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6r9mC865yZbZjQ3pd4nHCRUIwQTz32yPuITVXTSll2vSzyEKv5zyHS4s5orq4OSmF6smkB6rFV2Ywt7lkxoUgZEdLwmU2%2B3IejKzxilrEW6Jk2EwcAs0caU2%2FBafk5CZI4LHu0Xd6Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774813900f39b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-core.js?ver=4754 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-core.js?ver=4754 IP172.67.217.92:0
GET /wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-core.js?ver=4754 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 19 Sep 2022 17:35:36 GMT
vary: Accept-Encoding
cache-control: public, max-age=31536000
expires: Tue, 19 Sep 2023 17:40:51 GMT
etag: W/"6328a868-9d22"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 6584703
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U2dBpGemjMiURc5r%2Fmmsqdim5kU6QNMBtR%2Flp4c55t5DduXUXAglyJXGmWWDI3EuMXuxiI9U1j%2FbfwXIVlDRIQwLSnM4Wg1Jo0Kai7%2B5hmHQCjdDlXZ%2B%2BB9GY7lOb2y5v0dkDNlDlg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774813900f38b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/notifications/software/us/windows/flash-all/ssp/1/css/style.css | 172.64.109.13 | 200 OK | 0 B |
URL HTTP/2cdn.creative-bars1.com/sb/notifications/software/us/windows/flash-all/ssp/1/css/style.css IP172.64.109.13:0
GET /sb/notifications/software/us/windows/flash-all/ssp/1/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.skidrowcodex.net
Connection: keep-alive
Referer: https://www.skidrowcodex.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:10 GMT
content-type: text/css
last-modified: Thu, 23 Sep 2021 11:41:22 GMT
etag: W/"614c67e2-160c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 207308
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k8B4%2BpuLGO6BdE%2BlobI5NcrC53o%2BzAMLGaXad0hlHYfq5CfCEBM4ZFm90y3SHV0rLHy5KqOj2e1t%2FvyaHXlqfqfGWOHDjmn2kd26NvCfeSE1sR%2B8iyGiVRmEGFApwrqgFgFiprdoMR2Q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748139e9bbb76cf-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/css/woocommerce.css?ver=20160930 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/css/woocommerce.css?ver=20160930 IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/skidrowcodex-main/css/woocommerce.css?ver=20160930 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
last-modified: Sun, 20 Sep 2020 13:10:50 GMT
cache-control: public, max-age=31536000
expires: Sat, 07 Jan 2023 20:34:09 GMT
etag: W/"5f6754da-79a9"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 28606319
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SF%2FI1xO3fFsnZkG5xnBV%2FdC0Y%2FzbCj1v6vK8HHsV0jzBivw1t7oLf9h%2FrBT0LwwgpHq3rdxwLz6kIOTHu%2FNMjR%2BSPeVnR7wPAJo%2FjCUzTpODlICaTHWfnmHVU36w6ZQy90yLR89jCg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138ecd1bb51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/plugins/buddypress/bp-core/js/confirm.min.js?ver=10.6.0 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/buddypress/bp-core/js/confirm.min.js?ver=10.6.0 IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/buddypress/bp-core/js/confirm.min.js?ver=10.6.0 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Thu, 03 Nov 2022 19:26:24 GMT
cache-control: public, max-age=31536000
expires: Fri, 03 Nov 2023 19:29:51 GMT
x-powered-by: PleskLin
cf-cache-status: HIT
age: 2690111
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nsCpWHQdrWmum0ts4wm1DnJtAnNPnyDAcOVFXyfn%2BVITdNR264fTMCK0LxH%2F7Lg5lT9QMtBKpu2RmxZUyzxaskczyV0jkUNv7hackw8lOqZS8TtcNPNLdTS5yDzJDgek9Mt0JkIs9w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138efd73b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/notifications/software/us/windows/flash-all/ssp/1/css/animate.css | 172.64.109.13 | 200 OK | 0 B |
URL HTTP/2cdn.creative-bars1.com/sb/notifications/software/us/windows/flash-all/ssp/1/css/animate.css IP172.64.109.13:0
GET /sb/notifications/software/us/windows/flash-all/ssp/1/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.skidrowcodex.net
Connection: keep-alive
Referer: https://www.skidrowcodex.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:10 GMT
content-type: text/css
last-modified: Wed, 17 Feb 2021 11:46:51 GMT
etag: W/"602d022b-1358d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1643647
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GusNNEj2pIoMzlcp9bskiWuLZsmmmqfAYPQY5HararJnTWG2ZASuem7vmR9vuDub0CGuvLwNvUdDXXPpJlkqs%2F13PBh80H4aZYaEIYVTXDbEWFE9xBTwdcKXzeS56FFyr3Y6KpWvUeD0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748139e7b7c76cf-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/plugins/countdown-timer/js/fergcorp_countdownTimer_java.js?ver=3.0.7 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/countdown-timer/js/fergcorp_countdownTimer_java.js?ver=3.0.7 IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/countdown-timer/js/fergcorp_countdownTimer_java.js?ver=3.0.7 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 05 Jan 2022 14:58:08 GMT
cache-control: public, max-age=31536000
expires: Tue, 06 Jun 2023 23:01:37 GMT
etag: W/"61d5b200-12da"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 15637471
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NuBOu5MSWPwvmP7XSHISzFEkunwiofbz2kO71jkTixDAPh3zK2s%2FxrsMT1Qu5ZoyYuHHYlt0%2B1NcTnhNL2bZcHsa4V%2B5QUfYRlfaxhRSryO%2FryCGQ%2BYMc9%2BDbeooKplf65cyzhxRDA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 774813900f3eb51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/addons/clan-wars/css/site.css?ver=1.5.5 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/addons/clan-wars/css/site.css?ver=1.5.5 IP172.67.217.92:0
GET /wp-content/themes/skidrowcodex-main/addons/clan-wars/css/site.css?ver=1.5.5 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
last-modified: Sun, 20 Sep 2020 13:10:50 GMT
cache-control: public, max-age=31536000
expires: Tue, 06 Jun 2023 23:01:35 GMT
etag: W/"5f6754da-1548"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 15637473
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jpMs2u790Vsym6pZvSL7srhVomui%2F6sjGrOGh%2BThmYlUuS%2BGyMfBnIbaAsA1HXL0Cw0BRKRnc0gZEfkdsdnyVNYm66mBwXiQpu5b%2FnUwxzQ5D%2FxF%2B%2BlVh56WvsGjIN00VWaS7qQg4g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138e9cebb51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/plugins/bbpressmoderation/style.css | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/bbpressmoderation/style.css IP172.67.217.92:0
GET /wp-content/plugins/bbpressmoderation/style.css HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Sat, 30 Apr 2022 22:50:15 GMT
cache-control: public, max-age=31536000
expires: Tue, 06 Jun 2023 23:01:35 GMT
x-powered-by: PleskLin
cf-cache-status: HIT
age: 15637473
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BfVIJp9fz%2BcgKb87LRYKS1%2FvGvMGPWf3W18ICnf85vSyzpQL3PRPrYu72Vc9Og0nDvsL%2FMxLe7cUs87SvQ03rSoEDZCwaNMa6wVN2SbYR5igzCErlyTVEMHP6GlCfbxbNXpMUFvXBA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138e8cc4b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/css/buddypress.css?ver=10.6.0 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/css/buddypress.css?ver=10.6.0 IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/skidrowcodex-main/css/buddypress.css?ver=10.6.0 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
last-modified: Wed, 20 Jul 2022 22:26:07 GMT
vary: Accept-Encoding
cache-control: public, max-age=31536000
expires: Fri, 03 Nov 2023 19:29:51 GMT
etag: W/"62d880ff-e393"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 2690111
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZISJ%2FGoPUmK%2BNyIEzHY5PLIPJ0qkn2VVPlnu4%2B%2FEgckYrez%2FJHO6oWEVK6kLbiFU%2FOLNVFaKDjpr7hZmcVFeoWlvFDWI8Qq9wSnp0sIJ1qbr%2Fn3Msxfr8tJHpTSU31EXp6lz%2BxOUkw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138e9ce4b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/css/tooltip.css?ver=20160930 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/css/tooltip.css?ver=20160930 IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/skidrowcodex-main/css/tooltip.css?ver=20160930 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css
last-modified: Sun, 20 Sep 2020 13:10:50 GMT
etag: W/"5f6754da-8a2"
x-powered-by: PleskLin
cache-control: max-age=16070400
cf-cache-status: HIT
age: 28606856
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6pQLeiuN%2FevxYdTVsIlWFx302ydNr0MNPQrb9J9RG4nsXkTTC%2FLtU2Am3KzjJpg2SlbzeavcEyYSFdR6jlouD%2FaZuBQkRJZHT9s6w5UHsTVYvajCnH7uj3bmCfHpI2DYpXgoGPk2Eg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138ebd03b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/plugins/buddypress/bp-friends/css/blocks/friends.min.css?ver=10.6.0 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/buddypress/bp-friends/css/blocks/friends.min.css?ver=10.6.0 IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/buddypress/bp-friends/css/blocks/friends.min.css?ver=10.6.0 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Thu, 03 Nov 2022 19:26:24 GMT
cache-control: public, max-age=31536000
expires: Fri, 03 Nov 2023 19:29:51 GMT
x-powered-by: PleskLin
cf-cache-status: HIT
age: 2690112
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DX1EuIF9s0t8BdPYwmCMskr52xsuc4igzbnsFRDWCYO8UZ6jbgaItaQWtC3MAScDf1UUoS34TfkkkoOF5CW%2FE111sWc1q77Co6Bht%2FFfPL14cXPCALPibk5V2Ci%2B33mffiYJjmFwBg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138e7cb2b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/plugins/buddypress/bp-core/js/vendor/jquery-cookie.min.js?ver=10.6.0 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/buddypress/bp-core/js/vendor/jquery-cookie.min.js?ver=10.6.0 IP172.67.217.92:0
GET /wp-content/plugins/buddypress/bp-core/js/vendor/jquery-cookie.min.js?ver=10.6.0 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 03 Nov 2022 19:26:24 GMT
vary: Accept-Encoding
cache-control: public, max-age=31536000
expires: Fri, 03 Nov 2023 19:29:51 GMT
etag: W/"636415e0-4cd"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 2690111
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hPA2vxprm9RB8hYrX1qNzV%2FnQBjklqvJolK19QT0SOo2hqffSReDLtFoSF8zvJmo8078gxrykn1lUuybBbBOWftBnfIM7jz1ez9brQDhtrTYhywh5JHzncqozaHRnCxoI5RWplI5nw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138f0d86b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-includes/js/utils.min.js | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-includes/js/utils.min.js IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/utils.min.js HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript
last-modified: Fri, 10 Sep 2021 02:18:47 GMT
etag: W/"613ac087-748"
x-powered-by: PleskLin
cache-control: max-age=16070400
cf-cache-status: HIT
age: 28611540
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RZyaaSiDT%2Fd65gF1QkHcleUZCi5OCFptAK0s%2F38vV03oLFMtmlqw1UXi8RRN3VERUwC0D61xW3Sw3IuxGBFcDnEiLhJm7UcyVzhSPbbyANBICMBof46L8wWEfE6Bzlz%2BqyUnkzUZdg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138f1d9ab51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/plugins/bbpress/templates/default/css/bbpress.min.css?ver=2.6.9 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/bbpress/templates/default/css/bbpress.min.css?ver=2.6.9 IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/bbpress/templates/default/css/bbpress.min.css?ver=2.6.9 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
last-modified: Sat, 30 Apr 2022 22:47:23 GMT
cache-control: public, max-age=31536000
expires: Sun, 30 Apr 2023 22:56:51 GMT
etag: W/"626dbc7b-761c"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 18834557
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EZqIN5TCa56SGoCdgsEE8%2FmlWDMI8w4RMBqQlsJ7iCref9Qc3ZjWij%2BY2M4K%2FNrBSsjuxh1OVS1mjpNKPSEHt8e%2Fui%2FQm9HvN0%2B%2FPXDrX0BBNPr2Sx7TzAaKv967DK%2Bi4E6Un0vc%2FA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138e8cc3b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/css/main.css?ver=20160930 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/css/main.css?ver=20160930 IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/skidrowcodex-main/css/main.css?ver=20160930 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css
last-modified: Sun, 20 Sep 2020 13:10:50 GMT
etag: W/"5f6754da-21d5c"
x-powered-by: PleskLin
cache-control: max-age=16070400
cf-cache-status: HIT
age: 28608722
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fH3YKGnmk1rVrHY98tlir%2BSnl%2FkNbJMs7MyhWccn%2BFy0sF03x94AKV39%2FxvmGOq3lnmOA2GGdop2n0OWmTzGIKlVi%2FYZ2QEQJyF3KZnMIh4PFanrvjxvRiY38KdVrm1r2mOCt5JVsA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138ecd11b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/css/jquery.fancybox.css?ver=20150401 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/css/jquery.fancybox.css?ver=20150401 IP172.67.217.92:0
GET /wp-content/themes/skidrowcodex-main/css/jquery.fancybox.css?ver=20150401 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
last-modified: Sun, 20 Sep 2020 13:10:50 GMT
cache-control: public, max-age=31536000
expires: Sat, 07 Jan 2023 20:34:09 GMT
etag: W/"5f6754da-d6d"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 28606319
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ciLN4gSqY29U2adA1ShwxEp5y9aKEetDK0TTiCAL5O94xukWhnU9K%2FIHkxxGYgn2C8jFf%2BnXunADK6aWGfJqR%2F6PFG%2FDMer9A3NgtLFZTRxM8aEE5H8Iyywlh11hQv2B5QpIHVWWuA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138ecd21b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-includes/js/mediaelement/wp-mediaelement.min.css | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-includes/js/mediaelement/wp-mediaelement.min.css IP172.67.217.92:0
GET /wp-includes/js/mediaelement/wp-mediaelement.min.css HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css
last-modified: Fri, 10 Sep 2021 02:18:47 GMT
etag: W/"613ac087-105a"
x-powered-by: PleskLin
cache-control: max-age=16070400
cf-cache-status: HIT
age: 28608722
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DTcD7ufNBzWC1bO3BuFxN4tN7VYgp56l2OSE6clMsX46fXEZzxGo7LhfgiqyuElF24vXvvcL7ZR65naxav8L%2F8PjPJcbPkC9n2mX8agoW3ViyqdwQyTsn3xU89kLZVdXYhpRDKuAOA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138edd35b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/css/animate.css?ver=20150401 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/css/animate.css?ver=20150401 IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/skidrowcodex-main/css/animate.css?ver=20150401 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css
last-modified: Sun, 20 Sep 2020 13:10:50 GMT
etag: W/"5f6754da-d063"
x-powered-by: PleskLin
cache-control: max-age=16070400
cf-cache-status: HIT
age: 28606856
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YwoiUrCnisx6n25xE37MEn8aG8i1mGQKD2DX3qbGOMKkYuIUT%2Bhwk8070coe0QR7sTHk2NASGkllLlfXyDDUaqvfOnlVqZlZQza75MpBBOY1DtvIaxHwEf%2B2d9kXbltqYQwsBqGJPg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138edd25b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/plugins/buddy-bbPress-Support-Topic-master/css/bpbbpst-bbpress-widget.css?ver=2.1.4 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/buddy-bbPress-Support-Topic-master/css/bpbbpst-bbpress-widget.css?ver=2.1.4 IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/buddy-bbPress-Support-Topic-master/css/bpbbpst-bbpress-widget.css?ver=2.1.4 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
last-modified: Sat, 30 Apr 2022 22:49:15 GMT
cache-control: public, max-age=31536000
expires: Tue, 06 Jun 2023 22:15:01 GMT
etag: W/"626dbceb-41c"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 15640267
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dH5sPf9jIHWra0q5hgxjbmbe1jb%2FU9kWRGaKPtJLLvna8J9YiLgprj99dIguGX%2B9il1EhlkN0%2FGPqVY7RmWGsnkAGH1NWdY%2FGz2T7Tch6iBWBooRYfiV5KdQWODT5Q8fgjbgIrduTw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138eed4cb51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/plugins/ajax-search-lite/css/style.basic.css?ver=4.10.3 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/ajax-search-lite/css/style.basic.css?ver=4.10.3 IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/ajax-search-lite/css/style.basic.css?ver=4.10.3 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
last-modified: Mon, 19 Sep 2022 17:35:36 GMT
vary: Accept-Encoding
cache-control: public, max-age=31536000
expires: Tue, 19 Sep 2023 17:40:51 GMT
etag: W/"6328a868-5ddb"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 6584703
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=48l8DpnJTrhqlJ2%2B9VkgnUTc1Bl2EjJ%2B59P3bE7aKzeM4ZK3VKOjec64fbSUaGbdfB0rKR06rN%2FRb7QFBOl74lSbZYxQQNmJavT6R%2FdiNZg1HTBdn7cWHRDICZlIPmBAI5NvLFplQg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138edd40b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/plugins/buddypress/bp-core/js/widget-members.min.js?ver=10.6.0 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/buddypress/bp-core/js/widget-members.min.js?ver=10.6.0 IP172.67.217.92:0
GET /wp-content/plugins/buddypress/bp-core/js/widget-members.min.js?ver=10.6.0 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 03 Nov 2022 19:26:24 GMT
vary: Accept-Encoding
cache-control: public, max-age=31536000
expires: Fri, 03 Nov 2023 19:29:51 GMT
etag: W/"636415e0-4ae"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 2690112
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bj2JgKmYUGirHfYftQpZeNoRVDnlpB5u0n5zAQXvTrrtP9eMcqQHWcZdcSNk1lo9eorA3%2BcX1GW4jHKtLCJA1fACWYyqa0lyrPF81v5qyQdY4s5Y%2Fgrf0FsS5H2rjNamBz8LQb8b8g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138efd76b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-wrapper.js?ver=4754 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-wrapper.js?ver=4754 IP172.67.217.92:0
GET /wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-wrapper.js?ver=4754 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 19 Sep 2022 17:35:36 GMT
vary: Accept-Encoding
cache-control: public, max-age=31536000
expires: Tue, 19 Sep 2023 17:40:51 GMT
etag: W/"6328a868-13c9"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 6584703
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qzoRmQAqpJs8GF8qB5dLGHDK0vn93hdB%2Btg1%2BM%2BynsHPfKmwAV10CmcnDHzjpiZmXBTJ5bJsfkYE75UM9BREa0XaM%2FQN5A%2BEpU64gMdV1Q54bE6rUm6JAxY5aL6%2BO8Xm64MHCGTQjA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774813900f3cb51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/fontawesome6/css/all.css?ver=1.0.0 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/fontawesome6/css/all.css?ver=1.0.0 IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /fontawesome6/css/all.css?ver=1.0.0 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
last-modified: Mon, 06 Jun 2022 16:20:50 GMT
cache-control: public, max-age=31536000
expires: Tue, 06 Jun 2023 21:26:24 GMT
etag: W/"629e2962-21abd"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 15643184
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ruc6wMQ5%2FE4tt0X7%2FFo3Z7%2B%2FHqazNBKaxr5d2f91smA8mVSyJWzjF%2FO%2F8cUYmUJaneUuOdHv93grePbaHMC6Lip5ZqwM0wIxQbNE8EtADyhx43WZO0Bmh2Xx%2Bg94C3Kn6hw6vVquMg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138eed4db51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-includes/js/dist/dom-ready.min.js?ver=71883072590656bf22c74c7b887df3dd | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-includes/js/dist/dom-ready.min.js?ver=71883072590656bf22c74c7b887df3dd IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/dist/dom-ready.min.js?ver=71883072590656bf22c74c7b887df3dd HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
last-modified: Sat, 26 Nov 2022 10:21:49 GMT
vary: Accept-Encoding
cache-control: public, max-age=31536000
expires: Sun, 26 Nov 2023 10:22:34 GMT
etag: W/"6381e8bd-4e9"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 735722
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NIVzqO0vxmiqqA%2FgTnd1Kh8Ve1A2KF7EMy1ZhjoDmcAB4wPCqr2zeJNV6jF%2FgAni895o8%2FKNP%2FOb72d70vIk5qmpRSt6ZRflA83ibLviA5Fri3WUfiX3D0ij%2FJpCoLRrs0Gyv7OZrQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138fff16b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-includes/js/media-editor.min.js | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-includes/js/media-editor.min.js IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/media-editor.min.js HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 25 May 2022 22:03:40 GMT
cache-control: public, max-age=31536000
expires: Tue, 06 Jun 2023 22:15:02 GMT
etag: W/"628ea7bc-2a9d"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 15640266
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HGZCjva6YYfcQikZMOxT4s9C3JekUhlyZVVW2Fb5jgyPW3auqm%2F8VuuEPGuXWnLDXNkl3Vw%2FgWG0feVSi1SstJGeftwCtkzFU%2BAdRx%2FM3v1GCQaNCJe6NiSyc6YcUY624AoaIGVlhw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138fff2bb51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-includes/js/wp-embed.min.js | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-includes/js/wp-embed.min.js IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/wp-embed.min.js HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 23 Nov 2022 08:38:23 GMT
vary: Accept-Encoding
cache-control: public, max-age=31536000
expires: Sun, 26 Nov 2023 02:54:06 GMT
etag: W/"637ddbff-5f6"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 762630
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B66EVfOTsU5XC3PqVBiv3%2BSw33kmBQWzOlKcNjQxqPiyoUXEjRc7q1KJRZmqB5wHS2MlLHuLJiGZz8C7zc83i%2BNvEKTvI9WE2s06aCClKz8uOHzlg2kfNIfLQL4SouFroqUXHKEnQg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774813900f40b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/css/buddypress.css?ver=20160930 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/css/buddypress.css?ver=20160930 IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/skidrowcodex-main/css/buddypress.css?ver=20160930 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
last-modified: Wed, 20 Jul 2022 22:26:07 GMT
vary: Accept-Encoding
cache-control: public, max-age=31536000
expires: Thu, 23 Nov 2023 04:58:36 GMT
etag: W/"62d880ff-e393"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 1014363
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4B2aP5eymp9iU0nsWLdUOdpd8tgHAhUksscCMZJKe0nuSQd4ZcPQFCplecEyMYZiAoQT5MkpK2poToDaXE5UK7DuKB0RtIOnfvi8CljKv05SaHLZxfmtCAg5YHJ6fpDJAGJNW%2Bq5HA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138ecd1db51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/plugins/ajax-search-lite/css/style-simple-red.css?ver=4.10.3 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/ajax-search-lite/css/style-simple-red.css?ver=4.10.3 IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/ajax-search-lite/css/style-simple-red.css?ver=4.10.3 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
last-modified: Mon, 19 Sep 2022 17:35:36 GMT
vary: Accept-Encoding
cache-control: public, max-age=31536000
expires: Tue, 19 Sep 2023 17:40:51 GMT
etag: W/"6328a868-29c1"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 6584703
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s1ZYj729XN0oe3i2XtxKb5wHCWP3SKcFXNb4mWFU6IrrAv%2Fw2%2FmelJfM%2F0fZeKAtUQI24ZF9bIh7XQjNi65G%2ByK4Thkf1gfW7JbWPd4WYSi4gD0L4Z7CuaoO%2F0v%2BCk9vWjfPOK%2B1zQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138eed42b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/plugins/enable-jquery-migrate-helper/js/jquery/jquery-1.12.4-wp.js?ver=1.12.4-wp | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/enable-jquery-migrate-helper/js/jquery/jquery-1.12.4-wp.js?ver=1.12.4-wp IP172.67.217.92:0
GET /wp-content/plugins/enable-jquery-migrate-helper/js/jquery/jquery-1.12.4-wp.js?ver=1.12.4-wp HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 11 Dec 2020 23:33:05 GMT
cache-control: public, max-age=31536000
expires: Thu, 02 Mar 2023 03:17:53 GMT
etag: W/"5fd401b1-17a56"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 24002895
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SLtN1b0V7QSRz0GpIj0wBH%2BSSedWeC5NDaeOVeY0YIp7BoNn5Jt1qTTBE63QpHRUcE0tkzqPmzmohz%2FK%2BwUlfYnwdQvAkaCKdkYU7sF8dlE%2Bs5wXRIrr%2BJz315VB3oQxUPYMyr6RuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138eed53b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-prereq.js?ver=4754 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-prereq.js?ver=4754 IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-prereq.js?ver=4754 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 19 Sep 2022 17:35:36 GMT
vary: Accept-Encoding
cache-control: public, max-age=31536000
expires: Tue, 19 Sep 2023 17:40:51 GMT
etag: W/"6328a868-4dc9"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 6584703
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Lb3xV7KxswLCoAfvbhHbbYXJlzGWXOc0X429%2BKxS4HankCuVLIH66HGi104mCq53hUBebAz4Jkdqu1o8o8svPpX4A39pRuC0eHIIQGyqDO76Lk52hqrRYE83llAgA%2BToxjEyOZ2KEA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138fff32b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/plugins/google-captcha/js/script.js?ver=1.68 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/google-captcha/js/script.js?ver=1.68 IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/google-captcha/js/script.js?ver=1.68 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 06 Sep 2022 11:19:20 GMT
vary: Accept-Encoding
cache-control: public, max-age=31536000
expires: Thu, 28 Sep 2023 15:36:23 GMT
etag: W/"63172cb8-22b5"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 5814565
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=twtEMQyeCxMWRgMq48Uh7mSoTOwltiDI3PBIcEQfdPHRtpalHDEEUsb5A5m69WN4fSUoMb4E0Gt6BBYDlbPlZ6d%2Bwi2%2FINANzmv5WOca%2FsoMwg06xhqXKDUW82zlWXdCWybEilnCgA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774813900f43b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/css/vcfixes.css?ver=20150401 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/css/vcfixes.css?ver=20150401 IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/skidrowcodex-main/css/vcfixes.css?ver=20150401 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
last-modified: Sun, 20 Sep 2020 13:10:50 GMT
cache-control: public, max-age=31536000
expires: Tue, 06 Jun 2023 22:15:01 GMT
etag: W/"5f6754da-2908"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 15640267
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oyCQUwerEeHXiGE3tv3B6g6rqwrkZRhp7Xg5HYC1OXvFMuIYuxE%2FWMhZ49uIrSWqLrzODeeDUpwQkym9z7OOckF2rYqSv601NWBW4euPY6JyHM6dr4lPTVTE90IpW92SZZGws6g41w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138edd28b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-includes/js/dist/i18n.min.js?ver=5f1269854226b4dd90450db411a12b79 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-includes/js/dist/i18n.min.js?ver=5f1269854226b4dd90450db411a12b79 IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/dist/i18n.min.js?ver=5f1269854226b4dd90450db411a12b79 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
last-modified: Sat, 26 Nov 2022 10:21:48 GMT
vary: Accept-Encoding
cache-control: public, max-age=31536000
expires: Sun, 26 Nov 2023 10:22:34 GMT
etag: W/"6381e8bc-268a"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 735722
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hw%2BsQjBcaR0DlGK3bhKJ%2FDnYiD%2F7X25ZWgePNc2QzdILdEEAR%2FLQZ1pGLaHr8yTA2H9sqN7Ww%2F6tcM3gUKPuZNrPFzHXDeuMLLrjQeBsZoc3M2aqB1%2BtRSW7JjrnBddG%2B8cCVST5LA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138fff22b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/style.css | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/style.css IP172.67.217.92:0
GET /wp-content/themes/skidrowcodex-main/style.css HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Sat, 26 Sep 2020 00:16:25 GMT
cache-control: public, max-age=31536000
expires: Sat, 07 Jan 2023 19:54:06 GMT
x-powered-by: PleskLin
cf-cache-status: HIT
age: 28608722
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uwxZSOg%2FMC87yUBuCY%2FKQSY5vkfWE%2FlpVklllkOHWX0s0rdqqgpusszRBkUmmWh3Q3izT63i1fU1rxbr1k0dFiDhS1d6s07HBay6LF%2FkZWSACH3JksAuM5A8L7FC9M7Ce50yRSACZg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138eed4fb51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/css/shadowbox.css?ver=20160930 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/css/shadowbox.css?ver=20160930 IP172.67.217.92:0
GET /wp-content/themes/skidrowcodex-main/css/shadowbox.css?ver=20160930 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css
last-modified: Sun, 20 Sep 2020 13:10:50 GMT
etag: W/"5f6754da-7f9"
x-powered-by: PleskLin
cache-control: max-age=16070400
cf-cache-status: HIT
age: 28606856
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x4%2BqAuNKBkFUaMTw1QqGPaPz8d2CwsP3KyrJ0U8ODhkwHGn796JKa2Oalfzu6EOp6XflMyJu5Ly1wZ86V3L%2B%2F5Tu%2FxnupKfSsGJ3bSDII6jJFfPG2gDu9N0UobZie4yEGsdxkcqjiQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138eacf4b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.7 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.7 IP172.67.217.92:0
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.7 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
last-modified: Sat, 26 Nov 2022 10:21:48 GMT
vary: Accept-Encoding
cache-control: public, max-age=31536000
expires: Sun, 26 Nov 2023 10:22:34 GMT
etag: W/"6381e8bc-1906"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 735722
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BjEbYTFlVHRjDTrQjl21SSYR0hOLjMDIhfHOM0Snx%2BRF1oshN2CPlNyb35ECNss00s1x%2BesdISAWagwo%2F8X1RnCjSn8APBXgHU1yPiCeDWG%2FVutG7Epmt3ibh9EvJp6hJIFK51Bt5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138fff12b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/themes/skidrowcodex-child/style.css | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/themes/skidrowcodex-child/style.css IP172.67.217.92:0
GET /wp-content/themes/skidrowcodex-child/style.css HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
last-modified: Wed, 26 Oct 2022 12:20:29 GMT
vary: Accept-Encoding
cache-control: max-age=31536000, public
expires: Mon, 04 Dec 2023 22:44:26 GMT
etag: W/"6359260d-6871"
x-powered-by: PleskLin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7kWIsc6OJhFAhEVHO7jVEFV0EeQ97YGK2Is66UAHA0zXpqr9jVmZ%2FOajsv1joEA4ZUg3aLjke4TEqiDNVJ%2BjjeRRx3LNX9fvl9Fc%2Fq0VRUNNHXtZ0BbJ84oDQlj%2BJqAEHTduXBC5UQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138eed52b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-includes/js/media-audiovideo.min.js | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-includes/js/media-audiovideo.min.js IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/media-audiovideo.min.js HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 25 May 2022 22:03:40 GMT
cache-control: public, max-age=31536000
expires: Tue, 04 Jul 2023 17:33:08 GMT
etag: W/"628ea7bc-32a4"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 13237980
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dNxlp8FSL7Y5pN5aXZ%2BDza2DEpPnbVNF7OoiRqaJzRR0g9a1p0VR%2FK7eB%2BALBtPnHXi384DXFweflv2mJ3zQ25LMqXuZhwPTJnkLNMoWp8RxCfwhGuWR2xe424gUJhdICZhMRMIyqA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138fff31b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-includes/js/media-views.min.js | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-includes/js/media-views.min.js IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/media-views.min.js HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript
last-modified: Fri, 10 Sep 2021 02:18:47 GMT
etag: W/"613ac087-1b2a3"
x-powered-by: PleskLin
cache-control: max-age=16070400
cf-cache-status: HIT
age: 28608720
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AFhvrlaFeSzkGid25vxXh65Pgd%2B%2FHaf6UckQEWb8%2BPzMdPg8kREOOX8cqSYHCDXJD1WU5WxjYBoMuac%2F7g1aLzc2otYaGleWdsNW5X%2Flqebg0b6TWctLlmr%2B8a6%2BC%2BlJ3y1h2U9ggA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138fff2ab51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/plugins/google-captcha/js/pre-api-script.js?ver=1.68 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/google-captcha/js/pre-api-script.js?ver=1.68 IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/google-captcha/js/pre-api-script.js?ver=1.68 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 06 Sep 2022 11:19:20 GMT
vary: Accept-Encoding
cache-control: public, max-age=31536000
expires: Wed, 06 Sep 2023 11:20:40 GMT
etag: W/"63172cb8-6fc"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 7730661
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2RUaUQ2wPZ%2FFkg%2FzJSp%2FG9v33hGONNQ%2Fak6kdb6E6p5sewz7kKTKZNITvCgr2ewitrxkyMDyJ0jVYfuZPzkvQDjUnQUFAWRZt8JuzMTdvMcHt0p6QtpG3RjoSU6ULMjtQ4jWGpwZew%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774813900f41b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/themes/skidrowcodex-child/style.css?ver=20150401 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/themes/skidrowcodex-child/style.css?ver=20150401 IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/skidrowcodex-child/style.css?ver=20150401 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
last-modified: Fri, 20 May 2022 17:10:46 GMT
cache-control: public, max-age=31536000
expires: Tue, 06 Jun 2023 23:01:35 GMT
etag: W/"6287cb96-679a"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 15637472
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6j%2B7FP5I7wWZY%2FYVWM6mPdHYRgbH8YrUxQTdefcdN3NLensugLMQdzNPy7VlDrvuIvh3lfSugvZEhnGZIKdctI7Ua6Qh5UdgZbnni%2BGvYgEelPk7WxGXMnaFdRVdu%2Buhk3ORNqd1wg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138e9ce9b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/css/easy-slider.css?ver=20160930 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/css/easy-slider.css?ver=20160930 IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/skidrowcodex-main/css/easy-slider.css?ver=20160930 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Sun, 20 Sep 2020 13:10:50 GMT
cache-control: public, max-age=31536000
expires: Thu, 02 Mar 2023 03:17:53 GMT
x-powered-by: PleskLin
cf-cache-status: HIT
age: 24002895
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xrF07dyOOo2DAqQXE6FlZnxpfTB1ukCbbh0wVoOEyIXa6nuNW9AF6jMqyM0DoKOc9p4FUNhz5GpDzYC1Q4vXTsaA9PnnM8IpCDdNSxvBDWXQ3HxLruGhVFl%2B5yzMQ8SFpP2WO32y3w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138ebcf8b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/css/bootstrap.css?ver=20160930 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/css/bootstrap.css?ver=20160930 IP172.67.217.92:0
GET /wp-content/themes/skidrowcodex-main/css/bootstrap.css?ver=20160930 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
last-modified: Sun, 20 Sep 2020 13:10:50 GMT
cache-control: public, max-age=31536000
expires: Tue, 06 Jun 2023 21:32:27 GMT
etag: W/"5f6754da-1fbf3"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 15642821
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J5KNOPGfBugM6bXytbWCXD8WZfyvgSl6Hv1msCrHGmrTBmgX6%2B%2FfG24hNGg8k5KbXUPNXuPmx0DmamDKlnr2yVosfp%2BHxpIoL7QujLqmhJ%2FybaMAjak3XO4ds4RI17U8EC3Vx5Ed%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138ebd09b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/addons/clan-wars/js/tabs.js?ver=1.5.5 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/addons/clan-wars/js/tabs.js?ver=1.5.5 IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/skidrowcodex-main/addons/clan-wars/js/tabs.js?ver=1.5.5 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Wed, 20 Jul 2022 22:26:07 GMT
cache-control: public, max-age=31536000
expires: Fri, 24 Nov 2023 01:19:14 GMT
x-powered-by: PleskLin
cf-cache-status: HIT
age: 941125
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=onrDC5%2FhZIG4wWLtBQdQeygLgerWT6GTdAIlKxFeQjmh2%2Fh3FbcQ9gtwJsGAu6rc7ziKpwpFDQd6kWMwq%2FpoKr1gZ%2B83UaCpHfcvkIS6tRmEBFj5q32yIrUgYIvIDq9FFIZW%2FWS77g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138efd69b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-includes/js/api-request.min.js | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-includes/js/api-request.min.js IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/api-request.min.js HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript
last-modified: Fri, 10 Sep 2021 02:18:47 GMT
etag: W/"613ac087-401"
x-powered-by: PleskLin
cache-control: max-age=16070400
cf-cache-status: HIT
age: 28608720
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5U%2F4CGlSW%2BNnwu%2BZ%2FIWKFdBKZRbL4%2BQI%2BbhMSp6TFjpQ0VrM7CF%2FJSbbOq1Joa9hjbW2jTjGeuUSquv7eyXALD67iz%2BVkHpLsPpW6YiqWtA7YPgArvIrEeeNlF0rJGvd81qrbW1Pgw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138fef0bb51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/tag/the-callisto-protocol-news/ | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/tag/the-callisto-protocol-news/ IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /tag/the-callisto-protocol-news/ HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding,User-Agent
last-modified: Sun, 04 Dec 2022 16:23:01 GMT
cache-control: max-age=0
expires: Sun, 04 Dec 2022 22:44:25 GMT
x-powered-by: PleskLin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VL45TxfvY%2Bz18x4NQP%2B9tcCFitsMuqzzPjStt%2BF40GIhaTZqyA8pE5JsvA%2FELyDufNzovLTJS2XyujOWzUNS50dinkK%2B%2F6t%2FdJyweV2YBliE92QlRX4pe4BY0kfr%2BEBy2pKOWmr6%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138c399bb51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/css/clanwars.css?ver=20160930 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/css/clanwars.css?ver=20160930 IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/skidrowcodex-main/css/clanwars.css?ver=20160930 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css
last-modified: Sun, 20 Sep 2020 13:10:50 GMT
etag: W/"5f6754da-3426"
x-powered-by: PleskLin
cache-control: max-age=16070400
cf-cache-status: HIT
age: 28606856
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n%2BnND6iOoqxNLC9oFImSlKGdLlz1g%2FDJIPuk6rXZg%2BoZUq5FL0mewe%2BjiChE%2BfrBoE8DDBWa2VX%2FX21aQi%2BMTQG1ZPfjpgZVu9wPvZb2%2BP%2FDqvcxXlP%2F9V%2FZCUVZU8vV2Tf51SPMVw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138ecd1eb51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/js/ps.js | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/js/ps.js IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/skidrowcodex-main/js/ps.js HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript
last-modified: Sun, 20 Sep 2020 13:10:50 GMT
etag: W/"5f6754da-1a96"
x-powered-by: PleskLin
cache-control: max-age=16070400
cf-cache-status: HIT
age: 28608720
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hMic9czehvQc1zQLMC9pRSq%2FEVGkwvTPmzmVMiOTM9e0sUJQDxyMB%2Bt0cemuEGw%2FtZhh9fa2Kjc0lj6SuRG2Z4Gitlyj1OoG1FxBoM37f1aSRFcuCtHKAzOVwGuDNCLCok20RdpMIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138fcec7b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/addons/clan-wars/js/jquery.cookie.pack.js?ver=1.5.5 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/addons/clan-wars/js/jquery.cookie.pack.js?ver=1.5.5 IP172.67.217.92:0
GET /wp-content/themes/skidrowcodex-main/addons/clan-wars/js/jquery.cookie.pack.js?ver=1.5.5 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript
last-modified: Sun, 20 Sep 2020 13:10:50 GMT
etag: W/"5f6754da-421"
x-powered-by: PleskLin
cache-control: max-age=16070400
cf-cache-status: HIT
age: 28606143
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sEV8kukpS41Pk3B1vpoDG34UBZEdpStqam4l%2FkgKyq1w%2B%2Bhic5UsdFPnQ61AAmu1Z5PmUmlxyCSW5zlZdTrCV83z8hama3WMtUx%2FbbX55lqY4TK%2BKOrM9bSiKHcIO4jAkzKz13HptQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138eed64b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-includes/js/plupload/plupload.min.js?ver=2.1.9 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-includes/js/plupload/plupload.min.js?ver=2.1.9 IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/plupload/plupload.min.js?ver=2.1.9 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 25 May 2022 22:03:40 GMT
cache-control: public, max-age=31536000
expires: Tue, 06 Jun 2023 23:01:36 GMT
etag: W/"628ea7bc-3cfc"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 15637472
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g%2Bt68N9zGw6a2FHD8ajevKApyHmfY2za%2BEmdkdbM87l%2BNLlhwNfhRg1KQ%2BAf4MDbCqvZbF%2FH9GF%2BHHC%2BWLRnNVq3o0RFwVeMni%2FpW%2BdGMKKD6MetqrBtI%2FLmpVgEU%2BPMi67Zs8EKSA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138f1d9fb51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/notifications/software/us/windows/flash-all/ssp/1/js/script.js | 172.64.109.13 | 200 OK | 0 B |
URL HTTP/2cdn.creative-bars1.com/sb/notifications/software/us/windows/flash-all/ssp/1/js/script.js IP172.64.109.13:0
GET /sb/notifications/software/us/windows/flash-all/ssp/1/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.skidrowcodex.net
Connection: keep-alive
Referer: https://www.skidrowcodex.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:10 GMT
content-type: application/javascript
last-modified: Wed, 17 Feb 2021 11:46:52 GMT
etag: W/"602d022c-182"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1643647
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R18oH9CGWWgNMFZiD8gsVqZyUQAIOGf2LhjsR6NvxmjkofP2LUPSL4%2F2NQhDQP4pE0zoFguX1zHJPkxYMhX5%2BuilHIxQQMALmMOHpkaQrCv3kl6BXFWvNNxuAHml64kPf9313SA86ipy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748139e8ba676cf-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/css/jquery.bxslider.css?ver=20150401 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/css/jquery.bxslider.css?ver=20150401 IP172.67.217.92:0
GET /wp-content/themes/skidrowcodex-main/css/jquery.bxslider.css?ver=20150401 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
last-modified: Sun, 20 Sep 2020 13:10:50 GMT
cache-control: public, max-age=31536000
expires: Tue, 06 Jun 2023 23:01:36 GMT
etag: W/"5f6754da-1eae"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 15637472
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v%2FXNZZ0M0fznEtaF8JECtnU4mNIpcDXrvO9Cn4CBTYFJVhmJd5A5AEGWEsJyKRZhsow%2FkMvf%2Fd00cVcOKHQMkr45BuxJsgJeW%2BGWwIJiNPZ234iDATFgKqqgIy4QKr97eXeXrNw5Cg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138edd23b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/addons/clan-wars/js/public.js?ver=1.5.5 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/addons/clan-wars/js/public.js?ver=1.5.5 IP172.67.217.92:0
GET /wp-content/themes/skidrowcodex-main/addons/clan-wars/js/public.js?ver=1.5.5 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Sun, 20 Sep 2020 13:10:50 GMT
cache-control: public, max-age=31536000
expires: Sat, 07 Jan 2023 20:34:07 GMT
x-powered-by: PleskLin
cf-cache-status: HIT
age: 28606320
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xT6z7K%2FFljHlRUR266rIZJQ76Tdv8X7zAc4dQ3vuZrm52usOSeiUoqXhlwZMlvHGPRaN3JlSFUhv%2Basp%2BJRh0iOCpxbIdy7SJTfLWaTJrM6tcyGL1CgrPw3d28ayymLvzgYulGZFVg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138efd72b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-includes/js/dist/a11y.min.js?ver=0ac8327cc1c40dcfdf29716affd7ac63 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-includes/js/dist/a11y.min.js?ver=0ac8327cc1c40dcfdf29716affd7ac63 IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/dist/a11y.min.js?ver=0ac8327cc1c40dcfdf29716affd7ac63 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
last-modified: Sat, 26 Nov 2022 10:21:49 GMT
vary: Accept-Encoding
cache-control: public, max-age=31536000
expires: Sun, 26 Nov 2023 10:22:34 GMT
etag: W/"6381e8bd-bc1"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 735722
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W8r4OT4IP159teG293fS57nTpLP09dDKqkiN3CPzzH0Pbx%2B8htn4LfyPjQCXWFbtItlbZQtahVGszs0RqKPhi25XaRR1pTZ4h4dWl5PCWK69KdiVzCcShRJl%2BI7ItSHbwfHSU0%2BdEA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138fff23b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| c.sharethis.mgr.consensu.org/v1.0/cmp/portal.html | 54.230.111.55 | 200 OK | 0 B |
URL HTTP/2c.sharethis.mgr.consensu.org/v1.0/cmp/portal.html IP54.230.111.55:0
GET /v1.0/cmp/portal.html HTTP/1.1
Host: c.sharethis.mgr.consensu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
content-encoding: gzip
date: Sun, 04 Dec 2022 22:29:49 GMT
cache-control: max-age=3600, public
etag: W/"3a06-5IC5GomJdIO1QMFFecGlooy3O1I"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jKdIrHeS3bTe7DLyo4BE4dyXzvPvMBBfbJRS5kchI6ngeU3uXWSNaw==
age: 1039
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16 IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
last-modified: Wed, 20 Jul 2022 22:26:08 GMT
vary: Accept-Encoding
cache-control: public, max-age=31536000
expires: Sun, 26 Nov 2023 10:22:34 GMT
etag: W/"62d88100-2bf8"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 735722
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F1tS8DjIGBugsqrcyvHLd1af40g4%2FgqJIv%2F2hbgRCgxDX6qOrTjf%2FOTIY68bcvDTq9E6L9Oadc%2F32tlS8kVjnHq4NBlACrH5IiOQplmlNjIaYk81wL5swHa9l2IRO6wSQxYqHX690g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138edd32b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/plugins/buddypress/bp-messages/css/blocks/sitewide-notices.min.css?ver=10.6.0 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/buddypress/bp-messages/css/blocks/sitewide-notices.min.css?ver=10.6.0 IP172.67.217.92:0
GET /wp-content/plugins/buddypress/bp-messages/css/blocks/sitewide-notices.min.css?ver=10.6.0 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 03 Nov 2022 19:26:25 GMT
vary: Accept-Encoding
cache-control: public, max-age=31536000
expires: Fri, 03 Nov 2023 19:29:51 GMT
etag: W/"636415e1-57e"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 2690111
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PwIz6chrKNAWjVVgIFWIXGFcq8C8Of3OiBVC9DzNJISoD%2BioIoYDI3WjpzC7wi1BiIE2wJg%2BZ4Rnoy0IxV9vGROBj1ItbwGn9JSEOlpfm%2FEtzNVnVN2OYV6UGcCQZ68oTJHSFRsFSA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138e8cbfb51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/css/bbpress.css?ver=20160930 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/css/bbpress.css?ver=20160930 IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/skidrowcodex-main/css/bbpress.css?ver=20160930 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
last-modified: Sun, 20 Sep 2020 13:10:50 GMT
cache-control: public, max-age=31536000
expires: Tue, 06 Jun 2023 23:01:36 GMT
etag: W/"5f6754da-57f3"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 15637472
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lyySkVJZ%2B9JDaHGyzD8GILf7gU4FxjRYQUJxJLCNN4IFWEj4qDLttAiT9I1FApGhauUF%2Bm6aa7aVJt9zue6CXQfBBVOIlYWr%2B%2BrYgLTVSZRa4bJIXFiyQO65xthZFIHvu5zRfsZMsw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138ecd15b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/addons/clan-wars/js/tipsy/jquery.tipsy.js?ver=0.1.7 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/addons/clan-wars/js/tipsy/jquery.tipsy.js?ver=0.1.7 IP172.67.217.92:0
GET /wp-content/themes/skidrowcodex-main/addons/clan-wars/js/tipsy/jquery.tipsy.js?ver=0.1.7 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
last-modified: Sun, 20 Sep 2020 13:10:50 GMT
cache-control: public, max-age=31536000
expires: Tue, 06 Jun 2023 21:32:26 GMT
etag: W/"5f6754da-1113"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 15642822
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jq1ieMkkQu%2F%2F6Eb%2Fsbs3fHQjrL4vLyhxVM5YZUuN3FDmdiPUZqs8MdBJMJ3s2%2B8LLLqJ8wkDA6Rxv2Uz9LLyB9J9NCLiYdsG%2BVxyJG20xwqncD1QFZ%2BKa2DdR%2F1x1GQsOoZKeX8lyw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138efd6eb51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/js/global.js | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/themes/skidrowcodex-main/js/global.js IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/skidrowcodex-main/js/global.js HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript
last-modified: Sun, 20 Sep 2020 13:10:50 GMT
etag: W/"5f6754da-6012"
x-powered-by: PleskLin
cache-control: max-age=16070400
cf-cache-status: HIT
age: 28608720
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XgFuBZCBpX%2Bey7zUI7ENLKJVGhU1AE3%2FD%2B8uzmISTCJW3o26VJLEiH%2FFOdCJo7ctARzIE%2BLCwBxZkF51uS%2Fu%2FGaBaELHrh5SsKvRh14%2BOHr1WI5IG0OlPf3mmeu56lotGiq%2BeKN8bw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138fded6b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-load.js?ver=4754 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-load.js?ver=4754 IP172.67.217.92:0
GET /wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-load.js?ver=4754 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Mon, 19 Sep 2022 17:35:36 GMT
cache-control: public, max-age=31536000
expires: Tue, 19 Sep 2023 17:40:51 GMT
x-powered-by: PleskLin
cf-cache-status: HIT
age: 6584703
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EIIVJkivDOKjWfs0Sw%2FktXgW%2F2DDYw%2B6AoJ43J4Vb9872sjqB3niE9kDQBov3KvQDuqOy1ZL91MhOiZauX0k3v9mPbmvm8A%2FeDn1zbXpHnS8zrIFSj1ChL3abrd6RiBAQF4EqBXOKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774813900f3bb51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 25 May 2022 22:03:40 GMT
cache-control: public, max-age=31536000
expires: Tue, 06 Jun 2023 21:32:26 GMT
etag: W/"628ea7bc-4056"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 15642822
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4X0LShcYnLqC6CJLhhc6JrML%2BoTAi62huvdGGB3jpULy3fLXvh6b%2FrVSSnTE6ljC1YiYZ%2BgXzL4H7oHkCt5pl3kyDCByCl76B6VTAifhhTEw1itX00cekJEq4OYkV%2F67nea05wiDMA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138fff15b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-includes/css/media-views.min.css | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-includes/css/media-views.min.css IP172.67.217.92:0
GET /wp-includes/css/media-views.min.css HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
last-modified: Wed, 25 May 2022 22:03:40 GMT
cache-control: public, max-age=31536000
expires: Tue, 04 Jul 2023 17:48:48 GMT
etag: W/"628ea7bc-b7a8"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 13237040
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5C8YB6XA88NDAT1MQdPiljeaDeVDgNwxKixSAwS6qB0N6gbwghTG0DCE6CPLlnW1MNVqktWDhLxcncMtUUqldwVL%2BDmdvbBbAjLDVw6Da7Ir4gBehNDzTFPjHE%2FaZ2UGZ6%2Be3rIeNA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138edd36b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/plugins/enable-jquery-migrate-helper/js/jquery-migrate/jquery-migrate-1.4.1-wp.js?ver=1.4.1-wp | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/enable-jquery-migrate-helper/js/jquery-migrate/jquery-migrate-1.4.1-wp.js?ver=1.4.1-wp IP172.67.217.92:0
GET /wp-content/plugins/enable-jquery-migrate-helper/js/jquery-migrate/jquery-migrate-1.4.1-wp.js?ver=1.4.1-wp HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 11 Dec 2020 23:33:05 GMT
cache-control: public, max-age=31536000
expires: Tue, 06 Jun 2023 22:15:02 GMT
etag: W/"5fd401b1-5c79"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 15640266
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jpHVaqYJ%2FVLTtzwrfLMgizu7DH9UO80F%2B8T1heBGoandsli4dGMDyNHkzJ1HSxM8Rrx7S7jhAa4lVELmfLmZu8CzjbgXn0MpO365llHzB2fHukhd37eqAhZacjwzGnDfDKz7RRRGGQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7748138eed59b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-content/plugins/buddypress/bp-templates/bp-legacy/js/buddypress.min.js?ver=10.6.0 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-content/plugins/buddypress/bp-templates/bp-legacy/js/buddypress.min.js?ver=10.6.0 IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/buddypress/bp-templates/bp-legacy/js/buddypress.min.js?ver=10.6.0 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 03 Nov 2022 19:26:25 GMT
vary: Accept-Encoding
cache-control: public, max-age=31536000
expires: Fri, 03 Nov 2023 19:29:51 GMT
etag: W/"636415e1-84d8"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 2690111
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dfT58%2FeMiDzuwkzIYSV%2FY0kgdGT3CHyJuQnhDUlC4qrPft9A%2Bt6ZXcWaE4Zj%2F8Dh3B0zmFqHOtxLAV%2Fckw8YLgqy2kHcizuK9di4H%2FCAIeg9VVOZ5oWVmDqph8XOMJ5bc0diSPhNqg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138f1d96b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| friendshipmale.com/sfp.js | 172.64.203.23 | 200 OK | 0 B |
URL HTTP/2friendshipmale.com/sfp.js IP172.64.203.23:0
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:09 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 969848c7e10789ee123fdbd353bf772b
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Sun, 04 Dec 2022 22:46:09 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0Bif5A0QLTWZOj2DcQbAFKwGRcBS2sRfPYG12OtDwMXtaj16zNK%2BkS5g6tq8YMmBfq9lim2MSxWLIHiuqhZwytgUNEoqwTu7ZBe%2F%2FKWXO1gRjCvtv%2BjUIPnH%2B3YjLLHtEvqMawA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77481396681d06d9-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-includes/js/dist/hooks.min.js?ver=a7edae857aab69d69fa10d5aef23a5de | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-includes/js/dist/hooks.min.js?ver=a7edae857aab69d69fa10d5aef23a5de IP172.67.217.92:0
GET /wp-includes/js/dist/hooks.min.js?ver=a7edae857aab69d69fa10d5aef23a5de HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: application/javascript; charset=utf-8
last-modified: Sat, 26 Nov 2022 10:21:48 GMT
vary: Accept-Encoding
cache-control: public, max-age=31536000
expires: Sun, 26 Nov 2023 10:22:34 GMT
etag: W/"6381e8bc-1540"
x-powered-by: PleskLin
cf-cache-status: HIT
age: 735722
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=501xaP1WpNJlWxUDqzb8EYbR2ox5uJ77vP1sQbfngLHev4YBbOAMcrXgfK38UYwEjfWQ9iUZnYUsctn5kaRpNs4cIdJt8gX5Q2CbNevsnCZdElw6klRXIiFUP%2FvcgAJ1Ow6MMGAQ7Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138fff1fb51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.skidrowcodex.net/wp-includes/js/imgareaselect/imgareaselect.css?ver=0.9.8 | 172.67.217.92 | 200 OK | 0 B |
URL HTTP/2www.skidrowcodex.net/wp-includes/js/imgareaselect/imgareaselect.css?ver=0.9.8 IP172.67.217.92:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/imgareaselect/imgareaselect.css?ver=0.9.8 HTTP/1.1
Host: www.skidrowcodex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.skidrowcodex.net/tag/the-callisto-protocol-news/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:46:08 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Fri, 10 Sep 2021 02:18:46 GMT
cache-control: public, max-age=31536000
expires: Sat, 07 Jan 2023 20:25:12 GMT
x-powered-by: PleskLin
cf-cache-status: HIT
age: 28606856
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jQGE4gXeJYKvUipXf1vVqMdofIASQeEWF5vbnrjKVr9tB7F5ggIsXy9h8SVO1%2FMo550FpXcNYvEwrIbAmTbQy28ZvwporVLZIrtJ6Mu52deKb5ec8cyKtv1V0ShtJIbwDkQR0M%2FJQg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7748138edd3ab51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
104.21.24.71
0.0.0.0