| firefox.settings.services.mozilla.com/v1/ | 143.204.55.35 | 200 OK | 939 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/ IP143.204.55.35:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashb593eb39329cfe060d55be5e4a5405e2 78e46c1028e9f94f8569303ad2d90d7df13a059a 08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 05 Sep 2022 13:39:10 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: YRy0gVd1wybwIlChLtpo2vChTiM2mgTeyb9LybUJsA0ysBXg-DjorQ==
Age: 490
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashd931e0142ef5ffe9cdb4c4c6bfcb9bc9 d9c4caf525e8926b042a14f38d374cc4033ed768 f610984fb0a75b3a31424faa860cbc8172c7f21804df1dc14fbb685b7c456f29
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F610984FB0A75B3A31424FAA860CBC8172C7F21804DF1DC14FBB685B7C456F29"
Last-Modified: Sat, 03 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16364
Expires: Mon, 05 Sep 2022 18:20:04 GMT
Date: Mon, 05 Sep 2022 13:47:20 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain | 143.204.55.110 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain IP143.204.55.110:0
File typePEM certificate\012- , ASCII text Hash742edb4038f38bc533514982f3d2e861 cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1 b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 05 Sep 2022 01:15:19 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XXwvxfjyNtlBPASPuLsj_V1mDg4H0vFP4Knw_yZ0aozGPNox5F4cAw==
age: 45123
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/xn5c0bhn.zip | 142.4.223.93 | 301 Moved Permanently | 162 B |
URL HTTP/1.1grpericias.com.br/xn5c0bhn.zip IP142.4.223.93:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /xn5c0bhn.zip HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 05 Sep 2022 13:47:03 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://grpericias.com.br/xn5c0bhn.zip
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:20 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 143.204.55.35 | 200 OK | 329 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP143.204.55.35:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Mon, 05 Sep 2022 13:38:16 GMT
Expires: Mon, 05 Sep 2022 14:21:10 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6sqpZkI8PDmSTU3Yf6vrMe7pTlTc29o44McF18C0eS7fmin100T_9g==
Age: 544
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashf804f9e87f5f576c815902fcda78bb8a daff87786b77f03a781513f7210ba27a7cbdd063 1d9db81ca88438130dc35824019688fa5863ad94b56208909c7dd78a1e99853d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1D9DB81CA88438130DC35824019688FA5863AD94B56208909C7DD78A1E99853D"
Last-Modified: Sat, 03 Sep 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Mon, 05 Sep 2022 19:47:21 GMT
Date: Mon, 05 Sep 2022 13:47:21 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashb57a9dd04797bf34612c80361f1dffb3 56573166d8b9cd9b8dae19fd905e4f3293af306b b03552109f1e7d1e482aa14614ffb1e38fb53ae4951152aab307b927674dad98
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4829
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 13:47:21 GMT
Last-Modified: Mon, 05 Sep 2022 12:26:52 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 54.149.28.179 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP54.149.28.179:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: pTdiAfP0hTLIl6syLx9g4w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: iZyZ+iIkw6lz2E4sfZeh1nabLkw=
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hasha73c40e0fed317f31e35a24d5b5e2d0d fb19e9d403e37956762ebb527260576860161872 4a38f2cc8997dada402e2cce06bbd8776cbad2075b00696d00efa59ad5388644
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 13:47:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hasha73c40e0fed317f31e35a24d5b5e2d0d fb19e9d403e37956762ebb527260576860161872 4a38f2cc8997dada402e2cce06bbd8776cbad2075b00696d00efa59ad5388644
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 13:47:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| grpericias.com.br/wp-content/uploads/2020/03/Logo.png | 142.4.223.93 | 200 OK | 15 kB |
URL HTTP/2grpericias.com.br/wp-content/uploads/2020/03/Logo.png IP142.4.223.93:0
File typePNG image data, 295 x 148, 8-bit/color RGBA, non-interlaced\012- data Hashf0d47169200de3229f3034035e8104ae 68b38a340825e9f5b2f134ff3e8ad5a06fc6a531 f1fff745c584e0e127473ae3456d3bec237ec02fac20fdabf6bf9196448ffae8
GET /wp-content/uploads/2020/03/Logo.png HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: image/png
content-length: 14685
last-modified: Mon, 09 Mar 2020 00:50:18 GMT
etag: "5e6592ca-395d"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=5.9.4 | 142.4.223.93 | 200 OK | 475 B |
URL HTTP/2grpericias.com.br/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=5.9.4 IP142.4.223.93:0
File typeHTML document, ASCII text, with very long lines (906), with no line terminators Hashc7aa8936938be0b65781455878aa2085 0066e0c5ed75b3ccd5bb01db5f373d995c217a29 a764eb4204428f671190ad2bc84bcbd86cd9a6bfd05a7ded46bceb651503c508
GET /wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=5.9.4 HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: application/javascript
content-length: 475
x-accel-version: 0.01
last-modified: Wed, 20 Jan 2021 13:35:18 GMT
etag: "38a-5b955069f1180-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashfc638b24200b9a1c7a1191c83cb189e1 aa76908091a7fdc62deb975eab1492b6dec7295a 2b2c63ff0d1e494822a80a8a653d7734eb8070740d49429adc50a8292d52c42e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2B2C63FF0D1E494822A80A8A653D7734EB8070740D49429ADC50A8292D52C42E"
Last-Modified: Sun, 04 Sep 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21557
Expires: Mon, 05 Sep 2022 19:46:39 GMT
Date: Mon, 05 Sep 2022 13:47:22 GMT
Connection: keep-alive
|
|
| thiagoeleocadio.com.br/projetos/grpericias/wp-content/uploads/2019/10/Logo.png | 162.241.2.213 | 401 Unauthorized | 14 B |
URL HTTP/2thiagoeleocadio.com.br/projetos/grpericias/wp-content/uploads/2019/10/Logo.png IP162.241.2.213:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with no line terminators Hash86ef4d04cdbeba05d3fee2d38711fac0 5a2259aee8b56c306d2ad4d5e933422e72ed9ce1 a8f82dc2fddb6cee308b183dd489537b2e14b820846fabff82b9376d499d775e
GET /projetos/grpericias/wp-content/uploads/2019/10/Logo.png HTTP/1.1
Host: thiagoeleocadio.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 401 Unauthorized
www-authenticate: Basic realm="Access Restricted (pwrestrict)"
content-length: 14
content-type: text/html; charset=iso-8859-1
date: Mon, 05 Sep 2022 13:47:22 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-content/plugins/pearl-header-builder/assets/frontend/assets/js/app.js?ver=1.0 | 142.4.223.93 | 200 OK | 1.2 kB |
URL HTTP/2grpericias.com.br/wp-content/plugins/pearl-header-builder/assets/frontend/assets/js/app.js?ver=1.0 IP142.4.223.93:0
Hash9409076f99ec1a69b5b4914943e741f0 cb8b644f7d89be6a690c06a6c9e4a1adb97ba262 c92d0fb42faae776c5d69db75505d387f4691905c4d1f6c71b01eab158a289dd
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/plugins/pearl-header-builder/assets/frontend/assets/js/app.js?ver=1.0 HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: application/javascript
last-modified: Mon, 14 Feb 2022 16:44:31 GMT
etag: W/"620a86ef-c93"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-content/plugins/pearl-header-builder/assets/frontend/assets/js/sticky.js?ver=1.0 | 142.4.223.93 | 200 OK | 1.1 kB |
URL HTTP/2grpericias.com.br/wp-content/plugins/pearl-header-builder/assets/frontend/assets/js/sticky.js?ver=1.0 IP142.4.223.93:0
Hashe2aa8affccbc6cb286a5b65708cbf4c8 ce69ce7a2693ecfb832d0118ad9bd1841098ebeb 0111affa0003fc643f245952cd3733883efbb2ec25a1699fac59d184bd2e83d2
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/plugins/pearl-header-builder/assets/frontend/assets/js/sticky.js?ver=1.0 HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: application/javascript
last-modified: Mon, 14 Feb 2022 16:44:31 GMT
etag: W/"620a86ef-8c0"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashbc70b1691dd339e8120b92ba393ffb69 99118be3645b3182ccdc5f9da149a97c220a3929 da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15964
Expires: Mon, 05 Sep 2022 18:13:26 GMT
Date: Mon, 05 Sep 2022 13:47:22 GMT
Connection: keep-alive
|
|
| grpericias.com.br/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.16 | 142.4.223.93 | 200 OK | 36 kB |
URL HTTP/2grpericias.com.br/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.16 IP142.4.223.93:0
File typeASCII text, with very long lines (65266) Hasha922f6d3cbe6a2d5b80358ebc9280397 8324955b2b9042f3b2679b84257f6a6dec361862 e615197c94e705c07cfcf60af3d031316d18a7eabacfa4835736a81ca65c42aa
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.16 HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: application/javascript
last-modified: Tue, 29 Sep 2020 15:53:06 GMT
etag: W/"5f735862-267aa"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99b438b1-ec2f-4d02-9da4-cca3c8bdf61b.jpeg | 34.120.237.76 | 200 OK | 4.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99b438b1-ec2f-4d02-9da4-cca3c8bdf61b.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash7877df05329f39350f4907a067f5840e 21f33eca6863c382c216c16799d1bea83e40fbd9 94b943383bbd05d11ac0f9c3672e315c9cfaa5cb2299c3779195f08491969fa8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99b438b1-ec2f-4d02-9da4-cca3c8bdf61b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4260
x-amzn-requestid: 024510ab-0cb7-421e-805b-fa54501d1e99
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XpjFQGPVIAMFytQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630d4bbb-4492cd20474c37337f8a5521;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 23:28:59 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Wk8myA4exuK32he7TlFoJtvtqHb0WcDhvSuo6-aN0dMcxIr7cDkU5Q==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 22:04:04 GMT
age: 56598
etag: "21f33eca6863c382c216c16799d1bea83e40fbd9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F022243d2-ac74-4a81-b31f-104b203bf550.jpeg | 34.120.237.76 | 200 OK | 5.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F022243d2-ac74-4a81-b31f-104b203bf550.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash7fe061740ad833cfe7ff0fe078d6810d 15d0fc3fdced758b5797361bae0fd53341e0581d 5409b6775bca5afd03901975c61c27f267efe2c8a8e739f05ebc52a938c5a368
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F022243d2-ac74-4a81-b31f-104b203bf550.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5459
x-amzn-requestid: a75bf8a5-dc96-4a88-9de5-b79d1d62ff21
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XxB_bFMFoAMFkEg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631049fc-2685c90962d8af5f4a7b5908;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 05:58:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rZh0s85w1Nt6qZdZybNBcQHEXMWQIJvtAyCbF4oWsYUOlIKuNS5Fpg==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 22:38:48 GMT
age: 54514
etag: "15d0fc3fdced758b5797361bae0fd53341e0581d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f567821-8e06-4951-99ce-e4f161bb68b8.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f567821-8e06-4951-99ce-e4f161bb68b8.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashaf2dba4695867af2da0b689832f99393 b33bef0200ea8f8a64df0fdd28e648f36ed177d1 eecc3b2002b85f2f742f97b6fa4a2686c5e22fac3e73f4469357e0cfb554649e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f567821-8e06-4951-99ce-e4f161bb68b8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11529
x-amzn-requestid: 5a708c64-a562-4082-bdb0-54a7e7ca4c96
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XqfLDEa3IAMFg7A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630dabe0-50c8bda630d48d5866416a55;Sampled=0
x-amzn-remapped-date: Tue, 30 Aug 2022 06:19:12 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: wLCyRpkbM9GuCD0b68O8ttgaDNma8Dc18GetEWkNqo6bQJkuE44gKw==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 03:17:24 GMT
age: 37798
etag: "b33bef0200ea8f8a64df0fdd28e648f36ed177d1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f31081f-706c-4ba5-8026-d80f418f0e9a.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f31081f-706c-4ba5-8026-d80f418f0e9a.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash4d1d7d95258e80e549a36826ffd55d8b 2f3d6053c4014cbdabf2187474997eb2156f168a 7a8c4fa0f58191a0830de1921a128d1a49b9627f5e87bb153645b7687b3f8f5c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f31081f-706c-4ba5-8026-d80f418f0e9a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11538
x-amzn-requestid: d429060b-9a2e-4bdc-8fd8-ade90fa26566
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X9Ey2EwCIAMFnAw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63151b45-6733538a2958d9581b1d51e6;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: heEJL_2CrIfnkRldwF8VLKHaR8O6YacPXZYaugcg8_z48zrwFIdskg==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 21:49:50 GMT
age: 57452
etag: "2f3d6053c4014cbdabf2187474997eb2156f168a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | 142.4.223.93 | 200 OK | 12 kB |
URL HTTP/2grpericias.com.br/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 IP142.4.223.93:0
File typeASCII text, with very long lines (11126) Hash4662a9229c78b27aefcdc47b4ad0f0ec 61ff2e97b1afc25cd90aa766547580280d256714 b55ea14cd5c290e424d9bd98a06ac981f0e79e79d746c2257df981b086975100
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: application/javascript
last-modified: Wed, 31 Aug 2022 09:43:07 GMT
etag: W/"630f2d2b-2bd8"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13d7f0db-89d6-4166-b182-85e35e518df9.jpeg | 34.120.237.76 | 200 OK | 8.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13d7f0db-89d6-4166-b182-85e35e518df9.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash30bf854fd3e27e2313a3d26fc43b9990 032acf1bfb0c8e2cbce8f2ff4d2964424b044951 7641be64dd25487edf4f845d1fbb0b07daa80fa8fb58863dd09081d9d169bd13
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13d7f0db-89d6-4166-b182-85e35e518df9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8469
x-amzn-requestid: de0e8998-4a52-4651-bcd6-3068c50193b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X9Ey2Eq4oAMFZlQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63151b45-15da44d87bf486cb1738fe18;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: GuATNx2xnWnEl0cr_2ZWZo_jOWbHlSBYksIeHFDoHAK9o5Tf0PPliQ==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 22:03:29 GMT
etag: "032acf1bfb0c8e2cbce8f2ff4d2964424b044951"
content-type: image/jpeg
age: 56633
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-content/plugins/pearl-header-builder/assets/frontend/assets/vendor/sticky.css?ver=1.0 | 142.4.223.93 | 200 OK | 195 B |
URL HTTP/2grpericias.com.br/wp-content/plugins/pearl-header-builder/assets/frontend/assets/vendor/sticky.css?ver=1.0 IP142.4.223.93:0
Hash311e3bc13bdbd19c0fb9e14a60a77621 e60c5aae0842a67eefd4b9f09969701c6d9ca9ae b0144258a83043cda38770d21b216e946fcd4a7198895d161f4119cbdd2313b8
GET /wp-content/plugins/pearl-header-builder/assets/frontend/assets/vendor/sticky.css?ver=1.0 HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:06 GMT
content-type: text/css
content-length: 195
x-accel-version: 0.01
last-modified: Mon, 14 Feb 2022 16:44:31 GMT
etag: "17a-5d7fd216c59c0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-content/uploads/2019/10/Logo.png | 142.4.223.93 | 200 OK | 7.0 kB |
URL HTTP/2grpericias.com.br/wp-content/uploads/2019/10/Logo.png IP142.4.223.93:0
File typePNG image data, 295 x 72, 8-bit/color RGBA, non-interlaced\012- data Hashbe75a15ade5b9d77ece3d14e4fc3a2db 3f03036f844647cf297e8ad887c9fa9e2c029178 65abbf8ecf6291fccba6ee5a58ef33dd447b2783b0e9824b0f5e57dc25454208
GET /wp-content/uploads/2019/10/Logo.png HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: image/png
content-length: 7000
last-modified: Sat, 25 Jan 2020 23:23:37 GMT
etag: "5e2ccdf9-1b58"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash3958546039b436bd448017432b45c949 45aadab2339c0718b57200a1b2849073c04f08f5 903f9b9e0ccec46513fb56991790db64f79dd2548f6240c4905cf9f19bdaa783
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 13:47:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| grpericias.com.br/wp-content/plugins/trx_addons/js/magnific/jquery.magnific-popup.min.js?ver=5.9.4 | 142.4.223.93 | 200 OK | 8.1 kB |
URL HTTP/2grpericias.com.br/wp-content/plugins/trx_addons/js/magnific/jquery.magnific-popup.min.js?ver=5.9.4 IP142.4.223.93:0
File typeASCII text, with very long lines (22308) Hashba041ca5cc06569094ef7b9868667650 c72b154630b6193cecc3f10150b8c2515001bb64 87d4f2276b2c2d3e0a9ffc5f0e89d72b176316f7d8fbeea68b2ec1fc45ac4387
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/plugins/trx_addons/js/magnific/jquery.magnific-popup.min.js?ver=5.9.4 HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: application/javascript
last-modified: Thu, 02 Dec 2021 10:13:38 GMT
etag: W/"61a89c52-57a5"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 | 142.250.74.163 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 IP142.250.74.163:0
File typeWeb Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data Hashb9c29351c46f3e8c8631c4002457f48a e57e59c5780995ff2937ab2b511a769212974a87 f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://grpericias.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 31 Aug 2022 19:34:21 GMT
expires: Thu, 31 Aug 2023 19:34:21 GMT
cache-control: public, max-age=31536000
age: 411182
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash3958546039b436bd448017432b45c949 45aadab2339c0718b57200a1b2849073c04f08f5 903f9b9e0ccec46513fb56991790db64f79dd2548f6240c4905cf9f19bdaa783
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 13:47:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash3958546039b436bd448017432b45c949 45aadab2339c0718b57200a1b2849073c04f08f5 903f9b9e0ccec46513fb56991790db64f79dd2548f6240c4905cf9f19bdaa783
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 13:47:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash3958546039b436bd448017432b45c949 45aadab2339c0718b57200a1b2849073c04f08f5 903f9b9e0ccec46513fb56991790db64f79dd2548f6240c4905cf9f19bdaa783
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 13:47:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/oldstandardtt/v18/MwQubh3o1vLImiwAVvYawgcf2eVeqlq4.woff2 | 142.250.74.163 | 200 OK | 23 kB |
URL HTTP/2fonts.gstatic.com/s/oldstandardtt/v18/MwQubh3o1vLImiwAVvYawgcf2eVeqlq4.woff2 IP142.250.74.163:0
File typeWeb Open Font Format (Version 2), TrueType, length 22840, version 1.0\012- data Hasha02a7db3964dbc06013e1343042c2c75 9d69b2906f9c6bcda3197e3c0ba5542b1a57aab9 b6ad8f4894150c85aa2a6158e918a26f119cba2e97ff2135a03eb1b3a4044230
GET /s/oldstandardtt/v18/MwQubh3o1vLImiwAVvYawgcf2eVeqlq4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://grpericias.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22840
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Sep 2022 17:21:05 GMT
expires: Fri, 01 Sep 2023 17:21:05 GMT
cache-control: public, max-age=31536000
age: 332778
last-modified: Mon, 09 May 2022 19:31:27 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 142.250.74.163 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP142.250.74.163:0
File typeWeb Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data Hash3a44e06eb954b96aa043227f3534189d 23cef6993ddb2b2979e8e7647fc3763694e2ba7d b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://grpericias.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Sep 2022 02:02:22 GMT
expires: Sun, 03 Sep 2023 02:02:22 GMT
cache-control: public, max-age=31536000
age: 215101
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.163 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.163:0
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://grpericias.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 31 Aug 2022 19:34:08 GMT
expires: Thu, 31 Aug 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 411195
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-content/themes/mckinney-politics/css/responsive.css?ver=5.9.4 | 142.4.223.93 | 200 OK | 36 kB |
URL HTTP/2grpericias.com.br/wp-content/themes/mckinney-politics/css/responsive.css?ver=5.9.4 IP142.4.223.93:0
Hash926d608162b24db8afc20e0c04f0bc24 60e7bba54776f1e824fde50609d547028b3d37b4 73da00f72ef470fe49dfa687f2de4df5234c86b510e92cc1d6b402713f6352b5
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/themes/mckinney-politics/css/responsive.css?ver=5.9.4 HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: text/css
last-modified: Sat, 25 Jan 2020 23:23:37 GMT
etag: W/"5e2ccdf9-300cb"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash3958546039b436bd448017432b45c949 45aadab2339c0718b57200a1b2849073c04f08f5 903f9b9e0ccec46513fb56991790db64f79dd2548f6240c4905cf9f19bdaa783
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 13:47:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| thiagoeleocadio.com.br/projetos/grpericias/wp-content/uploads/2019/10/Logo.png | 162.241.2.213 | 401 Unauthorized | 14 B |
URL HTTP/2thiagoeleocadio.com.br/projetos/grpericias/wp-content/uploads/2019/10/Logo.png IP162.241.2.213:0 ASN#46606 UNIFIEDLAYER-AS-1
File typeASCII text, with no line terminators Hash86ef4d04cdbeba05d3fee2d38711fac0 5a2259aee8b56c306d2ad4d5e933422e72ed9ce1 a8f82dc2fddb6cee308b183dd489537b2e14b820846fabff82b9376d499d775e
GET /projetos/grpericias/wp-content/uploads/2019/10/Logo.png HTTP/1.1
Host: thiagoeleocadio.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 401 Unauthorized
www-authenticate: Basic realm="Access Restricted (pwrestrict)"
content-length: 14
content-type: text/html; charset=iso-8859-1
date: Mon, 05 Sep 2022 13:47:23 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-content/themes/mckinney-politics/css/fontello/css/fontello-embedded.css?ver=5.9.4 | 142.4.223.93 | 200 OK | 394 kB |
URL HTTP/2grpericias.com.br/wp-content/themes/mckinney-politics/css/fontello/css/fontello-embedded.css?ver=5.9.4 IP142.4.223.93:0
File typeASCII text, with very long lines (65217) Size394 kB (394049 bytes) Hash66a704824d0077eb7d88347e490ef6a2 c42135515d3a79728b3f8dedba47978649b7a5c8 35ae9afede74c901dff6d9b2520294815db5d9342c1162da3bea6a874e93369c
GET /wp-content/themes/mckinney-politics/css/fontello/css/fontello-embedded.css?ver=5.9.4 HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: text/css
last-modified: Sat, 25 Jan 2020 23:23:37 GMT
etag: W/"5e2ccdf9-47451"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-content/uploads/2020/03/Logo-1.png | 142.4.223.93 | 200 OK | 15 kB |
URL HTTP/2grpericias.com.br/wp-content/uploads/2020/03/Logo-1.png IP142.4.223.93:0
File typePNG image data, 295 x 148, 8-bit/color RGBA, non-interlaced\012- data Hash8fccf8e1bec499b1be25b52880775e85 275fe607ef36126baa76eccc0404bf89579fdc47 9d5e896bca0c6ae5b6e82a550d3f0e9069c0c1d2f86ad968afde5c7c0f701d69
GET /wp-content/uploads/2020/03/Logo-1.png HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:07 GMT
content-type: image/png
content-length: 15016
last-modified: Mon, 09 Mar 2020 00:45:48 GMT
etag: "5e6591bc-3aa8"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-content/uploads/2019/10/favicon.png | 142.4.223.93 | 200 OK | 1.6 kB |
URL HTTP/2grpericias.com.br/wp-content/uploads/2019/10/favicon.png IP142.4.223.93:0
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data Hash8028ece22b39045f79624de83317b993 e1599b212ca929980a9ff8e41a97674316c7c52f 45da63edc1121bca933ba2a690b1bc73c5f6afd2ad4690b007a3b5fbd5a4abcb
GET /wp-content/uploads/2019/10/favicon.png HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:07 GMT
content-type: image/png
content-length: 1599
last-modified: Sat, 25 Jan 2020 23:23:37 GMT
etag: "5e2ccdf9-63f"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-content/uploads/2020/01/topo1.jpg | 142.4.223.93 | 200 OK | 194 kB |
URL HTTP/2grpericias.com.br/wp-content/uploads/2020/01/topo1.jpg IP142.4.223.93:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x600, components 3\012- data Size194 kB (194442 bytes) Hash78499aab3f817a245eb2fed4fd873834 d815e2a814d08db5acd95ede08029ce1502ad376 45b77829570aa402e079ffd1148cdf1c23f814da2dfaf2ba30d12d7348fca4b4
GET /wp-content/uploads/2020/01/topo1.jpg HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:08 GMT
content-type: image/jpeg
content-length: 194442
last-modified: Sun, 26 Jan 2020 00:01:26 GMT
etag: "5e2cd6d6-2f78a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-includes/css/dashicons.min.css?ver=5.9.4 | 142.4.223.93 | 200 OK | 0 B |
URL HTTP/2grpericias.com.br/wp-includes/css/dashicons.min.css?ver=5.9.4 IP142.4.223.93:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-includes/css/dashicons.min.css?ver=5.9.4 HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: text/css
last-modified: Wed, 03 Mar 2021 21:16:22 GMT
etag: W/"603ffca6-e688"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=5.9.4 | 142.4.223.93 | 200 OK | 0 B |
URL HTTP/2grpericias.com.br/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=5.9.4 IP142.4.223.93:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=5.9.4 HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: application/javascript
last-modified: Wed, 06 Jan 2021 15:29:24 GMT
etag: W/"5ff5d754-4a9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-includes/js/wp-emoji-release.min.js?ver=5.9.4 | 142.4.223.93 | 200 OK | 0 B |
URL HTTP/2grpericias.com.br/wp-includes/js/wp-emoji-release.min.js?ver=5.9.4 IP142.4.223.93:0
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.9.4 HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: application/javascript
last-modified: Wed, 31 Aug 2022 09:43:07 GMT
etag: W/"630f2d2b-4705"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-content/plugins/pearl-header-builder/assets/frontend/assets/css/font-awesome.min.css?ver=1.0 | 142.4.223.93 | 200 OK | 0 B |
URL HTTP/2grpericias.com.br/wp-content/plugins/pearl-header-builder/assets/frontend/assets/css/font-awesome.min.css?ver=1.0 IP142.4.223.93:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/plugins/pearl-header-builder/assets/frontend/assets/css/font-awesome.min.css?ver=1.0 HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:06 GMT
content-type: text/css
last-modified: Mon, 14 Feb 2022 16:44:31 GMT
etag: W/"620a86ef-7918"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-includes/css/dist/block-library/style.min.css?ver=5.9.4 | 142.4.223.93 | 200 OK | 0 B |
URL HTTP/2grpericias.com.br/wp-includes/css/dist/block-library/style.min.css?ver=5.9.4 IP142.4.223.93:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.9.4 HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: text/css
last-modified: Wed, 06 Apr 2022 10:11:17 GMT
etag: W/"624d6745-145db"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-content/themes/mckinney-politics/css/animation.css?ver=5.9.4 | 142.4.223.93 | 200 OK | 0 B |
URL HTTP/2grpericias.com.br/wp-content/themes/mckinney-politics/css/animation.css?ver=5.9.4 IP142.4.223.93:0
GET /wp-content/themes/mckinney-politics/css/animation.css?ver=5.9.4 HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: text/css
last-modified: Sat, 25 Jan 2020 23:23:37 GMT
etag: W/"5e2ccdf9-1415b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-includes/js/jquery/jquery.min.js?ver=3.6.0 | 142.4.223.93 | 200 OK | 0 B |
URL HTTP/2grpericias.com.br/wp-includes/js/jquery/jquery.min.js?ver=3.6.0 IP142.4.223.93:0
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: application/javascript
last-modified: Wed, 31 Aug 2022 09:43:07 GMT
etag: W/"630f2d2b-15db1"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-content/plugins/wp-gdpr-compliance/Assets/js/front.min.js?ver=1644857080 | 142.4.223.93 | 200 OK | 0 B |
URL HTTP/2grpericias.com.br/wp-content/plugins/wp-gdpr-compliance/Assets/js/front.min.js?ver=1644857080 IP142.4.223.93:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/plugins/wp-gdpr-compliance/Assets/js/front.min.js?ver=1644857080 HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: application/javascript
last-modified: Mon, 14 Feb 2022 16:44:40 GMT
etag: W/"620a86f8-e6f5"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-content/plugins/pearl-header-builder/assets/frontend/assets/css/header/main.css?ver=1.0 | 142.4.223.93 | 200 OK | 0 B |
URL HTTP/2grpericias.com.br/wp-content/plugins/pearl-header-builder/assets/frontend/assets/css/header/main.css?ver=1.0 IP142.4.223.93:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/plugins/pearl-header-builder/assets/frontend/assets/css/header/main.css?ver=1.0 HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:06 GMT
content-type: text/css
last-modified: Mon, 14 Feb 2022 16:44:31 GMT
etag: W/"620a86ef-bcfa"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/xn5c0bhn.zip | 142.4.223.93 | 404 Not Found | 0 B |
URL HTTP/2grpericias.com.br/xn5c0bhn.zip IP142.4.223.93:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /xn5c0bhn.zip HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 404 Not Found
server: nginx
date: Mon, 05 Sep 2022 13:47:04 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.3.33
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://grpericias.com.br/wp-json/>; rel="https://api.w.org/"
content-encoding: br
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-content/plugins/trx_addons/css/trx_addons.css | 142.4.223.93 | 200 OK | 0 B |
URL HTTP/2grpericias.com.br/wp-content/plugins/trx_addons/css/trx_addons.css IP142.4.223.93:0
GET /wp-content/plugins/trx_addons/css/trx_addons.css HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: text/css
last-modified: Mon, 06 Dec 2021 14:22:56 GMT
etag: W/"61ae1cc0-1c178"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-content/plugins/essential-grid/public/assets/font/fontello/css/fontello.css?ver=3.0.13 | 142.4.223.93 | 200 OK | 0 B |
URL HTTP/2grpericias.com.br/wp-content/plugins/essential-grid/public/assets/font/fontello/css/fontello.css?ver=3.0.13 IP142.4.223.93:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/plugins/essential-grid/public/assets/font/fontello/css/fontello.css?ver=3.0.13 HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:06 GMT
content-type: text/css
last-modified: Fri, 19 Nov 2021 08:13:34 GMT
etag: W/"61975cae-3177"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto%3A400%2C300%2C500%2C400italic%2C300italic%2C500italic%2C700%2C700italic%7COld+Standard+TT%3A400%2C700%2C400italic&subset=latin%2Clatin-ext&ver=5.9.4 | 142.250.74.10 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Roboto%3A400%2C300%2C500%2C400italic%2C300italic%2C500italic%2C700%2C700italic%7COld+Standard+TT%3A400%2C700%2C400italic&subset=latin%2Clatin-ext&ver=5.9.4 IP142.250.74.10:0
GET /css?family=Roboto%3A400%2C300%2C500%2C400italic%2C300italic%2C500italic%2C700%2C700italic%7COld+Standard+TT%3A400%2C700%2C400italic&subset=latin%2Clatin-ext&ver=5.9.4 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 05 Sep 2022 13:47:21 GMT
date: Mon, 05 Sep 2022 13:47:21 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-content/themes/mckinney-politics/css/__colors.css?ver=5.9.4 | 142.4.223.93 | 200 OK | 0 B |
URL HTTP/2grpericias.com.br/wp-content/themes/mckinney-politics/css/__colors.css?ver=5.9.4 IP142.4.223.93:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/themes/mckinney-politics/css/__colors.css?ver=5.9.4 HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: text/css
last-modified: Mon, 25 Jan 2021 14:59:59 GMT
etag: W/"600edcef-3a09d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16 | 142.4.223.93 | 200 OK | 0 B |
URL HTTP/2grpericias.com.br/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16 IP142.4.223.93:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16 HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: text/css
last-modified: Tue, 29 Sep 2020 15:53:06 GMT
etag: W/"5f735862-2bf8"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-content/plugins/wp-gdpr-compliance/Assets/css/front.css?ver=1644857080 | 142.4.223.93 | 200 OK | 0 B |
URL HTTP/2grpericias.com.br/wp-content/plugins/wp-gdpr-compliance/Assets/css/front.css?ver=1644857080 IP142.4.223.93:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/plugins/wp-gdpr-compliance/Assets/css/front.css?ver=1644857080 HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: text/css
last-modified: Mon, 14 Feb 2022 16:44:40 GMT
etag: W/"620a86f8-63d3"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.11 | 142.4.223.93 | 200 OK | 0 B |
URL HTTP/2grpericias.com.br/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.11 IP142.4.223.93:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.11 HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: text/css
last-modified: Thu, 25 Nov 2021 15:24:09 GMT
etag: W/"619faa99-e197"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.11 | 142.4.223.93 | 200 OK | 0 B |
URL HTTP/2grpericias.com.br/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.11 IP142.4.223.93:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.11 HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: application/javascript
last-modified: Thu, 25 Nov 2021 15:24:09 GMT
etag: W/"619faa99-1e4e6"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-content/plugins/trx_addons/css/font-icons/css/trx_addons_icons-embedded.css?ver=5.9.4 | 142.4.223.93 | 200 OK | 0 B |
URL HTTP/2grpericias.com.br/wp-content/plugins/trx_addons/css/font-icons/css/trx_addons_icons-embedded.css?ver=5.9.4 IP142.4.223.93:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/plugins/trx_addons/css/font-icons/css/trx_addons_icons-embedded.css?ver=5.9.4 HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: text/css
last-modified: Thu, 02 Dec 2021 10:13:38 GMT
etag: W/"61a89c52-289c2"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-content/plugins/trx_addons/js/magnific/magnific-popup.min.css | 142.4.223.93 | 200 OK | 0 B |
URL HTTP/2grpericias.com.br/wp-content/plugins/trx_addons/js/magnific/magnific-popup.min.css IP142.4.223.93:0
GET /wp-content/plugins/trx_addons/js/magnific/magnific-popup.min.css HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: text/css
last-modified: Thu, 02 Dec 2021 10:13:38 GMT
etag: W/"61a89c52-1751"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-content/plugins/trx_addons/js/swiper/swiper.min.css | 142.4.223.93 | 200 OK | 0 B |
URL HTTP/2grpericias.com.br/wp-content/plugins/trx_addons/js/swiper/swiper.min.css IP142.4.223.93:0
GET /wp-content/plugins/trx_addons/js/swiper/swiper.min.css HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: text/css
last-modified: Thu, 02 Dec 2021 10:13:38 GMT
etag: W/"61a89c52-3991"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-content/plugins/trx_addons/js/trx_addons.js | 142.4.223.93 | 200 OK | 0 B |
URL HTTP/2grpericias.com.br/wp-content/plugins/trx_addons/js/trx_addons.js IP142.4.223.93:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/plugins/trx_addons/js/trx_addons.js HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: application/javascript
last-modified: Mon, 06 Dec 2021 14:22:56 GMT
etag: W/"61ae1cc0-cafc"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.11 | 142.4.223.93 | 200 OK | 0 B |
URL HTTP/2grpericias.com.br/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.11 IP142.4.223.93:0
GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.11 HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: application/javascript
last-modified: Thu, 25 Nov 2021 15:24:09 GMT
etag: W/"619faa99-5d7d8"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=5.9.4 | 142.4.223.93 | 200 OK | 0 B |
URL HTTP/2grpericias.com.br/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=5.9.4 IP142.4.223.93:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=5.9.4 HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: text/css
last-modified: Fri, 07 Jun 2019 20:45:02 GMT
etag: W/"5cfaccce-105a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-content/plugins/a-z-listing/css/a-z-listing-default.css?ver=4.2.0 | 142.4.223.93 | 200 OK | 0 B |
URL HTTP/2grpericias.com.br/wp-content/plugins/a-z-listing/css/a-z-listing-default.css?ver=4.2.0 IP142.4.223.93:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/plugins/a-z-listing/css/a-z-listing-default.css?ver=4.2.0 HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: text/css
last-modified: Mon, 14 Feb 2022 16:44:46 GMT
etag: W/"620a86fe-1fb3"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-content/themes/mckinney-politics/style.css | 142.4.223.93 | 200 OK | 0 B |
URL HTTP/2grpericias.com.br/wp-content/themes/mckinney-politics/style.css IP142.4.223.93:0
GET /wp-content/themes/mckinney-politics/style.css HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: text/css
last-modified: Mon, 09 Mar 2020 02:30:43 GMT
etag: W/"5e65aa53-1f740"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-content/themes/mckinney-politics/css/__styles.css?ver=5.9.4 | 142.4.223.93 | 200 OK | 0 B |
URL HTTP/2grpericias.com.br/wp-content/themes/mckinney-politics/css/__styles.css?ver=5.9.4 IP142.4.223.93:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/themes/mckinney-politics/css/__styles.css?ver=5.9.4 HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: text/css
last-modified: Mon, 25 Jan 2021 14:59:59 GMT
etag: W/"600edcef-1452d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-content/plugins/trx_addons/js/swiper/swiper.jquery.min.js | 142.4.223.93 | 200 OK | 0 B |
URL HTTP/2grpericias.com.br/wp-content/plugins/trx_addons/js/swiper/swiper.jquery.min.js IP142.4.223.93:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/plugins/trx_addons/js/swiper/swiper.jquery.min.js HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:05 GMT
content-type: application/javascript
last-modified: Fri, 15 Jul 2022 13:34:28 GMT
etag: W/"62d16ce4-ebac"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| grpericias.com.br/wp-content/plugins/essential-grid/public/assets/css/settings.css?ver=3.0.13 | 142.4.223.93 | 200 OK | 0 B |
URL HTTP/2grpericias.com.br/wp-content/plugins/essential-grid/public/assets/css/settings.css?ver=3.0.13 IP142.4.223.93:0
Analyzer | Verdict | Alert | fortinet | Malware | |
GET /wp-content/plugins/essential-grid/public/assets/css/settings.css?ver=3.0.13 HTTP/1.1
Host: grpericias.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grpericias.com.br/xn5c0bhn.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:47:06 GMT
content-type: text/css
last-modified: Fri, 19 Nov 2021 08:13:34 GMT
etag: W/"61975cae-ca76"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|