firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 23 Sep 2022 21:05:15 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 955b5f6b59fedae13d00dcc66f7085f2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P3
X-Amz-Cf-Id: e7dGz74Uap2Avng9j6DMkG-DXrapqCdWFee3y45jbEbz5MPiZCqSqg==
Age: 2590
alberguealfonsoelcasto.com/wp-includes/js
301 Moved Permanently 257 B URL HTTP/1.1 alberguealfonsoelcasto.com/wp-includes/js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 1d911aeb7feb3d978d0b80b00cdf371e
154066ce668bf56dc6248b977460815fc9a80432
682bfb8f95a23a94a80003591816262a7fdd2bc8b4de9268e78b172a7c132f16
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Fri, 23 Sep 2022 21:48:25 GMT
Server: Apache
Location: http://alberguealfonsoelcasto.com/wp-includes/js/
Content-Length: 257
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 09a973de929ab7452edc342c780d3668
3f14f6e0a36f76863c0aea6fb561c266404a7ea3
e82ca5f310e37267fbf792427747e65c2bb35e684d3f629c0aa302f688bc4f80
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E82CA5F310E37267FBF792427747E65C2BB35E684D3F629C0AA302F688BC4F80"
Last-Modified: Fri, 23 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9204
Expires: Sat, 24 Sep 2022 00:21:49 GMT
Date: Fri, 23 Sep 2022 21:48:25 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 23 Sep 2022 04:13:03 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 d32d70ba49809b2292cca689969507a0.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: glybXzn8h8QjA0mp8Jkgj5ay2wBbJq25860WA8RRsP7fJnRzZBk7uA==
age: 63323
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 23 Sep 2022 21:48:25 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Fri, 23 Sep 2022 21:33:00 GMT
Expires: Fri, 23 Sep 2022 21:34:05 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 675c3f96928d591debc37b54f2b16dc2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P3
X-Amz-Cf-Id: I8jaxsKo5tSkA9XcNCfi_s7maFx1CoZKVqaSlk1QKMziZCPVYPHYBA==
Age: 925
ocsp.digicert.com/
200 OK 471 B IP
Hash f714931cf870bfa33815fd259b7246fd
38e411ef8ca1b31ead8415ee5f21d98bd9653a86
897675130112daff8bdf6fa25b56faa4b9fdb367daca2b2645ed65c83a2e423f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5460
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 21:48:25 GMT
Last-Modified: Fri, 23 Sep 2022 20:17:25 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
fonts.googleapis.com/css?family=Roboto+Condensed:300,400,700&display=swap
200 OK 682 B URL HTTP/1.1 fonts.googleapis.com/css?family=Roboto+Condensed:300,400,700&display=swap
IP
Hash 58bd32f6f8eaff1b0695e5c45c303bce
df79fff8cf5f9707f8a7a74c579f4946ccacecd4
6ae423dfeaa2272f2f035cf13ac76f69806c57c52678977120f17e16cbebf923
GET /css?family=Roboto+Condensed:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Fri, 23 Sep 2022 21:48:26 GMT
Date: Fri, 23 Sep 2022 21:48:26 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
alberguealfonsoelcasto.com/wp-includes/js/
404 Not Found 46 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-includes/js/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8124), with CRLF, LF line terminators
Hash 071a8f340dd22bb9368dc7020dd1ffdd
0e5da7dbfdd6dcc87ccc00f4853a5fa1174011b3
344a78357d5ed54a141705c128cbf7fc4e7e522e0092694919a92ef6c1d56e3a
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/ HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 404 Not Found
Date: Fri, 23 Sep 2022 21:48:25 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <http://alberguealfonsoelcasto.com/wp-json/>; rel="https://api.w.org/"
Set-Cookie: qtrans_front_language=es; expires=Sat, 23-Sep-2023 21:48:25 GMT; Max-Age=31536000; path=/
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
alberguealfonsoelcasto.com/wp-content/themes/fortunato/js/jquery.fortunato.min.js?ver=2.1.2
200 OK 5.8 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-content/themes/fortunato/js/jquery.fortunato.min.js?ver=2.1.2
IP
File type ASCII text, with very long lines (2125)
Hash dbf07e145077de86f818d5458d3514a9
7cb285e1b6ac381982c3e864b69fadfb71c01834
0c17ed92ef95cb71d91abf4f24568cb23a4d31be82c5cbccfd7e6d340538b0c1
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/fortunato/js/jquery.fortunato.min.js?ver=2.1.2 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:26 GMT
Server: Apache
Last-Modified: Thu, 14 Apr 2022 17:57:41 GMT
Accept-Ranges: bytes
Content-Length: 5838
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ROs8kdkI7OCFrLGjgqzRzA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: h9dV6XZQllIRMBnpCeFOeHhCvLM=
alberguealfonsoelcasto.com/wp-includes/css/dist/block-library/style.min.css?ver=5.9.4
200 OK 83 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-includes/css/dist/block-library/style.min.css?ver=5.9.4
IP
File type ASCII text, with very long lines (39791)
Hash 7e7a1a9e3712cd16dade7c6e811ba28b
45e216af145ea7c3f30099c869482785ad921bc2
cdbdaa122823601390c7dcbdd1afde33c2f1a432b8c5ff025c6137ee99ba541a
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.9.4 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:26 GMT
Server: Apache
Last-Modified: Wed, 06 Apr 2022 03:47:35 GMT
Accept-Ranges: bytes
Content-Length: 83419
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
alberguealfonsoelcasto.com/wp-content/plugins/booking/assets/libs/bootstrap/css/bootstrap-theme.css?ver=3.3.5.1
200 OK 29 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-content/plugins/booking/assets/libs/bootstrap/css/bootstrap-theme.css?ver=3.3.5.1
IP
File type ASCII text, with CRLF line terminators
Hash 79b12342c0c9ff028abe94da7fc86a63
82cc341e1643f884ffd7f6abcfebc83428e5fea4
b143244b6b6b5e2163952143b94e57841d7dd53bf6e85a88dab9c663bd73bb98
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/booking/assets/libs/bootstrap/css/bootstrap-theme.css?ver=3.3.5.1 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:26 GMT
Server: Apache
Last-Modified: Wed, 02 Mar 2022 08:49:04 GMT
Accept-Ranges: bytes
Content-Length: 29166
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
alberguealfonsoelcasto.com/wp-content/plugins/booking/assets/libs/bootstrap/css/bootstrap.css?ver=3.3.5.1
200 OK 183 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-content/plugins/booking/assets/libs/bootstrap/css/bootstrap.css?ver=3.3.5.1
IP
File type ASCII text, with very long lines (1068), with CRLF line terminators
Size 183 kB (182718 bytes)
Hash 119fa010a2ac08fb1b7efee0a6287573
2febc64e3b45605bee720a247c787429ac8eac2b
43ecf94b0cabb7f2200f5c290b0f34432092f6dee02e98b426bcf5c569370e94
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/booking/assets/libs/bootstrap/css/bootstrap.css?ver=3.3.5.1 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:26 GMT
Server: Apache
Last-Modified: Wed, 02 Mar 2022 08:49:04 GMT
Accept-Ranges: bytes
Content-Length: 182718
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
alberguealfonsoelcasto.com/wp-content/plugins/booking/css/wpbc_time-selector.css?ver=9.0
200 OK 1.5 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-content/plugins/booking/css/wpbc_time-selector.css?ver=9.0
IP
File type ASCII text, with CRLF line terminators
Hash 6bd15182a424f2bf245283fa8aede01f
c361b155f1263502974be005798cc26d2c337ff7
fd523f48482ac7a39f5920de429c656b2765d3b28ef5c92241403bacf541f5f3
GET /wp-content/plugins/booking/css/wpbc_time-selector.css?ver=9.0 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:26 GMT
Server: Apache
Last-Modified: Wed, 02 Mar 2022 08:49:04 GMT
Accept-Ranges: bytes
Content-Length: 1493
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
alberguealfonsoelcasto.com/wp-content/plugins/booking/css/time_picker_skins/grey.css?ver=9.0
200 OK 1.3 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-content/plugins/booking/css/time_picker_skins/grey.css?ver=9.0
IP
File type ASCII text, with CRLF line terminators
Hash 670be4cdf76f2f4a3efa2e17e0e5b941
2f61576b79ecbeb651e520c812b1849c3934b9ff
d910d91f92b30deed4a56a60d9deb3a99519a1170d151be97548d4eacdf8b528
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/booking/css/time_picker_skins/grey.css?ver=9.0 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:26 GMT
Server: Apache
Last-Modified: Wed, 02 Mar 2022 08:49:04 GMT
Accept-Ranges: bytes
Content-Length: 1284
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
alberguealfonsoelcasto.com/wp-content/plugins/booking/css/client.css?ver=9.0
200 OK 16 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-content/plugins/booking/css/client.css?ver=9.0
IP
Hash 82054678a438e35f2b7c6a0f8a82d6cf
16a69f7481040d472f1ae546aa882c715dfbd48c
d5d4684162982462131470427a3a2ab74c67d87ed500cbfff3d65e862e6a8834
GET /wp-content/plugins/booking/css/client.css?ver=9.0 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:26 GMT
Server: Apache
Last-Modified: Wed, 02 Mar 2022 08:49:04 GMT
Accept-Ranges: bytes
Content-Length: 16133
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
alberguealfonsoelcasto.com/wp-content/plugins/booking/css/calendar.css?ver=9.0
200 OK 26 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-content/plugins/booking/css/calendar.css?ver=9.0
IP
Hash 332dbc359cf2aebcc9b3d00cdbe5b22b
489e3a56a507cf5a9986772c83089316d8c06f5a
37b98e1f59af63637c97190d6c3f589be3eb58e5183b9216c41c54291219d8dc
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/booking/css/calendar.css?ver=9.0 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:27 GMT
Server: Apache
Last-Modified: Wed, 02 Mar 2022 08:49:04 GMT
Accept-Ranges: bytes
Content-Length: 25473
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css
alberguealfonsoelcasto.com/wp-content/plugins/booking/css/skins/black.css?ver=9.0
200 OK 13 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-content/plugins/booking/css/skins/black.css?ver=9.0
IP
Hash d8c399bd82799d40ebd8f900195ef3b0
74dd516932618498e8362dab1df4fb8dbc09f833
640053ff9212c704a6be0fd6a9c8b4c12a590066a8f85571b34662b239bb8c49
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/booking/css/skins/black.css?ver=9.0 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:27 GMT
Server: Apache
Last-Modified: Wed, 02 Mar 2022 08:49:04 GMT
Accept-Ranges: bytes
Content-Length: 12592
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5719
Expires: Fri, 23 Sep 2022 23:23:46 GMT
Date: Fri, 23 Sep 2022 21:48:27 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5719
Expires: Fri, 23 Sep 2022 23:23:46 GMT
Date: Fri, 23 Sep 2022 21:48:27 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5719
Expires: Fri, 23 Sep 2022 23:23:46 GMT
Date: Fri, 23 Sep 2022 21:48:27 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5719
Expires: Fri, 23 Sep 2022 23:23:46 GMT
Date: Fri, 23 Sep 2022 21:48:27 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5719
Expires: Fri, 23 Sep 2022 23:23:46 GMT
Date: Fri, 23 Sep 2022 21:48:27 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ca56e32-b483-4063-a12c-be8fa8c3d85e.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ca56e32-b483-4063-a12c-be8fa8c3d85e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7606ff88f05062b66970d9805f38987a
d47db5fcd83023b4a8de40a47d4510e183de387a
20f89dd859e5715e27c289040fac6a121248e5b6c06da0a7f186984ffb029eb2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ca56e32-b483-4063-a12c-be8fa8c3d85e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8497
x-amzn-requestid: 8543ac70-48ab-4523-856f-5d5fa1191c97
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yin-pEryoAMFTfQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6324205d-660bba3f655f940d143bc437;Sampled=0
x-amzn-remapped-date: Fri, 16 Sep 2022 07:06:05 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: e9KUFhjuFMzjuh37rFiNKaMNVaGZwPGBkLrv0zgfSTT7dCIuWj4G9Q==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:11:27 GMT
age: 85020
etag: "d47db5fcd83023b4a8de40a47d4510e183de387a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ac88c56-4515-47b4-9c1e-7745782bd306.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ac88c56-4515-47b4-9c1e-7745782bd306.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b877ead4a15221fdd278ef27f281a7ec
48c10714503e8dfdd3e3c3d39b919ef2792f0d15
f4a1d5abcfa4092828e004b6c0605a7a24e4133d275312f613dceff875971daf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ac88c56-4515-47b4-9c1e-7745782bd306.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10127
x-amzn-requestid: 456e3c6a-e173-433e-8d54-d787cb50b7e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4Y0sHmCoAMFVSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632cd4ea-7a07b336571396533e48b4cb;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:34:34 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: gWZNsIn_FEbYwMeR1JArmPEgyuHEGgWsfb-wB6P_NrmoHhNgvGWoPw==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:07:28 GMT
age: 85259
etag: "48c10714503e8dfdd3e3c3d39b919ef2792f0d15"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1500786-3bbf-46d0-b16e-4aff6d48a585.jpeg
200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1500786-3bbf-46d0-b16e-4aff6d48a585.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f10a12719b387d176497669ba75f0acc
16e42ba7b20555bf5a8615e5f4bb561204aeeb5a
0cb2231817387d43a490565b61e24ea7a3cfcff3281f4ab4379a882cc5c3173f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1500786-3bbf-46d0-b16e-4aff6d48a585.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14579
x-amzn-requestid: bce2c126-0883-4255-9246-d8055860f898
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YcCj6FYCoAMF9Yw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63217e18-66ba2e5d64b6a5b32b7ab36b;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 07:09:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 92Pj9IQp3mBJQOW-XuHSK8laPqXOSBOmNbYcm4hSFzc1xqYscQKxMA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:11:48 GMT
age: 84999
etag: "16e42ba7b20555bf5a8615e5f4bb561204aeeb5a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffccf6ade-04f7-4d15-943c-bde343725d94.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffccf6ade-04f7-4d15-943c-bde343725d94.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 02a682b4703bb9d6381c762726c05531
1d7f7b4cfdd7425213a21afdd1d5a5d8d11d0e54
fb672de67420a239fe5d7e2588f640150ed29883fe2a46ded160385e3265004c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffccf6ade-04f7-4d15-943c-bde343725d94.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8029
x-amzn-requestid: 2fc5c63d-5cef-42f4-a6d2-b55f51c57af6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4Y0tHjGoAMFcFw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632cd4ea-73f2f78a2d1ca8fc666d2571;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:34:34 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 7DX67a-HmEh76IorINvRU61AKtSiimdPnHFnYeR2OJezZJ1_mJq0MA==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 21:48:26 GMT
age: 1
etag: "1d7f7b4cfdd7425213a21afdd1d5a5d8d11d0e54"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98db69a9-8416-4b0b-b1b4-1ed196b985e5.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98db69a9-8416-4b0b-b1b4-1ed196b985e5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3b318ea5c36d2b22b925f7dfe382df5f
0264e73c4cfff0bb255757c7e1c760a5ad3ece80
0c2f58ea4f5f32bb327f292e1b8fb5a4a60230bffc3abc440a624df27ec0d6bc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98db69a9-8416-4b0b-b1b4-1ed196b985e5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5340
x-amzn-requestid: b13bc974-e15d-43a4-a918-fbc35b09a36f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4Y19HljIAMFY8w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632cd4f2-2cb226ba4bd7c7e74d9ab2db;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:34:42 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 8DCVWC4Ihr4R21i3ySyiWdUK0aGymTE22B842ZKolG-ZThiKSMX-uQ==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:11:26 GMT
age: 85021
etag: "0264e73c4cfff0bb255757c7e1c760a5ad3ece80"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56968ed0-3207-4af0-8229-5f3698c6c55f.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56968ed0-3207-4af0-8229-5f3698c6c55f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 61059307f07edc4e2ba9d07a258bca43
370d166426ad83fc04ccb6e300238d8cb6ab644a
55ec802097ab49f275686e99844ff4a3b554c8998213bb9c3f0380709297c55b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56968ed0-3207-4af0-8229-5f3698c6c55f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5936
x-amzn-requestid: 39e79389-c158-4427-aae0-b1d0dc1d0377
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4VowElZoAMF2Ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632ccfd1-2da28eb66f876af76158b090;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:12:49 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: -DSp0__jaBzizsfagTtIpwhkPqkvjS1L6T17J0OS5W0QhZww03ywpw==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:11:29 GMT
age: 85018
etag: "370d166426ad83fc04ccb6e300238d8cb6ab644a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
alberguealfonsoelcasto.com/wp-content/plugins/booking/core/timeline/v2/css/timeline_v2.css?ver=9.0
200 OK 24 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-content/plugins/booking/core/timeline/v2/css/timeline_v2.css?ver=9.0
IP
File type ASCII text, with CRLF line terminators
Hash 7c2a945d04bd25ea1e436536da69985b
9a1d17c2fa62f8b406dc17f2c557b8cd40cea1fe
37c507044976c648128b5dc0e898ec894aec5f2243a9e594798e7437d99a2e88
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/booking/core/timeline/v2/css/timeline_v2.css?ver=9.0 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:27 GMT
Server: Apache
Last-Modified: Wed, 02 Mar 2022 08:49:04 GMT
Accept-Ranges: bytes
Content-Length: 24472
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/css
alberguealfonsoelcasto.com/wp-content/plugins/booking/core/timeline/v2/css/timeline_skin_v2.css?ver=9.0
200 OK 15 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-content/plugins/booking/core/timeline/v2/css/timeline_skin_v2.css?ver=9.0
IP
File type ASCII text, with CRLF line terminators
Hash b14cc3876663a8804be7d386345e1343
4b64590b3f1249b30bd52a8cb4cd8fa97bd2739c
bad9c964572942ed08e54f9aac555ac6b617453a95e3a55d3712b12bf0119822
GET /wp-content/plugins/booking/core/timeline/v2/css/timeline_skin_v2.css?ver=9.0 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:27 GMT
Server: Apache
Last-Modified: Wed, 02 Mar 2022 08:49:04 GMT
Accept-Ranges: bytes
Content-Length: 15077
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css
alberguealfonsoelcasto.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 18 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
File type ASCII text, with very long lines (11834)
Hash a5d4c068a66c5e12ad3f5d829c4ea4ba
ed138c75427ae13e6e3747ae96e14716ec6df412
ba0960ff0012f7dfde0e5e02b4b425077f3ea0df1c9cd9fbabfb9da8c3f863db
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:27 GMT
Server: Apache
Last-Modified: Mon, 12 Sep 2022 14:58:19 GMT
Accept-Ranges: bytes
Content-Length: 18203
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
alberguealfonsoelcasto.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 99 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
File type ASCII text, with very long lines (60091)
Hash 3b5835f1ab6e82892a173ba1d09369e2
6151adaa212d59254fe57541275dad7440ba8850
7fb75f389773f843d3083b88a6a25378b07fd42558ccfe7dbe2ffe4a99ce83e7
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:27 GMT
Server: Apache
Last-Modified: Fri, 02 Sep 2022 09:53:49 GMT
Accept-Ranges: bytes
Content-Length: 98612
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
alberguealfonsoelcasto.com/wp-content/plugins/meteor-slides/js/jquery.cycle.all.js?ver=5.9.4
200 OK 58 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-content/plugins/meteor-slides/js/jquery.cycle.all.js?ver=5.9.4
IP
File type ASCII text, with CRLF, LF line terminators
Hash 1865b8c5c0ddd7c65ef15764c5a7b40c
1add4539a2a43884923000be22b39ed3c57bdafc
d00ebc557d816d9c8f0c7aa3a425a3d6e17e3ba4f9001b58eb758e6cf23a3ada
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/meteor-slides/js/jquery.cycle.all.js?ver=5.9.4 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:27 GMT
Server: Apache
Last-Modified: Mon, 21 Jun 2021 00:33:57 GMT
Accept-Ranges: bytes
Content-Length: 57473
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
alberguealfonsoelcasto.com/wp-content/plugins/meteor-slides/js/jquery.metadata.v2.js?ver=5.9.4
200 OK 9.0 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-content/plugins/meteor-slides/js/jquery.metadata.v2.js?ver=5.9.4
IP
File type HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Hash 240e03b5ebbfaf612bae08ae8d1e7f87
5cf231f5d6b3eca96958b9e1bbe03750372d1c10
669416c32db197b7e98af8be164b4b6fcf24cd0246b056e2cb830fbfef7cb043
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/meteor-slides/js/jquery.metadata.v2.js?ver=5.9.4 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:27 GMT
Server: Apache
Last-Modified: Mon, 21 Jun 2021 00:33:57 GMT
Accept-Ranges: bytes
Content-Length: 8994
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
alberguealfonsoelcasto.com/wp-content/plugins/meteor-slides/js/jquery.touchwipe.1.1.1.js?ver=5.9.4
200 OK 6.0 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-content/plugins/meteor-slides/js/jquery.touchwipe.1.1.1.js?ver=5.9.4
IP
File type ASCII text, with CRLF, LF line terminators
Hash 2f4875168b1aee0442a72010db24b02c
8ef406a30f208c5c66afe532ed3c5c12b346d217
69055c306543ace8ee4a60e59a8b78f1138c08cf058f159420ab75fe1f5a4e6d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/meteor-slides/js/jquery.touchwipe.1.1.1.js?ver=5.9.4 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:27 GMT
Server: Apache
Last-Modified: Mon, 21 Jun 2021 00:33:56 GMT
Accept-Ranges: bytes
Content-Length: 5989
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
alberguealfonsoelcasto.com/wp-content/plugins/meteor-slides/js/slideshow.js?ver=5.9.4
200 OK 6.1 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-content/plugins/meteor-slides/js/slideshow.js?ver=5.9.4
IP
File type ASCII text, with CRLF, LF line terminators
Hash c081eaf023d8bb214b96ba21c52beefc
401fb574bee0da5bedaac0e4a44c670a7b4fa433
3542730817f40763b47b53aa734df88ab7c9a0bc25ae00cd33b4cb69caef85b0
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/meteor-slides/js/slideshow.js?ver=5.9.4 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:27 GMT
Server: Apache
Last-Modified: Mon, 21 Jun 2021 00:33:56 GMT
Accept-Ranges: bytes
Content-Length: 6132
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript
alberguealfonsoelcasto.com/wp-content/plugins/booking/js/wpbc_vars.js?ver=9.0
200 OK 10 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-content/plugins/booking/js/wpbc_vars.js?ver=9.0
IP
Hash 0555e11debabf17ae1afba01d047d24d
f38eb0eaff6e704ddb6a1a5fe67c12bc22b30eb4
9b08070a094d2ea710ec3e3992f0582b2e3b0d4d61b921e316e89c15999ee604
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/booking/js/wpbc_vars.js?ver=9.0 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:27 GMT
Server: Apache
Last-Modified: Wed, 02 Mar 2022 08:49:04 GMT
Accept-Ranges: bytes
Content-Length: 10362
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript
alberguealfonsoelcasto.com/wp-content/plugins/booking/assets/libs/bootstrap/js/bootstrap.js?ver=3.3.5.1
200 OK 73 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-content/plugins/booking/assets/libs/bootstrap/js/bootstrap.js?ver=3.3.5.1
IP
Hash 8c9d5e0be99f77c2d987c4b096053cbc
141c89da77540f3933b185a71bcbbfbf8cea53b3
ca6b562a45848b9736546273f3a0a5309da4dac298e92e1afae2bbdd72d2095e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/booking/assets/libs/bootstrap/js/bootstrap.js?ver=3.3.5.1 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:27 GMT
Server: Apache
Last-Modified: Wed, 02 Mar 2022 08:49:04 GMT
Accept-Ranges: bytes
Content-Length: 72883
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/javascript
alberguealfonsoelcasto.com/wp-content/plugins/booking/js/datepick/jquery.datepick-es.js?ver=1.1
200 OK 5.0 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-content/plugins/booking/js/datepick/jquery.datepick-es.js?ver=1.1
IP
File type Unicode text, UTF-8 text, with CRLF, LF line terminators
Hash 78f561ef6eb91579970a5b6e102fe104
317fa19bf1c73c7f03d30f93353a84b427ebf7e2
4d01366ecf277fcb085e0962f40cdf339b6e2089021b5f879dca398b25892d81
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/booking/js/datepick/jquery.datepick-es.js?ver=1.1 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:28 GMT
Server: Apache
Last-Modified: Wed, 02 Mar 2022 08:49:04 GMT
Accept-Ranges: bytes
Content-Length: 4967
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: application/javascript
alberguealfonsoelcasto.com/wp-content/plugins/booking/js/datepick/jquery.datepick.wpbc.9.0.js?ver=9.0
200 OK 104 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-content/plugins/booking/js/datepick/jquery.datepick.wpbc.9.0.js?ver=9.0
IP
File type ASCII text, with CRLF, CR line terminators
Size 104 kB (104307 bytes)
Hash 706d1ed85449bd9c3dc5c0a0bcd0dca4
7845ce246442ecc1953b43d69482ea08c0054e2a
dd4b3919096c15d313a9a7013a0bde5c528824498ca5488a79a464c6cc4adb5f
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/booking/js/datepick/jquery.datepick.wpbc.9.0.js?ver=9.0 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:28 GMT
Server: Apache
Last-Modified: Wed, 02 Mar 2022 08:49:04 GMT
Accept-Ranges: bytes
Content-Length: 104307
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/javascript
alberguealfonsoelcasto.com/wp-content/plugins/booking/js/client.js?ver=9.0
200 OK 83 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-content/plugins/booking/js/client.js?ver=9.0
IP
File type HTML document, ASCII text, with very long lines (373)
Hash 22c1c2529823deb01db8e21b4a1d920b
814ef885ff23d7e36cc01b33f2a9b6d4ddb0ffc7
133f59e5c436ddd1d107a52efbb7847877c98d333e73b8a61a210dfa6f076e04
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/booking/js/client.js?ver=9.0 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:28 GMT
Server: Apache
Last-Modified: Wed, 02 Mar 2022 08:49:04 GMT
Accept-Ranges: bytes
Content-Length: 82735
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: application/javascript
alberguealfonsoelcasto.com/wp-content/plugins/booking/js/wpbc_times.js?ver=9.0
200 OK 57 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-content/plugins/booking/js/wpbc_times.js?ver=9.0
IP
File type ASCII text, with CRLF line terminators
Hash 39dc629f2c23343a0f4c7120d5885604
44b5a2396ecf490ec0b95ff4ae67341c59c4bbfc
8aa802fc19112ac40ea0ce40637b8f17dab674abf0a0a2a2340532a5f8521dcb
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/booking/js/wpbc_times.js?ver=9.0 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:28 GMT
Server: Apache
Last-Modified: Wed, 02 Mar 2022 08:49:04 GMT
Accept-Ranges: bytes
Content-Length: 56624
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: application/javascript
alberguealfonsoelcasto.com/wp-content/plugins/booking/js/wpbc_time-selector.js?ver=9.0
200 OK 7.2 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-content/plugins/booking/js/wpbc_time-selector.js?ver=9.0
IP
File type ASCII text, with CRLF, LF line terminators
Hash a94cdf2d1e548d29dea1933557178d8f
d04965db16f53ed6f82e119cbe763d2e68a0e432
5e1ee09fea2f6dd89512d3002f855f7079381ec2cf438f08d82ec998c87743d4
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/booking/js/wpbc_time-selector.js?ver=9.0 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:28 GMT
Server: Apache
Last-Modified: Wed, 02 Mar 2022 08:49:04 GMT
Accept-Ranges: bytes
Content-Length: 7189
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: application/javascript
alberguealfonsoelcasto.com/wp-content/plugins/booking/core/timeline/v2/_out/timeline_v2.js?ver=9.0
200 OK 12 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-content/plugins/booking/core/timeline/v2/_out/timeline_v2.js?ver=9.0
IP
File type ASCII text, with very long lines (6023)
Hash 49794c6bf7818ce2a582c2ebb7f69d7f
2fd1c5e638db358c4c0db5850ca9cb02edcc9665
069dd6ef623b5b8f6e36f2e5fd53deb1bba83c73278775765455a86653bd2794
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/booking/core/timeline/v2/_out/timeline_v2.js?ver=9.0 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:28 GMT
Server: Apache
Last-Modified: Wed, 02 Mar 2022 08:49:04 GMT
Accept-Ranges: bytes
Content-Length: 11986
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: application/javascript
alberguealfonsoelcasto.com/wp-content/themes/fortunato/style.css?ver=2.1.2
200 OK 42 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-content/themes/fortunato/style.css?ver=2.1.2
IP
File type ASCII text, with very long lines (427), with CRLF line terminators
Hash 85fed6c391806060aa823c67c68b83e5
d6abdcc25d8a02b93a36876574e7bf5e62ce0084
30ffedadfdd3af1df8f4f6a7b16273bdf882ba3e09d3e99ce20fe0c06f9cb161
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/fortunato/style.css?ver=2.1.2 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:28 GMT
Server: Apache
Last-Modified: Thu, 14 Apr 2022 17:57:41 GMT
Accept-Ranges: bytes
Content-Length: 42278
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: text/css
alberguealfonsoelcasto.com/wp-content/themes/fortunato/css/all.min.css?ver=5.15.4
200 OK 59 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-content/themes/fortunato/css/all.min.css?ver=5.15.4
IP
File type ASCII text, with very long lines (59119), with CRLF line terminators
Hash 3720bbee0ca1964cbaed0258264f680c
8bd508bb2f120487671bce49267f7ac8a2eff154
b5e38de32d149f2263d86a25f0db6e63418e296f5c42f004f1ad157b5062db96
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/fortunato/css/all.min.css?ver=5.15.4 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:28 GMT
Server: Apache
Last-Modified: Thu, 14 Apr 2022 17:57:41 GMT
Accept-Ranges: bytes
Content-Length: 59309
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: text/css
alberguealfonsoelcasto.com/wp-content/themes/fortunato/js/navigation.min.js?ver=20151215
200 OK 5.2 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-content/themes/fortunato/js/navigation.min.js?ver=20151215
IP
File type ASCII text, with very long lines (1455)
Hash 4c16ad9d9685c8d4cc627882c68532fb
d95f20541c769edd8489a41bdbd83c1a92038850
9c517a2abbe8c6a4eabf8d61047a103d56d856b56fc240532c86bf3cc69cabec
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/fortunato/js/navigation.min.js?ver=20151215 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:29 GMT
Server: Apache
Last-Modified: Thu, 14 Apr 2022 17:57:41 GMT
Accept-Ranges: bytes
Content-Length: 5168
Keep-Alive: timeout=5, max=85
Connection: Keep-Alive
Content-Type: application/javascript
alberguealfonsoelcasto.com/wp-includes/js/wp-emoji-release.min.js?ver=5.9.4
200 OK 23 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-includes/js/wp-emoji-release.min.js?ver=5.9.4
IP
File type ASCII text, with very long lines (16368)
Hash 662b128df4cd2310f10cb478b76e4bb5
bc28fb1dd565dcc01b4b21ce0bf3076c148354b3
5c40bfdfbd4a675281b51f4203ecf9e34afba6587745c6c7757e7ebb4a43f7e0
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.9.4 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:29 GMT
Server: Apache
Last-Modified: Sat, 20 Aug 2022 10:37:34 GMT
Accept-Ranges: bytes
Content-Length: 23060
Keep-Alive: timeout=5, max=84
Connection: Keep-Alive
Content-Type: application/javascript
alberguealfonsoelcasto.com/wp-content/plugins/meteor-slides/css/meteor-slides.css?ver=1.0
200 OK 5.1 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-content/plugins/meteor-slides/css/meteor-slides.css?ver=1.0
IP
File type ASCII text, with CRLF line terminators
Hash d0de0e7a79430e02f8eece552f8f5a11
8a82527626b5af75b12eeb6a26b75c3977b32aac
663e36224d04d9a49ae41c052d70d5e9fcbd3718eacc25b8c82c57a8fd5cefaa
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/meteor-slides/css/meteor-slides.css?ver=1.0 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:29 GMT
Server: Apache
Last-Modified: Sun, 25 Aug 2019 15:13:00 GMT
Accept-Ranges: bytes
Content-Length: 5094
Keep-Alive: timeout=5, max=83
Connection: Keep-Alive
Content-Type: text/css
fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2
200 OK 16 kB URL HTTP/1.1 fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15660, version 1.0\012- data
Hash d7b0b953a50fddaa88089b5b787cf719
2f85bc568b27659a3d6452f58f9fd7678450326d
e79c1c1a140e6afb861074c70392db54cc65a06050de2a69162ab94eb95b0516
GET /s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://alberguealfonsoelcasto.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 15660
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 21 Sep 2022 03:18:18 GMT
Expires: Thu, 21 Sep 2023 03:18:18 GMT
Cache-Control: public, max-age=31536000
Age: 239411
Last-Modified: Tue, 19 Apr 2022 18:42:42 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-33mZGCQYbw.woff2
200 OK 16 kB URL HTTP/1.1 fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-33mZGCQYbw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15528, version 1.0\012- data
Hash 595fe3fc0b85f3cc9ef5aed2d519abc5
96e76de44987e9dec2f97f1e5eb7a18c738daf5d
747d5a0865fe76129cc17fe70097fd5b1db733ed3bbfa0210a8505d80c14ab5a
GET /s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-33mZGCQYbw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://alberguealfonsoelcasto.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 15528
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 22 Sep 2022 06:59:00 GMT
Expires: Fri, 22 Sep 2023 06:59:00 GMT
Cache-Control: public, max-age=31536000
Age: 139769
Last-Modified: Tue, 19 Apr 2022 18:53:07 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
200 OK 16 kB URL HTTP/1.1 fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15700, version 1.0\012- data
Hash 3d7f7413fca69bff4d231ebdc50aaab0
cb18e7943b6a8a0e3672d7242197c19a226b92e8
6b4fac99c39b9ee2693d87a2508d0c7d4b4859072966616bd1f6e18c5b2f9d36
GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://alberguealfonsoelcasto.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 15700
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 21 Sep 2022 02:37:40 GMT
Expires: Thu, 21 Sep 2023 02:37:40 GMT
Cache-Control: public, max-age=31536000
Age: 241849
Last-Modified: Tue, 19 Apr 2022 18:51:55 GMT
Content-Type: font/woff2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 92c0204cac9fe849a3fe57f8268693e7
956e7607c627ae24aff9fb897dc0487a187abaa3
784cc96f74f7b41ae8c14e9c71bff8614b3d263466b19fa605239d709df364f7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "784CC96F74F7B41AE8C14E9C71BFF8614B3D263466B19FA605239D709DF364F7"
Last-Modified: Wed, 21 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14734
Expires: Sat, 24 Sep 2022 01:54:03 GMT
Date: Fri, 23 Sep 2022 21:48:29 GMT
Connection: keep-alive
alberguealfonsoelcasto.com/wp-content/uploads/2015/07/cropped-0081.jpg
200 OK 281 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-content/uploads/2015/07/cropped-0081.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 1920x1080, components 3\012- data
Size 281 kB (280884 bytes)
Hash d1b7dff29517a83f3314ff32d56e6b3e
41d82042a94e52127fef2c208f4dbe112d8fe1d3
542ea7eb19715de9997e8feb5e931b60b484bb00a510c584553e4c7aa7a26b22
GET /wp-content/uploads/2015/07/cropped-0081.jpg HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:29 GMT
Server: Apache
Last-Modified: Sun, 25 Aug 2019 15:12:57 GMT
Accept-Ranges: bytes
Content-Length: 280884
Keep-Alive: timeout=5, max=82
Connection: Keep-Alive
Content-Type: image/jpeg
alberguealfonsoelcasto.com/wp-content/themes/fortunato/webfonts/fa-solid-900.woff2
200 OK 78 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-content/themes/fortunato/webfonts/fa-solid-900.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 78268, version 331.-31196\012- data
Hash d824df7eb2e268626a2dd9a6a741ac4e
0ccb2c814a7e4ca12c4778821633809cb0361eaa
9834b82ad26e2a37583d22676a12dd2eb0fe7c80356a2114d0db1aa8b3899537
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/fortunato/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-content/themes/fortunato/css/all.min.css?ver=5.15.4
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:30 GMT
Server: Apache
Last-Modified: Thu, 14 Apr 2022 17:57:41 GMT
Accept-Ranges: bytes
Content-Length: 78268
Keep-Alive: timeout=5, max=81
Connection: Keep-Alive
Content-Type: font/woff2
js.cofounderspecials.com/splash.js?v=7.7.5
200 OK 573 B URL HTTP/1.1 js.cofounderspecials.com/splash.js?v=7.7.5
IP
ASN #206638 PE Brezhnev Daniil
File type ASCII text, with very long lines (2348), with no line terminators
Hash 2b3c14b2a6b311ee0557187a42d5dab1
4524506ded62ca19792f4c8dbb441fd32336fd57
3514c926c9a95eb83016b60c34909133e627445d6876ca934fd8464d65a6e3ef
GET /splash.js?v=7.7.5 HTTP/1.1
Host: js.cofounderspecials.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Sep 2022 21:48:30 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
alberguealfonsoelcasto.com/wp-content/themes/fortunato/webfonts/fa-brands-400.woff2
200 OK 77 kB URL HTTP/1.1 alberguealfonsoelcasto.com/wp-content/themes/fortunato/webfonts/fa-brands-400.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 76736, version 331.-31196\012- data
Hash ed311c7a0ade9a75bb3ebf5a7670f31d
0613c7ebba55ee47ef302c0f7766324692f899a7
8ea8791754915a898a3100e63e32978a6d1763be6df8e73a39d3a90d691cdeef
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/fortunato/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-content/themes/fortunato/css/all.min.css?ver=5.15.4
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:30 GMT
Server: Apache
Last-Modified: Thu, 14 Apr 2022 17:57:41 GMT
Accept-Ranges: bytes
Content-Length: 76736
Keep-Alive: timeout=5, max=80
Connection: Keep-Alive
Content-Type: font/woff2
alberguealfonsoelcasto.com/wp-content/themes/fortunato/images/overlay.png
200 OK 100 B URL HTTP/1.1 alberguealfonsoelcasto.com/wp-content/themes/fortunato/images/overlay.png
IP
File type PNG image data, 2 x 2, 1-bit colormap, non-interlaced\012- data
Hash 0513f4e40db8e71e0e4e4cb9e25f3249
d97b6df9dab14593f591c6e6e92599ddf44c7ba7
08a5a93e82e2a4852cb2552d6ef295710ec1e2b97c2f394d74a7e339dca947c3
GET /wp-content/themes/fortunato/images/overlay.png HTTP/1.1
Host: alberguealfonsoelcasto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/wp-includes/js/
Cookie: qtrans_front_language=es
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 21:48:30 GMT
Server: Apache
Last-Modified: Thu, 14 Apr 2022 17:57:41 GMT
Accept-Ranges: bytes
Content-Length: 100
Keep-Alive: timeout=5, max=79
Connection: Keep-Alive
Content-Type: image/png
away.bettershitecolumn.com/away.php?id=98&kid=3467-23&sid=884578-34-76987-11
302 Found 0 B URL HTTP/2 away.bettershitecolumn.com/away.php?id=98&kid=3467-23&sid=884578-34-76987-11
IP
ASN #206638 PE Brezhnev Daniil
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /away.php?id=98&kid=3467-23&sid=884578-34-76987-11 HTTP/1.1
Host: away.bettershitecolumn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Fri, 23 Sep 2022 21:48:31 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://away.bettershitecolumn.com/track.php?aid=98823&uid=46536-433-636474-23
x-powered-by: PHP/7.3.33
strict-transport-security: max-age=15768000;
X-Firefox-Spdy: h2
away.bettershitecolumn.com/track.php?aid=98823&uid=46536-433-636474-23
302 Found 0 B URL HTTP/2 away.bettershitecolumn.com/track.php?aid=98823&uid=46536-433-636474-23
IP
ASN #206638 PE Brezhnev Daniil
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /track.php?aid=98823&uid=46536-433-636474-23 HTTP/1.1
Host: away.bettershitecolumn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://alberguealfonsoelcasto.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Fri, 23 Sep 2022 21:48:33 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://away.bettershitecolumn.com/track.php?tid=54889&lid=9554-66-457679-29
x-powered-by: PHP/7.3.33
strict-transport-security: max-age=15768000;
X-Firefox-Spdy: h2
away.bettershitecolumn.com/track.php?tid=54889&lid=9554-66-457679-29
200 OK 828 B URL HTTP/2 away.bettershitecolumn.com/track.php?tid=54889&lid=9554-66-457679-29
IP
ASN #206638 PE Brezhnev Daniil
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 42df713171bd701f9065667ba0b84620
b7cd0aa935c555541b2f3689dfbb5589176c924d
03666df55c85bb8a84f75dc6b0e4d5816c35db86227c1abdce1aa8a7fd0f968f
Analyzer Verdict Alert quad9 Sinkholed
GET /track.php?tid=54889&lid=9554-66-457679-29 HTTP/1.1
Host: away.bettershitecolumn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://alberguealfonsoelcasto.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 23 Sep 2022 21:48:33 GMT
content-type: text/html; charset=UTF-8
content-length: 828
vary: Accept-Encoding
x-powered-by: PHP/7.3.33
strict-transport-security: max-age=15768000;
X-Firefox-Spdy: h2
simple.cofounderspecials.com/strong.js?v=3.00
200 OK 0 B URL HTTP/2 simple.cofounderspecials.com/strong.js?v=3.00
IP
ASN #206638 PE Brezhnev Daniil
GET /strong.js?v=3.00 HTTP/1.1
Host: simple.cofounderspecials.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 23 Sep 2022 21:48:30 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 31 Aug 2022 20:17:31 GMT
vary: Accept-Encoding
etag: W/"630fc1db-92c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=15768000;
content-encoding: gzip
X-Firefox-Spdy: h2
load.bettershitecolumn.com/sjlash.js
200 OK 0 B URL HTTP/2 load.bettershitecolumn.com/sjlash.js
IP
ASN #206638 PE Brezhnev Daniil
Analyzer Verdict Alert quad9 Sinkholed
GET /sjlash.js HTTP/1.1
Host: load.bettershitecolumn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alberguealfonsoelcasto.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 23 Sep 2022 21:48:30 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 02 Sep 2022 10:59:21 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"6311e209-18e0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
67.23.226.119
91.211.91.104
93.184.220.29
23.36.77.32